This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: SbK/eIl1CunhdxkHsfv5scBTzALx4+a57reQF9NqBk4= Subject key identifier: 08:AA:A7:85:9A:E8:6C:C3:63:6C:A3:E4:6C:B1:99:0A:21:FF:1B:CF Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 0D7B84D9E4D726D8CFFCFF9F04B1576B74D127D7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 01C7 Signing time: Wed 17 Dec 2025 13:25:34 +0000 Manifest this update: Wed 17 Dec 2025 13:20:34 +0000 Manifest next update: Thu 18 Dec 2025 16:22:34 +0000 Files and hashes: 1: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=) 2: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: qSJ1icSu6DGciv86LH74yWFHOSgeRrPwdQZAMauMv+Y=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7b:84:d9:e4:d7:26:d8:cf:fc:ff:9f:04:b1:57:6b:74:d1:27:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Dec 17 13:20:34 2025 GMT Not After : Dec 18 16:22:34 2025 GMT Subject: CN=08AAA7859AE86CC3636CA3E46CB1990A21FF1BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:c9:aa:5a:6f:c7:93:58:2b:9f:f6:af:8b: 58:03:19:16:56:35:ae:ee:b5:04:06:2b:19:5d:59: 2e:62:49:99:e5:1b:e3:18:97:e9:50:fc:eb:a7:7b: 1e:e3:99:68:20:48:29:f2:f4:a3:42:c8:dd:90:8c: 3a:0b:10:ec:19:2c:38:86:0f:46:95:b6:b9:f4:b8: 35:2c:b8:f5:3f:7b:9c:86:2f:c0:46:dd:3e:9b:2c: c3:c7:51:d4:97:6d:9f:37:a4:23:c7:5e:e3:eb:71: 5b:d6:95:13:3d:54:c3:7b:bc:81:50:38:ac:b4:02: a0:6a:e8:f3:fe:66:ea:63:97:74:6e:ff:67:ad:74: 4c:01:df:41:79:db:08:3c:f9:28:7d:6d:25:6a:89: 36:f0:6e:b6:e9:2d:0b:92:ac:f9:43:60:79:29:d2: ec:0b:92:0a:f6:77:b9:94:77:94:64:f2:2f:bd:46: 4a:3f:18:ff:d6:9c:ed:d3:41:d6:d0:ee:80:4a:9d: 13:29:84:bf:1c:82:9c:dd:7a:db:ac:79:ab:2e:b0: d2:95:4f:99:b4:a9:37:71:69:e8:9a:a4:27:f0:b1: 09:d4:24:a8:77:ad:b7:66:73:6b:87:89:13:de:26: 59:f6:3c:ad:46:c0:07:0e:db:be:7c:40:65:83:3a: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AA:A7:85:9A:E8:6C:C3:63:6C:A3:E4:6C:B1:99:0A:21:FF:1B:CF X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:37:33:59:b7:8b:79:da:cd:a0:51:28:1e:65:d3:1e:2d:48: 2a:09:b6:b8:be:d2:71:6c:39:6f:81:ea:1e:6b:b0:15:72:69: 36:64:17:58:81:08:eb:40:f9:9b:2e:5f:93:bf:13:4e:fd:2b: 0f:1d:6c:28:f0:11:3c:a7:6a:b3:32:e5:eb:33:17:58:a2:7f: 63:c0:e1:59:d1:51:c6:e8:84:2a:8d:3b:39:02:fa:60:de:4e: 3c:a3:8e:1d:57:6e:ed:ef:eb:ab:05:67:33:9e:20:27:5b:6e: 7a:74:89:18:9b:43:37:1b:9c:11:ee:50:19:6e:c7:80:9d:bc: c5:14:1c:5b:55:13:1c:b0:a7:57:9d:66:b7:63:40:86:fa:12: a5:58:88:e0:ad:50:2a:cb:41:d0:3d:53:b3:f6:35:18:24:be: 41:1a:01:67:33:06:59:82:77:39:cf:05:a4:ca:2d:22:83:e1: 06:2b:2a:18:71:ad:25:bf:7b:a3:f8:6c:c2:5a:1f:c5:7c:e3: 6b:f1:2d:e8:97:1e:01:73:77:ee:77:15:27:28:ec:8a:37:24: 29:db:74:dd:b2:55:2d:f1:6c:14:b8:7f:cd:61:fa:09:70:7c: 56:4a:27:99:00:39:cb:3a:4c:61:ad:f8:e2:15:3c:03:1f:2e: 3a:df:11:5a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDXuE2eTXJtjP/P+fBLFXa3TRJ9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNTEyMTcxMzIwMzRaFw0yNTEyMTgxNjIyMzRaMDMxMTAvBgNV BAMTKDA4QUFBNzg1OUFFODZDQzM2MzZDQTNFNDZDQjE5OTBBMjFGRjFCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Z8mqWm/Hk1grn/avi1gDGRZW Na7utQQGKxldWS5iSZnlG+MYl+lQ/Ounex7jmWggSCny9KNCyN2QjDoLEOwZLDiG D0aVtrn0uDUsuPU/e5yGL8BG3T6bLMPHUdSXbZ83pCPHXuPrcVvWlRM9VMN7vIFQ OKy0AqBq6PP+Zupjl3Ru/2etdEwB30F52wg8+Sh9bSVqiTbwbrbpLQuSrPlDYHkp 0uwLkgr2d7mUd5Rk8i+9Rko/GP/WnO3TQdbQ7oBKnRMphL8cgpzdetuseasusNKV T5m0qTdxaeiapCfwsQnUJKh3rbdmc2uHiRPeJln2PK1GwAcO2758QGWDOnlhAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUCKqnhZrobMNjbKPkbLGZCiH/G88wHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEw3M1m3i3nazaBRKB5l 0x4tSCoJtri+0nFsOW+B6h5rsBVyaTZkF1iBCOtA+ZsuX5O/E079Kw8dbCjwETyn arMy5eszF1iif2PA4VnRUcbohCqNOzkC+mDeTjyjjh1Xbu3v66sFZzOeICdbbnp0 iRibQzcbnBHuUBlux4CdvMUUHFtVExywp1edZrdjQIb6EqVYiOCtUCrLQdA9U7P2 NRgkvkEaAWczBlmCdznPBaTKLSKD4QYrKhhxrSW/e6P4bMJaH8V842vxLeiXHgFz d+53FSco7Io3JCnbdN2yVS3xbBS4f81h+glwfFZKJ5kAOcs6TGGt+OIVPAMfLjrf EVo= -----END CERTIFICATE-----Generated at Wed Dec 17 19:07:37 2025 by rpki-client