This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: OLIivlYsz9H6Kih+1tvy17NEfzaGFkSheoGT3tBPBqA= Subject key identifier: 23:FD:1A:BD:63:91:09:06:BC:0B:66:75:2F:DF:93:33:11:CF:1E:1B Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 43CD946AA21E7AF8E29165770DB171C2FFE424D4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 02AD Signing time: Tue 23 Dec 2025 14:48:33 +0000 Manifest this update: Tue 23 Dec 2025 14:43:33 +0000 Manifest next update: Wed 24 Dec 2025 15:19:33 +0000 Files and hashes: 1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=) 2: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: jPEpRIAefeyWaZYtSfj9bO7AxEYX8W4gIcxnRsV+jrA=) 3: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cd:94:6a:a2:1e:7a:f8:e2:91:65:77:0d:b1:71:c2:ff:e4:24:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Dec 23 14:43:33 2025 GMT Not After : Dec 24 15:19:33 2025 GMT Subject: CN=23FD1ABD63910906BC0B66752FDF933311CF1E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:de:49:33:d9:09:94:f8:a1:a8:ac:7c:3e: 50:b2:fc:8d:29:2f:87:49:ff:08:2a:c1:07:37:d5: 06:f6:e7:a1:31:de:29:8e:40:b3:b7:6a:dc:a0:b6: 24:ab:28:f9:83:3c:f5:0d:a6:2a:88:8a:22:95:9b: 03:7d:72:8d:98:68:c7:6f:a4:ec:cd:ef:53:d2:2f: 64:0d:54:89:f9:00:04:c4:c1:e7:90:63:23:23:a7: d0:67:ca:1b:ff:5a:35:f3:89:b3:26:7c:73:e9:e4: fd:1f:e1:c9:27:86:e1:c5:30:ef:30:2f:c3:d9:6b: 76:7c:ed:fc:66:37:c4:78:af:1f:12:e2:42:a6:45: da:b1:8b:a1:e4:3c:4d:7c:c6:37:21:41:e2:7f:24: be:52:0a:d9:1d:8f:b8:74:3a:d7:f5:27:f6:a9:e0: 61:44:94:2e:68:c0:b7:de:22:f4:bc:26:28:ab:b2: da:8d:67:43:07:1d:5f:81:ff:fc:ce:1a:75:57:68: 38:20:fb:f5:c8:82:9f:b2:e3:33:c1:eb:74:8a:11: 23:65:ae:c5:d7:34:73:54:12:4b:86:d2:35:34:fd: 08:c0:d5:c0:d7:7c:46:77:01:20:89:a5:9f:a1:4d: 14:f4:23:33:fa:12:9c:2d:eb:0b:1e:f2:cc:c6:42: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FD:1A:BD:63:91:09:06:BC:0B:66:75:2F:DF:93:33:11:CF:1E:1B X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:44:20:88:f1:b0:d0:64:ed:3e:18:88:5d:1f:2b:49:33:e9: 7a:da:2c:53:9c:6d:12:76:8c:56:c5:ea:2e:49:85:59:76:5b: 5b:cd:d2:05:0e:16:a6:9e:3a:3c:40:4b:b6:4c:6f:12:91:c1: 04:7d:26:0f:c1:7a:c1:5f:62:99:15:70:01:4a:c2:dc:e1:34: 2c:11:e7:40:5b:79:e0:df:6a:0d:c9:4a:db:e4:ef:9b:fc:cb: bc:be:45:a4:63:89:7c:03:d3:b2:0a:3a:3d:25:ca:cd:42:fa: 8e:3f:ff:51:c4:c8:23:c4:6a:a9:6c:55:fb:99:f5:46:67:e6: ea:b2:69:e9:9d:bb:65:e8:e7:e9:84:45:db:00:00:26:02:1c: 1d:76:43:1f:7a:e8:bf:cc:2f:d1:9a:7a:46:94:a8:50:04:4e: b7:86:55:3b:8c:94:b2:1d:33:ad:85:04:d6:f2:b8:80:99:d9: 85:87:b0:4d:a5:62:77:e1:51:6a:06:0c:fb:e5:21:3e:8a:59: 33:32:23:73:04:fe:81:b0:20:a6:03:f9:6e:51:19:79:85:89: 5d:56:a3:7b:e8:d1:ec:7e:a6:28:9a:47:1f:1a:ef:c4:00:43: c1:f2:b8:cf:d8:66:85:8f:6a:6a:dd:a0:93:36:cb:16:dd:21: 86:61:ba:17 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQ82UaqIeevjikWV3DbFxwv/kJNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNTEyMjMxNDQzMzNaFw0yNTEyMjQxNTE5MzNaMDMxMTAvBgNV BAMTKDIzRkQxQUJENjM5MTA5MDZCQzBCNjY3NTJGREY5MzMzMTFDRjFFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mN5JM9kJlPihqKx8PlCy/I0p L4dJ/wgqwQc31Qb256Ex3imOQLO3atygtiSrKPmDPPUNpiqIiiKVmwN9co2YaMdv pOzN71PSL2QNVIn5AATEweeQYyMjp9Bnyhv/WjXzibMmfHPp5P0f4cknhuHFMO8w L8PZa3Z87fxmN8R4rx8S4kKmRdqxi6HkPE18xjchQeJ/JL5SCtkdj7h0Otf1J/ap 4GFElC5owLfeIvS8JiirstqNZ0MHHV+B//zOGnVXaDgg+/XIgp+y4zPB63SKESNl rsXXNHNUEkuG0jU0/QjA1cDXfEZ3ASCJpZ+hTRT0IzP6Epwt6wse8szGQimRAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUI/0avWORCQa8C2Z1L9+TMxHPHhswHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFtEIIjxsNBk7T4YiF0f K0kz6XraLFOcbRJ2jFbF6i5JhVl2W1vN0gUOFqaeOjxAS7ZMbxKRwQR9Jg/BesFf YpkVcAFKwtzhNCwR50BbeeDfag3JStvk75v8y7y+RaRjiXwD07IKOj0lys1C+o4/ /1HEyCPEaqlsVfuZ9UZn5uqyaemdu2Xo5+mERdsAACYCHB12Qx966L/ML9GaekaU qFAETreGVTuMlLIdM62FBNbyuICZ2YWHsE2lYnfhUWoGDPvlIT6KWTMyI3ME/oGw IKYD+W5RGXmFiV1Wo3vo0ex+piiaRx8a78QAQ8HyuM/YZoWPamrdoJM2yxbdIYZh uhc= -----END CERTIFICATE-----Generated at Tue Dec 23 18:33:02 2025 by rpki-client