This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: zTn+MLt42FREF0tA8T4WbZXT91UyYFwnJNweVLRgUAM= Subject key identifier: E3:C0:2A:07:2A:6D:AD:F0:58:64:18:22:19:43:2D:78:7E:F4:97:32 Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 265BCD52D4C020B692C46BF5B44B08C9B7377B44 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 029C Signing time: Fri 12 Dec 2025 05:42:17 +0000 Manifest this update: Fri 12 Dec 2025 05:37:17 +0000 Manifest next update: Sat 13 Dec 2025 09:37:17 +0000 Files and hashes: 1: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=) 2: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: Ws7GjWVQlVbsP+4m1UhJYOzVMdNQB6KqefhYWs1b/No=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 09:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5b:cd:52:d4:c0:20:b6:92:c4:6b:f5:b4:4b:08:c9:b7:37:7b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Dec 12 05:37:17 2025 GMT Not After : Dec 13 09:37:17 2025 GMT Subject: CN=E3C02A072A6DADF05864182219432D787EF49732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:76:9d:3a:d6:5b:34:47:88:29:dd:2e:6b:83: 6b:82:2e:ef:90:1d:65:6d:b7:c8:ba:5b:9b:93:7f: 40:7b:72:1b:90:55:ff:04:75:90:f4:21:71:f5:a4: a7:a1:95:34:fa:54:d5:f4:47:ee:92:f1:82:a6:df: dd:47:4d:66:a8:47:26:7e:f3:31:6e:27:90:33:2c: 27:9b:cb:be:25:19:94:71:e1:e4:8a:30:9e:ed:82: b0:b6:41:d4:d2:97:6c:d6:f7:aa:22:c2:9f:8d:81: 9b:f2:00:76:3b:b6:e3:ff:9b:c2:a6:f8:a9:31:64: 35:c3:69:1c:f4:59:84:7c:84:01:5f:48:de:2c:ee: 8a:e6:a6:54:62:e7:83:9c:7e:09:e3:9c:f8:83:15: f6:66:7d:86:09:17:02:30:c7:4a:f2:a6:a9:20:77: c3:02:ed:fc:e0:54:10:f0:ab:9d:d8:e1:09:58:ea: f4:79:d8:c4:fe:3e:85:10:a9:43:96:28:97:c2:24: ef:4f:d3:2b:5f:da:d5:db:f9:3c:23:c1:2e:9f:03: 17:c4:9b:b5:ff:1f:50:91:43:4c:77:1a:a3:c3:f5: c4:f6:5d:ed:b4:99:7c:ce:ec:2d:d4:7c:ef:41:1e: af:37:3b:2d:df:5f:e7:0f:4c:03:4b:df:61:b3:ce: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C0:2A:07:2A:6D:AD:F0:58:64:18:22:19:43:2D:78:7E:F4:97:32 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a8:d5:70:9f:7e:24:cc:47:3e:c1:ee:c8:0d:cf:39:be:af: 72:2d:5e:43:ab:03:61:32:94:ed:76:ae:43:cb:95:bc:d4:b0: c2:f5:d9:49:a4:8c:8e:3f:c3:e5:c5:08:c3:13:26:2a:60:a5: 84:da:82:b3:2e:33:88:35:7f:b9:59:20:01:7f:f7:38:e6:01: 6f:a6:ac:d2:8b:07:1e:ee:c3:77:2c:b2:f8:0f:ad:e4:65:32: 17:6d:74:28:44:7b:92:fc:5b:5f:73:bc:82:b2:36:46:aa:8f: 15:eb:25:ff:e9:a3:d5:a0:8f:f2:eb:57:c3:61:3f:22:ed:76: d1:5b:10:76:e8:f8:4a:9d:ce:7c:c5:92:c8:d0:d4:36:d9:74: 96:3e:84:87:f2:24:fe:8c:b6:dd:ce:b7:78:ac:ea:98:69:e6: 6b:ad:91:3c:86:fe:60:db:a4:66:0e:29:31:8d:46:84:9f:b1: d3:be:96:fb:5d:31:15:f6:45:73:35:7e:0f:b0:19:e6:85:77: da:b8:81:5c:93:89:13:8e:45:ee:56:6e:f1:86:fc:93:db:f4: fb:ae:68:f4:26:84:38:95:62:6c:75:bf:f9:7a:ee:dc:0b:47: d9:6b:02:7a:29:78:99:33:c1:7a:32:22:38:38:0e:cd:7c:6a: 1d:f4:66:1c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJlvNUtTAILaSxGv1tEsIybc3e0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNTEyMTIwNTM3MTdaFw0yNTEyMTMwOTM3MTdaMDMxMTAvBgNV BAMTKEUzQzAyQTA3MkE2REFERjA1ODY0MTgyMjE5NDMyRDc4N0VGNDk3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDddp061ls0R4gp3S5rg2uCLu+Q HWVtt8i6W5uTf0B7chuQVf8EdZD0IXH1pKehlTT6VNX0R+6S8YKm391HTWaoRyZ+ 8zFuJ5AzLCeby74lGZRx4eSKMJ7tgrC2QdTSl2zW96oiwp+NgZvyAHY7tuP/m8Km +KkxZDXDaRz0WYR8hAFfSN4s7ormplRi54OcfgnjnPiDFfZmfYYJFwIwx0rypqkg d8MC7fzgVBDwq53Y4QlY6vR52MT+PoUQqUOWKJfCJO9P0ytf2tXb+TwjwS6fAxfE m7X/H1CRQ0x3GqPD9cT2Xe20mXzO7C3UfO9BHq83Oy3fX+cPTANL32GzzmnbAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU48AqByptrfBYZBgiGUMteH70lzIwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHio1XCffiTMRz7B7sgN zzm+r3ItXkOrA2EylO12rkPLlbzUsML12UmkjI4/w+XFCMMTJipgpYTagrMuM4g1 f7lZIAF/9zjmAW+mrNKLBx7uw3cssvgPreRlMhdtdChEe5L8W19zvIKyNkaqjxXr Jf/po9Wgj/LrV8NhPyLtdtFbEHbo+EqdznzFksjQ1DbZdJY+hIfyJP6Mtt3Ot3is 6php5mutkTyG/mDbpGYOKTGNRoSfsdO+lvtdMRX2RXM1fg+wGeaFd9q4gVyTiROO Re5WbvGG/JPb9PuuaPQmhDiVYmx1v/l67twLR9lrAnopeJkzwXoyIjg4Ds18ah30 Zhw= -----END CERTIFICATE-----Generated at Fri Dec 12 22:49:05 2025 by rpki-client