This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft File: 44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json) Hash identifier: eX7wnIzNv3LtGH1dgXcStuB/9HuSk19kSKPeUfnuJ+Q= Subject key identifier: FD:1E:EC:1A:6A:C3:14:0D:BB:98:96:AA:E6:31:6B:12:1B:F4:1E:F4 Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 Certificate issuer: /CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Certificate serial: 52076374C00E634446963FBCEDDC5FC56315BB64 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft Manifest number: 02A2 Signing time: Sat 13 Dec 2025 03:39:53 +0000 Manifest this update: Sat 13 Dec 2025 03:34:53 +0000 Manifest next update: Sun 14 Dec 2025 06:15:53 +0000 Files and hashes: 1: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: ZFgFa3mIQWS+C3ZANFakUZVad7gh+grxNMovjG/43xs=) 2: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=) 3: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: fGaWN5H1sKSbdlprybHY7XlQ0yMjTnULjBzVChcEvJw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 06:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:07:63:74:c0:0e:63:44:46:96:3f:bc:ed:dc:5f:c5:63:15:bb:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Validity Not Before: Dec 13 03:34:53 2025 GMT Not After : Dec 14 06:15:53 2025 GMT Subject: CN=FD1EEC1A6AC3140DBB9896AAE6316B121BF41EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:68:3a:3b:a1:5c:8f:06:f0:f0:c2:b5:1e: 13:63:a1:2b:37:aa:0f:e8:98:8d:6c:93:7e:35:dd: 45:ab:fa:78:57:8b:cc:14:78:fc:8c:a8:c7:b5:31: 32:17:09:e0:1b:3f:e5:84:e1:a4:a8:01:0b:56:e2: 0e:30:d8:7a:5f:cd:50:d4:e3:34:f1:cd:e2:68:7d: c1:bd:ce:67:b8:d2:0f:c5:33:f5:d4:44:0e:e4:70: d0:94:1c:94:4a:df:6e:4b:36:10:dc:b8:3e:61:14: b2:87:cf:8f:0f:7f:8a:39:b9:da:a0:b4:29:87:6f: 86:af:d6:9f:e4:63:c3:be:e0:00:6e:dd:f7:f6:e3: 75:43:e9:1b:ad:84:4f:d3:7f:4f:ed:06:a6:04:4d: 2b:2b:8f:ee:be:d6:f0:0b:46:64:41:1f:78:a5:a9: 34:ef:9a:46:f2:52:38:be:ae:9a:01:5e:36:8c:17: 05:ea:8f:57:dd:ff:5d:c1:2f:0b:fb:ba:ff:8e:09: 80:28:a9:b7:25:2e:54:89:40:c2:39:a8:f6:25:b9: 34:18:40:d2:9b:04:97:d5:76:b7:43:bf:6e:f8:b1: 86:61:1c:ec:8d:4e:c6:f2:b6:81:80:a1:72:93:54: a7:9e:2b:59:81:03:68:09:d8:f3:72:31:6d:c2:1a: 88:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1E:EC:1A:6A:C3:14:0D:BB:98:96:AA:E6:31:6B:12:1B:F4:1E:F4 X509v3 Authority Key Identifier: keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f3:be:d7:cb:c4:6d:59:b7:99:0c:82:03:a9:58:02:1c:be: a3:40:49:61:f7:09:d7:57:70:4d:b7:84:2d:e0:82:ca:55:88: 0f:f5:bc:75:68:17:42:ff:3a:72:63:dd:bc:c1:e5:81:db:52: 03:f6:77:c8:a4:ba:87:15:a0:25:52:84:9e:16:10:c7:a5:72: e5:21:f4:2c:3c:ee:05:87:d5:4e:18:6a:fc:67:99:85:5b:02: 12:ad:eb:08:6c:2c:47:b7:68:ef:d6:6f:da:47:38:c2:45:17: 40:11:f6:d1:91:ea:b5:39:16:73:9c:b5:a2:55:79:75:06:8a: d5:a7:f7:6d:20:96:ed:b3:e2:72:1c:ea:d1:80:05:00:25:b8: ec:cb:12:d8:6b:cf:ff:62:b2:63:24:d1:e1:58:3b:68:79:c4: 5b:0d:7c:a9:a3:81:c9:72:45:73:03:8c:14:da:c8:59:40:c9: 15:aa:f2:21:fe:95:a5:ce:e7:ab:9c:b3:a8:6d:b2:09:4f:7d: 69:19:e4:68:ab:cf:cb:df:c5:3b:e2:91:a9:cf:c1:be:cc:f7: 9c:ce:41:54:16:88:85:0b:38:4d:e8:c1:96:e3:4c:c0:d9:ba: a8:c0:1e:c1:e1:35:cd:52:04:13:e6:10:e4:e3:9e:fa:fe:f9: 25:2d:0d:34 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUUgdjdMAOY0RGlj+87dxfxWMVu2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEEx RTNGMTM4OTAeFw0yNTEyMTMwMzM0NTNaFw0yNTEyMTQwNjE1NTNaMDMxMTAvBgNV BAMTKEZEMUVFQzFBNkFDMzE0MERCQjk4OTZBQUU2MzE2QjEyMUJGNDFFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAX2g6O6Fcjwbw8MK1HhNjoSs3 qg/omI1sk3413UWr+nhXi8wUePyMqMe1MTIXCeAbP+WE4aSoAQtW4g4w2HpfzVDU 4zTxzeJofcG9zme40g/FM/XURA7kcNCUHJRK325LNhDcuD5hFLKHz48Pf4o5udqg tCmHb4av1p/kY8O+4ABu3ff243VD6RuthE/Tf0/tBqYETSsrj+6+1vALRmRBH3il qTTvmkbyUji+rpoBXjaMFwXqj1fd/13BLwv7uv+OCYAoqbclLlSJQMI5qPYluTQY QNKbBJfVdrdDv274sYZhHOyNTsbytoGAoXKTVKeeK1mBA2gJ2PNyMW3CGognAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU/R7sGmrDFA27mJaq5jFrEhv0HvQwHwYDVR0j BBgwFoAURMTJE9WPXvhHmWJB6Wm2Ch4/E4kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAv NDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NEM0QzkxM0Q1OEY1RUY4NDc5OTYyNDFFOTY5QjYw QTFFM0YxMzg5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2QwZjJk Yjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAvNDRDNEM5MTNENThGNUVGODQ3 OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGXzvtfLxG1Zt5kMggOp WAIcvqNASWH3CddXcE23hC3ggspViA/1vHVoF0L/OnJj3bzB5YHbUgP2d8ikuocV oCVShJ4WEMelcuUh9Cw87gWH1U4YavxnmYVbAhKt6whsLEe3aO/Wb9pHOMJFF0AR 9tGR6rU5FnOctaJVeXUGitWn920glu2z4nIc6tGABQAluOzLEthrz/9ismMk0eFY O2h5xFsNfKmjgclyRXMDjBTayFlAyRWq8iH+laXO56ucs6htsglPfWkZ5Girz8vf xTvikanPwb7M95zOQVQWiIULOE3owZbjTMDZuqjAHsHhNc1SBBPmEOTjnvr++SUt DTQ= -----END CERTIFICATE-----Generated at Sat Dec 13 18:10:58 2025 by rpki-client