This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
File: C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json)
Hash identifier: W8Fy3Vg2ZHn/B0kzujGVBVEKIHD1RrmB1DGKWqamgVU=
Subject key identifier: 6D:C3:A1:4A:C5:04:66:92:23:12:A2:78:57:93:FD:B7:5F:2E:99:46
Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01
Certificate issuer: /CN=C2724A29EF989A4340933B8130B402DD4627A501
Certificate serial: 2A98354A3C9FA7A0861260D34F1EAD1D7DA3343B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
Manifest number: 029A
Signing time: Fri 12 Dec 2025 16:48:54 +0000
Manifest this update: Fri 12 Dec 2025 16:43:54 +0000
Manifest next update: Sat 13 Dec 2025 17:19:54 +0000
Files and hashes: 1: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: hqgaxXhgaM7AiSsPcNwqghRTi61TSIKXFax/zJU7ecI=)
2: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: zcajJaqbpBFLXheTWwDwRoQ0FSqPwTXkeOKaH7hDHuA=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 13:14:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:98:35:4a:3c:9f:a7:a0:86:12:60:d3:4f:1e:ad:1d:7d:a3:34:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501
Validity
Not Before: Dec 12 16:43:54 2025 GMT
Not After : Dec 13 17:19:54 2025 GMT
Subject: CN=6DC3A14AC50466922312A2785793FDB75F2E9946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:92:7a:23:43:60:79:35:69:a0:ad:39:bf:
05:14:35:6b:6d:27:26:ca:33:10:3e:45:98:6b:1c:
9a:ca:e1:ae:8a:0d:8f:7c:ae:bd:07:9d:f6:c2:89:
ff:27:83:f3:52:70:ca:99:1a:16:86:3a:ce:9d:c8:
02:d7:c9:47:ed:bf:1f:05:8b:8d:60:bc:cf:26:66:
ef:f6:69:c3:ef:1b:5c:86:72:3c:59:57:be:3b:0c:
22:34:86:f7:e1:f6:c4:d8:fb:76:93:37:61:e7:53:
fe:58:de:3f:bf:74:7d:a4:fb:14:91:4f:91:d1:29:
bc:25:84:50:2d:a4:ef:d0:6e:c7:db:6f:8e:ae:09:
43:ac:b2:8a:1f:0f:ab:a7:94:12:20:87:2c:18:e4:
b4:09:81:3b:7a:24:00:95:0a:2e:7a:9d:a5:3d:4d:
7b:b8:50:de:1c:ae:1a:a3:14:cb:80:69:38:02:95:
76:67:e2:72:10:a2:5e:cd:23:d7:a2:23:da:81:95:
9d:b1:fd:d9:08:8e:79:6c:89:25:5a:e6:c3:78:f8:
7b:44:cf:c2:6c:e3:dc:c7:0c:9f:c2:ca:24:3a:92:
9f:9d:0a:70:17:2e:d8:46:2f:8b:7b:28:f2:a8:2e:
c9:4f:a1:c0:b3:0a:9b:d1:7e:25:1e:63:b7:24:8a:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C3:A1:4A:C5:04:66:92:23:12:A2:78:57:93:FD:B7:5F:2E:99:46
X509v3 Authority Key Identifier:
keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8a:47:ac:d1:79:e7:97:f9:23:d8:3c:2c:a4:de:e4:b2:fb:
62:7f:15:69:75:75:75:a7:28:c5:64:77:a6:7d:7c:18:04:d4:
c3:41:53:69:c3:30:4c:ae:ff:df:99:27:71:72:c4:65:78:ef:
6b:f6:8d:0a:32:63:c3:d0:b6:08:6a:b4:81:38:b6:3b:48:07:
a4:2b:e8:31:1d:ff:89:c2:0a:79:a5:23:d7:0d:7a:29:90:85:
53:35:ba:0b:8a:9c:d3:6f:25:ba:62:fe:e5:b1:ba:4d:27:13:
ea:2e:5a:bc:7e:64:03:90:b6:5a:a7:82:16:af:4b:29:0d:34:
5c:bc:f1:be:68:1e:ba:7b:9b:16:f2:2b:0c:1e:ce:a5:ef:1d:
fe:17:79:0c:e8:a2:f3:83:c5:f0:ec:6d:92:2b:1e:92:a5:98:
d9:b7:78:8d:ce:da:32:24:a8:16:8e:ed:b8:2d:9b:d3:42:78:
b3:d5:74:92:f8:7f:14:0d:3d:f3:8f:20:18:0b:ae:18:0b:7d:
a9:81:cd:ee:a5:26:7e:28:a0:e1:35:5d:26:1e:84:d8:40:e3:
2a:9a:5d:9c:2b:dc:1c:f9:31:b2:65:6d:c8:8a:0c:d9:99:39:
e1:0e:4a:43:34:54:06:09:05:a2:90:7e:98:84:ca:bb:3a:65:
49:83:fc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 22:47:15 2025 by rpki-client