This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: uulQ3bcKtvWW5DxaDcuVVeLZOPL3/ooLLAyi7scrm58= Subject key identifier: C6:66:98:2C:CB:3B:6D:EC:4E:B8:82:0D:F5:20:D9:96:1A:AB:E6:70 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 323BDC22F2887F0B0E39F6AE0FFA261B18EAB4A2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 0290 Signing time: Sat 06 Dec 2025 08:08:31 +0000 Manifest this update: Sat 06 Dec 2025 08:03:31 +0000 Manifest next update: Sun 07 Dec 2025 11:47:31 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: GUZsrqpLbiuX3rAtJVHxFhE0wSxM7rgFlyQ3EKXdYB0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3b:dc:22:f2:88:7f:0b:0e:39:f6:ae:0f:fa:26:1b:18:ea:b4:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Dec 6 08:03:31 2025 GMT Not After : Dec 7 11:47:31 2025 GMT Subject: CN=C666982CCB3B6DEC4EB8820DF520D9961AABE670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:ce:04:74:8e:bc:1e:85:42:d6:3c:e5:d6: 92:31:a5:36:9d:f5:e7:6f:5c:83:ae:2d:37:28:d2: d9:bb:4d:33:93:6f:ef:7e:37:34:55:f3:22:3c:52: f3:cd:92:e3:cd:5d:69:16:ec:37:25:d1:ad:eb:72: b3:9b:67:8c:9d:48:ea:c5:cf:68:75:d8:49:e4:7a: c0:84:a0:60:f2:d9:a9:28:76:63:c2:35:d1:ce:ee: 99:b7:26:e5:c0:0f:db:59:6f:63:fa:83:0f:5d:71: 67:8a:79:b8:51:68:9b:26:24:13:85:b8:5d:40:d5: af:09:c0:2e:ce:14:5c:a8:30:eb:9d:b5:c5:b7:f6: 7d:ab:f3:4f:5c:f2:1b:7b:9d:a1:62:0e:40:23:6e: 35:5f:a3:79:c3:66:1b:35:27:1b:aa:e0:4c:c0:1c: 67:c0:7d:74:14:9d:44:25:90:ad:59:f0:e6:12:9c: 85:b3:9a:89:2e:7a:e5:3b:70:04:90:a1:67:e6:4a: c1:9c:bd:21:03:9f:dd:92:ed:ba:7b:f1:02:7e:dd: 78:82:5a:38:67:77:11:c0:e8:fe:7a:fc:5c:5f:ec: 05:97:4e:9d:0b:ef:c2:fd:58:81:8e:3b:12:75:c4: 6b:04:7a:59:6a:33:ce:1f:14:b3:50:be:f9:ca:64: 12:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:66:98:2C:CB:3B:6D:EC:4E:B8:82:0D:F5:20:D9:96:1A:AB:E6:70 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:d2:ea:72:b2:fb:80:c2:b0:69:6f:ae:5c:da:8f:82:a4:58: fc:57:7c:3c:ee:13:71:ef:ee:a2:7c:c5:0c:be:22:69:fd:df: e2:e7:48:35:70:b1:86:8a:d3:48:3d:82:05:3c:6b:4e:78:8b: c0:ca:da:3c:ca:8f:2a:9d:79:3f:05:63:ec:5f:99:45:37:3d: ac:a9:91:10:53:52:b9:3f:3a:80:37:fe:3e:4c:38:4b:c1:da: 09:e6:7a:6c:7d:3c:c0:6e:47:0c:eb:b3:06:8e:6b:ce:cf:41: a2:74:1a:ba:4d:d7:4e:3b:4e:b7:3a:c7:e4:37:1d:ae:1f:c1: 57:4a:22:5b:b3:17:22:fe:b6:c8:be:fa:ee:7a:a6:57:01:d4: 2f:5f:a4:58:32:1e:5c:2e:35:18:95:c7:09:75:60:8d:1d:a8: d6:df:02:cf:42:47:88:20:4e:b8:b0:ea:57:a9:57:92:a7:c2: 4b:94:f5:a8:6e:28:7b:b9:f9:ab:13:2d:0b:5b:25:61:f7:89: 2e:ca:e1:5d:8b:be:8b:2d:99:91:19:b1:ba:55:f7:4a:88:8b: a9:43:0d:d2:89:ce:71:88:26:48:4c:62:0e:98:fb:af:17:26: 29:17:f0:ca:d6:03:c5:e8:e6:77:ab:1e:4a:ff:3f:32:ee:6e: 2b:b8:bc:eb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUMjvcIvKIfwsOOfauD/omGxjqtKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTEyMDYwODAzMzFaFw0yNTEyMDcxMTQ3MzFaMDMxMTAvBgNV BAMTKEM2NjY5ODJDQ0IzQjZERUM0RUI4ODIwREY1MjBEOTk2MUFBQkU2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksc4EdI68HoVC1jzl1pIxpTad 9edvXIOuLTco0tm7TTOTb+9+NzRV8yI8UvPNkuPNXWkW7Dcl0a3rcrObZ4ydSOrF z2h12EnkesCEoGDy2akodmPCNdHO7pm3JuXAD9tZb2P6gw9dcWeKebhRaJsmJBOF uF1A1a8JwC7OFFyoMOudtcW39n2r809c8ht7naFiDkAjbjVfo3nDZhs1Jxuq4EzA HGfAfXQUnUQlkK1Z8OYSnIWzmokueuU7cASQoWfmSsGcvSEDn92S7bp78QJ+3XiC WjhndxHA6P56/Fxf7AWXTp0L78L9WIGOOxJ1xGsEellqM84fFLNQvvnKZBKdAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUxmaYLMs7bexOuIIN9SDZlhqr5nAwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALfS6nKy+4DCsGlvrlza j4KkWPxXfDzuE3Hv7qJ8xQy+Imn93+LnSDVwsYaK00g9ggU8a054i8DK2jzKjyqd eT8FY+xfmUU3PaypkRBTUrk/OoA3/j5MOEvB2gnmemx9PMBuRwzrswaOa87PQaJ0 GrpN1047Trc6x+Q3Ha4fwVdKIluzFyL+tsi++u56plcB1C9fpFgyHlwuNRiVxwl1 YI0dqNbfAs9CR4ggTriw6lepV5KnwkuU9ahuKHu5+asTLQtbJWH3iS7K4V2Lvost mZEZsbpV90qIi6lDDdKJznGIJkhMYg6Y+68XJikX8MrWA8Xo5nerHkr/PzLubiu4 vOs= -----END CERTIFICATE-----Generated at Sat Dec 6 15:43:32 2025 by rpki-client