This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json) Hash identifier: AFgVix7zFvFhi4+X5OfMzGx0CS6lsG1g0vuF/52fatM= Subject key identifier: 2C:97:4D:F4:17:B5:37:67:F7:DE:22:00:ED:22:42:25:FE:16:76:EC Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 Certificate issuer: /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Certificate serial: 5D192C6B3F8EA4B994B450144066F4FB023A1DFC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft Manifest number: 0291 Signing time: Fri 05 Dec 2025 17:32:22 +0000 Manifest this update: Fri 05 Dec 2025 17:27:22 +0000 Manifest next update: Sat 06 Dec 2025 19:11:22 +0000 Files and hashes: 1: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: mlbqVuaykm2w9JppcX4zaeXZe+clYUMuD6ZKAHiRYlI=) 2: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:19:2c:6b:3f:8e:a4:b9:94:b4:50:14:40:66:f4:fb:02:3a:1d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Validity Not Before: Dec 5 17:27:22 2025 GMT Not After : Dec 6 19:11:22 2025 GMT Subject: CN=2C974DF417B53767F7DE2200ED224225FE1676EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:a1:88:e0:49:84:d7:a1:94:dd:51:52:f0: 14:f1:24:87:cd:f2:74:2c:e1:56:9a:5e:f2:d0:39: 01:8f:78:f1:2e:de:be:d3:43:bd:5e:d2:48:51:44: e5:34:b7:1f:91:5a:09:32:c4:7b:79:8f:aa:3b:1a: df:1d:f1:1a:77:6b:45:ab:6a:6d:e7:2b:df:78:01: 69:50:b7:4b:83:a5:e6:38:ec:80:0f:cb:60:f6:31: 26:3d:36:f8:6c:15:e8:da:d5:fa:43:d2:e9:16:66: a2:88:a7:15:1e:8e:a9:ea:45:e4:5b:48:31:8b:de: 3a:7b:ea:27:4d:f6:b7:cb:ef:20:10:08:85:25:8b: 73:cb:a6:83:7d:3a:68:38:2d:65:fb:c7:99:2b:b0: 86:02:3f:aa:1c:12:8a:49:a3:6b:2d:e7:2e:ac:15: 27:d4:6d:1f:b4:c9:5a:53:8d:ce:32:fe:da:b3:37: 31:fe:9d:70:8b:2e:36:d7:b3:00:b9:80:c0:5e:da: 93:49:9d:9a:83:1b:16:2e:f9:15:67:aa:9d:fd:c1: 62:b9:2f:52:0a:e3:ab:95:1f:bf:7b:be:91:8a:bc: ba:76:9b:75:04:36:86:5a:a2:96:01:a6:84:52:0d: 44:ce:77:95:c6:32:dd:02:86:98:af:c4:7c:31:70: ba:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:97:4D:F4:17:B5:37:67:F7:DE:22:00:ED:22:42:25:FE:16:76:EC X509v3 Authority Key Identifier: keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:53:dc:35:c0:d6:63:79:92:11:13:d0:fb:7c:1a:ce:98:c7: f8:c1:b6:5c:86:38:e5:bc:0b:73:63:58:8c:b9:27:89:e7:5e: f6:85:a8:29:cb:5d:4d:59:3b:70:70:b7:fb:c9:67:6f:c4:8a: 3c:09:74:14:20:d9:0a:96:d4:f2:e6:ae:c0:96:81:03:50:08: e0:f3:92:06:04:b6:ff:4e:53:93:96:41:85:86:7b:09:3c:34: 4b:c0:d5:53:04:89:10:ea:56:2d:25:c9:25:15:8d:5c:45:4b: d0:da:80:7a:0b:90:f8:9f:d5:cb:33:d8:a3:57:40:91:92:67: 3a:45:d3:5e:ca:c8:e3:9e:6a:86:1a:f2:4d:2d:51:43:e2:26: f6:25:a7:90:fd:ac:99:f9:d8:53:08:56:4b:c4:e9:5c:da:c0: 59:af:76:29:f2:5c:85:42:f0:25:a1:8d:76:6e:a1:4c:54:dc: 48:2c:bf:2b:12:6a:ab:aa:37:f0:c7:99:8e:72:3e:d7:93:54: ce:3a:45:a7:e7:df:74:14:5b:8c:b9:eb:42:db:dd:f9:b5:82: a0:65:b6:fe:1c:fa:79:64:c0:bd:c8:6b:ce:91:25:c9:bb:55: e0:b4:b5:b1:4d:d7:0b:85:80:5d:54:54:96:a2:90:d4:bf:cb: 59:c6:4d:6a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUXRksaz+OpLmUtFAUQGb0+wI6HfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3 MDFCMEY4NzAeFw0yNTEyMDUxNzI3MjJaFw0yNTEyMDYxOTExMjJaMDMxMTAvBgNV BAMTKDJDOTc0REY0MTdCNTM3NjdGN0RFMjIwMEVEMjI0MjI1RkUxNjc2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0OKGI4EmE16GU3VFS8BTxJIfN 8nQs4VaaXvLQOQGPePEu3r7TQ71e0khRROU0tx+RWgkyxHt5j6o7Gt8d8Rp3a0Wr am3nK994AWlQt0uDpeY47IAPy2D2MSY9NvhsFeja1fpD0ukWZqKIpxUejqnqReRb SDGL3jp76idN9rfL7yAQCIUli3PLpoN9Omg4LWX7x5krsIYCP6ocEopJo2st5y6s FSfUbR+0yVpTjc4y/tqzNzH+nXCLLjbXswC5gMBe2pNJnZqDGxYu+RVnqp39wWK5 L1IK46uVH797vpGKvLp2m3UENoZaopYBpoRSDUTOd5XGMt0ChpivxHwxcLpTAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQULJdN9Be1N2f33iIA7SJCJf4WduwwHwYDVR0j BBgwFoAUH7nIUPkT1sCad22Ls4MnvnAbD4cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NjNmMwZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAv MUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRkI5Qzg1MEY5MTNENkMwOUE3NzZEOEJCMzgzMjdC RTcwMUIwRjg3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NjNmMw ZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAvMUZCOUM4NTBGOTEzRDZDMDlB Nzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB5T3DXA1mN5khET0Pt8 Gs6Yx/jBtlyGOOW8C3NjWIy5J4nnXvaFqCnLXU1ZO3Bwt/vJZ2/EijwJdBQg2QqW 1PLmrsCWgQNQCODzkgYEtv9OU5OWQYWGewk8NEvA1VMEiRDqVi0lySUVjVxFS9Da gHoLkPif1csz2KNXQJGSZzpF017KyOOeaoYa8k0tUUPiJvYlp5D9rJn52FMIVkvE 6VzawFmvdinyXIVC8CWhjXZuoUxU3EgsvysSaquqN/DHmY5yPteTVM46Rafn33QU W4y560Lb3fm1gqBltv4c+nlkwL3Ia86RJcm7VeC0tbFN1wuFgF1UVJaikNS/y1nG TWo= -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:54 2025 by rpki-client