This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: 3PAJSlCAapdfISOEc42Zmx7fInDWSnMW929MUgdMwAk= Subject key identifier: E0:DE:9A:B1:07:78:84:AD:99:03:6C:E6:74:E2:82:FD:AE:32:57:46 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 345D546517234C3969F442EC1BABAC367ED9E202 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 02A0 Signing time: Sat 13 Dec 2025 15:21:45 +0000 Manifest this update: Sat 13 Dec 2025 15:16:45 +0000 Manifest next update: Sun 14 Dec 2025 17:19:45 +0000 Files and hashes: 1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) 3: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: Za1xVJknekIpkGmjoq3lSLaDDLbwwT02MNjypNiQYoU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5d:54:65:17:23:4c:39:69:f4:42:ec:1b:ab:ac:36:7e:d9:e2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Dec 13 15:16:45 2025 GMT Not After : Dec 14 17:19:45 2025 GMT Subject: CN=E0DE9AB1077884AD99036CE674E282FDAE325746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:41:eb:b7:f3:4a:ee:85:71:05:7a:1f:37:96: ea:8e:6c:74:27:82:79:95:25:6c:ad:ca:96:c6:f7: d9:f5:74:5b:51:40:35:fb:b3:45:69:91:41:ac:2b: 13:bf:e5:c5:1d:25:9a:4e:b0:fe:77:51:b6:6a:2a: 6a:a7:09:ce:24:7b:d6:ec:fe:84:02:1f:29:90:d8: 3c:a4:39:28:48:11:fc:98:78:ff:f4:0b:db:2e:c4: 3b:45:91:97:9a:52:f4:69:ed:2a:9d:9b:5d:18:cb: e9:bf:ac:5e:2a:fa:70:2e:31:5e:ee:bc:f3:42:76: c5:3d:bb:8b:dc:16:d3:7b:76:d0:11:de:bf:d8:94: b1:17:56:2f:e5:3c:42:a4:97:61:2a:92:48:0a:93: 85:b5:34:d5:a1:6f:41:68:32:f0:1a:69:a3:c9:e8: c0:f2:6c:2b:d0:78:ff:e8:f8:4a:dc:6a:a8:95:b6: b9:50:5f:aa:98:82:7d:de:ce:7a:e3:84:15:4b:9d: 31:b5:bc:b5:11:41:c3:5e:65:13:42:df:49:24:69: 9e:6e:ff:5c:2f:b8:7f:d9:d1:32:91:a5:19:42:78: ab:72:1d:23:ac:31:2b:05:84:22:56:31:12:32:70: 6b:01:39:c0:d8:5b:92:30:af:25:2a:20:50:e1:44: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DE:9A:B1:07:78:84:AD:99:03:6C:E6:74:E2:82:FD:AE:32:57:46 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:59:c9:d9:1b:b2:eb:3b:8a:9f:ac:e1:80:cb:d8:08:04:53: 1a:86:40:27:6b:6d:98:3b:0a:dd:67:6f:66:47:a9:0f:fb:18: 59:29:bc:d7:9f:84:2a:8d:b1:10:4c:65:b9:ce:4a:87:57:5e: e4:dd:c3:9b:8b:78:fa:8e:0d:19:5d:2f:46:ff:b6:b6:76:12: b3:9c:ff:8c:ca:da:47:89:a4:53:a6:a0:49:d7:be:85:b4:63: b8:12:c6:d9:04:2f:24:a7:f1:40:b6:e4:4f:8b:d6:ff:dc:38: 5a:87:86:6b:b4:09:d5:3e:f8:1a:c0:b2:3e:ad:76:3c:e4:c5: d2:eb:f4:65:8d:1d:4f:ad:a2:89:4f:db:7d:df:dd:27:6f:41: 14:d4:ea:2b:2e:bd:1c:6f:12:be:ea:a6:ef:a4:1a:be:e8:23: aa:2a:9d:6b:84:38:b2:c5:c7:5a:ab:ab:05:6e:5c:2d:a9:e5: bb:0a:0e:a1:4f:63:22:d7:97:6e:1a:f4:60:44:99:16:8b:c4: 5f:53:b9:06:50:1a:59:b4:88:a6:f6:6d:cd:7f:c8:30:51:13: e7:f7:c0:22:66:b7:b6:0c:6a:d2:47:fe:26:4e:d6:41:21:61: a6:19:ea:d5:64:b1:98:d5:17:c7:64:21:4b:55:7d:c0:87:9e: 38:56:34:cc -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUNF1UZRcjTDlp9ELsG6usNn7Z4gIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTEyMTMxNTE2NDVaFw0yNTEyMTQxNzE5NDVaMDMxMTAvBgNV BAMTKEUwREU5QUIxMDc3ODg0QUQ5OTAzNkNFNjc0RTI4MkZEQUUzMjU3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgQeu380ruhXEFeh83luqObHQn gnmVJWytypbG99n1dFtRQDX7s0VpkUGsKxO/5cUdJZpOsP53UbZqKmqnCc4ke9bs /oQCHymQ2DykOShIEfyYeP/0C9suxDtFkZeaUvRp7Sqdm10Yy+m/rF4q+nAuMV7u vPNCdsU9u4vcFtN7dtAR3r/YlLEXVi/lPEKkl2EqkkgKk4W1NNWhb0FoMvAaaaPJ 6MDybCvQeP/o+ErcaqiVtrlQX6qYgn3eznrjhBVLnTG1vLURQcNeZRNC30kkaZ5u /1wvuH/Z0TKRpRlCeKtyHSOsMSsFhCJWMRIycGsBOcDYW5IwryUqIFDhRLkJAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU4N6asQd4hK2ZA2zmdOKC/a4yV0YwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHRZydkbsus7ip+s4YDL 2AgEUxqGQCdrbZg7Ct1nb2ZHqQ/7GFkpvNefhCqNsRBMZbnOSodXXuTdw5uLePqO DRldL0b/trZ2ErOc/4zK2keJpFOmoEnXvoW0Y7gSxtkELySn8UC25E+L1v/cOFqH hmu0CdU++BrAsj6tdjzkxdLr9GWNHU+toolP233f3SdvQRTU6isuvRxvEr7qpu+k Gr7oI6oqnWuEOLLFx1qrqwVuXC2p5bsKDqFPYyLXl24a9GBEmRaLxF9TuQZQGlm0 iKb2bc1/yDBRE+f3wCJmt7YMatJH/iZO1kEhYaYZ6tVksZjVF8dkIUtVfcCHnjhW NMw= -----END CERTIFICATE-----Generated at Sat Dec 13 18:11:16 2025 by rpki-client