This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json)
Hash identifier: l3DgvHKG7Z+eegczcpAnv8w9dKhugxtUsf/21FZg7RI=
Subject key identifier: EB:55:05:C6:4B:57:62:37:87:8D:A7:0C:E7:EA:A1:24:D0:E6:80:8C
Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3
Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3
Certificate serial: 42DAA29A558A09A54C419F95D0632A4D0174BFA3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
Manifest number: 029B
Signing time: Sat 13 Dec 2025 00:14:39 +0000
Manifest this update: Sat 13 Dec 2025 00:09:39 +0000
Manifest next update: Sun 14 Dec 2025 03:23:39 +0000
Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: skoRuVC/NvsPdBIOdy9esD0JjwQSXAxxLAsquzZEGGU=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 03:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:da:a2:9a:55:8a:09:a5:4c:41:9f:95:d0:63:2a:4d:01:74:bf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3
Validity
Not Before: Dec 13 00:09:39 2025 GMT
Not After : Dec 14 03:23:39 2025 GMT
Subject: CN=EB5505C64B576237878DA70CE7EAA124D0E6808C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:2d:6a:5a:f5:a8:a1:a7:33:9f:3e:94:4f:
08:d4:45:f1:07:31:9b:51:18:69:9f:43:68:ec:99:
ca:d2:52:60:34:d9:29:f8:5e:16:e8:a7:7f:7f:03:
15:11:a3:9f:99:31:d3:2d:95:c5:b5:5c:b1:eb:19:
3f:00:00:50:e4:ce:4f:c2:47:ff:cd:f5:94:f5:2d:
63:47:68:7c:8b:0e:0a:fb:35:87:41:fb:c2:23:aa:
77:63:20:cf:df:fa:a3:bd:ae:2c:cc:9f:3d:8e:c9:
9f:bd:85:c8:ec:bb:84:97:8b:54:9c:72:3b:4f:4f:
d2:bd:0e:d5:9c:9f:da:fb:49:38:ab:ea:40:0d:40:
cc:a2:ca:62:eb:a1:36:7b:be:4d:a9:e8:fc:5c:7d:
19:20:33:49:38:10:bc:10:6b:b8:4d:4f:45:2c:a6:
3d:b7:cc:98:55:ea:7f:49:0c:4e:44:86:95:b8:5d:
c2:ea:b2:63:44:9f:c5:b9:87:fe:9a:48:ba:03:a2:
29:bf:32:1e:ec:ba:ed:f4:23:43:17:f7:b7:d7:6d:
f3:fd:4a:f6:d1:bf:77:9f:e1:2e:22:f7:5f:fb:e5:
15:95:09:a4:9f:b4:d3:bd:9a:e8:7b:08:42:2c:1b:
a0:e8:9c:cc:1d:f7:bd:df:79:59:cf:59:09:47:ed:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:05:C6:4B:57:62:37:87:8D:A7:0C:E7:EA:A1:24:D0:E6:80:8C
X509v3 Authority Key Identifier:
keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:31:85:42:18:c0:ac:76:fa:ba:7d:fa:a4:02:75:f8:64:e4:
13:18:c7:5b:71:2b:10:dd:b3:4a:66:85:38:31:58:69:ea:ec:
54:e3:fd:a2:b0:84:e3:86:4b:c1:cc:43:6c:9e:fc:43:10:89:
ad:aa:4d:0d:eb:31:7c:c5:c6:ad:2c:b0:b9:19:03:57:77:6e:
56:7d:9d:ac:a4:55:70:b2:04:d2:3d:aa:6f:75:73:c5:ce:e4:
df:0f:ad:6b:f6:72:5d:9d:70:ba:95:60:ae:43:0a:c1:f9:bb:
89:9a:96:fe:a3:72:7c:15:3a:ee:5b:d9:d6:dc:89:a7:7e:9f:
f3:9a:8c:24:90:9e:bf:07:ce:49:e8:5f:18:b9:93:3f:23:ff:
68:9a:b5:87:a3:ad:43:9e:4e:6a:61:c1:e5:a9:8e:af:53:06:
59:49:c0:88:06:23:e3:38:bc:5d:7f:cd:d6:c6:9c:ba:8d:35:
be:7d:84:e8:1a:89:ed:b1:91:2b:17:94:74:c1:b8:24:bf:a7:
e8:f2:12:de:cd:f9:4b:f5:cf:7d:7a:93:1b:16:e0:68:32:90:
4f:9d:47:97:4b:7b:83:3b:5e:0b:6c:3d:17:7e:ca:43:95:2f:
ba:e5:96:cc:d2:9f:03:32:b5:d0:d6:a9:10:ac:e5:4b:b8:e8:
bd:c5:15:ab
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUQtqimlWKCaVMQZ+V0GMqTQF0v6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx
N0E1RkFDMzAeFw0yNTEyMTMwMDA5MzlaFw0yNTEyMTQwMzIzMzlaMDMxMTAvBgNV
BAMTKEVCNTUwNUM2NEI1NzYyMzc4NzhEQTcwQ0U3RUFBMTI0RDBFNjgwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGS1qWvWooacznz6UTwjURfEH
MZtRGGmfQ2jsmcrSUmA02Sn4Xhbop39/AxURo5+ZMdMtlcW1XLHrGT8AAFDkzk/C
R//N9ZT1LWNHaHyLDgr7NYdB+8IjqndjIM/f+qO9rizMnz2OyZ+9hcjsu4SXi1Sc
cjtPT9K9DtWcn9r7STir6kANQMyiymLroTZ7vk2p6PxcfRkgM0k4ELwQa7hNT0Us
pj23zJhV6n9JDE5EhpW4XcLqsmNEn8W5h/6aSLoDoim/Mh7suu30I0MX97fXbfP9
SvbRv3ef4S4i91/75RWVCaSftNO9muh7CEIsG6DonMwd973feVnPWQlH7f1pAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQU61UFxktXYjeHjacM5+qhJNDmgIwwHwYDVR0j
BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv
RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz
NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm
MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE
QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAN8xhUIYwKx2+rp9+qQC
dfhk5BMYx1txKxDds0pmhTgxWGnq7FTj/aKwhOOGS8HMQ2ye/EMQia2qTQ3rMXzF
xq0ssLkZA1d3blZ9naykVXCyBNI9qm91c8XO5N8PrWv2cl2dcLqVYK5DCsH5u4ma
lv6jcnwVOu5b2dbciad+n/OajCSQnr8HzknoXxi5kz8j/2iatYejrUOeTmphweWp
jq9TBllJwIgGI+M4vF1/zdbGnLqNNb59hOgaie2xkSsXlHTBuCS/p+jyEt7N+Uv1
z316kxsW4GgykE+dR5dLe4M7XgtsPRd+ykOVL7rllszSnwMytdDWqRCs5Uu46L3F
Fas=
-----END CERTIFICATE-----
Generated at Sat Dec 13 18:09:27 2025 by rpki-client