This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
File: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json)
Hash identifier: lnLNrJwSi6mydEChFiDI6LehO3jP+gkIK4UgBiQRIV8=
Subject key identifier: CD:4E:AB:65:B2:CA:C6:95:E8:A2:72:8B:77:09:69:90:9F:C2:52:21
Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
Certificate issuer: /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Certificate serial: 2270B900EE03F3CB9D777F492D4EB27BF3282C2C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
Manifest number: 02DA
Signing time: Sun 25 Jan 2026 13:50:43 +0000
Manifest this update: Sun 25 Jan 2026 13:45:43 +0000
Manifest next update: Mon 26 Jan 2026 13:50:43 +0000
Files and hashes: 1: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=)
2: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: PQEaFszAq+ZK9ESQBFwygRRhfFNsbmgOqDDdmUg4+l4=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:70:b9:00:ee:03:f3:cb:9d:77:7f:49:2d:4e:b2:7b:f3:28:2c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Validity
Not Before: Jan 25 13:45:43 2026 GMT
Not After : Jan 26 13:50:43 2026 GMT
Subject: CN=CD4EAB65B2CAC695E8A2728B770969909FC25221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:2b:90:4f:40:52:9e:01:08:a1:fa:5d:17:
24:03:09:c0:26:51:1d:d5:ae:d6:2f:ed:00:c8:bf:
cf:7e:f3:38:5e:3f:dd:3f:7c:5e:82:96:a8:f8:dd:
b8:6f:fa:61:e8:bb:b3:46:2d:86:b8:e3:06:9d:43:
08:28:d3:75:b8:4a:18:94:f2:69:a2:6c:0e:88:67:
32:8a:3d:9f:51:9b:bf:00:b5:67:57:70:6b:a1:c7:
3e:88:7e:93:3b:51:c3:19:3a:56:91:33:93:ea:48:
0b:97:88:18:10:4c:2e:05:4d:1a:2c:f9:17:79:5c:
76:ad:4f:e5:bb:cf:ab:36:f5:2e:af:95:91:15:3a:
ab:75:28:33:6b:43:c9:a1:5a:36:6a:14:4b:a4:71:
25:03:4b:a9:6e:34:db:e7:b0:d8:1f:d6:a8:95:fe:
03:a3:4b:dd:5f:63:26:84:50:6b:17:14:68:56:cf:
54:22:ac:10:0f:1a:f3:9a:85:36:f7:e8:79:69:ec:
b0:61:d2:b4:88:be:af:50:ad:9c:28:45:c2:c7:d9:
15:be:b2:b8:33:f9:f3:8e:d2:e6:35:d2:7c:cd:dc:
2d:ed:4b:b0:20:38:5a:0e:d4:0a:3c:63:e2:29:5f:
f7:85:8d:77:93:77:25:75:b3:c5:5e:5e:9c:87:cd:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4E:AB:65:B2:CA:C6:95:E8:A2:72:8B:77:09:69:90:9F:C2:52:21
X509v3 Authority Key Identifier:
keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:48:80:f3:0e:fd:2e:34:1a:32:99:99:04:32:3f:65:fd:74:
c9:3d:e4:57:8a:cb:9c:5a:e1:eb:49:59:e9:cb:a3:df:8c:86:
8f:05:2a:5d:3a:fa:33:5f:b8:d5:9d:c9:c5:ac:d5:46:a6:86:
88:f7:82:25:61:52:b7:13:5f:5e:30:4c:25:18:60:47:a4:d3:
b5:e0:20:2f:28:17:c5:31:76:3d:ba:b1:3f:75:f2:0e:77:e7:
fa:3d:17:9b:f9:a4:a4:6c:8e:ba:49:42:47:a9:3c:10:d9:e1:
7e:6b:95:9f:77:c9:9a:a1:8d:e6:1a:18:e4:21:84:c1:f0:9c:
45:50:b2:7f:2f:52:7e:70:03:57:45:22:27:2f:1c:9f:66:b9:
6e:5a:b9:15:9e:aa:a4:a6:05:e9:2d:31:33:33:72:20:78:26:
05:38:59:1a:b5:9a:7d:1a:39:c6:85:9b:66:ce:c6:06:4d:c5:
f4:f5:c8:f8:c1:15:6b:f1:53:37:73:2b:40:c9:30:37:98:15:
40:dc:fa:0e:13:6d:80:df:47:84:77:af:64:de:d3:0c:7a:af:
9b:af:5b:26:a9:1b:c9:59:e7:ea:73:a0:d3:8b:75:1c:2e:54:
b8:42:10:75:00:98:12:bb:80:5c:6d:96:c6:c1:a8:25:4f:f0:
83:c9:bf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:31 2026 by rpki-client