This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: Sjug1okDcX63pkWyVgHKJmAbOovOHghvQnK6rvttgIw= Subject key identifier: 93:C4:49:46:83:DE:68:DE:C0:B4:E2:29:AB:DE:11:72:EA:72:04:08 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 48948A967FD397FFBDC360007A48E29315656B3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 0177 Signing time: Tue 16 Dec 2025 20:54:03 +0000 Manifest this update: Tue 16 Dec 2025 20:49:03 +0000 Manifest next update: Wed 17 Dec 2025 22:10:03 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: vv9ukFR7MX6BhhA0lUCeuyt+hamXLe7gozCnaUe9aYM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:94:8a:96:7f:d3:97:ff:bd:c3:60:00:7a:48:e2:93:15:65:6b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Dec 16 20:49:03 2025 GMT Not After : Dec 17 22:10:03 2025 GMT Subject: CN=93C4494683DE68DEC0B4E229ABDE1172EA720408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:f3:e4:44:67:75:55:e8:b7:1e:43:83:5b: 7a:bc:5a:77:1d:a7:59:b0:80:df:a9:c9:3b:a3:4a: b3:10:c1:07:93:0e:fe:ea:5a:39:31:2b:40:43:58: 05:4c:22:a8:4f:82:06:0f:df:7d:fe:10:3a:ef:8a: 2b:54:93:e8:73:3e:d4:21:07:4a:5e:83:1e:1d:ba: 95:76:a3:1d:7b:45:ee:39:9b:dc:51:a5:af:53:6d: 8c:80:03:a4:5f:f1:44:f8:56:0f:5c:61:00:3d:27: 3d:28:fe:2b:03:f4:ec:a1:67:4e:83:ab:5a:58:77: 70:83:cf:fd:24:d3:b9:fd:b6:6a:d8:3c:71:2f:8c: 9f:99:4d:cc:79:45:f6:bb:29:d3:7e:16:eb:e0:de: 4c:78:e6:fd:6c:4e:8c:35:12:15:37:5b:50:4c:13: c3:7a:06:2f:88:fb:b2:6d:34:a3:ad:cc:1e:b5:8b: 19:a1:c0:75:3e:df:8e:ed:30:99:e8:d5:3c:6c:57: 60:2d:c5:0a:89:bd:56:53:16:96:a9:b5:a2:72:80: be:e4:9e:0c:01:9e:1a:b6:f8:b4:f9:1f:b9:7f:a8: 32:22:67:f9:6c:88:bf:81:96:9d:bb:44:33:3a:bb: 02:43:97:53:55:4e:70:60:2c:80:42:15:b5:6d:fd: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C4:49:46:83:DE:68:DE:C0:B4:E2:29:AB:DE:11:72:EA:72:04:08 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1f:3c:40:b8:a6:f6:f0:72:8f:1c:9d:a4:42:bd:eb:b0:ca: ee:cb:2d:90:69:05:e8:d5:98:bb:ee:38:07:30:5b:1e:29:e4: ec:f4:a4:e1:04:3f:c3:f1:d7:ce:5b:ab:c6:b1:3f:22:16:c5: 1f:96:77:52:6c:c5:b7:b3:47:ec:66:54:6a:70:21:e5:9d:83: 95:5a:5e:44:ad:20:5d:4b:05:ff:80:a4:78:5a:98:51:57:14: 68:e3:7f:8a:cf:6c:8a:9c:7f:5c:7e:d2:d3:d8:a3:77:7d:9f: 84:71:14:eb:77:32:30:44:2f:36:14:bc:ea:81:d2:27:40:c5: 4d:17:dd:91:6a:52:84:47:18:6f:7c:d3:2e:7e:bf:88:83:67: c0:f9:6e:7d:73:83:78:cd:e6:18:df:48:4b:47:0e:31:9f:a7: 6c:2d:97:a5:90:90:38:7d:7b:d9:a7:02:ab:b7:27:8e:01:62: 44:38:eb:61:ab:c1:7c:8a:84:9e:c4:1c:de:42:82:16:9d:dc: e6:01:bc:5f:be:7a:70:f0:99:b6:31:2b:10:07:4a:b9:25:2d: 28:94:84:bf:2a:88:25:e6:c9:84:33:59:42:b0:f5:40:ca:7a: 22:89:2d:5e:62:b9:44:7c:22:37:b7:40:9f:1c:1e:0e:33:69: 0a:31:05:e7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUSJSKln/Tl/+9w2AAekjikxVlaz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNTEyMTYyMDQ5MDNaFw0yNTEyMTcyMjEwMDNaMDMxMTAvBgNV BAMTKDkzQzQ0OTQ2ODNERTY4REVDMEI0RTIyOUFCREUxMTcyRUE3MjA0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qPPkRGd1Vei3HkODW3q8Wncd p1mwgN+pyTujSrMQwQeTDv7qWjkxK0BDWAVMIqhPggYP333+EDrviitUk+hzPtQh B0pegx4dupV2ox17Re45m9xRpa9TbYyAA6Rf8UT4Vg9cYQA9Jz0o/isD9OyhZ06D q1pYd3CDz/0k07n9tmrYPHEvjJ+ZTcx5Rfa7KdN+Fuvg3kx45v1sTow1EhU3W1BM E8N6Bi+I+7JtNKOtzB61ixmhwHU+347tMJno1TxsV2AtxQqJvVZTFpaptaJygL7k ngwBnhq2+LT5H7l/qDIiZ/lsiL+Blp27RDM6uwJDl1NVTnBgLIBCFbVt/YRdAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUk8RJRoPeaN7AtOIpq94RcupyBAgwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABMfPEC4pvbwco8cnaRC veuwyu7LLZBpBejVmLvuOAcwWx4p5Oz0pOEEP8Px185bq8axPyIWxR+Wd1Jsxbez R+xmVGpwIeWdg5VaXkStIF1LBf+ApHhamFFXFGjjf4rPbIqcf1x+0tPYo3d9n4Rx FOt3MjBELzYUvOqB0idAxU0X3ZFqUoRHGG980y5+v4iDZ8D5bn1zg3jN5hjfSEtH DjGfp2wtl6WQkDh9e9mnAqu3J44BYkQ462GrwXyKhJ7EHN5Cghad3OYBvF++enDw mbYxKxAHSrklLSiUhL8qiCXmyYQzWUKw9UDKeiKJLV5iuUR8Ije3QJ8cHg4zaQox Bec= -----END CERTIFICATE-----Generated at Wed Dec 17 00:23:49 2025 by rpki-client