This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json) Hash identifier: RDaH7DVHrSgSLVp+75xqzhChzOFecSwwmyc03VQ4egU= Subject key identifier: B7:06:58:C5:AF:5C:14:8C:D1:86:E3:99:44:AC:DC:57:32:8A:8A:BB Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 Certificate issuer: /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Certificate serial: 472518987D7560B1CB5C39B9BC86812A3551732E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft Manifest number: 01CA Signing time: Sat 20 Dec 2025 00:10:51 +0000 Manifest this update: Sat 20 Dec 2025 00:05:49 +0000 Manifest next update: Sun 21 Dec 2025 02:48:49 +0000 Files and hashes: 1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: /4/W3s/jw7menEJDxPVm/NOpNjui1G4XSLDFukvAwsk=) 2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:25:18:98:7d:75:60:b1:cb:5c:39:b9:bc:86:81:2a:35:51:73:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3 Validity Not Before: Dec 20 00:05:49 2025 GMT Not After : Dec 21 02:48:49 2025 GMT Subject: CN=B70658C5AF5C148CD186E39944ACDC57328A8ABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:e1:6c:9c:46:cc:e2:91:f0:aa:44:7b:bf: 8c:2e:31:ff:b3:30:50:3c:4a:08:29:1f:47:2d:a4: 79:41:59:06:56:6e:8e:52:e0:45:31:b4:6b:e0:0e: 5f:6b:8c:40:3e:28:81:e6:6b:1f:82:be:1f:a3:46: a6:0d:dc:df:70:9f:fb:d6:55:b4:40:5a:1a:72:e9: cf:ba:7f:33:c7:7d:ee:64:fa:28:13:a8:99:14:ab: f0:83:2d:ce:12:ad:a8:d3:c8:77:a6:ed:82:f9:62: dd:08:a5:9a:04:52:35:8f:4c:b6:82:2b:a3:63:a4: 9f:99:4c:82:9b:6e:14:eb:02:b1:ea:69:89:d6:d8: 02:fa:25:ac:8c:8a:3e:b7:46:9e:04:59:f3:fd:8d: 1f:5c:4d:9f:3f:d7:a8:0a:be:6a:cf:13:5a:24:90: 35:11:6b:ae:51:d1:3c:b8:9a:88:91:c7:61:d6:2d: 2b:84:49:25:a8:30:67:90:53:f2:f3:62:e5:6e:c4: e9:f7:cf:5d:a9:43:7f:01:f6:83:d6:67:6d:62:21: 9b:88:4c:59:b9:af:a2:a1:48:1a:61:f5:ac:b8:6f: e3:b1:c2:48:4a:c8:ea:72:d9:7f:6c:f6:18:81:48: 8d:12:5f:c2:c6:2f:53:05:fb:8e:f3:13:f9:55:68: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:06:58:C5:AF:5C:14:8C:D1:86:E3:99:44:AC:DC:57:32:8A:8A:BB X509v3 Authority Key Identifier: keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:cf:08:71:16:5e:80:d0:7a:90:69:f4:d1:a2:c6:89:6a:e3: 0f:af:9b:76:19:8f:af:de:f9:de:39:41:31:aa:22:f3:14:51: 24:01:16:22:6d:c9:f2:4c:82:5d:74:00:b5:34:5c:3d:cc:42: 09:56:be:3a:c0:3e:24:94:55:d7:3f:9b:fc:cb:e5:00:65:37: c6:cd:3c:d6:de:44:f2:95:5f:80:40:30:3f:27:5b:8a:6e:25: c9:4a:3c:e1:29:86:56:c5:44:cd:1d:8f:7d:d5:5a:c5:52:20: 0a:ee:b7:8d:3d:98:72:13:35:4e:0b:2f:35:21:89:79:d0:a9: df:ba:d2:3b:f3:c7:36:58:58:21:6d:fc:d5:26:9c:ca:8c:6a: 3c:5c:b2:48:1f:79:0f:f7:3c:d0:13:ed:bb:52:1c:32:63:66: 41:4c:8c:d2:e0:1d:a3:92:f0:8d:0f:85:ed:86:97:c9:17:14: 28:8b:32:03:a5:9a:bb:ea:23:d6:16:9f:3e:50:c2:32:f4:31: d6:07:9b:60:7b:2d:c5:ac:25:f1:a3:9a:e0:45:f9:66:2e:3d: 9b:c7:a1:cb:89:12:fa:ac:7e:d5:50:37:12:89:9f:2d:ef:cd: a5:a0:cb:96:88:0c:82:c3:03:4f:9b:23:a4:f4:db:ce:2d:f8: 45:ff:0e:14 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURyUYmH11YLHLXDm5vIaBKjVRcy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE NTQ3ODZEMzAeFw0yNTEyMjAwMDA1NDlaFw0yNTEyMjEwMjQ4NDlaMDMxMTAvBgNV BAMTKEI3MDY1OEM1QUY1QzE0OENEMTg2RTM5OTQ0QUNEQzU3MzI4QThBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7eFsnEbM4pHwqkR7v4wuMf+z MFA8SggpH0ctpHlBWQZWbo5S4EUxtGvgDl9rjEA+KIHmax+Cvh+jRqYN3N9wn/vW VbRAWhpy6c+6fzPHfe5k+igTqJkUq/CDLc4SrajTyHem7YL5Yt0IpZoEUjWPTLaC K6NjpJ+ZTIKbbhTrArHqaYnW2AL6JayMij63Rp4EWfP9jR9cTZ8/16gKvmrPE1ok kDURa65R0Ty4moiRx2HWLSuESSWoMGeQU/LzYuVuxOn3z12pQ38B9oPWZ21iIZuI TFm5r6KhSBph9ay4b+OxwkhKyOpy2X9s9hiBSI0SX8LGL1MF+47zE/lVaOltAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUtwZYxa9cFIzRhuOZRKzcVzKKirswHwYDVR0j BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5 N0Q1NDc4NkQzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzFlYmZk NTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAvNkQ5NEI5RDdCN0MxOEE3QTQ5 N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIDPCHEWXoDQepBp9NGi xolq4w+vm3YZj6/e+d45QTGqIvMUUSQBFiJtyfJMgl10ALU0XD3MQglWvjrAPiSU Vdc/m/zL5QBlN8bNPNbeRPKVX4BAMD8nW4puJclKPOEphlbFRM0dj33VWsVSIAru t409mHITNU4LLzUhiXnQqd+60jvzxzZYWCFt/NUmnMqMajxcskgfeQ/3PNAT7btS HDJjZkFMjNLgHaOS8I0Phe2Gl8kXFCiLMgOlmrvqI9YWnz5QwjL0MdYHm2B7LcWs JfGjmuBF+WYuPZvHocuJEvqsftVQNxKJny3vzaWgy5aIDILDA0+bI6T0284t+EX/ DhQ= -----END CERTIFICATE-----Generated at Sat Dec 20 12:10:21 2025 by rpki-client