This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: 5yoPuOamPwBDadZkscYVYkxv/2oMfq8U+jOsa7dD4cA= Subject key identifier: 5F:BF:99:B7:67:1F:2F:BA:0B:7C:FC:56:F4:A6:B5:6D:17:88:05:F2 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 0EFF866E5BD141A75B6135CA10CDBB6843AA3B97 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 02A8 Signing time: Sat 20 Dec 2025 19:42:48 +0000 Manifest this update: Sat 20 Dec 2025 19:37:46 +0000 Manifest next update: Sun 21 Dec 2025 22:41:46 +0000 Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: CkpQF2uRtDf/u8GZrcc8iHrWDWH6edU3IuQeaAgqSlU=) 2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ff:86:6e:5b:d1:41:a7:5b:61:35:ca:10:cd:bb:68:43:aa:3b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Dec 20 19:37:46 2025 GMT Not After : Dec 21 22:41:46 2025 GMT Subject: CN=5FBF99B7671F2FBA0B7CFC56F4A6B56D178805F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:18:d7:1e:75:f1:91:57:ee:b8:05:14:4e:24: 5a:18:21:64:90:2b:4d:5c:9c:fc:2b:68:72:10:df: f2:48:9b:6c:43:09:71:5a:8f:40:b7:b1:34:8f:36: be:56:d0:9d:d8:b2:6b:4d:75:31:0d:11:b5:dc:bb: 22:55:51:8c:00:11:95:be:4e:8d:7a:8c:22:f7:9f: 79:e4:2e:96:fc:81:9f:00:57:6b:a2:62:8c:4c:8a: 81:41:ec:a1:fd:6f:e7:4f:7a:87:9e:50:7f:cc:64: b1:09:f5:5f:02:6a:5b:a1:24:ac:38:9c:09:cf:cf: 09:02:9a:a8:8d:1a:6a:af:9e:15:44:96:b6:94:64: b4:f3:72:94:02:46:20:aa:d8:3c:16:80:82:e6:4d: c6:0c:26:16:82:57:9b:a2:b4:a4:57:3c:17:3c:58: 09:e5:e1:57:76:8b:23:84:56:7e:e3:d9:8f:51:95: 95:17:65:a5:04:1e:04:7e:86:46:05:1f:04:b6:75: 23:54:c7:b3:ea:ff:1c:15:aa:19:60:75:0e:ec:20: 8f:4c:fa:24:d2:a5:1f:9b:43:3d:2f:d6:55:cd:23: ad:b6:49:1f:95:51:12:c7:f7:aa:55:be:07:9b:5b: 62:a1:18:63:cd:38:ad:5d:91:88:42:5e:95:62:95: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BF:99:B7:67:1F:2F:BA:0B:7C:FC:56:F4:A6:B5:6D:17:88:05:F2 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ef:ef:52:ec:61:ce:09:2f:5d:90:30:7d:f9:d0:3a:b4:94: e4:1a:e9:d6:4f:d5:d0:95:fe:ca:e1:41:cc:8b:27:d8:ee:ae: 26:b1:a3:04:0f:4a:56:8f:bd:c0:c0:72:3f:95:73:1f:0f:66: 93:1b:17:66:e7:f2:b3:d1:bc:d5:0e:53:64:5b:b0:30:7a:f5: ba:08:b4:0f:25:de:a3:ea:be:9c:74:37:40:3c:8f:9b:49:c3: 36:1b:09:6f:85:8f:d1:f4:c1:65:a8:64:e0:34:c7:48:fb:7a: b3:21:35:98:82:ee:15:60:a5:43:96:da:b5:47:91:71:2e:63: 2c:dc:d9:32:32:23:9a:2d:43:85:e2:94:95:92:b4:41:2e:2b: 2d:53:29:fe:8c:66:8e:38:75:97:f9:75:34:68:4e:b7:37:5e: dd:bc:2f:69:c0:25:ed:cf:f2:02:93:3c:ff:d2:46:09:45:67: d3:fd:6b:d5:3f:48:46:53:6f:5d:18:63:fb:58:4c:46:5e:26: c3:f1:cf:3c:18:37:12:07:9d:c0:7f:09:f0:dc:d6:9e:31:28: b0:6f:26:30:50:23:7b:55:3c:03:66:57:0b:0a:3c:79:8f:94: e6:ba:77:69:5a:e8:1f:ca:55:dc:ad:63:a1:66:e8:fd:b8:bf: ac:1f:c7:b6 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDv+GblvRQadbYTXKEM27aEOqO5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTEyMjAxOTM3NDZaFw0yNTEyMjEyMjQxNDZaMDMxMTAvBgNV BAMTKDVGQkY5OUI3NjcxRjJGQkEwQjdDRkM1NkY0QTZCNTZEMTc4ODA1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrGNcedfGRV+64BRROJFoYIWSQ K01cnPwraHIQ3/JIm2xDCXFaj0C3sTSPNr5W0J3YsmtNdTENEbXcuyJVUYwAEZW+ To16jCL3n3nkLpb8gZ8AV2uiYoxMioFB7KH9b+dPeoeeUH/MZLEJ9V8CaluhJKw4 nAnPzwkCmqiNGmqvnhVElraUZLTzcpQCRiCq2DwWgILmTcYMJhaCV5uitKRXPBc8 WAnl4Vd2iyOEVn7j2Y9RlZUXZaUEHgR+hkYFHwS2dSNUx7Pq/xwVqhlgdQ7sII9M +iTSpR+bQz0v1lXNI622SR+VURLH96pVvgebW2KhGGPNOK1dkYhCXpVilbHVAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUX7+Zt2cfL7oLfPxW9Ka1bReIBfIwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJDv71LsYc4JL12QMH35 0Dq0lOQa6dZP1dCV/srhQcyLJ9juriaxowQPSlaPvcDAcj+Vcx8PZpMbF2bn8rPR vNUOU2RbsDB69boItA8l3qPqvpx0N0A8j5tJwzYbCW+Fj9H0wWWoZOA0x0j7erMh NZiC7hVgpUOW2rVHkXEuYyzc2TIyI5otQ4XilJWStEEuKy1TKf6MZo44dZf5dTRo Trc3Xt28L2nAJe3P8gKTPP/SRglFZ9P9a9U/SEZTb10YY/tYTEZeJsPxzzwYNxIH ncB/CfDc1p4xKLBvJjBQI3tVPANmVwsKPHmPlOa6d2la6B/KVdytY6Fm6P24v6wf x7Y= -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:21 2025 by rpki-client