This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: Yy+QU4GzRf3nLWaHesZVf3WUVxFuhsX99B49IS2787s= Subject key identifier: 0A:51:40:F4:79:0D:CC:BA:4B:FE:AC:19:9D:84:A9:F9:96:81:80:DC Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 4EF5E3A054389CA5615DB1FFBDE35D06B2E74C7C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 0299 Signing time: Sat 13 Dec 2025 02:44:50 +0000 Manifest this update: Sat 13 Dec 2025 02:39:50 +0000 Manifest next update: Sun 14 Dec 2025 05:40:50 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: OKeurk7c+rM8qAqOyvORIEsaI5651xTPdY0t+Ulz8kY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 05:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f5:e3:a0:54:38:9c:a5:61:5d:b1:ff:bd:e3:5d:06:b2:e7:4c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Dec 13 02:39:50 2025 GMT Not After : Dec 14 05:40:50 2025 GMT Subject: CN=0A5140F4790DCCBA4BFEAC199D84A9F9968180DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:fa:54:81:63:2e:bc:2d:85:ec:be:f5:4a: cd:53:e9:90:a2:f9:72:de:02:70:78:84:85:d6:36: 0e:1b:b5:d7:fa:a6:65:ad:d7:b9:54:46:43:12:75: 62:96:23:86:73:94:11:f6:a7:73:54:5d:ad:92:75: a2:fe:f6:9f:f5:7e:8b:e6:b4:92:c4:ee:0a:55:93: a0:ca:99:a7:a2:78:e8:3e:44:a5:48:73:26:2d:7e: 44:cd:85:6f:41:a4:1b:3b:90:b5:9a:fa:f8:b2:24: bb:65:ff:1e:5a:a1:39:f3:d3:f1:30:3f:69:4a:ee: 43:cb:31:3b:d0:10:76:c5:7d:a9:5b:6f:18:44:d7: bb:4f:3c:29:65:65:d3:ef:b0:43:4a:83:74:29:21: 84:e7:b0:f0:e1:b1:45:dd:e2:95:3d:d2:ee:dc:95: f8:6d:ad:04:7c:88:89:e4:55:f3:cb:b9:c7:33:f1: 3f:2d:6a:b6:4b:ec:9e:9d:d4:9c:a3:68:df:99:c4: dc:c7:c8:11:16:16:e4:5c:d7:5a:df:eb:5d:1a:17: 65:3c:0f:40:72:ed:8e:78:a1:f6:f0:af:99:14:98: 6a:ff:57:90:e5:87:ad:f9:61:50:ea:99:eb:93:a8: 74:e2:00:43:c4:5d:53:d9:04:35:2a:4a:f2:54:5d: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:51:40:F4:79:0D:CC:BA:4B:FE:AC:19:9D:84:A9:F9:96:81:80:DC X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:05:52:bd:25:a1:eb:da:92:7b:69:43:ea:f9:cd:03:3a:11: b0:4f:0b:12:7a:52:e9:ad:7c:7c:dc:cc:25:de:3f:93:82:4d: f4:ee:1b:36:2d:83:62:3e:ca:42:a0:4c:45:21:91:b7:99:4c: 9b:04:db:b3:e7:7e:cd:ad:6a:53:f2:e7:b5:a6:6f:31:b9:5b: 77:33:9c:df:34:1f:1f:63:cf:30:ae:01:44:b0:97:42:88:c8: a6:41:d3:8a:1a:de:12:3c:14:34:c9:ca:49:db:af:9e:01:a2: de:b0:b9:01:70:a9:37:15:4e:3b:5a:7e:b0:2b:94:4d:c9:aa: 37:72:37:e6:73:82:25:e7:c3:8b:47:93:0c:0f:18:d1:46:df: a1:7f:66:36:ab:1a:b2:51:0a:a6:67:9b:64:9d:69:46:9d:65: d6:c5:fa:31:72:5e:17:b2:d7:3c:ae:d7:59:01:60:28:1d:11: e0:06:4b:b4:e8:72:14:0f:68:11:90:0d:19:11:37:61:0d:5c: 93:ce:77:93:97:12:30:a0:5b:43:3a:56:54:c8:2d:10:34:4d: d6:cb:8e:b6:7f:53:b5:67:12:28:fe:1c:83:dd:9b:01:ca:bd: c0:f2:34:a7:e2:a4:dd:82:ce:bf:8b:f3:bf:03:24:c4:7c:f0: 31:83:04:03 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTvXjoFQ4nKVhXbH/veNdBrLnTHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTEyMTMwMjM5NTBaFw0yNTEyMTQwNTQwNTBaMDMxMTAvBgNV BAMTKDBBNTE0MEY0NzkwRENDQkE0QkZFQUMxOTlEODRBOUY5OTY4MTgwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5fpUgWMuvC2F7L71Ss1T6ZCi +XLeAnB4hIXWNg4btdf6pmWt17lURkMSdWKWI4ZzlBH2p3NUXa2SdaL+9p/1fovm tJLE7gpVk6DKmaeieOg+RKVIcyYtfkTNhW9BpBs7kLWa+viyJLtl/x5aoTnz0/Ew P2lK7kPLMTvQEHbFfalbbxhE17tPPCllZdPvsENKg3QpIYTnsPDhsUXd4pU90u7c lfhtrQR8iInkVfPLuccz8T8tarZL7J6d1JyjaN+ZxNzHyBEWFuRc11rf610aF2U8 D0By7Y54ofbwr5kUmGr/V5Dlh635YVDqmeuTqHTiAEPEXVPZBDUqSvJUXT2RAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUClFA9HkNzLpL/qwZnYSp+ZaBgNwwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJoFUr0loevakntpQ+r5 zQM6EbBPCxJ6UumtfHzczCXeP5OCTfTuGzYtg2I+ykKgTEUhkbeZTJsE27Pnfs2t alPy57WmbzG5W3cznN80Hx9jzzCuAUSwl0KIyKZB04oa3hI8FDTJyknbr54Bot6w uQFwqTcVTjtafrArlE3JqjdyN+ZzgiXnw4tHkwwPGNFG36F/ZjarGrJRCqZnm2Sd aUadZdbF+jFyXhey1zyu11kBYCgdEeAGS7TochQPaBGQDRkRN2ENXJPOd5OXEjCg W0M6VlTILRA0TdbLjrZ/U7VnEij+HIPdmwHKvcDyNKfipN2Czr+L878DJMR88DGD BAM= -----END CERTIFICATE-----Generated at Sat Dec 13 18:06:43 2025 by rpki-client