This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json) Hash identifier: rKqt3cJLBgYrtrn3Mioqa9foxKw+K0qJqWebIyIk9aE= Subject key identifier: B2:4F:B2:A2:9D:28:E7:37:68:A8:B1:9F:B6:9D:34:7E:1D:84:0C:2F Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 Certificate issuer: /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Certificate serial: 536641995201DC2054F26C1449C0A68E35A72EB0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft Manifest number: 02A3 Signing time: Fri 19 Dec 2025 07:51:55 +0000 Manifest this update: Fri 19 Dec 2025 07:46:53 +0000 Manifest next update: Sat 20 Dec 2025 09:05:53 +0000 Files and hashes: 1: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw=) 2: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: M8Z8cMt9+io35la37/nDcowVY8PpFzVl0jCvumc10Kk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:66:41:99:52:01:dc:20:54:f2:6c:14:49:c0:a6:8e:35:a7:2e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Validity Not Before: Dec 19 07:46:53 2025 GMT Not After : Dec 20 09:05:53 2025 GMT Subject: CN=B24FB2A29D28E73768A8B19FB69D347E1D840C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4c:9b:27:9f:fa:b3:50:27:7c:1d:6a:dd:5f: 99:fc:45:a9:40:88:20:a9:98:4a:4f:f3:4e:ee:df: 2a:53:bb:fd:f6:7d:e1:e6:79:d8:a3:e7:4d:cd:66: 5b:27:b3:50:33:47:24:e9:07:2b:63:5c:68:97:8b: 5a:37:56:be:8a:15:1d:71:e9:49:c9:33:de:48:cd: e5:2d:33:d2:f2:22:80:9f:f0:fd:45:c1:94:a7:2c: 48:b2:18:4f:8f:20:45:88:b3:1f:07:1b:71:08:51: 28:c9:0a:a8:3d:73:69:97:a6:0c:39:f0:53:42:ff: f5:86:74:33:ac:e3:70:2f:52:98:1d:7e:e2:37:67: 7a:e7:72:6e:01:ce:ef:26:dc:95:1d:55:6e:1c:10: 8b:02:d3:23:f0:7d:6f:dd:f7:de:4c:39:4e:74:92: 0a:3e:99:43:00:e9:32:38:f3:c9:3b:5f:6b:42:93: cd:6c:c8:85:ab:ca:06:7f:eb:03:5f:6f:58:18:64: 4c:9c:e4:b7:5d:a8:fb:d6:83:8a:64:05:27:25:f3: c0:55:37:f2:2c:1d:c6:81:bb:cc:a3:7e:f7:22:42: 19:cb:aa:ee:12:92:8d:d5:a5:fc:ab:11:46:82:87: 67:ed:6f:3e:bb:a9:f6:81:a8:b1:81:c4:49:cd:32: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4F:B2:A2:9D:28:E7:37:68:A8:B1:9F:B6:9D:34:7E:1D:84:0C:2F X509v3 Authority Key Identifier: keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f3:47:53:be:7a:b8:74:e5:99:83:49:80:d4:74:69:1f:66: ab:bf:72:ba:d2:24:09:0b:c1:23:74:bc:b0:cc:70:ba:c6:4d: 26:63:f9:30:9d:8e:cb:a0:16:7a:e3:67:9b:3e:b0:99:fe:62: 68:9f:02:ce:f6:78:25:36:b8:46:94:2d:8b:d9:5e:06:10:8b: d6:61:20:5d:69:82:b0:4e:4e:b1:0b:a8:61:65:77:8c:76:fb: 16:ae:cf:31:81:ca:a1:49:46:67:e1:e7:ac:fb:21:e6:53:ba: f1:de:ab:ba:e6:09:e8:1d:ba:90:12:5c:02:88:65:ff:f1:ef: 71:45:ba:8c:dd:ff:ea:99:e1:03:46:4c:00:a2:42:08:dc:eb: 12:fb:57:7b:e4:df:87:f0:73:63:85:31:6a:15:a5:a8:de:c6: 52:ed:81:1e:2a:4d:b5:78:ac:ee:7b:03:8d:7d:40:5f:1f:85: d5:b5:c6:a3:5b:3a:19:8a:18:8c:93:e6:2c:5b:90:c1:23:0f: 0a:16:ef:b9:c3:5a:92:f9:6e:ca:75:ac:72:a7:cc:7b:78:a5: 28:30:b7:0f:fe:9f:76:16:a3:cc:07:89:b5:c9:1d:04:e7:d4: a9:b6:5d:b2:6f:2d:b8:b3:70:b7:dd:e2:e2:44:2d:40:ba:81: 06:73:dd:81 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUU2ZBmVIB3CBU8mwUScCmjjWnLrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3 MDFCMEY4NzAeFw0yNTEyMTkwNzQ2NTNaFw0yNTEyMjAwOTA1NTNaMDMxMTAvBgNV BAMTKEIyNEZCMkEyOUQyOEU3Mzc2OEE4QjE5RkI2OUQzNDdFMUQ4NDBDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTJsnn/qzUCd8HWrdX5n8RalA iCCpmEpP807u3ypTu/32feHmedij503NZlsns1AzRyTpBytjXGiXi1o3Vr6KFR1x 6UnJM95IzeUtM9LyIoCf8P1FwZSnLEiyGE+PIEWIsx8HG3EIUSjJCqg9c2mXpgw5 8FNC//WGdDOs43AvUpgdfuI3Z3rncm4Bzu8m3JUdVW4cEIsC0yPwfW/d995MOU50 kgo+mUMA6TI488k7X2tCk81syIWrygZ/6wNfb1gYZEyc5LddqPvWg4pkBScl88BV N/IsHcaBu8yjfvciQhnLqu4Sko3VpfyrEUaCh2ftbz67qfaBqLGBxEnNMk81AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUsk+yop0o5zdoqLGftp00fh2EDC8wHwYDVR0j BBgwFoAUH7nIUPkT1sCad22Ls4MnvnAbD4cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NjNmMwZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAv MUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRkI5Qzg1MEY5MTNENkMwOUE3NzZEOEJCMzgzMjdC RTcwMUIwRjg3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NjNmMw ZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAvMUZCOUM4NTBGOTEzRDZDMDlB Nzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGbzR1O+erh05ZmDSYDU dGkfZqu/crrSJAkLwSN0vLDMcLrGTSZj+TCdjsugFnrjZ5s+sJn+YmifAs72eCU2 uEaULYvZXgYQi9ZhIF1pgrBOTrELqGFld4x2+xauzzGByqFJRmfh56z7IeZTuvHe q7rmCegdupASXAKIZf/x73FFuozd/+qZ4QNGTACiQgjc6xL7V3vk34fwc2OFMWoV pajexlLtgR4qTbV4rO57A419QF8fhdW1xqNbOhmKGIyT5ixbkMEjDwoW77nDWpL5 bsp1rHKnzHt4pSgwtw/+n3YWo8wHibXJHQTn1Km2XbJvLbizcLfd4uJELUC6gQZz 3YE= -----END CERTIFICATE-----Generated at Fri Dec 19 22:53:26 2025 by rpki-client