This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft File: a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json) Hash identifier: gvPKXeTxk+LPOZxp6ikbw60abAYtDEIqxGL0yPoUbdM= Subject key identifier: 7E:D2:5F:4F:73:48:4B:60:AC:F0:C0:96:05:D3:08:B0:CD:34:B4:1D Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3 Certificate issuer: /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3 Certificate serial: 019B522A91B6FC57985026CF1ACF5AC74E3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft Manifest number: 1667 Signing time: Wed 24 Dec 2025 21:01:20 +0000 Manifest this update: Wed 24 Dec 2025 21:01:20 +0000 Manifest next update: Thu 25 Dec 2025 21:01:20 +0000 Files and hashes: 1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: /tYJKOiSzFisMz03fmXeh+EFzMLIZ1VYkYUW/cYi+jQ=) 2: aFCOTElnBLsNf9Ly_hbmm8JGZvk.roa (hash: MGWHqg1x0uZrRis7Xazn4JBDX59gH8eSl4RHJngdXlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:91:b6:fc:57:98:50:26:cf:1a:cf:5a:c7:4e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3 Validity Not Before: Dec 24 21:01:20 2025 GMT Not After : Dec 25 21:01:20 2025 GMT Subject: CN=7ed25f4f73484b60acf0c09605d308b0cd34b41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:21:ac:02:a3:f0:e8:7a:6f:d1:aa:e4:2a: 04:d5:e1:d3:73:98:f3:b5:7f:f1:6d:68:d9:b6:c7: 31:73:ac:88:e0:56:f9:84:f0:0e:8f:ef:e4:b7:78: 82:bf:ca:75:f9:d4:35:0d:a8:92:a6:ea:ef:81:0d: a3:ff:7c:5e:a9:2c:b4:49:27:c4:db:69:13:84:82: db:10:5b:fe:05:b3:a0:44:4e:64:c9:c2:9d:37:1a: a2:a6:3f:06:74:10:a0:7b:8f:0f:6f:8d:15:39:e7: a4:13:48:87:e9:df:30:75:57:0d:62:ea:81:48:cd: ce:05:32:a6:67:94:3c:f4:a5:92:45:ea:c9:3e:f0: 95:ad:63:0e:df:5c:ee:24:ac:e9:dc:f2:c3:66:43: ef:71:80:b5:fd:64:f1:95:91:14:0f:31:26:28:84: 88:a5:ca:0e:67:a5:6d:ee:b4:31:78:61:59:fe:84: c9:4b:27:5c:90:7b:bd:10:ad:2b:6d:a7:f7:ce:b3: 7f:b7:8f:f2:5a:f0:ee:29:2d:dd:fb:3d:99:3a:06: 94:90:a8:9d:66:c8:f4:84:50:8c:34:ed:fa:8a:3f: 87:20:a6:60:a9:ef:05:9e:30:57:b0:59:d0:79:b5: 50:68:96:65:28:5d:44:e0:ed:d0:cd:75:20:36:4d: 2e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D2:5F:4F:73:48:4B:60:AC:F0:C0:96:05:D3:08:B0:CD:34:B4:1D X509v3 Authority Key Identifier: keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:59:26:93:45:fd:f6:3b:0a:01:e4:82:58:e3:02:ad:45:08: d6:0a:39:50:cb:1c:e9:e5:a7:91:4a:7c:5b:ba:7e:94:b2:6a: 26:e5:96:6a:d5:50:27:d5:57:82:26:35:44:9b:ef:44:7a:a4: 98:59:7c:f4:5a:80:1c:11:18:96:0f:a5:71:1e:35:bb:9e:02: 10:25:a4:f7:f4:13:c8:fd:aa:4a:67:d5:a8:d3:63:b6:51:b0: cc:89:ab:f9:bc:2b:03:aa:8e:c9:d9:60:a9:86:bd:1b:96:d7: 89:ff:c6:f6:f9:90:f3:6b:4d:ed:f6:13:52:2e:61:6d:fd:d5: 93:88:e5:46:e1:2d:d3:6f:6f:06:14:ad:fd:5b:41:a6:7b:1a: 5a:d0:0f:3a:99:2b:9a:a9:03:19:b9:4c:ff:bc:be:49:c1:d1: 26:b0:75:3f:b3:64:fa:d6:b2:9a:d1:7d:f0:4f:00:cd:2a:d5: d7:0c:ff:28:5c:56:2c:64:87:34:d6:55:54:67:37:6d:bb:eb: eb:84:fe:29:cf:83:d4:bd:02:2a:ef:2c:4e:59:c6:c6:c8:bc: 89:7f:0b:ef:3c:5e:91:a0:31:83:50:7c:6a:60:25:66:e3:ff: 97:d7:59:a1:cb:07:9a:04:1f:f0:4c:96:45:b7:83:c8:2e:2c: ca:bc:12:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKpG2/FeYUCbPGs9ax046MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWU4YjA3MDFlMzVkNjZhOTc4NzZkODA1NTAxMmE4OTY4 MmZkYzMwHhcNMjUxMjI0MjEwMTIwWhcNMjUxMjI1MjEwMTIwWjAzMTEwLwYDVQQD Eyg3ZWQyNWY0ZjczNDg0YjYwYWNmMGMwOTYwNWQzMDhiMGNkMzRiNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHYhrAKj8Oh6b9Gq5CoE1eHTc5jz tX/xbWjZtscxc6yI4Fb5hPAOj+/kt3iCv8p1+dQ1DaiSpurvgQ2j/3xeqSy0SSfE 22kThILbEFv+BbOgRE5kycKdNxqipj8GdBCge48Pb40VOeekE0iH6d8wdVcNYuqB SM3OBTKmZ5Q89KWSRerJPvCVrWMO31zuJKzp3PLDZkPvcYC1/WTxlZEUDzEmKISI pcoOZ6Vt7rQxeGFZ/oTJSydckHu9EK0rbaf3zrN/t4/yWvDuKS3d+z2ZOgaUkKid Zsj0hFCMNO36ij+HIKZgqe8FnjBXsFnQebVQaJZlKF1E4O3QzXUgNk0uNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7SX09zSEtgrPDAlgXTCLDNNLQdMB8GA1UdIwQY MBaAFGteiwcB411mqXh22AVQEqiWgv3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2Ut ZDk1NzI2NDY1M2UyLzEvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2UtZDk1NzI2NDY1M2Uy LzEvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFkmk0X9 9jsKAeSCWOMCrUUI1go5UMsc6eWnkUp8W7p+lLJqJuWWatVQJ9VXgiY1RJvvRHqk mFl89FqAHBEYlg+lcR41u54CECWk9/QTyP2qSmfVqNNjtlGwzImr+bwrA6qOydlg qYa9G5bXif/G9vmQ82tN7fYTUi5hbf3Vk4jlRuEt029vBhSt/VtBpnsaWtAPOpkr mqkDGblM/7y+ScHRJrB1P7Nk+taymtF98E8AzSrV1wz/KFxWLGSHNNZVVGc3bbvr 64T+Kc+D1L0CKu8sTlnGxsi8iX8L7zxekaAxg1B8amAlZuP/l9dZocsHmgQf8EyW RbeDyC4syrwSCw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:15:51 2025 by rpki-client