This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft File: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft (raw, json) Hash identifier: 9vwsqtLDIMj6bsda4NIYnadhgk7PMpHP/wSq9WmlgJk= Subject key identifier: 79:56:E7:74:6E:42:CF:D3:94:42:E1:8B:DF:F4:FA:93:C1:D5:58:B2 Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 Certificate issuer: /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Certificate serial: 13BCFEE9F8C0EFB906F90159345E51C8D1266E74 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft Manifest number: 02A5 Signing time: Sat 20 Dec 2025 17:35:29 +0000 Manifest this update: Sat 20 Dec 2025 17:30:26 +0000 Manifest next update: Sun 21 Dec 2025 18:07:26 +0000 Files and hashes: 1: 326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (hash: Ck9ZZ0tiSTG41w0m3od8Zz6h1DTJUjOEieFp2NJMOpw=) 2: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl (hash: NkN9wWIz4GLyOxNtpQFN9Miti5kF5JWOJR8fKp9FiLE=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bc:fe:e9:f8:c0:ef:b9:06:f9:01:59:34:5e:51:c8:d1:26:6e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87 Validity Not Before: Dec 20 17:30:26 2025 GMT Not After : Dec 21 18:07:26 2025 GMT Subject: CN=7956E7746E42CFD39442E18BDFF4FA93C1D558B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:39:b6:82:a5:0a:13:16:30:ac:15:69:9e: d9:15:18:1c:fe:1e:3b:dc:79:10:ad:29:f5:05:f6: 86:cd:2f:26:e2:79:a2:7b:8b:4e:67:96:06:b5:40: ad:db:eb:d3:60:69:7c:5d:13:8c:95:28:f2:65:24: bb:19:14:28:ad:f2:a0:74:ed:8f:8f:b6:51:40:12: b3:41:be:fe:7c:cb:be:52:79:dc:62:96:25:03:0b: ab:87:32:7b:5b:a0:b8:9a:03:f8:3a:dc:23:b1:5e: 0e:1f:12:0e:48:ad:d4:7e:21:34:da:26:d3:91:dd: 95:21:40:6a:bd:45:0e:6c:dc:86:6f:13:cb:73:35: c2:e9:ea:1f:bf:36:a4:24:4a:0e:c7:18:dc:7c:ed: 6b:66:ac:93:2f:bc:ae:9c:3e:5c:97:95:dc:a9:de: 72:a2:3f:2e:13:79:59:8d:97:fb:47:c2:a3:18:c9: c3:61:6a:86:bd:10:75:ea:3c:8c:f0:94:2b:31:e4: 17:93:56:de:c9:13:87:6e:9b:97:b4:62:99:98:ba: 8c:29:09:2a:fd:d5:ad:b3:72:3a:e9:7a:44:43:e0: f7:f4:14:20:6c:53:a6:6f:15:6f:0e:be:3a:b1:80: fe:ab:51:9f:7f:96:95:66:8f:36:77:95:43:be:dd: be:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:56:E7:74:6E:42:CF:D3:94:42:E1:8B:DF:F4:FA:93:C1:D5:58:B2 X509v3 Authority Key Identifier: keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:16:04:e5:6c:c3:54:93:49:95:59:25:c4:a4:d9:aa:83:60: cb:97:99:1d:99:b3:7f:21:8f:8f:7c:32:e1:84:e2:8a:e2:ce: e8:85:59:8c:6e:4b:02:13:1d:ff:0f:d5:e9:71:38:9a:1d:32: ff:d7:bc:b4:b0:b0:f9:95:d1:df:27:1a:29:29:ae:67:d6:62: d0:db:b6:b6:79:1f:b3:75:0a:e2:9f:69:2b:33:d2:bc:84:d4: f2:81:11:fd:22:6c:e4:f8:59:3f:88:cd:d4:27:81:d7:9b:63: fb:4f:ba:f5:b8:19:89:2a:ba:79:c4:99:73:16:48:dd:ae:75: 89:c4:6b:0c:fa:0f:dd:23:4e:bd:7c:1e:83:aa:11:14:06:48: 37:04:8e:a3:cd:54:34:69:ba:7e:db:3f:56:d7:2d:39:0d:e2: 02:d7:1b:d0:08:19:4f:bd:c6:3b:58:08:e4:ce:d9:53:8a:07: 34:fd:70:43:e2:09:8c:e8:ef:73:5b:de:a9:43:08:ed:b2:6c: bc:79:d2:6e:f2:c4:2f:9b:23:93:49:fd:59:5b:d5:45:72:78: f4:10:a2:f9:8d:54:8c:5c:a8:33:9c:f4:0b:5a:70:72:42:5f: 84:e7:91:af:d6:55:39:50:a9:ff:68:b8:bd:1b:f7:1a:f0:81: cd:49:ad:36 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUE7z+6fjA77kG+QFZNF5RyNEmbnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3 MDFCMEY4NzAeFw0yNTEyMjAxNzMwMjZaFw0yNTEyMjExODA3MjZaMDMxMTAvBgNV BAMTKDc5NTZFNzc0NkU0MkNGRDM5NDQyRTE4QkRGRjRGQTkzQzFENTU4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWzm2gqUKExYwrBVpntkVGBz+ HjvceRCtKfUF9obNLybieaJ7i05nlga1QK3b69NgaXxdE4yVKPJlJLsZFCit8qB0 7Y+PtlFAErNBvv58y75SedxiliUDC6uHMntboLiaA/g63COxXg4fEg5IrdR+ITTa JtOR3ZUhQGq9RQ5s3IZvE8tzNcLp6h+/NqQkSg7HGNx87WtmrJMvvK6cPlyXldyp 3nKiPy4TeVmNl/tHwqMYycNhaoa9EHXqPIzwlCsx5BeTVt7JE4dum5e0YpmYuowp CSr91a2zcjrpekRD4Pf0FCBsU6ZvFW8OvjqxgP6rUZ9/lpVmjzZ3lUO+3b4DAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUeVbndG5Cz9OUQuGL3/T6k8HVWLIwHwYDVR0j BBgwFoAUH7nIUPkT1sCad22Ls4MnvnAbD4cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2NjNmMwZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAv MUZCOUM4NTBGOTEzRDZDMDlBNzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRkI5Qzg1MEY5MTNENkMwOUE3NzZEOEJCMzgzMjdC RTcwMUIwRjg3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NjNmMw ZDBmNGMwNzQyNDM5MmQ4MjM4NzIwY2M2YTgyLzAvMUZCOUM4NTBGOTEzRDZDMDlB Nzc2RDhCQjM4MzI3QkU3MDFCMEY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJAWBOVsw1STSZVZJcSk 2aqDYMuXmR2Zs38hj498MuGE4orizuiFWYxuSwITHf8P1elxOJodMv/XvLSwsPmV 0d8nGikprmfWYtDbtrZ5H7N1CuKfaSsz0ryE1PKBEf0ibOT4WT+IzdQngdebY/tP uvW4GYkqunnEmXMWSN2udYnEawz6D90jTr18HoOqERQGSDcEjqPNVDRpun7bP1bX LTkN4gLXG9AIGU+9xjtYCOTO2VOKBzT9cEPiCYzo73Nb3qlDCO2ybLx50m7yxC+b I5NJ/Vlb1UVyePQQovmNVIxcqDOc9AtacHJCX4Tnka/WVTlQqf9ouL0b9xrwgc1J rTY= -----END CERTIFICATE-----Generated at Sun Dec 21 02:35:19 2025 by rpki-client