This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: LGPp4CX7gPI2Hfz57qK0mLS0s5jfAGrWfhsTG/63FNA= Subject key identifier: 3A:B1:E2:4A:B7:A6:D6:79:C5:E1:B1:30:8A:B1:9C:FD:39:AF:57:B5 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 3C2967536D032BE31B8BC9844C13981567711D85 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 02AA Signing time: Wed 24 Dec 2025 10:42:14 +0000 Manifest this update: Wed 24 Dec 2025 10:37:14 +0000 Manifest next update: Thu 25 Dec 2025 11:10:14 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: ToFc07+hDB9vFRppXU6l+9/9pXRCwdsHOmDgxe8wPa0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:29:67:53:6d:03:2b:e3:1b:8b:c9:84:4c:13:98:15:67:71:1d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Dec 24 10:37:14 2025 GMT Not After : Dec 25 11:10:14 2025 GMT Subject: CN=3AB1E24AB7A6D679C5E1B1308AB19CFD39AF57B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:be:c2:ac:9b:6d:cb:c4:81:97:82:81:d6: 9a:e3:df:6e:52:7d:2d:7b:cf:2d:4f:07:9a:a4:62: f6:79:4c:b9:d1:57:a8:a7:f0:ce:79:2f:2e:7e:64: 4e:ae:5f:07:3f:f0:13:b4:44:e9:86:2b:31:32:08: a8:ef:ea:3d:2e:b9:f1:d7:41:bb:c7:cb:2d:1d:6e: b4:f0:f0:4c:ca:ee:94:3c:ec:ef:62:3d:29:50:0e: b5:f5:db:c0:b0:dc:50:b7:33:b9:b7:b6:66:e4:7c: 52:d6:de:35:25:64:f1:36:1a:ac:b8:ff:3f:22:02: 2d:8f:12:6e:9c:e1:63:f7:28:75:2a:89:c4:f1:cc: 35:42:fa:9a:6d:68:49:b4:5b:1c:1d:f7:28:e6:df: 0a:73:eb:47:06:3a:5e:03:1c:4f:b2:37:aa:d4:93: 12:54:f2:94:9e:d4:aa:83:27:de:f6:28:d3:de:83: bc:31:0f:ac:e5:0d:b3:20:96:16:2f:ff:67:7f:40: c3:ee:e2:d9:60:21:b8:96:9a:0d:89:37:ae:b5:ba: f9:20:85:da:68:f2:ac:62:4b:fe:05:67:7e:28:3e: f0:13:ae:6e:61:7e:05:41:fe:a2:f6:45:52:a0:eb: f9:e2:48:7e:2d:53:43:a9:8f:31:90:8b:f5:12:cf: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B1:E2:4A:B7:A6:D6:79:C5:E1:B1:30:8A:B1:9C:FD:39:AF:57:B5 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:07:7c:6e:89:4d:8e:0f:fb:ee:3c:22:4e:7e:5f:17:8f:07: c7:75:09:fa:68:c5:ff:7d:7e:bd:17:89:be:39:41:97:de:8d: 2b:73:0b:31:98:ae:47:5d:a6:16:7f:29:85:e1:47:cf:24:dd: b3:de:2d:b4:25:ab:a9:09:21:a8:ec:6f:ee:10:fb:ab:96:8e: 04:df:47:ab:ff:02:f6:97:a8:65:86:fb:04:46:c0:2b:d5:5e: 4f:2c:0b:64:2b:aa:ea:a4:cd:06:87:a0:a9:ac:1e:fa:a8:9a: b4:97:39:0a:47:e5:d4:57:a3:36:3a:88:37:c4:75:96:f0:fd: 0a:6e:71:8c:ed:81:0c:0d:29:6b:c6:2d:f9:7f:d6:cb:fd:15: 6f:33:27:79:45:f9:65:f9:07:c2:80:57:28:dd:99:04:d7:f4: e5:fb:b1:27:9f:3f:1a:47:05:b3:61:eb:53:28:2e:0c:3c:8b: 6b:4c:a5:92:9f:6b:28:4f:80:33:ee:d2:bb:5e:99:77:9e:82: ec:6c:a1:00:97:28:43:db:e5:2a:3c:cb:df:92:39:8e:1d:f5: 03:a2:20:28:eb:ab:03:90:6f:3d:9a:07:21:29:01:5d:d8:d6: 32:c9:23:5e:4a:55:e7:67:51:55:32:2d:fc:ba:84:fb:9c:91: d6:c9:96:16 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPClnU20DK+Mbi8mETBOYFWdxHYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNTEyMjQxMDM3MTRaFw0yNTEyMjUxMTEwMTRaMDMxMTAvBgNV BAMTKDNBQjFFMjRBQjdBNkQ2NzlDNUUxQjEzMDhBQjE5Q0ZEMzlBRjU3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnr7CrJtty8SBl4KB1prj325S fS17zy1PB5qkYvZ5TLnRV6in8M55Ly5+ZE6uXwc/8BO0ROmGKzEyCKjv6j0uufHX QbvHyy0dbrTw8EzK7pQ87O9iPSlQDrX128Cw3FC3M7m3tmbkfFLW3jUlZPE2Gqy4 /z8iAi2PEm6c4WP3KHUqicTxzDVC+pptaEm0Wxwd9yjm3wpz60cGOl4DHE+yN6rU kxJU8pSe1KqDJ972KNPeg7wxD6zlDbMglhYv/2d/QMPu4tlgIbiWmg2JN661uvkg hdpo8qxiS/4FZ34oPvATrm5hfgVB/qL2RVKg6/niSH4tU0OpjzGQi/USz1nrAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUOrHiSrem1nnF4bEwirGc/TmvV7UwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEEHfG6JTY4P++48Ik5+ XxePB8d1Cfpoxf99fr0Xib45QZfejStzCzGYrkddphZ/KYXhR88k3bPeLbQlq6kJ Iajsb+4Q+6uWjgTfR6v/AvaXqGWG+wRGwCvVXk8sC2QrquqkzQaHoKmsHvqomrSX OQpH5dRXozY6iDfEdZbw/QpucYztgQwNKWvGLfl/1sv9FW8zJ3lF+WX5B8KAVyjd mQTX9OX7sSefPxpHBbNh61MoLgw8i2tMpZKfayhPgDPu0rtemXeeguxsoQCXKEPb 5So8y9+SOY4d9QOiICjrqwOQbz2aByEpAV3Y1jLJI15KVednUVUyLfy6hPuckdbJ lhY= -----END CERTIFICATE-----Generated at Wed Dec 24 11:42:26 2025 by rpki-client