This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: 6JuPSr2VS7gFeU/BimElsW/Vp24Dp2aSQqXnI5f4C/8= Subject key identifier: 9B:1D:87:8E:E7:11:0C:F1:F2:FB:14:A9:F3:E8:71:D4:08:6D:1B:5B Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 5BF54969859EB7DA1228637E8AD7892A6773BD67 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 02DA Signing time: Tue 27 Jan 2026 15:44:17 +0000 Manifest this update: Tue 27 Jan 2026 15:39:17 +0000 Manifest next update: Wed 28 Jan 2026 17:34:17 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: pEip2+4CFNsAbWnkoPtewoo6CMimXKkegLrXxUPLtdY=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f5:49:69:85:9e:b7:da:12:28:63:7e:8a:d7:89:2a:67:73:bd:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Jan 27 15:39:17 2026 GMT Not After : Jan 28 17:34:17 2026 GMT Subject: CN=9B1D878EE7110CF1F2FB14A9F3E871D4086D1B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:1f:cc:ff:3b:f9:02:1f:67:49:04:5c:4a: 57:f5:bc:06:38:b2:2e:65:1e:b4:33:c5:fe:f0:40: 8a:f6:03:17:83:58:d7:80:41:14:7b:df:ac:9b:fc: 39:cb:e6:0f:2d:27:59:86:2f:34:b5:05:f4:0a:92: ec:c1:35:70:8f:d5:41:2b:19:37:5f:27:e7:3c:85: d9:30:d2:25:0a:6b:25:bb:01:26:0c:14:67:ad:fa: de:36:62:2d:dd:d3:f9:7c:8f:32:96:32:9c:db:66: fd:40:45:73:27:7c:1d:b9:14:6a:e6:d1:da:18:ab: 6a:b3:18:89:57:eb:c0:e3:a8:d5:80:4c:3d:d2:e6: e0:35:75:d7:26:45:f8:63:e3:fe:e0:78:ee:bd:38: b7:0f:bc:76:3a:6b:98:9b:11:08:54:f4:59:89:6d: d8:6b:81:59:a0:68:dc:68:62:44:d3:74:7e:fe:7c: e6:bf:f8:5e:a2:9e:e7:6b:53:29:48:98:cd:c2:e4: e9:ef:1e:0a:bf:42:d9:c1:30:25:f7:bc:46:cc:0e: fc:2a:eb:f5:dd:d8:e3:cc:32:9c:11:51:ec:18:de: 63:73:66:6d:da:e3:b6:00:ed:6c:7d:a2:79:bc:47: 86:89:3e:37:2f:93:2c:d5:b6:a8:bb:43:d2:d3:69: c0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1D:87:8E:E7:11:0C:F1:F2:FB:14:A9:F3:E8:71:D4:08:6D:1B:5B X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:2e:fc:2b:18:5f:f8:c9:44:c0:ab:b8:b4:c9:f3:e3:28:95: 8c:72:70:b4:8e:93:3b:3d:f5:c6:ac:b8:8f:e2:4e:8e:2e:ee: eb:d7:1c:74:79:bd:1f:22:98:4e:17:fc:3f:09:af:33:80:60: 37:7d:26:3c:16:71:40:1a:5a:11:79:19:e5:ae:96:9a:93:ed: a9:03:65:c5:fd:69:02:f1:53:64:ec:bb:5e:4a:b8:78:ee:e4: cb:ea:f8:c8:44:ad:fd:1f:c0:84:72:2a:bd:c2:14:6c:c1:6f: f1:18:50:03:6c:3c:2d:b3:9b:9b:1d:7c:64:1a:65:55:46:32: dc:9b:54:6c:66:48:99:e9:b0:36:a6:6b:88:11:78:ff:b0:04: 8f:96:7c:1c:29:33:67:5f:ab:7c:5d:32:1b:cc:f6:48:b0:57: 51:1a:3f:cc:17:44:c8:31:12:79:eb:74:8d:38:b7:30:c4:73: 23:e8:ed:12:48:62:f1:cb:91:c2:ba:cf:02:b1:73:df:76:d7: 05:90:2c:22:af:e6:49:3d:c7:62:f9:2f:3b:bf:af:0a:af:e0: 3b:13:e3:6c:28:d0:43:d8:b6:f9:cf:1b:0a:36:b2:42:b4:63: 9a:cd:c1:15:db:cf:d1:d6:28:43:36:32:5f:7f:ed:8a:7b:e3: dc:e6:b6:02 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUW/VJaYWet9oSKGN+iteJKmdzvWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNjAxMjcxNTM5MTdaFw0yNjAxMjgxNzM0MTdaMDMxMTAvBgNV BAMTKDlCMUQ4NzhFRTcxMTBDRjFGMkZCMTRBOUYzRTg3MUQ0MDg2RDFCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcB/M/zv5Ah9nSQRcSlf1vAY4 si5lHrQzxf7wQIr2AxeDWNeAQRR736yb/DnL5g8tJ1mGLzS1BfQKkuzBNXCP1UEr GTdfJ+c8hdkw0iUKayW7ASYMFGet+t42Yi3d0/l8jzKWMpzbZv1ARXMnfB25FGrm 0doYq2qzGIlX68DjqNWATD3S5uA1ddcmRfhj4/7geO69OLcPvHY6a5ibEQhU9FmJ bdhrgVmgaNxoYkTTdH7+fOa/+F6inudrUylImM3C5OnvHgq/QtnBMCX3vEbMDvwq 6/Xd2OPMMpwRUewY3mNzZm3a47YA7Wx9onm8R4aJPjcvkyzVtqi7Q9LTacBvAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUmx2HjucRDPHy+xSp8+hx1AhtG1swHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKYu/CsYX/jJRMCruLTJ 8+MolYxycLSOkzs99casuI/iTo4u7uvXHHR5vR8imE4X/D8JrzOAYDd9JjwWcUAa WhF5GeWulpqT7akDZcX9aQLxU2Tsu15KuHju5Mvq+MhErf0fwIRyKr3CFGzBb/EY UANsPC2zm5sdfGQaZVVGMtybVGxmSJnpsDama4gReP+wBI+WfBwpM2dfq3xdMhvM 9kiwV1EaP8wXRMgxEnnrdI04tzDEcyPo7RJIYvHLkcK6zwKxc9921wWQLCKv5kk9 x2L5Lzu/rwqv4DsT42wo0EPYtvnPGwo2skK0Y5rNwRXbz9HWKEM2Ml9/7Yp749zm tgI= -----END CERTIFICATE-----Generated at Wed Jan 28 00:08:54 2026 by rpki-client