This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: CekmVHbkcphDFE0vooEtVOnjuu7zPOkByl6Ujp6MGr0= Subject key identifier: 38:2A:75:94:1B:6D:61:07:05:D4:87:01:F7:2E:66:BF:3B:94:2F:0B Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 2C5130913175CCD1AA0BE9545BA4F127FF608F91 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 01AD Signing time: Tue 27 Jan 2026 04:30:21 +0000 Manifest this update: Tue 27 Jan 2026 04:25:21 +0000 Manifest next update: Wed 28 Jan 2026 06:12:21 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: fvLJGfaxURhR12uNIAL4s8xIifnumApYckSdIqFdCPs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:51:30:91:31:75:cc:d1:aa:0b:e9:54:5b:a4:f1:27:ff:60:8f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Jan 27 04:25:21 2026 GMT Not After : Jan 28 06:12:21 2026 GMT Subject: CN=382A75941B6D610705D48701F72E66BF3B942F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:21:70:08:62:18:2c:7c:19:1a:9c:eb:de: 04:1b:4b:10:9d:fc:72:93:c4:d8:f8:7f:37:43:81: 49:a3:63:43:53:ee:3d:f3:83:bb:4a:a0:73:94:aa: c8:1b:a3:5b:6f:08:ff:ac:dc:2d:ff:27:f4:90:69: 01:48:c8:fd:dd:c2:38:df:fa:a9:95:2b:b7:69:7f: f3:0a:ae:69:d2:4e:23:fb:db:e0:ab:ae:eb:de:fb: e0:73:0c:94:36:19:93:f7:15:5b:cc:87:5a:27:80: 1f:bb:5c:f8:dc:cd:f7:71:11:7d:d3:2c:a5:f7:27: 6c:fd:ff:66:5c:54:28:a1:2a:89:7a:0c:3b:c3:9d: 04:f5:55:20:dd:cd:bd:cc:8c:93:47:83:44:d6:5c: d2:5e:f0:75:04:e1:69:d0:84:66:9c:05:94:4f:60: 00:34:9d:44:f4:8d:a3:bf:69:09:dc:7a:37:a9:07: b9:fc:4a:86:0a:53:fc:88:1b:af:6c:0a:a3:f1:a0: cc:10:07:71:e5:7a:8c:f2:d9:35:b0:bf:48:93:be: 2e:81:7d:5b:67:73:3d:46:88:42:63:4b:a8:5c:6f: 71:5e:c1:a4:02:58:c4:e6:b0:58:ff:cd:51:34:a7: fd:98:0b:d6:ec:ee:6a:fb:2e:4e:c5:10:53:11:59: 06:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2A:75:94:1B:6D:61:07:05:D4:87:01:F7:2E:66:BF:3B:94:2F:0B X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:03:a5:2b:50:27:b3:35:50:06:87:40:1e:fc:e6:37:42:2a: 96:24:25:4a:2b:80:52:a2:81:c3:9c:b9:15:02:7a:76:07:ec: 56:50:47:cd:24:3f:cb:97:5c:de:80:66:19:a0:78:b9:1c:09: a7:a5:3f:73:5d:b6:ef:3f:ed:e0:b2:ab:30:00:ca:52:ed:cf: 69:ca:32:50:22:3f:1a:ab:cb:a2:f9:02:97:8d:83:cf:db:41: aa:73:eb:8a:55:1c:f4:74:39:8c:76:c1:c5:af:0d:d1:82:30: 4e:8f:1f:96:6a:5a:87:91:b1:aa:94:13:2b:d7:e0:26:59:69: 75:c2:0a:ef:40:2b:ce:65:86:60:83:13:5d:e4:5c:77:76:b9: 44:75:7e:5a:d1:54:e4:de:30:f1:0f:0d:51:fb:a2:91:84:86: ff:94:ed:96:b7:c5:ce:75:c2:07:be:a7:84:f6:d1:d8:69:45: 55:74:87:78:68:ca:b5:0d:05:af:be:0a:e4:42:33:78:97:be: 1c:0a:a1:8c:73:d4:98:cd:e4:81:b7:97:ae:3f:89:7f:d0:fc: 26:2d:29:e4:22:50:04:d7:94:ca:57:f4:01:22:e1:a6:88:f4: 68:32:50:f6:9b:dc:b0:1c:46:d9:32:89:f3:b3:db:6d:12:4f: 69:d4:dd:d9 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULFEwkTF1zNGqC+lUW6TxJ/9gj5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNjAxMjcwNDI1MjFaFw0yNjAxMjgwNjEyMjFaMDMxMTAvBgNV BAMTKDM4MkE3NTk0MUI2RDYxMDcwNUQ0ODcwMUY3MkU2NkJGM0I5NDJGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6SFwCGIYLHwZGpzr3gQbSxCd /HKTxNj4fzdDgUmjY0NT7j3zg7tKoHOUqsgbo1tvCP+s3C3/J/SQaQFIyP3dwjjf +qmVK7dpf/MKrmnSTiP72+Crruve++BzDJQ2GZP3FVvMh1ongB+7XPjczfdxEX3T LKX3J2z9/2ZcVCihKol6DDvDnQT1VSDdzb3MjJNHg0TWXNJe8HUE4WnQhGacBZRP YAA0nUT0jaO/aQncejepB7n8SoYKU/yIG69sCqPxoMwQB3Hleozy2TWwv0iTvi6B fVtncz1GiEJjS6hcb3FewaQCWMTmsFj/zVE0p/2YC9bs7mr7Lk7FEFMRWQZzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUOCp1lBttYQcF1IcB9y5mvzuULwswHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIQDpStQJ7M1UAaHQB78 5jdCKpYkJUorgFKigcOcuRUCenYH7FZQR80kP8uXXN6AZhmgeLkcCaelP3Ndtu8/ 7eCyqzAAylLtz2nKMlAiPxqry6L5ApeNg8/bQapz64pVHPR0OYx2wcWvDdGCME6P H5ZqWoeRsaqUEyvX4CZZaXXCCu9AK85lhmCDE13kXHd2uUR1flrRVOTeMPEPDVH7 opGEhv+U7Za3xc51wge+p4T20dhpRVV0h3hoyrUNBa++CuRCM3iXvhwKoYxz1JjN 5IG3l64/iX/Q/CYtKeQiUATXlMpX9AEi4aaI9GgyUPab3LAcRtkyifOz220ST2nU 3dk= -----END CERTIFICATE-----Generated at Wed Jan 28 00:06:44 2026 by rpki-client