This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json) Hash identifier: HN2+nDsol6Vre0jvedzIr5H7aOmPMfAnW4r1N8rv7UQ= Subject key identifier: F2:FA:FC:BC:37:8A:5F:6C:81:D6:58:04:5E:47:F9:A5:5B:32:6C:BE Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 Certificate issuer: /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Certificate serial: 6F53065ACB4F30F9153F6C1466E649C3DC55A2F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft Manifest number: 029B Signing time: Sat 13 Dec 2025 07:20:08 +0000 Manifest this update: Sat 13 Dec 2025 07:15:08 +0000 Manifest next update: Sun 14 Dec 2025 07:36:08 +0000 Files and hashes: 1: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw=) 2: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: y576y4hNXs2RCKlnUSGVp00ouBp6eFTZgVxKNK4q3CI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 07:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:53:06:5a:cb:4f:30:f9:15:3f:6c:14:66:e6:49:c3:dc:55:a2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Validity Not Before: Dec 13 07:15:08 2025 GMT Not After : Dec 14 07:36:08 2025 GMT Subject: CN=F2FAFCBC378A5F6C81D658045E47F9A55B326CBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:74:7c:d8:1a:8b:98:ac:05:16:2e:13:89: fd:b6:4f:f2:f1:4b:68:bc:66:ee:20:fa:18:9d:7d: 0a:4b:7a:e6:ea:bd:a7:5f:9e:70:8d:c3:aa:7b:7c: 75:d6:0f:72:19:60:b5:44:1e:9c:e0:0a:59:8d:6c: 60:96:86:72:ec:37:93:12:b0:90:5c:62:42:41:46: 79:1e:d7:53:63:9e:2b:93:13:7c:d0:18:9b:36:19: 9e:5e:db:7f:27:b7:dc:92:de:28:b1:ab:27:84:f5: c5:9c:21:6c:0a:13:f1:02:8d:8e:80:16:41:26:d9: 5d:4e:c3:b5:ea:64:0f:df:28:07:e2:82:0e:82:79: f2:cc:ed:96:a0:75:f2:f7:f8:e6:d5:9c:04:f9:ae: f4:b0:d7:ed:d7:87:5a:d4:fb:9e:ce:57:e8:77:24: a6:30:38:b4:25:14:8d:7f:6a:fd:95:24:d0:18:07: 02:e6:7b:49:82:1a:71:85:90:97:51:a4:fc:e2:86: 76:51:38:97:22:e4:47:5e:58:27:64:c7:2c:13:0e: 52:77:cf:58:7e:46:29:96:35:dd:d4:57:70:28:9d: ab:1f:f5:31:a7:de:d1:52:8b:c2:8c:20:50:ca:1a: 96:f5:12:37:a1:d3:81:33:27:b2:be:2f:31:28:d6: 93:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FA:FC:BC:37:8A:5F:6C:81:D6:58:04:5E:47:F9:A5:5B:32:6C:BE X509v3 Authority Key Identifier: keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:24:3b:e3:56:70:6c:58:58:63:f7:56:38:75:66:cf:1a:c7: 9d:68:e2:b2:01:4c:45:41:53:0e:93:1d:84:33:1c:76:ca:7e: e5:fd:de:42:a1:e7:47:9a:bf:b6:c7:29:61:1a:34:86:49:77: e5:fd:5d:df:8c:4f:41:98:c5:7a:92:72:2f:f3:af:fc:d7:bb: 19:06:31:e7:8d:a3:aa:77:5b:98:32:f5:c6:0b:48:bb:e9:d1: 31:6c:cc:01:62:09:7e:be:76:4c:89:54:6a:23:52:15:6b:7d: a3:d2:63:e8:5c:a2:ca:35:8a:4c:47:52:5f:41:8b:64:0a:6b: 12:76:a9:59:94:f3:5a:97:56:ad:a2:66:ba:14:da:3f:8e:85: 73:cf:a4:34:1c:bc:18:fa:e6:85:8b:df:1f:4b:e6:50:94:ad: 69:0e:f6:6e:88:9d:ce:4c:1a:79:da:d2:1f:60:87:3b:78:de: d6:10:e9:71:d4:6e:f7:ca:d5:6c:c5:45:0e:44:38:66:ee:fd: cb:e6:dd:84:8d:70:ed:6d:48:53:06:b6:30:14:a0:a5:e6:c4: ee:33:98:a2:20:68:fd:95:20:77:59:ff:91:0a:b1:60:ef:7c: 17:35:4b:0a:51:dd:ba:09:12:7a:34:7d:b4:44:5e:e7:23:02: a3:b6:f2:1e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUb1MGWstPMPkVP2wUZuZJw9xVovAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3 MDFCMEY4NzAeFw0yNTEyMTMwNzE1MDhaFw0yNTEyMTQwNzM2MDhaMDMxMTAvBgNV BAMTKEYyRkFGQ0JDMzc4QTVGNkM4MUQ2NTgwNDVFNDdGOUE1NUIzMjZDQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnm3R82BqLmKwFFi4Tif22T/Lx S2i8Zu4g+hidfQpLeubqvadfnnCNw6p7fHXWD3IZYLVEHpzgClmNbGCWhnLsN5MS sJBcYkJBRnke11NjniuTE3zQGJs2GZ5e238nt9yS3iixqyeE9cWcIWwKE/ECjY6A FkEm2V1Ow7XqZA/fKAfigg6CefLM7ZagdfL3+ObVnAT5rvSw1+3Xh1rU+57OV+h3 JKYwOLQlFI1/av2VJNAYBwLme0mCGnGFkJdRpPzihnZROJci5EdeWCdkxywTDlJ3 z1h+RimWNd3UV3Aonasf9TGn3tFSi8KMIFDKGpb1Ejeh04EzJ7K+LzEo1pOTAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU8vr8vDeKX2yB1lgEXkf5pVsybL4wHwYDVR0j BBgwFoAUH7nIUPkT1sCad22Ls4MnvnAbD4cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NjNmMwZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAv MUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRkI5Qzg1MEY5MTNENkMwOUE3NzZEOEJCMzgzMjdC RTcwMUIwRjg3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NjNmMw ZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAvMUZCOUM4NTBGOTEzRDZDMDlB Nzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGUkO+NWcGxYWGP3Vjh1 Zs8ax51o4rIBTEVBUw6THYQzHHbKfuX93kKh50eav7bHKWEaNIZJd+X9Xd+MT0GY xXqSci/zr/zXuxkGMeeNo6p3W5gy9cYLSLvp0TFszAFiCX6+dkyJVGojUhVrfaPS Y+hcoso1ikxHUl9Bi2QKaxJ2qVmU81qXVq2iZroU2j+OhXPPpDQcvBj65oWL3x9L 5lCUrWkO9m6Inc5MGnna0h9ghzt43tYQ6XHUbvfK1WzFRQ5EOGbu/cvm3YSNcO1t SFMGtjAUoKXmxO4zmKIgaP2VIHdZ/5EKsWDvfBc1SwpR3boJEno0fbREXucjAqO2 8h4= -----END CERTIFICATE-----Generated at Sat Dec 13 18:10:55 2025 by rpki-client