This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: 1nM5K6K/cQ039VEdGrXn9Ym17I22XekQvkKFcMXtHxA= Subject key identifier: 55:16:45:F3:6F:BD:01:3E:F0:1B:F9:17:B9:DB:24:8C:E2:7E:9B:4A Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 3813F042DB1555C4B05FD9CB72B53481A7E4E9AE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 0296 Signing time: Sat 06 Dec 2025 05:18:19 +0000 Manifest this update: Sat 06 Dec 2025 05:13:19 +0000 Manifest next update: Sun 07 Dec 2025 06:55:19 +0000 Files and hashes: 1: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) 2: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: 23QeUJivvlihhdmWZoIWZfnVCxbgYX2CWIcmJfrLmPo=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:13:f0:42:db:15:55:c4:b0:5f:d9:cb:72:b5:34:81:a7:e4:e9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Dec 6 05:13:19 2025 GMT Not After : Dec 7 06:55:19 2025 GMT Subject: CN=551645F36FBD013EF01BF917B9DB248CE27E9B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:19:8f:e7:90:2b:57:f0:ef:ec:1c:f3:3c: 39:71:d2:35:51:3b:71:b5:76:e1:a7:82:37:a3:92: c5:b9:0c:7c:ff:40:33:f4:ca:57:b0:d7:e9:f9:b1: 55:48:d6:44:a3:c4:2f:c0:94:f5:d1:49:9c:83:78: a3:6f:29:1d:b6:db:3d:9f:c6:10:ab:ff:4b:93:dd: 8d:8b:3c:25:da:09:c9:6a:85:1f:b2:83:8e:99:09: bd:62:c8:b6:52:8e:a2:73:7b:40:25:42:99:d9:0f: 91:dc:4f:09:8f:01:13:2b:91:dd:59:df:62:b2:94: a5:da:2f:2c:65:ef:13:fa:8c:ac:44:91:ff:e4:9a: f7:90:1a:79:fd:a9:75:44:45:fa:57:25:1b:ff:8b: 53:33:bd:d7:39:49:39:9b:01:0f:5d:e1:41:9d:12: dd:37:45:ea:50:5c:a8:6d:01:c3:d6:30:88:76:e4: d3:e2:3d:28:5c:3e:e2:77:71:88:52:f4:92:15:bc: 8c:9d:a4:f5:91:5b:a6:5a:62:d3:b9:36:68:bd:87: 3b:5f:00:40:e2:54:b9:20:e3:ce:14:4b:24:a9:83: b0:6c:5f:25:ef:d5:98:1c:26:56:3c:ae:7d:0b:33: 78:6f:ce:de:97:3e:06:c3:ad:2f:d5:df:d1:ee:e4: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:16:45:F3:6F:BD:01:3E:F0:1B:F9:17:B9:DB:24:8C:E2:7E:9B:4A X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4b:62:04:f5:db:7e:6f:1b:0f:0c:e7:d9:da:ae:32:f0:f8: 28:cd:15:0f:66:ed:1e:66:ea:05:87:9e:24:6e:50:57:07:ef: c2:f7:53:52:40:9c:b4:87:37:35:20:8c:a8:6c:fc:cd:55:69: 71:b0:f3:d4:ce:d8:5b:90:ee:35:f2:9a:ae:f8:e9:c2:0e:cf: a8:d1:1c:c3:a1:f0:55:d3:e7:b8:57:d2:ec:4e:62:bd:b7:08: b0:79:1c:07:26:25:3d:ef:c2:89:cd:c2:6a:d8:c9:c7:21:ca: 4a:9c:06:9c:4e:e1:a1:a9:e3:04:71:f7:e2:7e:21:9f:ce:ef: 0a:97:2a:61:1d:05:6a:81:96:e3:6f:3d:94:b2:00:eb:e3:4f: a1:03:63:82:e3:3f:6e:4d:a8:3a:e3:26:46:11:1c:15:fb:f0: 93:e5:9e:78:d5:b0:60:db:53:a9:4e:7d:b9:e3:eb:98:b6:78: d0:7a:eb:11:86:78:79:38:51:6f:90:e5:d8:42:e7:dd:22:d3: 5d:4e:ea:2b:a8:65:55:01:da:94:f6:0f:e9:c8:ff:91:dd:0d: 8e:0d:67:0d:63:7d:64:a7:d2:a2:a0:6d:a8:8d:9b:a1:ed:a6: ec:a3:bb:d3:f2:54:da:63:b0:4e:57:1c:68:46:3f:aa:3d:2a: 66:77:e2:64 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUOBPwQtsVVcSwX9nLcrU0gafk6a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTEyMDYwNTEzMTlaFw0yNTEyMDcwNjU1MTlaMDMxMTAvBgNV BAMTKDU1MTY0NUYzNkZCRDAxM0VGMDFCRjkxN0I5REIyNDhDRTI3RTlCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymBmP55ArV/Dv7BzzPDlx0jVR O3G1duGngjejksW5DHz/QDP0ylew1+n5sVVI1kSjxC/AlPXRSZyDeKNvKR222z2f xhCr/0uT3Y2LPCXaCclqhR+yg46ZCb1iyLZSjqJze0AlQpnZD5HcTwmPARMrkd1Z 32KylKXaLyxl7xP6jKxEkf/kmveQGnn9qXVERfpXJRv/i1Mzvdc5STmbAQ9d4UGd Et03RepQXKhtAcPWMIh25NPiPShcPuJ3cYhS9JIVvIydpPWRW6ZaYtO5Nmi9hztf AEDiVLkg484USySpg7BsXyXv1ZgcJlY8rn0LM3hvzt6XPgbDrS/V39Hu5HZxAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUVRZF82+9AT7wG/kXudskjOJ+m0owHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAABLYgT1235vGw8M59na rjLw+CjNFQ9m7R5m6gWHniRuUFcH78L3U1JAnLSHNzUgjKhs/M1VaXGw89TO2FuQ 7jXymq746cIOz6jRHMOh8FXT57hX0uxOYr23CLB5HAcmJT3vwonNwmrYycchykqc BpxO4aGp4wRx9+J+IZ/O7wqXKmEdBWqBluNvPZSyAOvjT6EDY4LjP25NqDrjJkYR HBX78JPlnnjVsGDbU6lOfbnj65i2eNB66xGGeHk4UW+Q5dhC590i011O6iuoZVUB 2pT2D+nI/5HdDY4NZw1jfWSn0qKgbaiNm6Htpuyju9PyVNpjsE5XHGhGP6o9KmZ3 4mQ= -----END CERTIFICATE-----Generated at Sat Dec 6 16:58:32 2025 by rpki-client