This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: 24kLCOVFk2DQJgxFSGXImGbpvFQIoUaIx3054sioFak= Subject key identifier: 0C:0F:C0:51:AC:C3:99:A8:9B:DE:77:CA:38:18:93:E2:B5:B8:A0:90 Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 647DC3A877320DAB541A0BB2CFB9911AE34ED34A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 02DB Signing time: Tue 27 Jan 2026 21:34:04 +0000 Manifest this update: Tue 27 Jan 2026 21:29:04 +0000 Manifest next update: Thu 29 Jan 2026 00:02:04 +0000 Files and hashes: 1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) 3: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: letFU1SOQhOJ22ltv53/WPGXu2uI86a3cyXwCUCUWTU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7d:c3:a8:77:32:0d:ab:54:1a:0b:b2:cf:b9:91:1a:e3:4e:d3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Jan 27 21:29:04 2026 GMT Not After : Jan 29 00:02:04 2026 GMT Subject: CN=0C0FC051ACC399A89BDE77CA381893E2B5B8A090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:ac:e2:fd:d6:de:8a:57:a2:41:e1:53:fc: bd:47:67:34:c7:97:5a:c3:76:c0:2f:01:c2:26:70: 34:b4:88:c5:0d:46:38:f5:b3:ef:79:c5:69:ea:8e: a1:5d:e6:63:2a:a0:d4:9e:cb:d0:62:1f:8c:fc:19: 89:b1:46:f4:11:e2:94:a9:8d:55:3d:45:d2:ef:af: 5d:f2:b5:d3:81:ad:5b:00:7c:87:02:ff:41:07:15: 66:0c:05:1d:58:b2:14:33:8b:76:31:95:0c:74:00: 69:ca:c0:c4:2b:a0:04:8f:61:dd:67:73:74:f7:bc: 67:d9:ba:43:fb:2b:b7:6f:69:e2:f8:42:43:4c:19: 6a:21:d6:1d:31:89:95:8e:b3:29:0d:4a:ca:65:1b: e0:e8:ba:3b:6f:85:6b:90:dd:e2:19:08:1b:22:d0: 01:34:7b:2e:e2:23:e1:c1:7f:37:7d:68:66:ae:36: 7c:0b:2d:e9:9a:83:39:2c:c5:68:6c:39:fc:15:d0: 83:e8:aa:4a:07:92:5d:d0:fc:6d:da:2d:ed:48:30: 83:44:22:b1:39:e5:e3:a8:81:da:80:7f:ef:4a:84: 2d:bf:5b:97:7d:36:b5:5d:59:52:c4:c8:e4:67:a2: 62:d9:4f:62:43:a9:25:f6:5c:0e:27:a0:7b:db:76: 7e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0F:C0:51:AC:C3:99:A8:9B:DE:77:CA:38:18:93:E2:B5:B8:A0:90 X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f3:d7:46:8d:e3:34:17:96:46:02:20:7c:30:fb:93:89:33: 98:e6:b1:d6:c1:d8:3b:53:78:a5:6e:fc:23:4e:6c:b8:44:2d: 5c:5f:cd:a4:a0:3d:db:db:d2:30:dc:b9:99:d9:8d:d7:26:36: 41:62:a3:52:63:69:b9:51:8b:90:cf:89:22:1f:13:89:90:35: cf:8a:5a:e2:9a:fe:60:1f:52:3d:41:2e:9d:6b:19:63:34:6a: 59:06:d1:a6:1b:83:2f:e4:05:3c:0d:80:2e:bb:6e:32:e0:23: cb:ac:f8:3b:2b:24:63:65:54:d0:66:9f:28:d9:59:de:dd:f6: e0:81:aa:3a:a9:f3:55:45:79:d6:fc:2e:b9:70:9c:4b:68:b9: 46:14:0e:24:47:76:40:ba:79:9d:59:f9:37:3f:12:2d:5c:55: 7a:f1:77:a1:b5:33:2e:4c:69:2a:08:c5:a8:9c:01:fb:54:0b: 4b:b5:86:3d:4c:a0:9b:d5:07:7e:2d:34:8b:69:a4:0a:1f:0b: 38:36:cb:6a:03:e6:f8:37:05:0d:96:a9:7b:50:e3:7a:f9:90: d5:e9:99:3c:11:ae:4e:44:1c:5e:77:73:e4:f8:9b:5e:f8:35: 51:d5:3b:fd:19:e3:46:7a:99:39:a7:36:67:46:71:1e:c7:f4: 3e:86:cc:74 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUZH3DqHcyDatUGguyz7mRGuNO00owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNjAxMjcyMTI5MDRaFw0yNjAxMjkwMDAyMDRaMDMxMTAvBgNV BAMTKDBDMEZDMDUxQUNDMzk5QTg5QkRFNzdDQTM4MTg5M0UyQjVCOEEwOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3u6zi/dbeileiQeFT/L1HZzTH l1rDdsAvAcImcDS0iMUNRjj1s+95xWnqjqFd5mMqoNSey9BiH4z8GYmxRvQR4pSp jVU9RdLvr13ytdOBrVsAfIcC/0EHFWYMBR1YshQzi3YxlQx0AGnKwMQroASPYd1n c3T3vGfZukP7K7dvaeL4QkNMGWoh1h0xiZWOsykNSsplG+DoujtvhWuQ3eIZCBsi 0AE0ey7iI+HBfzd9aGauNnwLLemagzksxWhsOfwV0IPoqkoHkl3Q/G3aLe1IMINE IrE55eOogdqAf+9KhC2/W5d9NrVdWVLEyORnomLZT2JDqSX2XA4noHvbdn77AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUDA/AUazDmaib3nfKOBiT4rW4oJAwHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFzz10aN4zQXlkYCIHww +5OJM5jmsdbB2DtTeKVu/CNObLhELVxfzaSgPdvb0jDcuZnZjdcmNkFio1JjablR i5DPiSIfE4mQNc+KWuKa/mAfUj1BLp1rGWM0alkG0aYbgy/kBTwNgC67bjLgI8us +DsrJGNlVNBmnyjZWd7d9uCBqjqp81VFedb8LrlwnEtouUYUDiRHdkC6eZ1Z+Tc/ Ei1cVXrxd6G1My5MaSoIxaicAftUC0u1hj1MoJvVB34tNItppAofCzg2y2oD5vg3 BQ2WqXtQ43r5kNXpmTwRrk5EHF53c+T4m174NVHVO/0Z40Z6mTmnNmdGcR7H9D6G zHQ= -----END CERTIFICATE-----Generated at Wed Jan 28 00:08:52 2026 by rpki-client