This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json) Hash identifier: 6NzDa4zs78R/isL2lOddrKNul5tTvAKin77w568gQ58= Subject key identifier: 51:46:52:3D:B5:E8:F2:5B:E8:8D:FF:ED:56:05:22:2F:7D:8C:78:ED Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d Certificate serial: 3545251092CA9CF21F4A4A441420B3EE30544062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft Manifest number: 02B1 Signing time: Fri 26 Dec 2025 14:48:13 +0000 Manifest this update: Fri 26 Dec 2025 14:43:13 +0000 Manifest next update: Sat 27 Dec 2025 15:20:13 +0000 Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: Cp68II1C+yCaH4G0aDIlAADfdkPHL0AVxVrlH8WZqHE=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:45:25:10:92:ca:9c:f2:1f:4a:4a:44:14:20:b3:ee:30:54:40:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d Validity Not Before: Dec 26 14:43:13 2025 GMT Not After : Dec 27 15:20:13 2025 GMT Subject: CN=5146523DB5E8F25BE88DFFED5605222F7D8C78ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a8:dc:01:f0:86:40:c3:4d:93:56:2e:87:cd: 3a:31:f4:64:23:6b:63:53:e8:ae:a1:7a:75:fe:99: 88:95:c4:88:d9:fb:21:4a:85:e7:14:76:04:c5:1f: cc:8c:cb:f4:9b:17:70:75:05:ca:bf:37:12:4c:7a: 19:c0:da:21:38:9e:ba:7b:1f:64:1d:fe:59:46:7d: 51:8d:9f:c3:65:2e:39:29:5c:41:33:e9:3f:5e:ec: 79:dd:c5:21:65:23:56:e2:e4:ac:ab:ad:53:0c:ff: 34:2b:cd:69:e8:7a:6f:fa:dd:23:38:e1:d8:80:d9: 81:32:2a:69:f2:c8:3c:d3:53:8e:eb:d9:b5:7b:04: 4d:5a:31:68:74:f2:2f:32:48:e9:4a:78:a3:92:41: b8:b4:92:65:f8:fa:00:54:cc:ed:03:a5:5d:1f:77: e6:78:63:2d:c2:fc:ba:3d:48:5f:86:11:49:36:f1: 27:b0:96:33:60:e3:8f:80:19:86:5d:37:0b:b7:43: fb:1c:e5:4b:1e:5d:0e:68:bc:d6:a2:74:9a:e3:37: da:18:82:c5:b3:a9:00:83:34:c6:62:84:36:32:bb: f0:7f:29:65:75:ce:07:42:6b:90:b5:49:71:82:b0: bf:87:4e:65:f0:4e:61:6b:0b:8c:2e:00:9a:99:23: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:46:52:3D:B5:E8:F2:5B:E8:8D:FF:ED:56:05:22:2F:7D:8C:78:ED X509v3 Authority Key Identifier: keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c3:38:57:56:10:4e:49:86:dc:ff:ed:aa:b0:42:70:04:03: 17:9a:f1:f2:f6:91:88:82:bd:4f:b3:2b:57:fd:de:e7:f4:1b: cd:56:24:75:e2:ea:ea:e1:f6:a3:a8:c2:cc:44:1b:bc:bd:2f: 3b:f3:59:c3:bb:81:a8:a2:92:42:64:0b:17:85:95:fd:c2:14: a9:4f:30:dc:72:95:e0:0c:20:91:61:22:cc:8d:24:88:ec:e9: 38:ca:c1:9c:b6:e5:ee:c1:0c:c9:ac:70:92:a7:d3:32:ff:ec: 8f:a6:56:ed:94:f0:29:1f:eb:5c:78:48:20:df:ed:43:46:bf: 71:fb:6b:9e:fe:18:1a:17:48:38:9c:f0:40:4f:d0:46:ab:98: 2f:bc:ad:ed:02:0b:31:a8:26:b8:89:bc:b7:01:03:7a:9c:60: 67:35:a6:d5:4d:9c:85:ef:00:79:35:e6:44:3b:40:2c:96:dd: 72:a0:00:38:e5:fd:31:a2:99:11:ea:60:e3:25:c9:8d:d0:5a: 57:df:92:51:7f:df:2e:43:24:b6:42:67:00:9a:22:5b:45:80: ca:79:d3:3f:81:37:ac:a8:01:9c:35:55:41:a7:28:64:7b:19: 99:b1:b9:ed:ce:e0:46:a5:2b:a2:f9:cb:0d:f8:17:50:5c:a7: 7b:f2:e0:ca -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNUUlEJLKnPIfSkpEFCCz7jBUQGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFjOWNiMjU0NTRmMzk5Yzg4Y2RmZmNiYTc0YmI5MzA4 ODM0ZTA5ZDAeFw0yNTEyMjYxNDQzMTNaFw0yNTEyMjcxNTIwMTNaMDMxMTAvBgNV BAMTKDUxNDY1MjNEQjVFOEYyNUJFODhERkZFRDU2MDUyMjJGN0Q4Qzc4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiqNwB8IZAw02TVi6HzTox9GQj a2NT6K6henX+mYiVxIjZ+yFKhecUdgTFH8yMy/SbF3B1Bcq/NxJMehnA2iE4nrp7 H2Qd/llGfVGNn8NlLjkpXEEz6T9e7HndxSFlI1bi5KyrrVMM/zQrzWnoem/63SM4 4diA2YEyKmnyyDzTU47r2bV7BE1aMWh08i8ySOlKeKOSQbi0kmX4+gBUzO0DpV0f d+Z4Yy3C/Lo9SF+GEUk28SewljNg44+AGYZdNwu3Q/sc5UseXQ5ovNaidJrjN9oY gsWzqQCDNMZihDYyu/B/KWV1zgdCa5C1SXGCsL+HTmXwTmFrC4wuAJqZI26bAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUUUZSPbXo8lvojf/tVgUiL32MeO0wHwYDVR0j BBgwFoAUIcnLJUVPOZyIzf/Lp0u5MIg04J0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzEv MjFDOUNCMjU0NTRGMzk5Qzg4Q0RGRkNCQTc0QkI5MzA4ODM0RTA5RC5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL0ljbkxKVVZQT1p5SXpmX0xwMHU1TUlnMDRKMC5j ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wMTRiOTIwOGI1NDY0ZmYx YWVhYzFmYzgyOWFkMDM0My8xLzIxQzlDQjI1NDU0RjM5OUM4OENERkZDQkE3NEJC OTMwODgzNEUwOUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5wzhXVhBOSYbc/+2qsEJwBAMXmvHy9pGI gr1PsytX/d7n9BvNViR14urq4fajqMLMRBu8vS8781nDu4GoopJCZAsXhZX9whSp TzDccpXgDCCRYSLMjSSI7Ok4ysGctuXuwQzJrHCSp9My/+yPplbtlPApH+tceEgg 3+1DRr9x+2ue/hgaF0g4nPBAT9BGq5gvvK3tAgsxqCa4iby3AQN6nGBnNabVTZyF 7wB5NeZEO0Aslt1yoAA45f0xopkR6mDjJcmN0FpX35JRf98uQyS2QmcAmiJbRYDK edM/gTesqAGcNVVBpyhkexmZsbntzuBGpSui+csN+BdQXKd78uDK -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:49 2025 by rpki-client