This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: pq4jYJhH9+PfZRnKbR0UnC0q8AH5yW2hjrBNbVqni00= Subject key identifier: A8:09:51:98:A4:44:74:32:94:16:C7:81:A2:F9:C8:E6:73:C6:41:43 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 6A7EA0D72F3AA893891B8A7B0F2DDB9CEF051C1E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 0172 Signing time: Sat 13 Dec 2025 03:29:53 +0000 Manifest this update: Sat 13 Dec 2025 03:24:53 +0000 Manifest next update: Sun 14 Dec 2025 03:50:53 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: aHlTD53LkTnk7DD/U/1ZTU3PGegEXhNzMObK2XK8gn8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 03:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7e:a0:d7:2f:3a:a8:93:89:1b:8a:7b:0f:2d:db:9c:ef:05:1c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Dec 13 03:24:53 2025 GMT Not After : Dec 14 03:50:53 2025 GMT Subject: CN=A8095198A44474329416C781A2F9C8E673C64143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:4d:fd:fe:a9:0a:72:8b:57:aa:bf:3c:9e: d0:06:10:4a:6e:6d:f6:1f:c7:13:32:bf:77:70:85: 4a:62:e1:6c:39:d8:9f:15:93:84:50:4e:b1:f7:8a: 2c:4d:a8:dc:f2:b9:f2:e9:91:66:5b:6f:b0:7b:7d: df:20:7a:8b:8d:76:63:f3:52:23:6c:d3:6e:08:08: cf:a7:59:e6:6b:d2:c5:4c:2d:88:e4:bf:67:f7:98: b8:7a:34:14:4d:b5:1e:e3:56:75:15:05:1e:c6:e6: c3:eb:6e:e7:57:e7:57:17:e6:45:20:6b:c9:3e:f9: 97:45:f5:3f:c5:12:67:c5:0e:6a:51:0a:5d:a8:91: 09:3a:9f:41:df:6d:1f:fe:71:d5:7d:c4:3d:cc:01: a2:60:e2:da:3e:3d:73:80:fd:21:4e:f5:40:57:36: 50:1b:7b:08:a7:d1:52:64:c1:ea:7e:ee:71:81:e2: e5:f6:1b:c0:27:48:c2:bd:bc:82:f1:5b:2e:62:78: 5c:c6:6d:95:7d:9c:bf:6d:d9:28:b5:71:ef:71:b8: 6c:6b:58:44:65:1e:2a:38:0a:ca:93:b1:ce:1b:90: 6b:33:83:5a:e7:43:fb:a7:cf:44:69:85:f9:83:4e: db:c1:02:ec:64:6e:76:78:a9:6b:23:77:f4:af:ad: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:09:51:98:A4:44:74:32:94:16:C7:81:A2:F9:C8:E6:73:C6:41:43 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3b:0b:79:1d:17:08:01:fe:96:de:5b:c4:07:b0:41:b8:f7: 07:63:f0:d1:e9:34:d2:0d:a3:a4:1b:0c:b7:79:32:7e:e7:d9: 52:de:ef:2f:a1:2e:53:bc:43:ad:2d:c9:3e:69:20:e8:85:0b: 47:c2:67:15:e5:e1:ff:66:ec:3d:ec:52:1c:fb:fb:3e:3f:bd: cf:49:37:38:9b:25:cc:4f:ff:06:16:d9:5b:14:fe:1f:f6:45: 6a:c3:b0:74:ba:d1:7b:0b:c9:58:09:e7:ab:e7:79:5d:fe:fb: 44:bc:3d:b3:44:98:c0:1a:69:3e:6b:df:4d:72:58:31:18:15: a7:16:53:84:e0:5c:ce:65:eb:07:c1:8d:25:a5:bf:a2:1e:32: 65:15:e2:48:9c:93:94:80:ba:c3:4a:7b:9d:67:7a:fe:33:6a: 69:fb:88:dd:98:c6:b9:01:62:b0:ed:e0:ea:02:67:59:19:63: 56:f9:cd:a5:b5:0e:ae:fe:96:eb:d7:96:f5:6a:1b:e3:dc:aa: f3:c9:dc:f9:6d:43:6e:b8:0b:38:10:a2:d2:0c:14:fa:5a:3d: 83:07:a6:dc:f8:27:3d:71:dc:d2:fd:a4:06:7a:84:7c:1d:37: e9:e7:da:aa:e4:af:4a:2d:ee:88:b1:38:c7:c5:3c:df:92:1f: ca:d0:26:b5 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUan6g1y86qJOJG4p7Dy3bnO8FHB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNTEyMTMwMzI0NTNaFw0yNTEyMTQwMzUwNTNaMDMxMTAvBgNV BAMTKEE4MDk1MTk4QTQ0NDc0MzI5NDE2Qzc4MUEyRjlDOEU2NzNDNjQxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0n039/qkKcotXqr88ntAGEEpu bfYfxxMyv3dwhUpi4Ww52J8Vk4RQTrH3iixNqNzyufLpkWZbb7B7fd8geouNdmPz UiNs024ICM+nWeZr0sVMLYjkv2f3mLh6NBRNtR7jVnUVBR7G5sPrbudX51cX5kUg a8k++ZdF9T/FEmfFDmpRCl2okQk6n0HfbR/+cdV9xD3MAaJg4to+PXOA/SFO9UBX NlAbewin0VJkwep+7nGB4uX2G8AnSMK9vILxWy5ieFzGbZV9nL9t2Si1ce9xuGxr WERlHio4CsqTsc4bkGszg1rnQ/unz0RphfmDTtvBAuxkbnZ4qWsjd/Svrb9nAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUqAlRmKREdDKUFseBovnI5nPGQUMwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFI7C3kdFwgB/pbeW8QH sEG49wdj8NHpNNINo6QbDLd5Mn7n2VLe7y+hLlO8Q60tyT5pIOiFC0fCZxXl4f9m 7D3sUhz7+z4/vc9JNzibJcxP/wYW2VsU/h/2RWrDsHS60XsLyVgJ56vneV3++0S8 PbNEmMAaaT5r301yWDEYFacWU4TgXM5l6wfBjSWlv6IeMmUV4kick5SAusNKe51n ev4zamn7iN2YxrkBYrDt4OoCZ1kZY1b5zaW1Dq7+luvXlvVqG+PcqvPJ3PltQ264 CzgQotIMFPpaPYMHptz4Jz1x3NL9pAZ6hHwdN+nn2qrkr0ot7oixOMfFPN+SH8rQ JrU= -----END CERTIFICATE-----Generated at Sat Dec 13 18:07:50 2025 by rpki-client