This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: fKyRnwhnyjNmmOYnlmDdeuT0qn9tPOa9ZQ9rXg0vf0w= Subject key identifier: DC:A3:8B:0A:88:7A:64:5D:01:25:AC:04:96:4F:C1:7A:31:50:87:2B Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 099614A2328606D850D1A7E8DB686A055F510C98 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 029B Signing time: Sat 13 Dec 2025 08:45:17 +0000 Manifest this update: Sat 13 Dec 2025 08:40:17 +0000 Manifest next update: Sun 14 Dec 2025 09:34:17 +0000 Files and hashes: 1: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: SZhn4FgWqY4qggdiI6TrYJUIT99auk+OFjrgNv4awjA=) 2: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: ZlrP4DedHUVReXi1OW78RdKl0wsqUd+bcDUmfwg7+Bg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 09:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:96:14:a2:32:86:06:d8:50:d1:a7:e8:db:68:6a:05:5f:51:0c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Dec 13 08:40:17 2025 GMT Not After : Dec 14 09:34:17 2025 GMT Subject: CN=DCA38B0A887A645D0125AC04964FC17A3150872B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:e2:f6:1a:f8:8a:b3:31:eb:68:11:7b:90: 20:61:ff:c2:8f:00:28:d4:ef:67:c0:d4:0e:a6:e3: 3f:ec:8c:af:48:37:75:7f:6b:bc:17:32:6a:74:ee: e2:6b:92:2b:a1:0a:6b:a5:50:7e:e6:08:8a:31:82: 84:42:64:f3:dc:12:4c:ef:50:58:ae:8c:dc:7c:6f: 5b:d0:7d:26:8c:ff:20:97:3e:1e:6e:75:a9:03:84: 7a:b7:eb:1c:14:00:8d:ef:df:35:10:01:36:cb:f2: 62:40:27:9e:21:38:bb:c0:2a:37:68:0f:be:6a:a7: 46:b8:57:f8:ac:ce:1f:3d:96:87:7f:39:e8:b5:41: 43:c6:47:3f:d4:53:d1:ad:af:fa:ed:10:26:30:af: 1e:82:ea:a9:53:cc:e6:df:af:cf:e4:4e:13:7c:c2: a2:79:9e:d6:f6:71:2d:b8:da:b8:e7:3d:6d:f7:65: be:38:eb:9f:8f:2c:bf:40:3b:e0:a5:39:0d:b6:49: 0e:6b:54:54:14:be:b6:5a:9c:1b:3b:aa:05:8b:d0: ea:59:ad:ff:bf:4a:45:0f:b1:4d:1a:9a:b6:62:cb: 58:8b:4f:10:22:53:e3:92:3a:6e:fb:5a:dd:da:f7: 0e:37:4d:17:4f:5f:4e:7a:ab:49:c9:eb:96:9c:ec: 46:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A3:8B:0A:88:7A:64:5D:01:25:AC:04:96:4F:C1:7A:31:50:87:2B X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:37:c7:f8:66:52:21:08:ee:f3:7b:dd:2e:99:8c:d0:66:c6: 73:5f:ab:5a:12:16:c8:d2:3d:18:38:1e:20:5c:f1:66:17:63: 4d:98:51:95:b6:6c:5e:ed:41:35:eb:3f:1e:78:56:01:13:d7: c5:5b:cd:15:24:b3:7f:3b:51:1f:53:f7:48:1a:c5:d2:a6:7b: 55:24:f8:9c:63:d2:05:22:fe:74:86:e1:a4:a6:40:f5:2f:6d: e9:d5:7d:5d:06:cd:d0:25:12:57:56:ac:2b:a3:1a:6a:c4:71: af:6f:ad:3f:45:a6:42:4a:b8:56:78:04:84:fd:db:a2:f6:3b: 44:45:ec:f5:68:3b:0b:9d:fc:07:19:4d:f2:b5:78:4b:be:9c: 18:b7:53:03:4d:d7:c4:17:4f:65:76:50:b5:62:07:a7:06:dd: 34:c1:ad:51:dd:44:d2:71:0d:54:e5:fe:cc:96:9b:9f:51:c4: 46:61:87:c0:0a:74:9e:3c:e7:03:dd:ab:0f:6f:47:6f:56:b6: a0:9b:57:f3:5b:ac:a3:14:4c:d8:82:18:49:39:2a:65:46:0f: 18:fd:e1:aa:93:72:d1:e6:fa:99:94:2a:a6:f2:9b:d0:cc:8f: e0:c1:c8:dc:5b:81:5d:c0:ab:6c:50:35:2b:d4:32:3e:bf:df: 36:b2:6d:a4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCZYUojKGBthQ0afo22hqBV9RDJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNTEyMTMwODQwMTdaFw0yNTEyMTQwOTM0MTdaMDMxMTAvBgNV BAMTKERDQTM4QjBBODg3QTY0NUQwMTI1QUMwNDk2NEZDMTdBMzE1MDg3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztuL2GviKszHraBF7kCBh/8KP ACjU72fA1A6m4z/sjK9IN3V/a7wXMmp07uJrkiuhCmulUH7mCIoxgoRCZPPcEkzv UFiujNx8b1vQfSaM/yCXPh5udakDhHq36xwUAI3v3zUQATbL8mJAJ54hOLvAKjdo D75qp0a4V/iszh89lod/Oei1QUPGRz/UU9Gtr/rtECYwrx6C6qlTzObfr8/kThN8 wqJ5ntb2cS242rjnPW33Zb4465+PLL9AO+ClOQ22SQ5rVFQUvrZanBs7qgWL0OpZ rf+/SkUPsU0amrZiy1iLTxAiU+OSOm77Wt3a9w43TRdPX056q0nJ65ac7EY3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU3KOLCoh6ZF0BJawElk/BejFQhyswHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB83x/hmUiEI7vN73S6Z jNBmxnNfq1oSFsjSPRg4HiBc8WYXY02YUZW2bF7tQTXrPx54VgET18VbzRUks387 UR9T90gaxdKme1Uk+Jxj0gUi/nSG4aSmQPUvbenVfV0GzdAlEldWrCujGmrEca9v rT9FpkJKuFZ4BIT926L2O0RF7PVoOwud/AcZTfK1eEu+nBi3UwNN18QXT2V2ULVi B6cG3TTBrVHdRNJxDVTl/syWm59RxEZhh8AKdJ485wPdqw9vR29WtqCbV/NbrKMU TNiCGEk5KmVGDxj94aqTctHm+pmUKqbym9DMj+DByNxbgV3Aq2xQNSvUMj6/3zay baQ= -----END CERTIFICATE-----Generated at Sat Dec 13 18:09:00 2025 by rpki-client