This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft File: 44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json) Hash identifier: xlq3ixFGytRXl4q8ufMHQzMeja9UMAXt3hiDZpRNkkM= Subject key identifier: C9:15:1D:88:74:80:38:77:35:6F:51:38:9D:38:A9:57:EC:D2:33:6A Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 Certificate issuer: /CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Certificate serial: 4B5AAE7A79A84F7ACA0A582AD6BAB1C56221790D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft Manifest number: 0299 Signing time: Sat 06 Dec 2025 02:58:13 +0000 Manifest this update: Sat 06 Dec 2025 02:53:13 +0000 Manifest next update: Sun 07 Dec 2025 06:24:13 +0000 Files and hashes: 1: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: ZFgFa3mIQWS+C3ZANFakUZVad7gh+grxNMovjG/43xs=) 2: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=) 3: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: qFMPzRDJfAL2qa4Q4PlQJgFTYflAl0Cmgnuog1EhRbM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 18:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5a:ae:7a:79:a8:4f:7a:ca:0a:58:2a:d6:ba:b1:c5:62:21:79:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Validity Not Before: Dec 6 02:53:13 2025 GMT Not After : Dec 7 06:24:13 2025 GMT Subject: CN=C9151D8874803877356F51389D38A957ECD2336A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:81:cf:94:9f:b9:a4:e7:ee:5c:d4:98:44: 3a:77:69:01:75:ae:47:6e:7a:9c:45:13:71:90:5b: 9a:7a:2a:d5:a1:b8:16:04:33:16:b0:10:10:d4:a0: 95:38:2f:c4:3b:05:ee:8e:68:e8:f6:00:42:ae:4f: 15:7a:b6:84:c8:13:c1:34:a4:3d:b5:23:26:b3:03: 49:b5:1f:98:41:7f:98:5a:d5:4a:47:bc:0f:ef:09: 57:37:db:d5:90:ee:cf:09:98:95:99:ba:b2:10:77: 42:3b:66:f3:0d:e4:dd:71:16:db:87:2f:66:5f:a3: 9b:7a:54:f0:76:95:8e:11:60:90:ff:25:12:84:77: 18:c5:b9:70:1b:5f:23:8d:7d:ad:57:e8:fa:9c:33: 83:af:bd:d8:bc:60:7f:d9:78:c3:ba:2d:d1:c7:0a: ab:e3:89:2e:28:b4:4c:33:c6:23:26:f4:3a:90:3d: 52:73:26:4e:15:b6:fd:a1:4e:39:c3:5d:c2:fa:78: 24:fc:c1:ac:0a:bd:36:80:d3:73:16:75:b4:38:56: c4:2f:74:ea:76:d5:1c:31:77:6b:0a:e9:de:9e:a3: 02:d7:b5:9b:52:ff:33:bc:4d:43:c3:4e:60:3f:0b: 34:3e:7e:ec:be:22:9a:1b:e7:7d:8d:b8:9b:3a:16: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:15:1D:88:74:80:38:77:35:6F:51:38:9D:38:A9:57:EC:D2:33:6A X509v3 Authority Key Identifier: keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b5:9e:8f:f5:b1:d2:f1:50:bb:1d:6e:7d:92:ba:09:d5:07: 91:42:cb:08:b7:aa:95:cd:cc:7e:36:12:03:db:09:cc:f4:64: ed:4b:6d:c3:60:29:59:a1:22:49:8e:fd:a8:2b:2b:a1:e3:6a: 40:f9:bf:8f:66:c3:35:28:7f:e8:a8:2f:80:9a:f0:74:5d:99: 41:aa:db:7e:4f:9d:60:17:14:be:0f:87:ad:84:8b:b7:be:ee: 35:f4:8d:c2:95:78:58:9f:70:ee:29:f7:ef:33:4a:5d:19:9a: 9a:3f:58:77:5d:e6:af:c3:d9:22:be:07:ae:c4:ae:bf:c4:d6: cc:7e:fc:fe:0f:0e:73:cf:14:44:cb:3b:07:7e:01:6e:1c:84: 51:bf:91:94:ea:b3:90:c5:8c:88:b1:4e:61:26:d6:0e:3d:ef: 62:3b:1c:35:85:ed:75:ef:07:87:6f:a8:a5:bd:aa:4f:14:65: 6c:c8:dc:3a:d3:22:91:70:35:c4:73:fe:c7:0c:ab:1f:f0:60: 07:5e:16:2e:fb:5a:50:0e:a7:ef:2f:8f:cf:0a:0c:8c:af:32: f7:5c:4a:3e:88:c1:69:f3:d8:61:1d:a8:ba:82:54:9e:3e:52: f6:82:11:b6:fc:01:5d:d3:91:2c:20:fe:86:e0:43:8d:42:a7: a9:20:ad:dc -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUS1quenmoT3rKClgq1rqxxWIheQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEEx RTNGMTM4OTAeFw0yNTEyMDYwMjUzMTNaFw0yNTEyMDcwNjI0MTNaMDMxMTAvBgNV BAMTKEM5MTUxRDg4NzQ4MDM4NzczNTZGNTEzODlEMzhBOTU3RUNEMjMzNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAYHPlJ+5pOfuXNSYRDp3aQF1 rkduepxFE3GQW5p6KtWhuBYEMxawEBDUoJU4L8Q7Be6OaOj2AEKuTxV6toTIE8E0 pD21IyazA0m1H5hBf5ha1UpHvA/vCVc329WQ7s8JmJWZurIQd0I7ZvMN5N1xFtuH L2Zfo5t6VPB2lY4RYJD/JRKEdxjFuXAbXyONfa1X6PqcM4Ovvdi8YH/ZeMO6LdHH CqvjiS4otEwzxiMm9DqQPVJzJk4Vtv2hTjnDXcL6eCT8wawKvTaA03MWdbQ4VsQv dOp21Rwxd2sK6d6eowLXtZtS/zO8TUPDTmA/CzQ+fuy+Ipob532NuJs6FqNZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUyRUdiHSAOHc1b1E4nTipV+zSM2owHwYDVR0j BBgwFoAURMTJE9WPXvhHmWJB6Wm2Ch4/E4kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAv NDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NEM0QzkxM0Q1OEY1RUY4NDc5OTYyNDFFOTY5QjYw QTFFM0YxMzg5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2QwZjJk Yjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAvNDRDNEM5MTNENThGNUVGODQ3 OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABO1no/1sdLxULsdbn2S ugnVB5FCywi3qpXNzH42EgPbCcz0ZO1LbcNgKVmhIkmO/agrK6HjakD5v49mwzUo f+ioL4Ca8HRdmUGq235PnWAXFL4Ph62Ei7e+7jX0jcKVeFifcO4p9+8zSl0Zmpo/ WHdd5q/D2SK+B67Err/E1sx+/P4PDnPPFETLOwd+AW4chFG/kZTqs5DFjIixTmEm 1g4972I7HDWF7XXvB4dvqKW9qk8UZWzI3DrTIpFwNcRz/scMqx/wYAdeFi77WlAO p+8vj88KDIyvMvdcSj6IwWnz2GEdqLqCVJ4+UvaCEbb8AV3TkSwg/obgQ41Cp6kg rdw= -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:35 2025 by rpki-client