This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/1/89503C411932836C7C48E9613099914168BBF5D8.mft
File: 89503C411932836C7C48E9613099914168BBF5D8.mft (raw, json)
Hash identifier: 8bsh/4oYoS2xSaX8W6/YWMTSTt1BHgsKbGNHqr1dn84=
Subject key identifier: A7:5C:4C:90:14:19:5C:41:B1:25:05:12:54:9B:E1:D8:44:A9:1F:6E
Authority key identifier: 89:50:3C:41:19:32:83:6C:7C:48:E9:61:30:99:91:41:68:BB:F5:D8
Certificate issuer: /CN=89503c411932836c7c48e9613099914168bbf5d8
Certificate serial: 14F86D99ED23A6D8B967934844088337A28DA375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVA8QRkyg2x8SOlhMJmRQWi79dg.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/1/89503C411932836C7C48E9613099914168BBF5D8.mft
Manifest number: 1C
Signing time: Sun 07 Dec 2025 15:36:52 +0000
Manifest this update: Sun 07 Dec 2025 15:31:51 +0000
Manifest next update: Mon 08 Dec 2025 15:51:51 +0000
Files and hashes: 1: 89503C411932836C7C48E9613099914168BBF5D8.crl (hash: IKbNeLAbOwMgY4XAGyiFIjnn13CkFlt5dyeUPb09Xis=)
2: AS214749.asa (hash: SnDfNyDqHDWSJJwuuSjiUrPx5LPL75TSJLzG6UCF7O0=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/1/89503C411932836C7C48E9613099914168BBF5D8.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/1/89503C411932836C7C48E9613099914168BBF5D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVA8QRkyg2x8SOlhMJmRQWi79dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Dec 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:f8:6d:99:ed:23:a6:d8:b9:67:93:48:44:08:83:37:a2:8d:a3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89503c411932836c7c48e9613099914168bbf5d8
Validity
Not Before: Dec 7 15:31:51 2025 GMT
Not After : Dec 8 15:51:51 2025 GMT
Subject: CN=A75C4C9014195C41B1250512549BE1D844A91F6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:66:70:21:80:d3:55:0e:f8:19:7d:1d:a2:
95:0f:64:f9:45:3f:10:41:65:f5:c1:32:c4:42:45:
0f:08:c3:ee:e5:9d:fe:06:04:17:57:ce:97:fe:36:
57:1c:a3:1d:16:3c:22:96:48:28:7f:a7:3e:ac:35:
6a:06:05:24:dd:1c:49:08:e7:80:f8:f3:08:dd:b2:
24:8c:73:fa:06:a1:b9:a5:2b:4e:a5:2c:fa:da:6a:
c8:42:2e:e1:38:77:36:80:3f:63:98:99:bd:bf:de:
94:b1:28:c1:40:86:ef:20:a0:20:3c:63:95:4d:fb:
bd:61:78:21:5f:ad:7d:c1:2e:2c:47:94:81:bd:c8:
d5:dc:60:30:b4:6f:67:e1:f6:c1:52:37:f4:10:c7:
53:1d:91:dc:59:6f:08:91:43:22:bb:86:b2:f0:8b:
6e:78:a9:1f:1c:c1:78:11:ef:d4:e4:f3:64:3c:85:
06:99:b6:0a:81:1b:a5:ce:bb:96:fa:68:22:43:09:
f6:ba:8d:4a:32:8a:65:ae:4e:09:76:e7:98:20:5d:
84:f1:ca:ab:c8:ec:b0:97:ee:6a:a5:57:c9:08:01:
d2:fb:6e:ca:4f:0d:fe:3d:d0:ab:39:8c:39:f2:a0:
a4:96:e3:42:c6:91:95:29:69:11:be:ec:cb:f3:ce:
c3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5C:4C:90:14:19:5C:41:B1:25:05:12:54:9B:E1:D8:44:A9:1F:6E
X509v3 Authority Key Identifier:
keyid:89:50:3C:41:19:32:83:6C:7C:48:E9:61:30:99:91:41:68:BB:F5:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/1/89503C411932836C7C48E9613099914168BBF5D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVA8QRkyg2x8SOlhMJmRQWi79dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/1/89503C411932836C7C48E9613099914168BBF5D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f8:9b:31:0b:d2:7d:a2:36:be:78:49:78:cd:42:91:59:95:
9f:52:9a:b6:fb:35:26:a8:58:7d:ef:ac:7c:ad:e4:5c:0e:25:
e6:5f:bb:e9:7e:a7:51:10:2d:0f:f1:0d:7e:c1:5e:0f:f1:76:
d5:1f:e8:1c:92:cc:bf:34:d4:da:5f:86:b2:72:72:cc:17:6c:
1b:4c:5d:58:a8:b7:23:ff:77:13:99:53:6a:80:0d:12:b9:4f:
59:83:df:82:ae:a2:af:3c:2e:fc:dc:06:75:27:07:98:cd:c5:
f9:e2:f0:81:6b:21:2f:70:79:da:f7:f9:3d:ec:56:3a:cc:a0:
66:2f:40:3c:27:47:d5:83:1a:e9:a6:06:bf:63:55:73:0c:c0:
f9:f4:9f:cc:a6:09:e0:a8:43:1e:ce:23:7f:03:83:5e:38:4a:
46:58:36:17:65:00:85:0e:23:fa:63:29:4c:74:86:1c:85:5e:
42:36:ea:9f:09:93:f2:ea:ea:64:08:4a:21:66:79:9e:5a:c9:
59:ce:8a:d1:7c:eb:79:01:ce:9e:74:93:d2:60:aa:2f:aa:20:
04:6c:5f:c9:b5:75:11:63:d3:2b:2b:75:ab:c8:3e:0a:ac:a2:
2c:ce:8f:4c:78:c9:0f:2b:be:3a:dd:8c:23:f1:15:2d:83:d5:
a3:08:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 16:56:38 2025 by rpki-client