This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: JrsusvkLwBOTCFaz/ms1pHodR/Ug03iMkqRbpj1PRJI= Subject key identifier: 19:CA:54:5E:A1:0E:06:D7:D5:D3:95:FC:9D:51:D1:57:80:E0:4D:07 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 0757AC28A1AF277ABC5E5DFDE1381618AAA2E990 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 02D8 Signing time: Tue 27 Jan 2026 14:33:14 +0000 Manifest this update: Tue 27 Jan 2026 14:28:14 +0000 Manifest next update: Wed 28 Jan 2026 16:07:14 +0000 Files and hashes: 1: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) 2: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: WOrTfNayPnuA1kixK+I1pttnf+sA9A7OiYFhZ+nWsDo=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:57:ac:28:a1:af:27:7a:bc:5e:5d:fd:e1:38:16:18:aa:a2:e9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Jan 27 14:28:14 2026 GMT Not After : Jan 28 16:07:14 2026 GMT Subject: CN=19CA545EA10E06D7D5D395FC9D51D15780E04D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:61:2b:4a:70:35:7b:32:c2:5c:9c:f7:73: 5c:6a:23:08:d3:de:b7:2a:f6:2f:cd:5c:6f:1b:57: 95:ed:43:d8:28:9e:6b:f0:76:2a:8d:75:8c:99:b1: 7e:a4:d5:f4:8f:6d:ac:22:69:66:4d:ec:29:9e:89: e3:98:a0:c1:d6:a1:df:a6:7d:f6:ba:71:a4:8e:5f: 83:d3:f7:75:1b:27:0e:51:a5:f0:f4:53:01:fe:93: 5d:cb:8d:ac:74:e6:86:f4:83:80:69:f9:bf:dd:40: a8:4a:51:7a:0e:e1:6a:4f:0d:48:73:d5:48:e2:60: b1:3d:75:30:e4:93:4e:b6:81:19:4a:39:f1:5c:73: 3d:0a:b9:b3:46:14:2d:96:11:96:4c:0e:6b:38:6e: f6:99:c7:f6:9d:8c:fc:5e:8c:93:12:d6:dc:dc:5d: 4f:76:bd:08:d6:ae:bb:f2:75:88:af:78:3d:1d:f7: d5:ad:97:fa:c6:2d:84:5f:d5:90:d5:3a:9e:e0:56: 7b:a2:90:4d:12:df:19:26:6b:d3:8e:78:20:30:92: c4:0a:81:bd:bd:88:f7:37:97:a5:7d:08:3c:6f:d8: bc:00:15:43:85:e9:a0:b4:23:dd:d2:6a:a6:6f:84: 13:c7:22:a9:86:84:df:66:5c:e0:a8:bc:fa:b2:e9: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CA:54:5E:A1:0E:06:D7:D5:D3:95:FC:9D:51:D1:57:80:E0:4D:07 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:73:79:db:8e:b5:2e:32:06:4f:3c:eb:75:f4:61:1a:70:4e: e6:d0:76:12:32:ec:11:87:08:00:78:2e:e0:cd:62:6d:33:61: d5:3c:d4:ad:60:26:eb:58:d6:60:ef:38:28:79:b3:5f:9e:65: 39:ba:eb:1c:0e:3e:5b:38:14:02:eb:a2:9f:f2:58:d0:4f:11: d9:9f:54:cc:c3:3a:9e:d2:ac:29:ec:31:20:44:8e:76:9d:5d: b0:5a:0a:8e:68:fc:55:6e:4b:61:b8:a7:c4:2a:4d:10:39:28: 3e:b0:13:f1:06:54:dd:b9:9a:66:bb:3f:2e:eb:44:17:3d:1f: 28:a2:41:6c:48:f1:50:1a:0c:f7:30:5c:00:7c:72:46:97:2f: 89:b4:4d:65:3c:df:4b:87:70:3e:d9:01:b8:79:8a:8b:ca:0f: 28:32:3c:45:79:75:47:7c:b3:84:ca:c2:1d:74:a4:5e:8b:f1: 5f:bf:54:9a:08:73:5e:5e:25:9a:7c:67:4a:36:99:63:08:c6: f9:e2:bb:cb:c4:97:3c:76:47:e2:26:0f:48:11:30:e9:02:b8: 7d:53:ff:35:7f:4f:15:97:0d:0b:80:1c:3a:b0:54:1f:81:ec: 89:d5:43:08:94:d7:e8:eb:be:37:ea:41:7d:eb:83:de:90:af: 0a:1e:5d:91 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUB1esKKGvJ3q8Xl394TgWGKqi6ZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNjAxMjcxNDI4MTRaFw0yNjAxMjgxNjA3MTRaMDMxMTAvBgNV BAMTKDE5Q0E1NDVFQTEwRTA2RDdENUQzOTVGQzlENTFEMTU3ODBFMDREMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCedWErSnA1ezLCXJz3c1xqIwjT 3rcq9i/NXG8bV5XtQ9gonmvwdiqNdYyZsX6k1fSPbawiaWZN7CmeieOYoMHWod+m ffa6caSOX4PT93UbJw5RpfD0UwH+k13Ljax05ob0g4Bp+b/dQKhKUXoO4WpPDUhz 1UjiYLE9dTDkk062gRlKOfFccz0KubNGFC2WEZZMDms4bvaZx/adjPxejJMS1tzc XU92vQjWrrvydYiveD0d99Wtl/rGLYRf1ZDVOp7gVnuikE0S3xkma9OOeCAwksQK gb29iPc3l6V9CDxv2LwAFUOF6aC0I93SaqZvhBPHIqmGhN9mXOCovPqy6bkNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUGcpUXqEOBtfV05X8nVHRV4DgTQcwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACJzeduOtS4yBk8863X0 YRpwTubQdhIy7BGHCAB4LuDNYm0zYdU81K1gJutY1mDvOCh5s1+eZTm66xwOPls4 FALrop/yWNBPEdmfVMzDOp7SrCnsMSBEjnadXbBaCo5o/FVuS2G4p8QqTRA5KD6w E/EGVN25mma7Py7rRBc9HyiiQWxI8VAaDPcwXAB8ckaXL4m0TWU830uHcD7ZAbh5 iovKDygyPEV5dUd8s4TKwh10pF6L8V+/VJoIc15eJZp8Z0o2mWMIxvniu8vElzx2 R+ImD0gRMOkCuH1T/zV/TxWXDQuAHDqwVB+B7InVQwiU1+jrvjfqQX3rg96Qrwoe XZE= -----END CERTIFICATE-----Generated at Wed Jan 28 00:06:29 2026 by rpki-client