This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft File: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft (raw, json) Hash identifier: vZ3J3i9Z7vjDEe+2OLHHHpEBnP0exZWfOv3fqBT8Mjw= Subject key identifier: 90:DA:C6:56:D8:DA:7D:D0:F4:4B:12:A9:05:88:9C:D6:8D:1A:EF:CC Authority key identifier: F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20 Certificate issuer: /CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320 Certificate serial: 4319FC27A66D58D16C5055EAC170233B72D48B78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft Manifest number: 017D Signing time: Sat 13 Dec 2025 01:24:46 +0000 Manifest this update: Sat 13 Dec 2025 01:19:46 +0000 Manifest next update: Sun 14 Dec 2025 04:23:46 +0000 Files and hashes: 1: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl (hash: ZJidossrceTHe+RDPUxUX7VPnUqhQMEebHP7pC1WPzg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 04:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:19:fc:27:a6:6d:58:d1:6c:50:55:ea:c1:70:23:3b:72:d4:8b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320 Validity Not Before: Dec 13 01:19:46 2025 GMT Not After : Dec 14 04:23:46 2025 GMT Subject: CN=90DAC656D8DA7DD0F44B12A905889CD68D1AEFCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:04:f0:10:f3:2e:56:8f:67:c3:95:24:c7: 47:80:43:01:b7:b6:65:28:b9:ea:57:dc:43:78:fa: ba:93:25:a0:a9:9b:da:e2:11:6d:06:62:05:36:ff: 32:c8:e6:ab:ba:46:51:02:70:5e:52:85:40:96:33: cd:5d:25:0b:02:16:4c:9b:a7:70:13:a0:a1:e2:28: ff:f7:a1:e7:65:a4:fd:1b:2b:2b:61:02:4c:66:c1: 40:4b:1e:95:d7:d9:90:35:92:76:e1:77:61:51:44: 20:34:d8:b0:97:e0:3c:55:00:a7:c0:c4:56:16:68: bc:a3:30:04:c0:c8:c3:ac:e6:a5:9c:80:1d:a2:19: e2:fb:2b:cb:35:8b:e4:f6:0c:af:d1:97:0d:c1:23: d0:8e:1d:cd:bf:81:81:2d:19:bf:d0:ac:84:ec:4e: 39:5d:fd:ad:c3:18:72:d3:91:e2:7e:84:e7:14:9f: 7b:44:09:0e:16:2d:a3:39:99:4c:9e:65:07:7a:53: 81:38:49:6b:ec:a3:71:26:32:2a:4d:3e:22:e7:d7: 20:df:2d:7f:ea:ed:22:6f:1f:89:fe:2e:9c:ad:84: c9:a2:e0:ed:37:ff:d4:0a:4c:a6:07:82:c9:6a:ea: fa:12:40:4c:37:e1:e5:10:9e:a5:43:0d:6e:76:a1: a1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DA:C6:56:D8:DA:7D:D0:F4:4B:12:A9:05:88:9C:D6:8D:1A:EF:CC X509v3 Authority Key Identifier: keyid:F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:83:bd:1d:88:91:ea:82:2d:fa:0d:df:7e:96:3f:94:73:2d: 78:09:a0:d8:c0:ab:1f:4c:c6:c3:d4:bb:5f:9b:6d:35:c6:c5: 84:6a:9d:82:04:80:ac:be:3d:8e:eb:e3:70:73:50:29:9d:09: 07:96:4b:99:bb:a7:af:d0:f3:b4:57:52:e2:f4:41:81:b0:31: 9a:6f:64:84:fc:9c:f6:aa:ca:16:12:a5:8d:37:d5:ec:04:06: 64:a6:5b:bf:b9:ff:ba:7d:29:af:4f:51:93:50:fe:4d:d7:08: 41:38:3c:22:b3:38:12:bd:6c:c2:bd:d3:f7:b0:33:02:3f:cc: 91:4e:7d:23:86:8d:46:01:d0:4c:cf:3b:7d:9c:6c:f1:12:85: 24:2d:c7:39:53:9c:ff:02:be:0a:52:9c:b1:fd:87:35:ab:f8: cd:50:05:4c:f3:15:c1:4b:a5:90:ab:28:36:fc:30:a1:35:94: 95:f2:5c:41:2a:f8:8a:84:65:0b:ef:a4:fe:23:93:2d:1c:0e: 64:06:a2:c7:66:ec:ff:e1:d6:6b:f7:ea:c8:d9:f7:ff:0a:fb: 40:c9:16:7c:d3:9a:f1:53:c1:24:93:a8:5e:88:05:70:df:ec: c7:bd:31:67:5c:98:bb:31:5f:7f:fd:77:70:67:84:49:38:9a: 3f:95:33:da -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQxn8J6ZtWNFsUFXqwXAjO3LUi3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENTQ2MzFCNzA5MUUxRjRCOEIwMkU3MEZGNzZGMDcz RjhCMjMyMDAeFw0yNTEyMTMwMTE5NDZaFw0yNTEyMTQwNDIzNDZaMDMxMTAvBgNV BAMTKDkwREFDNjU2RDhEQTdERDBGNDRCMTJBOTA1ODg5Q0Q2OEQxQUVGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjATwEPMuVo9nw5Ukx0eAQwG3 tmUouepX3EN4+rqTJaCpm9riEW0GYgU2/zLI5qu6RlECcF5ShUCWM81dJQsCFkyb p3AToKHiKP/3oedlpP0bKythAkxmwUBLHpXX2ZA1knbhd2FRRCA02LCX4DxVAKfA xFYWaLyjMATAyMOs5qWcgB2iGeL7K8s1i+T2DK/Rlw3BI9COHc2/gYEtGb/QrITs Tjld/a3DGHLTkeJ+hOcUn3tECQ4WLaM5mUyeZQd6U4E4SWvso3EmMipNPiLn1yDf LX/q7SJvH4n+LpythMmi4O03/9QKTKYHgslq6voSQEw34eUQnqVDDW52oaFnAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUkNrGVtjafdD0SxKpBYic1o0a78wwHwYDVR0j BBgwFoAU9dVGMbcJHh9LiwLnD/dvBz+LIyAwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzZmNTE2MzIwNTA5YjRkMmQ5M2VmMmQ1NjEwZjVmMjMwLzAv RjVENTQ2MzFCNzA5MUUxRjRCOEIwMkU3MEZGNzZGMDczRjhCMjMyMC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNUQ1NDYzMUI3MDkxRTFGNEI4QjAyRTcwRkY3NkYw NzNGOEIyMzIwLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzZmNTE2 MzIwNTA5YjRkMmQ5M2VmMmQ1NjEwZjVmMjMwLzAvRjVENTQ2MzFCNzA5MUUxRjRC OEIwMkU3MEZGNzZGMDczRjhCMjMyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKaDvR2IkeqCLfoN336W P5RzLXgJoNjAqx9MxsPUu1+bbTXGxYRqnYIEgKy+PY7r43BzUCmdCQeWS5m7p6/Q 87RXUuL0QYGwMZpvZIT8nPaqyhYSpY031ewEBmSmW7+5/7p9Ka9PUZNQ/k3XCEE4 PCKzOBK9bMK90/ewMwI/zJFOfSOGjUYB0EzPO32cbPEShSQtxzlTnP8CvgpSnLH9 hzWr+M1QBUzzFcFLpZCrKDb8MKE1lJXyXEEq+IqEZQvvpP4jky0cDmQGosdm7P/h 1mv36sjZ9/8K+0DJFnzTmvFTwSSTqF6IBXDf7Me9MWdcmLsxX3/9d3BnhEk4mj+V M9o= -----END CERTIFICATE-----Generated at Sat Dec 13 18:09:45 2025 by rpki-client