This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: zPxiSJaItMYuMkQh0qnoVjJZ9+NSmmfvdaw5O2OfxNw= Subject key identifier: D6:5D:E2:8C:9A:A0:51:3D:7E:70:55:1A:E5:AB:E8:77:9E:FB:BC:C8 Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 1104F8DB76EB40E8DD2081229AF11C967FAA1919 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 02A4 Signing time: Thu 18 Dec 2025 12:14:56 +0000 Manifest this update: Thu 18 Dec 2025 12:09:55 +0000 Manifest next update: Fri 19 Dec 2025 13:02:55 +0000 Files and hashes: 1: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: H2k9jKQ/Yc/t724QtJzu1Tv86Tr9jv7qjmf1V0up/jA=) 2: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:04:f8:db:76:eb:40:e8:dd:20:81:22:9a:f1:1c:96:7f:aa:19:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Dec 18 12:09:55 2025 GMT Not After : Dec 19 13:02:55 2025 GMT Subject: CN=D65DE28C9AA0513D7E70551AE5ABE8779EFBBCC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:85:81:ed:a3:af:fa:fd:82:7f:9f:31:93:8e: 4b:a1:02:f0:a0:44:f2:9e:ec:37:14:f9:9e:8f:04: dd:9c:00:5c:a0:26:7a:4b:49:c7:77:10:43:b7:71: 2f:e5:23:0b:c5:cc:70:94:ff:c1:d8:29:0c:0b:41: 99:ba:33:28:b6:8a:79:3a:e6:8c:f8:6b:79:45:2e: 34:7a:27:1f:28:97:bf:5b:7b:b9:1f:83:13:cb:d7: 59:aa:56:ae:1c:d9:2d:83:ca:66:43:55:88:c8:8d: 46:e5:d9:07:7b:ed:82:59:5f:e8:4f:e5:65:6f:4e: fe:77:6a:73:16:7a:84:2a:e1:13:34:bb:1a:3e:a3: ba:3f:7d:83:ae:15:4f:9c:70:18:a2:68:05:5d:27: 78:06:1c:09:2e:93:47:e1:19:ab:97:68:dc:57:03: db:9c:a5:c6:3f:25:07:42:d9:e9:6c:b8:ff:31:cf: d1:ed:6b:21:51:11:25:c4:c0:9b:bf:85:f3:5e:fd: aa:54:6a:26:30:a2:3f:18:a3:64:ff:c9:fe:10:3d: 60:e6:f5:e7:46:ac:cc:b4:fa:22:ad:ae:08:c2:13: da:be:84:e5:9d:fd:13:5c:14:07:8e:51:af:80:94: c1:6a:fe:9c:68:12:bd:d7:a9:bb:88:6d:88:b5:79: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5D:E2:8C:9A:A0:51:3D:7E:70:55:1A:E5:AB:E8:77:9E:FB:BC:C8 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:98:ea:6e:68:56:c0:f8:44:70:a5:b0:aa:8e:f8:0d:cd:48: a5:cb:25:17:eb:f0:66:55:8a:39:f2:3b:28:97:e3:79:44:7b: 80:9a:74:80:fc:83:84:0c:cb:ca:90:c0:10:a5:57:85:7e:7a: 6c:ed:6f:ba:d1:82:84:a8:40:b7:5d:6c:8a:8f:fe:da:55:1b: 2f:7d:54:69:42:58:a9:fb:17:d6:7f:03:dd:76:4f:52:7a:b1: 95:13:f0:11:8f:9b:9e:49:f0:51:5a:58:bf:ab:05:48:88:10: ea:f0:fd:52:cd:d0:4f:36:4d:7f:9c:b2:0a:d1:e5:d7:aa:06: ed:44:a1:7f:24:e2:bb:19:b7:68:be:8f:e7:6a:60:1f:1a:ff: ef:86:33:02:89:94:21:0d:15:a5:54:9a:21:0f:cd:3c:dc:bd: 15:43:f8:d7:6b:da:ee:74:0f:30:e4:72:62:83:f5:12:b7:2f: 32:04:a5:7d:be:16:fd:8c:70:08:8a:37:cc:66:8c:2b:99:62: 1a:12:12:6d:65:61:1f:20:7b:39:ed:7a:b7:09:e5:ab:76:b1: bd:83:7e:71:d1:43:4f:c8:51:94:74:ca:7b:48:b1:c6:ca:26: 18:a5:1a:ad:2a:7e:d3:3e:3a:94:3e:34:68:d5:27:90:3c:1e: d3:0e:86:cb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUEQT423brQOjdIIEimvEcln+qGRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNTEyMTgxMjA5NTVaFw0yNTEyMTkxMzAyNTVaMDMxMTAvBgNV BAMTKEQ2NURFMjhDOUFBMDUxM0Q3RTcwNTUxQUU1QUJFODc3OUVGQkJDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhYHto6/6/YJ/nzGTjkuhAvCg RPKe7DcU+Z6PBN2cAFygJnpLScd3EEO3cS/lIwvFzHCU/8HYKQwLQZm6Myi2ink6 5oz4a3lFLjR6Jx8ol79be7kfgxPL11mqVq4c2S2DymZDVYjIjUbl2Qd77YJZX+hP 5WVvTv53anMWeoQq4RM0uxo+o7o/fYOuFU+ccBiiaAVdJ3gGHAkuk0fhGauXaNxX A9ucpcY/JQdC2elsuP8xz9HtayFRESXEwJu/hfNe/apUaiYwoj8Yo2T/yf4QPWDm 9edGrMy0+iKtrgjCE9q+hOWd/RNcFAeOUa+AlMFq/pxoEr3XqbuIbYi1eTTLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU1l3ijJqgUT1+cFUa5avod577vMgwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIGY6m5oVsD4RHClsKqO +A3NSKXLJRfr8GZVijnyOyiX43lEe4CadID8g4QMy8qQwBClV4V+emztb7rRgoSo QLddbIqP/tpVGy99VGlCWKn7F9Z/A912T1J6sZUT8BGPm55J8FFaWL+rBUiIEOrw /VLN0E82TX+csgrR5deqBu1EoX8k4rsZt2i+j+dqYB8a/++GMwKJlCENFaVUmiEP zTzcvRVD+Ndr2u50DzDkcmKD9RK3LzIEpX2+Fv2McAiKN8xmjCuZYhoSEm1lYR8g ezntercJ5at2sb2DfnHRQ0/IUZR0yntIscbKJhilGq0qftM+OpQ+NGjVJ5A8HtMO hss= -----END CERTIFICATE-----Generated at Fri Dec 19 01:54:40 2025 by rpki-client