This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: X66d7ZT9tqz/HKxCFo/r52v47hLyV4mvTuU6iZUapmc= Subject key identifier: 04:36:83:4C:DE:E9:53:08:11:F6:55:0F:3F:C4:85:80:94:65:25:AA Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 4E04F824446BA5788E0CED237DCE0AA016699838 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 02A8 Signing time: Sun 21 Dec 2025 12:24:15 +0000 Manifest this update: Sun 21 Dec 2025 12:19:13 +0000 Manifest next update: Mon 22 Dec 2025 16:04:13 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: 6KWun/TJxzndj4/B/zInZeApDy6uo7Tv7J/dhL/mFjM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:04:f8:24:44:6b:a5:78:8e:0c:ed:23:7d:ce:0a:a0:16:69:98:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Dec 21 12:19:13 2025 GMT Not After : Dec 22 16:04:13 2025 GMT Subject: CN=0436834CDEE9530811F6550F3FC48580946525AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:4a:46:6e:a7:45:ce:18:a4:ff:5b:84:cf: 99:4a:32:d9:4d:37:18:5f:8a:46:57:5e:e7:76:66: 5b:a7:e0:bd:56:e6:47:fe:c1:94:87:49:c5:18:3f: 48:7b:50:45:cb:c8:44:8d:4e:b9:ce:44:e2:dc:79: c6:0c:e3:9a:7f:89:fb:e0:3d:ff:b6:07:89:42:59: b1:c2:7f:f3:4d:5d:8a:67:eb:c4:0e:b2:4f:3f:a2: d0:b2:40:91:0a:2b:6e:51:93:20:6a:46:f6:35:97: 10:01:e7:2b:fb:df:77:f9:cc:db:9d:77:11:1a:7c: d5:92:21:a6:77:cc:df:2d:ec:c8:86:01:cf:f9:10: 4f:5b:1c:a2:32:4f:d6:3f:6b:20:76:88:30:1c:ad: f3:91:e2:af:46:61:37:20:f2:ab:a6:48:e0:8a:2f: a1:32:e6:94:49:5f:df:23:0e:b9:a9:98:da:99:c9: 8a:c8:d6:bc:44:c6:76:6b:69:40:d6:ed:07:08:c9: a6:0c:91:e5:4b:d6:16:0e:c1:e2:73:e3:42:6e:8a: 2e:cf:2c:7b:dc:3c:6a:94:46:73:eb:3f:af:52:f4: 37:57:ee:65:78:00:17:38:97:53:3c:09:4a:98:6e: a2:64:a1:a2:f4:c1:7b:28:6a:15:1a:88:da:e7:c2: 4c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:36:83:4C:DE:E9:53:08:11:F6:55:0F:3F:C4:85:80:94:65:25:AA X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f2:05:27:37:aa:69:c5:81:7b:ae:d5:52:c4:07:fd:a5:bb: 8c:cf:b1:ba:c2:8d:bc:71:0b:98:29:ab:0d:7e:e0:22:b0:38: 74:fa:0e:c2:d1:b3:99:26:16:69:c0:fb:46:81:b3:df:b5:ce: a0:11:1e:06:18:3c:f5:4e:1a:fc:01:7e:80:95:ba:7b:13:f0: e1:f5:6b:85:2d:df:53:a6:d8:97:b5:83:d3:6f:c0:eb:f6:2e: 33:50:5f:0b:07:74:ad:b0:f6:c3:96:93:85:80:e9:3d:cc:e1: 60:f3:36:61:05:e4:05:f9:3b:54:7c:7f:26:07:dd:6d:5b:23: 7c:66:0b:39:81:ea:50:92:5b:5d:1f:e4:26:c1:9b:8b:a8:9e: 87:1a:26:5f:b8:31:c1:e2:e3:a4:0e:75:3f:78:96:90:3b:27: 4a:8b:e2:30:b4:9f:5d:5c:ca:c7:af:f9:00:4f:36:24:b9:c9: 4a:ad:ad:71:6e:fd:cc:f5:c8:9e:54:b9:82:c3:e1:7f:03:fd: 0e:98:c2:32:47:0c:00:fe:68:bd:75:ca:97:11:7b:33:0f:ee: f5:1f:cc:7f:8a:dc:2f:a5:25:0c:ae:e0:2a:aa:70:4f:4d:ae: a4:0e:ec:26:bb:ef:8a:7a:88:2b:d5:81:82:5b:71:ff:40:69: 2f:7a:da:48 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTgT4JERrpXiODO0jfc4KoBZpmDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNTEyMjExMjE5MTNaFw0yNTEyMjIxNjA0MTNaMDMxMTAvBgNV BAMTKDA0MzY4MzRDREVFOTUzMDgxMUY2NTUwRjNGQzQ4NTgwOTQ2NTI1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5UpGbqdFzhik/1uEz5lKMtlN NxhfikZXXud2Zlun4L1W5kf+wZSHScUYP0h7UEXLyESNTrnOROLcecYM45p/ifvg Pf+2B4lCWbHCf/NNXYpn68QOsk8/otCyQJEKK25RkyBqRvY1lxAB5yv733f5zNud dxEafNWSIaZ3zN8t7MiGAc/5EE9bHKIyT9Y/ayB2iDAcrfOR4q9GYTcg8qumSOCK L6Ey5pRJX98jDrmpmNqZyYrI1rxExnZraUDW7QcIyaYMkeVL1hYOweJz40Juii7P LHvcPGqURnPrP69S9DdX7mV4ABc4l1M8CUqYbqJkoaL0wXsoahUaiNrnwky3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUBDaDTN7pUwgR9lUPP8SFgJRlJaowHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACfyBSc3qmnFgXuu1VLE B/2lu4zPsbrCjbxxC5gpqw1+4CKwOHT6DsLRs5kmFmnA+0aBs9+1zqARHgYYPPVO GvwBfoCVunsT8OH1a4Ut31Om2Je1g9NvwOv2LjNQXwsHdK2w9sOWk4WA6T3M4WDz NmEF5AX5O1R8fyYH3W1bI3xmCzmB6lCSW10f5CbBm4uonocaJl+4McHi46QOdT94 lpA7J0qL4jC0n11cysev+QBPNiS5yUqtrXFu/cz1yJ5UuYLD4X8D/Q6YwjJHDAD+ aL11ypcRezMP7vUfzH+K3C+lJQyu4CqqcE9NrqQO7Ca774p6iCvVgYJbcf9AaS96 2kg= -----END CERTIFICATE-----Generated at Sun Dec 21 19:31:11 2025 by rpki-client