This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: bFi8lEZ8slTL5KOT2XX+YeSdnuUOpzybaTWLkcoqNtc= Subject key identifier: 78:72:D1:7B:C1:5F:E8:F1:C0:F4:DA:6D:17:82:06:DA:B7:4B:16:CA Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 4B8B890E9135B25A2E56063AB8BE5B79FE0ECFD0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 02D5 Signing time: Tue 27 Jan 2026 21:28:57 +0000 Manifest this update: Tue 27 Jan 2026 21:23:57 +0000 Manifest next update: Wed 28 Jan 2026 22:11:57 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: FbO2gjgWkFpirwUXj710ILJgWnyB8ohz382Dokla8ko=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8b:89:0e:91:35:b2:5a:2e:56:06:3a:b8:be:5b:79:fe:0e:cf:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Jan 27 21:23:57 2026 GMT Not After : Jan 28 22:11:57 2026 GMT Subject: CN=7872D17BC15FE8F1C0F4DA6D178206DAB74B16CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:a0:b6:17:8b:91:ed:0b:01:01:cb:0b:c4: c8:16:6c:27:f9:95:9f:b8:20:45:df:eb:87:d2:52: 81:85:8c:47:94:c2:36:f8:fa:d9:e6:10:4a:93:48: 1a:d7:18:e4:56:83:c9:ef:b4:5a:53:bf:64:9f:a4: 85:90:97:37:62:86:45:8f:a1:9f:b3:b5:e0:aa:4d: b3:79:b6:ff:60:22:7f:3a:fe:3e:1b:ce:78:1a:65: 40:56:a0:a3:f8:4e:88:68:47:0f:2f:54:1c:1b:04: 50:d0:92:36:16:ab:ee:40:2f:30:96:ce:91:c6:db: f5:93:5a:9c:5b:e5:91:83:64:be:cd:04:04:76:6c: 4d:44:e2:cd:3c:68:71:5b:5f:28:ad:24:13:78:1d: e5:2b:cc:a1:46:8a:7d:56:ff:81:11:ab:59:36:f9: aa:d8:d4:39:b9:29:bf:44:c9:60:3c:e7:e6:02:f1: 0b:63:b0:c6:05:8d:41:7a:c3:f3:37:f3:d6:52:1f: 95:9d:43:d3:e5:32:f3:1a:24:e1:1f:db:6d:df:69: 4c:d5:d7:86:08:61:9b:77:83:1b:96:42:93:fc:6d: f4:5a:a1:f0:9d:6f:88:05:bb:6b:a9:4f:3f:a8:2b: 8d:e4:f4:4c:1b:d5:ae:98:0e:c9:ea:8b:df:5a:41: e6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:72:D1:7B:C1:5F:E8:F1:C0:F4:DA:6D:17:82:06:DA:B7:4B:16:CA X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:98:ef:f3:f2:e0:02:71:5c:ec:69:d5:21:9c:a2:86:bb:1e: cf:15:7d:b1:5f:e8:d0:f7:ef:b7:d3:c6:05:27:ee:99:83:3c: 25:b3:79:a4:ee:79:fc:36:c6:a9:91:52:d0:8c:87:42:af:7e: f8:8a:d4:cb:d7:35:60:27:b0:90:77:a1:22:44:eb:f4:c8:89: 1c:0c:06:d0:85:ee:3a:dc:77:9f:41:84:df:37:1f:96:2b:54: 5d:3b:51:7d:60:48:a8:f2:d6:68:02:99:fe:6c:94:bf:33:1d: f0:d7:93:2e:2b:a7:0a:08:6e:e6:3b:55:8c:c4:a1:fb:1e:11: b9:36:cf:39:8c:b4:dc:56:83:ac:ce:fa:0f:89:7f:10:14:96: bf:47:f2:e1:03:21:b4:d2:9b:05:0a:9f:26:b2:cf:6f:2c:f2: ba:16:42:05:db:b5:54:da:94:da:ff:e7:3f:cb:69:89:26:79: 17:bb:a5:c9:03:22:c8:4a:ee:2d:12:e1:6c:42:ee:12:d7:92: 2a:26:a0:e4:6e:5d:ff:3d:8c:fe:46:b7:38:8a:a0:76:9b:77: f0:98:ed:32:af:9d:78:28:e1:18:15:02:c5:17:d9:39:75:84: 42:8e:a1:33:78:64:ab:13:1c:3f:8b:77:84:e2:e0:c1:58:b7: b2:12:b0:03 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUS4uJDpE1slouVgY6uL5bef4Oz9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNjAxMjcyMTIzNTdaFw0yNjAxMjgyMjExNTdaMDMxMTAvBgNV BAMTKDc4NzJEMTdCQzE1RkU4RjFDMEY0REE2RDE3ODIwNkRBQjc0QjE2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0qC2F4uR7QsBAcsLxMgWbCf5 lZ+4IEXf64fSUoGFjEeUwjb4+tnmEEqTSBrXGORWg8nvtFpTv2SfpIWQlzdihkWP oZ+zteCqTbN5tv9gIn86/j4bzngaZUBWoKP4TohoRw8vVBwbBFDQkjYWq+5ALzCW zpHG2/WTWpxb5ZGDZL7NBAR2bE1E4s08aHFbXyitJBN4HeUrzKFGin1W/4ERq1k2 +arY1Dm5Kb9EyWA85+YC8QtjsMYFjUF6w/M389ZSH5WdQ9PlMvMaJOEf223faUzV 14YIYZt3gxuWQpP8bfRaofCdb4gFu2upTz+oK43k9Ewb1a6YDsnqi99aQeZHAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUeHLRe8Ff6PHA9NptF4IG2rdLFsowHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAECY7/Py4AJxXOxp1SGc ooa7Hs8VfbFf6ND377fTxgUn7pmDPCWzeaTuefw2xqmRUtCMh0KvfviK1MvXNWAn sJB3oSJE6/TIiRwMBtCF7jrcd59BhN83H5YrVF07UX1gSKjy1mgCmf5slL8zHfDX ky4rpwoIbuY7VYzEofseEbk2zzmMtNxWg6zO+g+JfxAUlr9H8uEDIbTSmwUKnyay z28s8roWQgXbtVTalNr/5z/LaYkmeRe7pckDIshK7i0S4WxC7hLXkiomoORuXf89 jP5GtziKoHabd/CY7TKvnXgo4RgVAsUX2Tl1hEKOoTN4ZKsTHD+Ld4Ti4MFYt7IS sAM= -----END CERTIFICATE-----Generated at Wed Jan 28 00:07:51 2026 by rpki-client