This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: DaVvGZM0gLVE64bY7I3S7NDI5WFoUnuEO+eTFH+T3sU= Subject key identifier: 03:C4:78:B0:26:8E:95:1F:7A:B1:CD:9D:DE:C8:A3:D5:B8:F4:C4:A8 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 74C08D9551D2A0AE146D1C344ADEFF5204FE80BA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 02D8 Signing time: Sun 25 Jan 2026 16:32:44 +0000 Manifest this update: Sun 25 Jan 2026 16:27:44 +0000 Manifest next update: Mon 26 Jan 2026 20:30:44 +0000 Files and hashes: 1: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) 2: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: eo5+MNquVNOvcv6JK5qJb1GdhPb5d6/Pib185PtyQHw=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c0:8d:95:51:d2:a0:ae:14:6d:1c:34:4a:de:ff:52:04:fe:80:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Jan 25 16:27:44 2026 GMT Not After : Jan 26 20:30:44 2026 GMT Subject: CN=03C478B0268E951F7AB1CD9DDEC8A3D5B8F4C4A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1c:de:c7:a2:be:56:ed:df:c7:2e:45:e4:db: 16:1c:3a:4a:c9:dc:9f:b8:ed:88:6e:02:61:bd:66: ef:47:98:a0:2c:ff:67:98:67:b0:0c:e8:5b:09:f0: ac:47:8a:db:13:2d:8f:b2:c6:4f:6e:bf:f6:49:4c: 98:82:00:8b:88:e0:fd:b0:64:6e:48:39:fa:32:67: 44:30:1a:10:3e:15:a9:4f:27:5a:92:16:01:f1:5f: 73:98:d3:30:16:d4:58:81:0e:d2:d3:89:8f:28:bc: 3e:31:7d:2f:90:5f:7f:5c:3d:59:08:56:33:cd:4a: c4:2f:b2:33:5d:be:17:d8:78:90:ca:96:5d:c9:f9: 82:a0:a3:64:07:1d:f0:a4:fb:e1:3d:de:43:9d:0d: e7:c3:16:e9:06:7c:ef:a5:bb:c1:39:18:b0:8b:ae: 6c:c4:d4:1b:d1:f9:c2:fc:9d:29:02:c0:6c:fd:a4: 9d:f7:0b:1d:49:55:16:6b:89:39:c4:a3:bb:e0:1a: 17:d5:f8:7f:c0:33:6a:3d:63:fc:59:84:b8:0e:b6: 1e:ce:1c:5d:27:df:4e:a8:c9:70:07:d3:71:ff:00: 43:df:d5:58:6b:bc:9c:3c:2f:89:0a:38:4a:09:90: 46:2d:91:78:a2:e7:de:65:4c:7c:e1:55:7f:1e:83: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C4:78:B0:26:8E:95:1F:7A:B1:CD:9D:DE:C8:A3:D5:B8:F4:C4:A8 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:89:b7:45:bc:ab:94:2f:29:4d:2c:3b:97:db:d0:20:9b:8f: 75:91:1d:07:f7:64:84:19:db:91:17:35:b7:3d:e4:16:2f:ae: 8e:76:90:e2:6f:22:cf:32:39:98:d0:ea:8b:8f:a6:f9:ee:be: c1:17:c6:e6:b1:22:87:eb:a1:00:f1:b2:b0:ef:73:95:06:89: 77:da:05:b7:d6:96:c8:e5:10:4e:ce:b8:af:44:19:64:6a:b3: a3:e9:72:cd:79:0a:12:3f:6a:e1:fa:3c:64:5a:f2:fa:86:a1: 2d:d3:11:37:8d:fc:ad:67:5f:9c:4b:e4:b0:28:3e:13:1f:80: de:7b:e9:40:f7:72:36:6a:6e:15:cf:b6:62:94:d4:6d:c7:4d: 6b:a8:f4:40:06:81:7b:f0:3c:cf:13:f8:b2:a6:c7:9e:0e:bb: 76:bc:fb:c9:d9:32:5c:6c:de:7d:34:34:29:93:c0:30:19:4d: 5e:c0:fa:75:36:13:5a:70:7a:b2:64:35:88:27:57:02:f8:a9: c9:31:3a:63:05:56:3b:cf:3b:9b:ee:7a:6d:f2:af:53:d9:0b: 14:c8:bc:be:fa:24:c6:a7:92:a9:59:9d:4e:36:66:9e:73:7a: 07:a1:a3:19:a7:2b:57:d8:51:f6:30:ef:db:e5:1f:32:3d:05: 23:24:ad:10 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUdMCNlVHSoK4UbRw0St7/UgT+gLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNjAxMjUxNjI3NDRaFw0yNjAxMjYyMDMwNDRaMDMxMTAvBgNV BAMTKDAzQzQ3OEIwMjY4RTk1MUY3QUIxQ0Q5RERFQzhBM0Q1QjhGNEM0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1HN7Hor5W7d/HLkXk2xYcOkrJ 3J+47YhuAmG9Zu9HmKAs/2eYZ7AM6FsJ8KxHitsTLY+yxk9uv/ZJTJiCAIuI4P2w ZG5IOfoyZ0QwGhA+FalPJ1qSFgHxX3OY0zAW1FiBDtLTiY8ovD4xfS+QX39cPVkI VjPNSsQvsjNdvhfYeJDKll3J+YKgo2QHHfCk++E93kOdDefDFukGfO+lu8E5GLCL rmzE1BvR+cL8nSkCwGz9pJ33Cx1JVRZriTnEo7vgGhfV+H/AM2o9Y/xZhLgOth7O HF0n306oyXAH03H/AEPf1VhrvJw8L4kKOEoJkEYtkXii595lTHzhVX8eg+RjAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUA8R4sCaOlR96sc2d3sij1bj0xKgwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABuJt0W8q5QvKU0sO5fb 0CCbj3WRHQf3ZIQZ25EXNbc95BYvro52kOJvIs8yOZjQ6ouPpvnuvsEXxuaxIofr oQDxsrDvc5UGiXfaBbfWlsjlEE7OuK9EGWRqs6Ppcs15ChI/auH6PGRa8vqGoS3T ETeN/K1nX5xL5LAoPhMfgN576UD3cjZqbhXPtmKU1G3HTWuo9EAGgXvwPM8T+LKm x54Ou3a8+8nZMlxs3n00NCmTwDAZTV7A+nU2E1pwerJkNYgnVwL4qckxOmMFVjvP O5vuem3yr1PZCxTIvL76JMankqlZnU42Zp5zegehoxmnK1fYUfYw79vlHzI9BSMk rRA= -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:58 2026 by rpki-client