This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json)
Hash identifier: 5nQxsFT9A5NunpailhPM1apSETidAVWGCyfdyKRCeMw=
Subject key identifier: 05:86:DA:26:C0:E2:29:AE:0A:58:D5:03:0E:01:F2:E7:74:17:1B:A8
Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Certificate serial: 30DAEA1A70A445594750B39D5A27FC4A6487A80B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
Manifest number: 02D7
Signing time: Sun 25 Jan 2026 09:47:48 +0000
Manifest this update: Sun 25 Jan 2026 09:42:47 +0000
Manifest next update: Mon 26 Jan 2026 13:10:47 +0000
Files and hashes: 1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: 2ayDsx3sBU/QUT2ZELndHzlTQiVoPu2W2OM6uiMnJAE=)
2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:da:ea:1a:70:a4:45:59:47:50:b3:9d:5a:27:fc:4a:64:87:a8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Validity
Not Before: Jan 25 09:42:47 2026 GMT
Not After : Jan 26 13:10:47 2026 GMT
Subject: CN=0586DA26C0E229AE0A58D5030E01F2E774171BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:13:11:44:1a:68:ed:fe:c6:8d:ea:91:e2:
b7:0c:55:f7:9d:a1:fa:fc:a0:8f:d2:12:12:b8:12:
4d:04:f2:f7:f7:5c:b5:b7:3f:28:80:fb:14:70:c0:
d2:db:ec:d8:a0:31:30:0e:45:50:c1:b1:df:87:6e:
23:cb:41:13:b8:19:8d:0b:a8:42:ab:11:6c:a3:e6:
f9:21:d0:6a:f9:84:14:04:1a:7f:cb:c5:1a:5c:cf:
f3:21:3e:ba:91:8b:db:5e:12:3b:2b:fd:2b:08:11:
5c:fb:1a:42:f3:12:b7:a4:fc:7b:c9:80:78:c4:5f:
58:b1:fe:71:b9:88:8d:ac:ed:b5:e7:c4:fb:63:d8:
ef:99:51:9e:3b:8d:b5:1c:f3:f6:28:d4:8b:c9:24:
81:f5:05:34:bd:f2:1b:61:cc:c2:ff:f1:d4:d3:43:
5a:62:3b:f1:da:4f:db:1d:c5:3d:77:8e:9b:f9:b9:
38:9f:59:fd:98:bc:bc:85:62:9f:16:50:85:ad:ec:
3c:9f:49:d3:57:82:bc:43:94:df:b5:93:f8:b2:22:
80:17:67:91:b0:f8:da:b0:15:e6:50:81:0c:8d:b0:
53:cd:9f:e8:fa:ff:f9:2c:9f:a6:8d:e2:1c:24:58:
78:8d:1b:51:c1:d8:f6:2b:38:69:09:81:d4:4a:b7:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:86:DA:26:C0:E2:29:AE:0A:58:D5:03:0E:01:F2:E7:74:17:1B:A8
X509v3 Authority Key Identifier:
keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b7:93:89:05:35:89:bf:04:b5:ab:e0:c8:e1:74:e0:be:41:
89:5a:69:58:61:8d:3b:ca:45:d0:fd:e4:8b:c4:6c:07:d3:9c:
96:2c:87:11:c0:52:ac:b8:76:44:d5:65:b0:3c:f3:dd:1b:37:
7a:af:ed:8e:eb:cb:ba:ce:05:a8:3f:76:10:ab:7d:ab:aa:bd:
c3:1a:0a:89:ed:80:4a:65:96:20:68:6d:ac:41:1d:c7:07:c7:
61:5a:75:f9:50:b1:5c:91:47:3c:50:82:a5:1a:2c:e0:93:17:
20:4d:13:d6:ee:f7:2c:05:95:b7:9c:b0:63:bd:6b:b9:e8:b5:
be:58:67:24:da:d1:8e:73:26:cb:dd:6d:94:26:18:da:47:78:
a8:1f:59:dd:53:12:4d:01:b7:ae:4f:24:0c:a6:b3:e5:4d:82:
d9:1d:0d:67:74:db:4c:aa:b7:cb:8f:fc:32:47:54:47:fb:34:
8f:af:0e:a4:db:54:ec:8e:39:d1:85:dc:88:68:4b:ea:5d:bb:
05:10:4d:25:7d:c0:2b:a5:0b:bf:1d:22:99:d9:a1:8a:ad:27:
46:3c:a9:cd:c5:cd:7a:3a:8e:5b:61:34:65:32:2c:1e:29:c5:
a4:3d:8e:47:9c:9f:b2:88:12:99:48:73:3d:c1:b2:d9:d3:a8:
9b:ed:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:10:12 2026 by rpki-client