This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json) Hash identifier: 357hzr403J0nzU5TY0NmOF5Vcyunp5oudx6q9jDTap4= Subject key identifier: CD:31:6F:7D:D5:85:09:16:2C:FF:89:69:D6:F6:E3:80:F5:FD:74:51 Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d Certificate serial: 527DCD1ECCF120038518D29F639E7C9DE5BED956 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft Manifest number: 02A5 Signing time: Wed 17 Dec 2025 11:25:25 +0000 Manifest this update: Wed 17 Dec 2025 11:20:25 +0000 Manifest next update: Thu 18 Dec 2025 13:03:25 +0000 Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: npUqD1bBlBT3Gz+oJH2iAhawV7/GlNDBUQ5D9+XPloQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7d:cd:1e:cc:f1:20:03:85:18:d2:9f:63:9e:7c:9d:e5:be:d9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d Validity Not Before: Dec 17 11:20:25 2025 GMT Not After : Dec 18 13:03:25 2025 GMT Subject: CN=CD316F7DD58509162CFF8969D6F6E380F5FD7451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:08:06:b3:a6:bf:fb:ca:80:fe:c1:0e:53: 0f:02:a5:be:a5:45:fd:f3:12:e5:82:7a:4f:d3:57: 8a:eb:77:48:b7:ad:59:4c:f7:66:2a:e2:a8:ac:fc: 24:87:39:b7:52:d0:42:25:8e:ba:f4:05:00:d5:97: 38:4f:ae:41:14:5e:b8:df:c6:dd:c6:ce:1f:ea:22: 4a:94:52:3b:9a:7c:82:7d:e4:84:46:a7:18:67:e5: 49:f7:fb:42:99:85:47:3a:a4:66:40:e4:40:b3:71: fb:0c:30:4c:a4:76:25:4c:d7:27:9b:a7:20:36:85: 5b:2b:41:50:39:10:76:1d:81:9d:1a:be:db:46:aa: 67:6c:51:2c:df:9f:09:a0:2c:55:30:23:37:d5:ae: f8:c2:4a:c8:67:41:ba:75:b2:48:55:ce:e9:e9:89: ff:9d:d4:6a:f9:63:e1:00:22:b4:43:de:0c:2b:8e: e5:ff:43:f1:9c:55:9a:db:21:8e:3b:f6:ad:ff:5e: 69:87:3f:b6:95:c5:f8:f5:ea:d0:fc:8b:5a:18:f5: 85:95:75:77:94:cb:ab:62:83:00:bf:91:f9:3e:bd: 3d:69:d1:eb:bc:ef:ff:8e:6e:be:c4:b7:5f:6c:a5: 72:22:a6:a0:39:2f:75:17:b1:18:ee:13:39:28:99: 71:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:31:6F:7D:D5:85:09:16:2C:FF:89:69:D6:F6:E3:80:F5:FD:74:51 X509v3 Authority Key Identifier: keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:17:6a:e6:3f:85:67:bf:0a:74:00:51:c2:50:4b:40:63:c2: 54:11:1d:d7:1e:42:1f:87:27:23:de:04:06:62:6c:dc:c2:3b: 20:b4:e1:c4:c2:63:31:be:27:85:aa:37:2b:6a:ff:8d:fd:cf: 38:ab:a9:eb:8e:25:9e:77:6c:ef:18:10:f0:a9:54:68:0d:62: fd:23:49:6b:1b:3a:93:02:9b:99:d9:85:c3:af:20:fe:c2:85: b1:15:cb:f6:6b:6a:60:ac:94:e4:7d:e9:4a:64:05:86:1b:15: 62:44:3b:e3:92:47:5a:3c:25:f4:71:68:f7:28:fb:6f:01:4a: 28:40:7c:bd:79:9a:01:07:22:2f:42:1d:d8:91:14:21:ec:60: f4:24:2b:6d:3c:b7:52:62:f8:aa:e1:3f:b9:a5:4c:00:00:3c: a7:fe:55:e5:38:3f:0c:00:9d:bc:58:53:1e:c6:d9:00:5c:ad: ba:b2:72:80:52:dd:93:cd:0e:b7:c8:d2:91:f7:62:25:18:a7: 4e:91:49:5a:01:4f:5d:05:4a:f8:db:20:e7:ce:0c:88:a2:fa: 33:b3:8c:9e:5c:7e:f5:21:c1:aa:e5:7c:ab:e8:f4:70:40:cf: 84:89:c0:fb:3f:76:1c:0a:cc:3a:16:f1:10:ae:0a:a2:17:a7: 90:c2:f3:35 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUUn3NHszxIAOFGNKfY558neW+2VYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFjOWNiMjU0NTRmMzk5Yzg4Y2RmZmNiYTc0YmI5MzA4 ODM0ZTA5ZDAeFw0yNTEyMTcxMTIwMjVaFw0yNTEyMTgxMzAzMjVaMDMxMTAvBgNV BAMTKENEMzE2RjdERDU4NTA5MTYyQ0ZGODk2OUQ2RjZFMzgwRjVGRDc0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kQgGs6a/+8qA/sEOUw8Cpb6l Rf3zEuWCek/TV4rrd0i3rVlM92Yq4qis/CSHObdS0EIljrr0BQDVlzhPrkEUXrjf xt3Gzh/qIkqUUjuafIJ95IRGpxhn5Un3+0KZhUc6pGZA5ECzcfsMMEykdiVM1yeb pyA2hVsrQVA5EHYdgZ0avttGqmdsUSzfnwmgLFUwIzfVrvjCSshnQbp1skhVzunp if+d1Gr5Y+EAIrRD3gwrjuX/Q/GcVZrbIY479q3/XmmHP7aVxfj16tD8i1oY9YWV dXeUy6tigwC/kfk+vT1p0eu87/+Obr7Et19spXIipqA5L3UXsRjuEzkomXHFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzTFvfdWFCRYs/4lp1vbjgPX9dFEwHwYDVR0j BBgwFoAUIcnLJUVPOZyIzf/Lp0u5MIg04J0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzEv MjFDOUNCMjU0NTRGMzk5Qzg4Q0RGRkNCQTc0QkI5MzA4ODM0RTA5RC5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL0ljbkxKVVZQT1p5SXpmX0xwMHU1TUlnMDRKMC5j ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wMTRiOTIwOGI1NDY0ZmYx YWVhYzFmYzgyOWFkMDM0My8xLzIxQzlDQjI1NDU0RjM5OUM4OENERkZDQkE3NEJC OTMwODgzNEUwOUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZF2rmP4Vnvwp0AFHCUEtAY8JUER3XHkIf hycj3gQGYmzcwjsgtOHEwmMxvieFqjcrav+N/c84q6nrjiWed2zvGBDwqVRoDWL9 I0lrGzqTApuZ2YXDryD+woWxFcv2a2pgrJTkfelKZAWGGxViRDvjkkdaPCX0cWj3 KPtvAUooQHy9eZoBByIvQh3YkRQh7GD0JCttPLdSYviq4T+5pUwAADyn/lXlOD8M AJ28WFMextkAXK26snKAUt2TzQ63yNKR92IlGKdOkUlaAU9dBUr42yDnzgyIovoz s4yeXH71IcGq5Xyr6PRwQM+EicD7P3YcCsw6FvEQrgqiF6eQwvM1 -----END CERTIFICATE-----Generated at Thu Dec 18 09:52:12 2025 by rpki-client