This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
File: 4742E76772F118A935D69FD40F69858085C80999.mft (raw, json)
Hash identifier: oQdJzu2km52R5Muwpx/vh0ewMFbWxoTOcEMOlotTMYU=
Subject key identifier: 7D:73:32:9E:67:3E:E4:C5:56:2C:20:26:16:B2:C3:DD:C4:F9:B3:DE
Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
Certificate issuer: /CN=4742E76772F118A935D69FD40F69858085C80999
Certificate serial: 1852F4BD948C5755AFD76CC8293F3B786A084EBA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
Manifest number: 029E
Signing time: Sat 13 Dec 2025 10:50:26 +0000
Manifest this update: Sat 13 Dec 2025 10:45:26 +0000
Manifest next update: Sun 14 Dec 2025 12:03:26 +0000
Files and hashes: 1: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (hash: gUgzdRxmuJNOQsawEIqvnF9DX0YCEOe/wm39FVRE0Uw=)
2: 4742E76772F118A935D69FD40F69858085C80999.crl (hash: cVc4xJWwKSKSa57oMpBuIoEfnXFVS55RxhsVLhwpk7s=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:52:f4:bd:94:8c:57:55:af:d7:6c:c8:29:3f:3b:78:6a:08:4e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4742E76772F118A935D69FD40F69858085C80999
Validity
Not Before: Dec 13 10:45:26 2025 GMT
Not After : Dec 14 12:03:26 2025 GMT
Subject: CN=7D73329E673EE4C5562C202616B2C3DDC4F9B3DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:0b:e6:d9:90:19:9b:8e:5a:35:fa:e1:fb:
0f:cf:ad:79:b7:0f:95:65:b7:16:59:0d:31:f2:1a:
9b:45:0b:b7:cb:90:c2:c0:ad:78:04:17:08:e5:a6:
8d:56:4f:e4:8c:57:ff:88:94:fa:6b:ec:ee:54:08:
4b:02:43:76:c4:99:19:d1:7a:04:fe:b5:01:5a:ca:
6a:da:94:a0:4c:57:e1:9d:56:c3:b2:de:11:5d:12:
ee:c1:84:20:dc:c2:5f:db:5d:bd:24:67:f4:80:65:
d8:70:d7:71:83:c2:60:39:c4:5d:51:75:74:b6:19:
d7:54:ee:92:75:1c:ce:12:33:e8:ef:d0:60:f0:1f:
de:67:c4:0b:f9:59:cd:0e:e2:8c:da:f5:b1:83:59:
0c:a3:21:65:7a:02:40:d2:f7:52:63:2c:f6:a4:84:
c0:b0:f5:c3:13:61:53:ba:d2:fe:7a:cc:e1:34:65:
bd:d9:e0:ae:85:a0:b9:22:21:61:1c:2b:c1:ec:01:
69:e6:f7:79:4f:72:97:20:27:d2:e6:51:c7:16:7f:
c0:62:31:82:19:38:ef:ed:6d:ca:91:15:c8:93:42:
72:cd:f0:de:ef:0f:75:5d:f4:40:d9:39:d5:25:60:
44:d3:6f:c4:0a:d3:c7:55:5f:c5:48:b7:cb:3b:f7:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:32:9E:67:3E:E4:C5:56:2C:20:26:16:B2:C3:DD:C4:F9:B3:DE
X509v3 Authority Key Identifier:
keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:73:07:96:12:72:5f:bb:73:3a:e6:92:be:a7:f8:12:1f:91:
c6:3a:48:80:4e:1f:02:43:9d:6c:28:ed:3a:52:68:b9:6b:ee:
ec:ee:92:9a:e8:67:6d:ac:b2:de:65:d5:15:f5:17:71:3d:fd:
c6:c8:51:fe:9f:08:9c:40:71:e7:d8:12:33:b7:a5:d3:69:4e:
4f:26:1a:81:a7:45:c9:fa:3a:27:9d:3c:e5:b9:82:da:27:0b:
25:8b:56:b3:51:60:cb:7f:c0:13:08:ba:b9:d8:b8:74:e3:2f:
27:a2:61:91:e9:56:b8:b0:e6:47:b7:95:cb:e5:39:cf:5f:1f:
fc:6d:e9:c4:73:39:af:1f:b4:0c:00:92:5d:20:fe:a7:31:68:
7a:c2:a3:f6:1e:9f:cb:aa:49:4d:82:75:4d:8c:21:f7:17:bb:
67:93:14:16:47:b7:eb:82:5e:c2:67:60:13:8f:13:9b:e7:63:
1d:f6:29:11:34:45:fd:5c:78:05:4b:99:fa:c2:1a:62:c5:2d:
ef:79:aa:c3:3d:e9:16:48:f5:5f:7c:d6:46:95:6e:28:87:47:
a9:05:a4:04:cf:82:a5:be:3f:25:30:81:d1:b4:67:4c:8b:e7:
2b:84:dd:fa:de:ff:ce:1f:dc:4b:05:8d:59:1d:9f:db:8a:22:
b0:db:41:13
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUGFL0vZSMV1Wv12zIKT87eGoITrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4
NUM4MDk5OTAeFw0yNTEyMTMxMDQ1MjZaFw0yNTEyMTQxMjAzMjZaMDMxMTAvBgNV
BAMTKDdENzMzMjlFNjczRUU0QzU1NjJDMjAyNjE2QjJDM0REQzRGOUIzREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIywvm2ZAZm45aNfrh+w/PrXm3
D5VltxZZDTHyGptFC7fLkMLArXgEFwjlpo1WT+SMV/+IlPpr7O5UCEsCQ3bEmRnR
egT+tQFaymralKBMV+GdVsOy3hFdEu7BhCDcwl/bXb0kZ/SAZdhw13GDwmA5xF1R
dXS2GddU7pJ1HM4SM+jv0GDwH95nxAv5Wc0O4oza9bGDWQyjIWV6AkDS91JjLPak
hMCw9cMTYVO60v56zOE0Zb3Z4K6FoLkiIWEcK8HsAWnm93lPcpcgJ9LmUccWf8Bi
MYIZOO/tbcqRFciTQnLN8N7vD3Vd9EDZOdUlYETTb8QK08dVX8VIt8s793fdAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUfXMynmc+5MVWLCAmFrLD3cT5s94wHwYDVR0j
BBgwFoAUR0LnZ3LxGKk11p/UD2mFgIXICZkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzYwYTA5MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAv
NDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy80NzQyRTc2NzcyRjExOEE5MzVENjlGRDQwRjY5ODU4
MDg1QzgwOTk5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzYwYTA5
MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAvNDc0MkU3Njc3MkYxMThBOTM1
RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAItzB5YScl+7czrmkr6n
+BIfkcY6SIBOHwJDnWwo7TpSaLlr7uzukproZ22sst5l1RX1F3E9/cbIUf6fCJxA
cefYEjO3pdNpTk8mGoGnRcn6OiedPOW5gtonCyWLVrNRYMt/wBMIurnYuHTjLyei
YZHpVriw5ke3lcvlOc9fH/xt6cRzOa8ftAwAkl0g/qcxaHrCo/Yen8uqSU2CdU2M
IfcXu2eTFBZHt+uCXsJnYBOPE5vnYx32KRE0Rf1ceAVLmfrCGmLFLe95qsM96RZI
9V981kaVbiiHR6kFpATPgqW+PyUwgdG0Z0yL5yuE3fre/84f3EsFjVkdn9uKIrDb
QRM=
-----END CERTIFICATE-----
Generated at Sat Dec 13 18:09:13 2025 by rpki-client