This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: L8FBgRX8QTOEhoj866X+4BYP5a6ar4g7mHoYI90xdGU= Subject key identifier: 26:18:83:92:76:EB:50:0E:31:20:E7:EA:DD:17:83:55:66:27:6B:E9 Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 7B3847D817BB733386AD0EF5BD291DD92C3175AE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 02AD Signing time: Thu 25 Dec 2025 02:41:54 +0000 Manifest this update: Thu 25 Dec 2025 02:36:54 +0000 Manifest next update: Fri 26 Dec 2025 03:12:54 +0000 Files and hashes: 1: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: XJPjlrS0azoSL+wtuJxQR5BC6QAuNrMQ16Vppt3m3kg=) 2: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 22:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:38:47:d8:17:bb:73:33:86:ad:0e:f5:bd:29:1d:d9:2c:31:75:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Dec 25 02:36:54 2025 GMT Not After : Dec 26 03:12:54 2025 GMT Subject: CN=2618839276EB500E3120E7EADD17835566276BE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5b:48:54:46:62:89:7e:67:ec:02:09:0b:10: 94:8a:95:0e:ba:ea:09:1f:f2:f9:c2:a8:0c:b3:a2: ed:62:43:8b:eb:42:bc:99:7c:aa:43:a4:ca:41:3a: 57:32:9f:1c:3d:6a:8b:36:21:46:da:4a:2a:91:d1: 40:c8:15:1a:33:46:49:d7:e3:b1:e4:7c:ba:25:ac: 9a:6e:6b:ee:5c:f5:15:01:58:91:a8:33:f6:c1:05: c7:5b:43:66:89:37:d7:3e:82:af:61:6b:bf:19:05: 2b:39:2e:88:36:b0:da:aa:d7:6f:b0:f6:00:0e:ac: aa:41:a5:67:28:3e:eb:1c:0c:cf:f1:3b:1d:4b:24: 6b:c3:ac:ce:e5:8b:77:f6:18:35:62:94:59:b2:ec: 00:1b:98:27:2f:8c:11:2e:5f:e6:a8:9c:5e:67:f5: 04:25:c7:33:25:1a:e0:91:64:66:d1:32:48:59:6c: 86:a3:98:c2:ea:fa:08:8d:e3:29:2a:10:64:7e:48: d5:96:86:69:ef:f7:36:6f:a5:19:1b:50:fb:10:c8: 66:dd:bc:53:e7:05:c5:77:09:0a:12:45:4c:2c:f9: 3f:1d:35:75:3c:5f:91:04:86:1f:06:83:5e:b4:15: 4b:30:75:06:26:cc:ad:93:45:25:40:92:7d:bc:b2: e6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:18:83:92:76:EB:50:0E:31:20:E7:EA:DD:17:83:55:66:27:6B:E9 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fb:fb:e6:ff:80:ec:93:13:22:ad:da:0f:0f:c7:3e:1a:e4: 17:f2:c1:05:48:d9:88:93:e8:ff:cd:b2:bc:d9:6c:18:b1:0e: fb:84:f4:74:87:73:45:b5:f9:f1:61:d0:fd:93:77:f3:da:d9: fc:cf:bc:c6:3d:98:2b:df:46:84:b5:74:89:43:53:20:d8:bc: 7a:76:d8:9a:35:81:0e:cf:0e:97:02:cd:d2:e8:00:f5:11:dd: 55:58:13:c0:41:c3:b5:d7:83:e0:8a:eb:50:59:26:8e:34:4b: 26:19:9f:12:43:d7:e0:08:9d:2a:ff:39:ac:94:07:2a:d5:ee: 73:45:46:19:2e:4c:4a:ad:b9:5c:6d:01:5a:5d:42:0b:96:62: 0c:7a:f1:3d:f6:80:5f:69:bf:c8:96:de:9f:b9:3d:ca:cf:ff: 8d:96:41:92:e9:10:e9:bc:64:cd:2a:bc:0f:78:32:c5:ff:0e: 4d:0a:bf:d2:0d:7c:90:2c:df:ef:07:bb:dc:4d:98:6d:1b:10: 7c:bd:68:d7:03:ce:57:43:d9:82:4d:1e:29:bf:a8:05:16:a9: 32:57:72:8e:a3:56:d5:be:f5:bc:21:3a:58:80:02:2f:6f:bc: 6b:34:b3:d5:c2:78:df:36:77:75:9c:11:5b:21:31:69:ec:31: ed:2a:ab:fc -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUezhH2Be7czOGrQ71vSkd2Swxda4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNTEyMjUwMjM2NTRaFw0yNTEyMjYwMzEyNTRaMDMxMTAvBgNV BAMTKDI2MTg4MzkyNzZFQjUwMEUzMTIwRTdFQUREMTc4MzU1NjYyNzZCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZW0hURmKJfmfsAgkLEJSKlQ66 6gkf8vnCqAyzou1iQ4vrQryZfKpDpMpBOlcynxw9aos2IUbaSiqR0UDIFRozRknX 47HkfLolrJpua+5c9RUBWJGoM/bBBcdbQ2aJN9c+gq9ha78ZBSs5Log2sNqq12+w 9gAOrKpBpWcoPuscDM/xOx1LJGvDrM7li3f2GDVilFmy7AAbmCcvjBEuX+aonF5n 9QQlxzMlGuCRZGbRMkhZbIajmMLq+giN4ykqEGR+SNWWhmnv9zZvpRkbUPsQyGbd vFPnBcV3CQoSRUws+T8dNXU8X5EEhh8Gg160FUswdQYmzK2TRSVAkn28suYBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUJhiDknbrUA4xIOfq3ReDVWYna+kwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJb7++b/gOyTEyKt2g8P xz4a5BfywQVI2YiT6P/NsrzZbBixDvuE9HSHc0W1+fFh0P2Td/Pa2fzPvMY9mCvf RoS1dIlDUyDYvHp22Jo1gQ7PDpcCzdLoAPUR3VVYE8BBw7XXg+CK61BZJo40SyYZ nxJD1+AInSr/OayUByrV7nNFRhkuTEqtuVxtAVpdQguWYgx68T32gF9pv8iW3p+5 PcrP/42WQZLpEOm8ZM0qvA94MsX/Dk0Kv9INfJAs3+8Hu9xNmG0bEHy9aNcDzldD 2YJNHim/qAUWqTJXco6jVtW+9bwhOliAAi9vvGs0s9XCeN82d3WcEVshMWnsMe0q q/w= -----END CERTIFICATE-----Generated at Thu Dec 25 09:28:19 2025 by rpki-client