This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft File: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json) Hash identifier: daxKBNWClOeXk9pFGbGN910JE3l6qxLLjim88uOr/Kg= Subject key identifier: 79:68:EB:74:29:EE:12:20:E4:E7:81:65:7B:D4:75:E3:31:5B:0A:62 Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 Certificate issuer: /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Certificate serial: 44F27128B86480E26002D90CE775B0AC6A2BCE8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft Manifest number: 0296 Signing time: Sat 06 Dec 2025 17:19:51 +0000 Manifest this update: Sat 06 Dec 2025 17:14:51 +0000 Manifest next update: Sun 07 Dec 2025 20:03:51 +0000 Files and hashes: 1: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=) 2: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: voKziFhcJOxwppSD5bLjJCwARkiShNMI6afHeJ2eiIo=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f2:71:28:b8:64:80:e2:60:02:d9:0c:e7:75:b0:ac:6a:2b:ce:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956 Validity Not Before: Dec 6 17:14:51 2025 GMT Not After : Dec 7 20:03:51 2025 GMT Subject: CN=7968EB7429EE1220E4E781657BD475E3315B0A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:a6:f9:bc:09:1d:f5:97:a2:2b:e9:7c:41: 76:54:af:c4:ca:fd:b9:ca:f8:e8:7d:f1:d1:c1:d1: 52:82:62:b0:c7:0a:f4:4e:0d:95:91:bf:f2:ec:a1: 79:c6:7d:af:af:c5:84:75:45:1f:30:04:5c:21:96: 86:96:40:f8:17:a4:d3:4f:1b:22:0f:8b:de:aa:04: 52:8c:b1:1b:2b:1a:39:38:b1:be:98:fc:74:51:bd: b0:43:e9:86:01:5d:91:6c:58:ae:36:18:06:a1:3f: a7:9f:e4:7c:84:7e:f9:95:14:e1:e5:96:8c:6e:46: d4:f5:8c:98:1c:11:b5:8d:af:74:ce:29:d2:93:e3: 01:3a:d6:06:8f:69:81:c5:cb:47:bf:5d:30:03:fe: ec:3d:66:77:f1:88:d0:36:43:d7:af:79:dc:31:86: 29:ed:a7:01:a5:8e:9f:2b:f8:f1:26:fb:fc:e6:ed: 1d:bf:32:11:20:b6:0f:70:79:97:e1:86:fd:0d:87: 9c:be:74:31:49:3f:39:bb:e2:56:c0:db:c6:c6:7a: 78:c7:1e:9b:68:55:3e:e7:ad:37:10:85:9c:0a:41: ba:49:ef:55:3a:c5:b0:54:02:f3:c7:47:f8:ac:92: 0e:d2:16:1c:66:e4:87:e1:71:34:c0:cb:bc:3b:45: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:68:EB:74:29:EE:12:20:E4:E7:81:65:7B:D4:75:E3:31:5B:0A:62 X509v3 Authority Key Identifier: keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3d:9e:bf:40:7f:68:99:33:68:2b:8d:8e:d8:d4:d9:6f:1b: 2a:8b:5a:ad:4b:59:92:7c:d6:b7:38:66:a9:04:2a:e1:e6:38: c2:e5:4f:d3:ee:b2:cb:ba:b6:f9:fc:fe:6f:d4:56:83:ff:28: e8:88:77:7f:e1:da:35:d5:7a:5e:93:4f:6d:29:ba:52:10:1d: 91:3a:6e:d6:97:ac:31:b3:fa:ef:cc:92:85:cd:65:7c:fd:cc: 3d:bb:bb:b9:7f:a5:b2:4c:6c:a5:10:54:16:db:3d:1f:4c:38: fc:61:30:d7:ce:be:a0:15:9e:00:30:0b:38:ab:e2:4b:b5:7f: 87:fc:ed:ae:16:82:63:a4:5c:3d:b8:1b:ba:76:9c:e4:d8:b2: 7c:0b:0a:3d:9a:3e:83:9c:6b:19:e6:4a:15:9f:15:e6:6c:d4: 21:e8:7b:b5:22:4f:81:2a:2d:1d:11:a2:2f:0e:7b:fe:1a:68: d8:a1:d7:ad:63:09:d1:93:0a:96:5d:82:00:ef:e5:33:e5:8e: ac:27:5b:fa:db:b3:a2:85:af:61:3f:8e:53:2f:2a:00:1f:4e: 5b:2a:7e:ad:57:67:d8:90:98:57:7f:44:4c:b1:1f:5a:53:4f: 50:d8:eb:90:ba:dc:44:db:84:fb:47:54:c1:bf:8f:11:84:56: 22:fb:71:a7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURPJxKLhkgOJgAtkM53WwrGorzowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3 NDk3Qzk1NjAeFw0yNTEyMDYxNzE0NTFaFw0yNTEyMDcyMDAzNTFaMDMxMTAvBgNV BAMTKDc5NjhFQjc0MjlFRTEyMjBFNEU3ODE2NTdCRDQ3NUUzMzE1QjBBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwX6b5vAkd9ZeiK+l8QXZUr8TK /bnK+Oh98dHB0VKCYrDHCvRODZWRv/LsoXnGfa+vxYR1RR8wBFwhloaWQPgXpNNP GyIPi96qBFKMsRsrGjk4sb6Y/HRRvbBD6YYBXZFsWK42GAahP6ef5HyEfvmVFOHl loxuRtT1jJgcEbWNr3TOKdKT4wE61gaPaYHFy0e/XTAD/uw9ZnfxiNA2Q9evedwx hintpwGljp8r+PEm+/zm7R2/MhEgtg9weZfhhv0Nh5y+dDFJPzm74lbA28bGenjH HptoVT7nrTcQhZwKQbpJ71U6xbBUAvPHR/iskg7SFhxm5IfhcTTAy7w7RXUFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUeWjrdCnuEiDk54Fle9R14zFbCmIwHwYDVR0j BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2 NDc0OTdDOTU2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzNkYjgx NjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAvMTY1ODlDREU1REMzMzM5Q0U3 QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGM9nr9Af2iZM2grjY7Y 1NlvGyqLWq1LWZJ81rc4ZqkEKuHmOMLlT9Pussu6tvn8/m/UVoP/KOiId3/h2jXV el6TT20pulIQHZE6btaXrDGz+u/MkoXNZXz9zD27u7l/pbJMbKUQVBbbPR9MOPxh MNfOvqAVngAwCzir4ku1f4f87a4WgmOkXD24G7p2nOTYsnwLCj2aPoOcaxnmShWf FeZs1CHoe7UiT4EqLR0Roi8Oe/4aaNih161jCdGTCpZdggDv5TPljqwnW/rbs6KF r2E/jlMvKgAfTlsqfq1XZ9iQmFd/REyxH1pTT1DY65C63ETbhPtHVMG/jxGEViL7 cac= -----END CERTIFICATE-----Generated at Sun Dec 7 02:41:10 2025 by rpki-client