This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: 2bHVwa8dDRqao4rd6d9MRTJvK60t7sCmwPHEsf5PksQ= Subject key identifier: D0:93:83:E3:96:33:BA:B7:90:C2:76:46:E2:28:65:6B:9F:22:E3:66 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 40665DA49EF0D68F7400A650C615E4455603BA69 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 029F Signing time: Sat 13 Dec 2025 13:21:29 +0000 Manifest this update: Sat 13 Dec 2025 13:16:28 +0000 Manifest next update: Sun 14 Dec 2025 15:24:28 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: 0bKoTh1dUV0mUBjwkpPdmfYn4TDljTJOSO3cuWEclrs=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:66:5d:a4:9e:f0:d6:8f:74:00:a6:50:c6:15:e4:45:56:03:ba:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Dec 13 13:16:28 2025 GMT Not After : Dec 14 15:24:28 2025 GMT Subject: CN=D09383E39633BAB790C27646E228656B9F22E366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:68:c5:10:aa:94:b9:f7:f7:19:f7:1e:8a: a1:12:9f:ed:44:b8:39:57:84:30:a6:f7:d5:99:f0: 63:98:dc:db:08:7e:18:f9:a7:5d:fa:e5:d6:2e:31: 79:26:7e:34:32:c1:a3:80:76:27:b5:5a:71:6b:fb: 5e:47:bd:23:71:0f:3d:0e:eb:03:ca:b5:c2:0a:83: 0e:16:01:a8:bd:d6:9b:4c:4b:e2:b9:7b:26:eb:5a: c9:aa:de:df:e4:eb:68:00:92:93:91:6f:d1:fe:6e: ec:4b:21:0e:dd:02:8b:f0:f5:05:50:67:92:b2:c1: 72:60:71:7b:d8:c6:e9:05:60:14:bf:18:02:d4:a5: 31:11:01:3e:31:73:4c:4e:41:49:b7:27:8c:82:ae: 5e:95:16:77:c8:24:52:9a:71:5d:00:94:4d:b2:0a: ae:64:60:7a:1c:6c:62:1f:84:30:63:00:f2:7a:fc: 82:80:76:59:5f:3f:a2:02:f5:38:54:67:b8:cd:91: 2a:08:31:d7:5f:39:4a:d5:70:3c:b9:ea:93:e8:29: 95:11:e0:fb:e6:e6:0d:6b:c7:57:0b:16:84:4b:df: 2c:ec:6b:bc:37:fa:f5:4c:de:da:27:9a:6c:77:c1: 1b:c3:fd:91:1e:3d:f6:13:c2:4e:2d:3a:6e:5b:ad: 53:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:93:83:E3:96:33:BA:B7:90:C2:76:46:E2:28:65:6B:9F:22:E3:66 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:bf:fc:8a:74:ba:65:f4:7e:8a:74:e7:fb:55:a0:36:2e:26: c6:6e:e4:24:ff:bd:7b:a5:02:f6:2b:d3:c8:82:db:3e:ad:8b: 03:c7:d0:23:df:81:e2:3c:b6:d2:b3:78:f5:ba:83:e4:98:67: 9a:f8:d3:04:91:ef:dd:79:49:a0:0f:ee:cf:1f:5c:11:6a:e9: 80:f8:95:83:87:00:7e:9c:56:66:53:6d:1a:b1:87:4a:54:d1: df:c7:ad:40:d0:68:17:93:71:ed:22:05:f2:b4:c4:c6:c4:18: f4:0d:76:57:62:0f:23:7d:41:79:5d:18:73:bf:98:32:8d:0f: d1:14:8c:d3:a8:4b:2b:16:db:3c:a4:af:79:93:0f:bb:0f:93: dc:0d:00:d7:9c:c8:d9:fd:12:46:84:55:78:a6:47:e4:99:8d: 57:d5:17:e1:a8:da:fb:e0:df:98:92:99:37:b3:8f:cc:8d:91: 1b:41:ba:41:6f:07:cf:cf:43:e8:38:17:d8:93:2a:fb:b6:9e: c6:66:53:65:c7:e8:d3:a8:fe:43:fd:44:c5:4b:2f:49:24:9e: 21:31:f5:58:2b:50:58:25:94:d5:f2:37:c6:9c:87:1e:00:c6: 60:e5:d3:fd:74:fb:e8:e9:15:6d:df:d7:c7:dd:ed:03:47:2a: 56:16:27:8a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQGZdpJ7w1o90AKZQxhXkRVYDumkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTEyMTMxMzE2MjhaFw0yNTEyMTQxNTI0MjhaMDMxMTAvBgNV BAMTKEQwOTM4M0UzOTYzM0JBQjc5MEMyNzY0NkUyMjg2NTZCOUYyMkUzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsr2jFEKqUuff3GfceiqESn+1E uDlXhDCm99WZ8GOY3NsIfhj5p1365dYuMXkmfjQywaOAdie1WnFr+15HvSNxDz0O 6wPKtcIKgw4WAai91ptMS+K5eybrWsmq3t/k62gAkpORb9H+buxLIQ7dAovw9QVQ Z5KywXJgcXvYxukFYBS/GALUpTERAT4xc0xOQUm3J4yCrl6VFnfIJFKacV0AlE2y Cq5kYHocbGIfhDBjAPJ6/IKAdllfP6IC9ThUZ7jNkSoIMddfOUrVcDy56pPoKZUR 4Pvm5g1rx1cLFoRL3yzsa7w3+vVM3tonmmx3wRvD/ZEePfYTwk4tOm5brVMzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU0JOD45YzureQwnZG4ihla58i42YwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAOO//Ip0umX0fop05/tV oDYuJsZu5CT/vXulAvYr08iC2z6tiwPH0CPfgeI8ttKzePW6g+SYZ5r40wSR7915 SaAP7s8fXBFq6YD4lYOHAH6cVmZTbRqxh0pU0d/HrUDQaBeTce0iBfK0xMbEGPQN dldiDyN9QXldGHO/mDKND9EUjNOoSysW2zykr3mTD7sPk9wNANecyNn9EkaEVXim R+SZjVfVF+Go2vvg35iSmTezj8yNkRtBukFvB8/PQ+g4F9iTKvu2nsZmU2XH6NOo /kP9RMVLL0kkniEx9VgrUFgllNXyN8achx4AxmDl0/10++jpFW3f18fd7QNHKlYW J4o= -----END CERTIFICATE-----Generated at Sat Dec 13 18:09:45 2025 by rpki-client