This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft File: 44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json) Hash identifier: as/iFgL4kn7LX7+8+wkp7bhA82fbaeVQ5ifSiLkAM9s= Subject key identifier: 92:5C:0E:4D:A6:B2:95:B4:82:0F:FD:EF:05:9E:3E:9F:8A:44:8A:5B Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 Certificate issuer: /CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Certificate serial: 0692D0CD102E1759B4BCA70A6EF13B25EBF4ACE0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft Manifest number: 02AC Signing time: Sat 20 Dec 2025 18:29:42 +0000 Manifest this update: Sat 20 Dec 2025 18:24:39 +0000 Manifest next update: Sun 21 Dec 2025 22:22:39 +0000 Files and hashes: 1: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: Qd0qAAnrfz43FyDZlO0WpCq9XfCPASPPm0SeOSQX8LI=) 2: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=) 3: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: ZFgFa3mIQWS+C3ZANFakUZVad7gh+grxNMovjG/43xs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:92:d0:cd:10:2e:17:59:b4:bc:a7:0a:6e:f1:3b:25:eb:f4:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Validity Not Before: Dec 20 18:24:39 2025 GMT Not After : Dec 21 22:22:39 2025 GMT Subject: CN=925C0E4DA6B295B4820FFDEF059E3E9F8A448A5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:fd:c4:33:9f:d9:2c:a5:1a:7f:33:3b:42: 05:6b:e4:05:30:82:60:5b:85:38:08:62:5f:7a:11: 6e:ef:d2:85:d5:fe:53:30:6b:b9:3c:c6:40:90:dd: 5c:23:f8:2c:8e:01:82:6a:c7:60:2a:6c:24:bc:cf: 97:17:3e:d7:6b:45:b1:80:cf:22:a9:b6:10:0d:0e: d2:8e:f6:10:d3:dd:bc:46:4c:38:03:a4:b5:c2:18: 87:84:5b:00:42:d1:5b:90:bd:b2:b9:7c:eb:76:e9: 8e:4a:74:17:ad:f0:6c:c1:fa:06:e8:53:3f:c8:9a: 65:24:78:65:ee:39:72:1c:a4:4c:05:49:30:b9:7f: 7b:8a:23:0f:cc:1c:fe:38:0d:e4:33:55:0f:30:1b: 77:80:6d:99:1b:01:4e:7d:e8:58:a7:59:92:a0:97: 3f:19:a1:58:dd:99:35:e9:21:df:d1:38:aa:1b:68: 20:9e:15:d2:9a:f8:e5:e9:6e:1a:c8:64:96:88:47: 88:0e:5f:f7:50:4b:2d:96:0e:4d:b5:fc:ad:45:c4: e4:4b:69:aa:94:02:33:9f:d2:f9:86:e6:69:10:1b: d8:51:f0:4b:e5:76:52:b1:6e:18:a2:f7:07:d1:b9: 5c:bf:27:01:ad:94:ed:c0:c3:aa:f5:f9:b8:22:95: f0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5C:0E:4D:A6:B2:95:B4:82:0F:FD:EF:05:9E:3E:9F:8A:44:8A:5B X509v3 Authority Key Identifier: keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f3:f7:ec:0d:d8:7c:6e:b5:32:c1:91:7d:02:81:0a:c4:1b: df:6c:fc:fb:0e:98:2b:17:dc:aa:14:7a:c6:1e:17:16:24:b6: b8:4b:2e:97:13:e6:42:e6:a2:16:f0:1a:ff:63:07:42:ad:ec: 92:a8:81:bc:1e:15:db:f5:aa:ee:9f:11:09:8a:74:8c:73:cf: 6e:0a:0d:3d:8b:dd:f9:7a:d5:70:88:ac:eb:be:50:81:34:b0: 26:8a:73:01:7c:32:19:eb:1d:d3:5c:c9:3d:30:22:bd:f4:4f: 9b:c2:27:64:64:3c:46:85:cc:a5:17:c2:1d:15:bb:c3:8f:5e: b6:4a:47:ec:db:1f:83:86:1a:1a:77:1c:b8:43:be:2a:56:4b: 7c:db:ec:19:71:ce:cf:d1:d1:58:23:f5:0c:b9:d4:4f:b8:f4: 5f:42:17:1d:0b:46:d1:9d:f0:7e:97:4e:bb:87:3e:3a:09:a7: 44:a5:86:3a:4f:9f:6a:0c:89:3b:5b:17:b6:a2:1f:9d:45:61: dd:73:3a:80:6f:16:ff:59:d9:67:3c:70:89:58:b0:db:40:22: e2:07:60:ca:8c:36:45:48:9c:d8:73:e4:46:70:b5:32:17:95: 42:d5:c9:61:9c:a4:8b:3d:f7:0c:a6:46:9c:ae:ff:c6:43:6f: 89:bc:ca:bb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUBpLQzRAuF1m0vKcKbvE7Jev0rOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEEx RTNGMTM4OTAeFw0yNTEyMjAxODI0MzlaFw0yNTEyMjEyMjIyMzlaMDMxMTAvBgNV BAMTKDkyNUMwRTREQTZCMjk1QjQ4MjBGRkRFRjA1OUUzRTlGOEE0NDhBNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUMf3EM5/ZLKUafzM7QgVr5AUw gmBbhTgIYl96EW7v0oXV/lMwa7k8xkCQ3Vwj+CyOAYJqx2AqbCS8z5cXPtdrRbGA zyKpthANDtKO9hDT3bxGTDgDpLXCGIeEWwBC0VuQvbK5fOt26Y5KdBet8GzB+gbo Uz/ImmUkeGXuOXIcpEwFSTC5f3uKIw/MHP44DeQzVQ8wG3eAbZkbAU596FinWZKg lz8ZoVjdmTXpId/ROKobaCCeFdKa+OXpbhrIZJaIR4gOX/dQSy2WDk21/K1FxORL aaqUAjOf0vmG5mkQG9hR8EvldlKxbhii9wfRuVy/JwGtlO3Aw6r1+bgilfBVAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUklwOTaaylbSCD/3vBZ4+n4pEilswHwYDVR0j BBgwFoAURMTJE9WPXvhHmWJB6Wm2Ch4/E4kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAv NDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NEM0QzkxM0Q1OEY1RUY4NDc5OTYyNDFFOTY5QjYw QTFFM0YxMzg5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2QwZjJk Yjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAvNDRDNEM5MTNENThGNUVGODQ3 OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAHz9+wN2HxutTLBkX0C gQrEG99s/PsOmCsX3KoUesYeFxYktrhLLpcT5kLmohbwGv9jB0Kt7JKogbweFdv1 qu6fEQmKdIxzz24KDT2L3fl61XCIrOu+UIE0sCaKcwF8MhnrHdNcyT0wIr30T5vC J2RkPEaFzKUXwh0Vu8OPXrZKR+zbH4OGGhp3HLhDvipWS3zb7Blxzs/R0Vgj9Qy5 1E+49F9CFx0LRtGd8H6XTruHPjoJp0SlhjpPn2oMiTtbF7aiH51FYd1zOoBvFv9Z 2Wc8cIlYsNtAIuIHYMqMNkVInNhz5EZwtTIXlULVyWGcpIs99wymRpyu/8ZDb4m8 yrs= -----END CERTIFICATE-----Generated at Sun Dec 21 00:43:37 2025 by rpki-client