This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: Og2L2fulxyOkWiMhvX4ZedNj7y/uKNTR9ZP6RMfdJMM= Subject key identifier: 64:75:CF:EF:62:05:A0:28:4C:B2:AC:6D:8B:89:96:BE:90:CD:07:A6 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 7FBFFBD5A8F1162C09959B907A1139C6B83CA367 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 02D2 Signing time: Sun 25 Jan 2026 13:20:26 +0000 Manifest this update: Sun 25 Jan 2026 13:15:25 +0000 Manifest next update: Mon 26 Jan 2026 14:54:25 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: CB6woRjjldMPeb7niEQc4n+jGtFnMSkzG1z5T3gggs4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:bf:fb:d5:a8:f1:16:2c:09:95:9b:90:7a:11:39:c6:b8:3c:a3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Jan 25 13:15:25 2026 GMT Not After : Jan 26 14:54:25 2026 GMT Subject: CN=6475CFEF6205A0284CB2AC6D8B8996BE90CD07A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ee:fd:4a:46:af:86:75:01:f1:0e:f5:a5:9a: 1d:6a:ab:05:5f:f5:db:64:26:3a:f1:e3:f1:17:3e: d0:53:05:ba:40:ac:cb:dc:54:6c:73:b2:db:75:dd: e1:d0:a1:8a:f2:d9:2f:80:85:17:c6:13:cd:67:c2: 8e:ee:22:99:25:36:5d:6f:9d:6a:a7:8a:25:98:d6: 36:15:35:04:4d:97:a2:76:e2:b5:cf:a9:9f:7c:44: df:39:7b:f3:b2:44:1b:12:2a:0d:15:ec:fb:96:fd: f9:d3:81:d5:d8:c6:30:65:1c:23:77:75:2f:fe:7d: c2:74:22:0d:07:ff:7f:de:56:4b:20:4d:66:46:dd: 93:b6:e5:e3:05:d4:8a:5f:0e:46:8b:9d:83:0f:0c: 4f:48:14:0e:e9:d5:0f:b3:34:87:41:09:05:cb:ff: 9a:54:40:2f:67:23:63:74:a7:2f:29:72:1a:a3:89: e3:1e:18:f5:b2:8f:47:4a:51:1a:2f:2c:e2:97:31: 04:40:08:f6:33:e1:c4:3b:6d:2b:96:7a:b3:31:99: e2:c9:49:e4:fc:1e:1d:ac:3f:86:e3:f4:8c:66:34: 88:cb:94:f6:b5:79:b1:45:f5:81:e4:cd:30:e5:c3: 5b:7d:c9:bd:6d:11:a9:fc:14:05:75:74:6c:3e:a2: af:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:75:CF:EF:62:05:A0:28:4C:B2:AC:6D:8B:89:96:BE:90:CD:07:A6 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0d:2c:a2:07:b0:99:71:00:34:a0:3d:45:5a:50:d6:dc:1f: cd:85:24:e5:62:55:34:7d:4e:cc:1f:eb:31:9c:11:58:b8:84: 30:2a:05:49:86:c3:1f:dd:06:63:bb:fc:5a:21:e9:06:05:0a: 60:da:40:38:00:f6:1b:95:dc:36:04:e1:d0:c6:79:dc:1d:a8: f7:65:98:37:6b:68:4f:f2:6d:07:4a:57:94:25:6f:e6:13:64: b5:c6:df:87:95:83:b9:5f:5d:b9:d6:31:60:75:47:f6:e6:73: a6:b8:3f:60:5c:97:a3:92:76:36:a0:9d:54:14:b0:06:41:86: 3e:cc:5f:0e:1e:6f:b1:be:ba:3c:bf:85:b3:49:d5:78:8c:50: 32:58:40:6e:ed:65:bc:0a:f3:c2:8d:c8:ff:9c:da:ee:90:15: d5:c9:26:87:85:83:b3:6c:00:69:2a:87:52:13:11:47:05:99: 9c:1b:2b:42:ec:5c:de:6e:fe:2f:e5:79:75:8f:89:9e:75:9a: 79:c4:cb:49:59:9c:8c:48:6d:f6:9d:42:c7:82:f5:f2:0c:d0: bf:8a:c2:fb:f8:9f:cb:bd:7b:91:e8:d0:21:38:49:88:76:b7: b6:17:31:47:56:68:a0:c3:25:c2:e4:c2:d1:3e:f8:f0:95:65: 83:f1:1d:4f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUf7/71ajxFiwJlZuQehE5xrg8o2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNjAxMjUxMzE1MjVaFw0yNjAxMjYxNDU0MjVaMDMxMTAvBgNV BAMTKDY0NzVDRkVGNjIwNUEwMjg0Q0IyQUM2RDhCODk5NkJFOTBDRDA3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7v1KRq+GdQHxDvWlmh1qqwVf 9dtkJjrx4/EXPtBTBbpArMvcVGxzstt13eHQoYry2S+AhRfGE81nwo7uIpklNl1v nWqniiWY1jYVNQRNl6J24rXPqZ98RN85e/OyRBsSKg0V7PuW/fnTgdXYxjBlHCN3 dS/+fcJ0Ig0H/3/eVksgTWZG3ZO25eMF1IpfDkaLnYMPDE9IFA7p1Q+zNIdBCQXL /5pUQC9nI2N0py8pchqjieMeGPWyj0dKURovLOKXMQRACPYz4cQ7bSuWerMxmeLJ SeT8Hh2sP4bj9IxmNIjLlPa1ebFF9YHkzTDlw1t9yb1tEan8FAV1dGw+oq/JAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUZHXP72IFoChMsqxti4mWvpDNB6YwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA8NLKIHsJlxADSgPUVa UNbcH82FJOViVTR9Tswf6zGcEVi4hDAqBUmGwx/dBmO7/Foh6QYFCmDaQDgA9huV 3DYE4dDGedwdqPdlmDdraE/ybQdKV5Qlb+YTZLXG34eVg7lfXbnWMWB1R/bmc6a4 P2Bcl6OSdjagnVQUsAZBhj7MXw4eb7G+ujy/hbNJ1XiMUDJYQG7tZbwK88KNyP+c 2u6QFdXJJoeFg7NsAGkqh1ITEUcFmZwbK0LsXN5u/i/leXWPiZ51mnnEy0lZnIxI bfadQseC9fIM0L+Kwvv4n8u9e5Ho0CE4SYh2t7YXMUdWaKDDJcLkwtE++PCVZYPx HU8= -----END CERTIFICATE-----Generated at Sun Jan 25 21:49:20 2026 by rpki-client