This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft File: a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json) Hash identifier: uct0uVk/8h7qTwSqpPYmqg9RZTKXhr2yMBKFrdCO7Xo= Subject key identifier: B5:1C:9A:87:77:7F:39:B7:EF:8E:E4:09:C9:0E:6F:46:F9:69:B4:50 Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3 Certificate issuer: /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3 Certificate serial: 019AF19BDA4DF714EAFA3B00B2EF00686887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft Manifest number: 1635 Signing time: Sat 06 Dec 2025 03:01:54 +0000 Manifest this update: Sat 06 Dec 2025 03:01:54 +0000 Manifest next update: Sun 07 Dec 2025 03:01:54 +0000 Files and hashes: 1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: XMOajfNRyorJBsNj35473Bg8/fHv2k5Nba93ma9HicA=) 2: aFCOTElnBLsNf9Ly_hbmm8JGZvk.roa (hash: MGWHqg1x0uZrRis7Xazn4JBDX59gH8eSl4RHJngdXlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:da:4d:f7:14:ea:fa:3b:00:b2:ef:00:68:68:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3 Validity Not Before: Dec 6 03:01:54 2025 GMT Not After : Dec 7 03:01:54 2025 GMT Subject: CN=b51c9a87777f39b7ef8ee409c90e6f46f969b450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:8e:f4:5e:29:c1:1b:78:0c:4e:10:3d:32: fd:79:17:38:a2:27:99:9f:16:13:b5:24:98:bd:21: 34:6f:68:ff:3e:b5:dd:e1:3c:36:b9:42:70:e2:3f: a1:af:c2:d0:36:32:f8:63:25:f3:a2:df:32:00:9c: 44:9b:48:b2:10:25:66:27:cc:24:1e:2c:89:09:06: 48:d9:0b:d1:de:50:0a:56:34:df:13:68:97:97:49: 49:d6:06:ca:a5:ad:9e:a5:7a:88:80:d7:90:09:fb: 4a:7c:fb:fa:88:29:e4:1d:45:58:4d:10:10:9b:53: 60:a2:28:e9:20:07:02:81:99:98:1d:83:32:b8:76: 0b:e8:b0:70:b1:2a:c7:25:03:67:e7:94:fa:05:31: 02:b2:3f:51:52:0b:51:3d:fa:95:92:52:58:33:70: 39:63:c5:7b:e5:d7:0a:df:d2:b8:2d:57:4e:12:79: 74:af:3d:33:0e:40:a2:f9:74:fc:39:ae:33:de:76: 7f:bd:0e:e7:13:ba:a3:63:c3:d4:d4:6c:05:a1:77: 44:07:55:da:52:1b:7e:96:25:66:85:79:3d:7d:14: 84:ec:ba:28:24:5f:df:8b:de:36:21:7e:9d:a1:45: 49:d3:2a:b6:a4:4b:d4:11:e4:4f:1c:96:db:7e:f7: a2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1C:9A:87:77:7F:39:B7:EF:8E:E4:09:C9:0E:6F:46:F9:69:B4:50 X509v3 Authority Key Identifier: keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5d:3d:62:e5:11:a5:62:6c:5d:0d:8e:94:c4:a8:23:ed:d2: 00:d8:67:ae:bb:fb:c4:dc:a5:63:12:ce:a9:fc:d9:75:b5:0a: fc:80:8f:a2:be:e4:ac:51:9a:56:23:b9:09:ab:77:6c:f7:2a: cc:9c:5b:6d:b4:1d:cf:5b:14:56:0d:04:bf:d3:92:e5:ef:d4: 6d:b4:26:28:9a:21:f3:ae:99:56:fa:99:e5:25:ed:1e:65:85: 95:47:ce:13:a6:ce:3c:ab:12:3f:52:cf:5c:84:53:da:f2:51: 4c:f4:09:9f:58:b7:fc:f8:d3:cf:6e:ed:d2:94:ee:f9:dc:72: 6e:f4:ae:47:d0:72:18:ab:6b:ae:b9:99:44:c6:bd:e7:06:18: fc:02:66:90:9d:e0:72:ae:36:4f:0a:a7:0c:97:d1:07:a2:bc: 3f:10:8d:52:79:89:76:dc:83:2d:49:fb:21:9f:53:62:e4:5a: bf:d9:63:0f:7d:ca:93:e1:e2:71:c9:d4:da:28:4f:d7:b7:5d: 00:fe:3f:98:ec:52:db:69:ea:a8:7e:58:b4:cf:33:bb:45:f0: ea:e4:64:2b:46:38:44:da:3a:8c:4f:a0:45:ce:8c:cc:a4:55: 3e:51:47:f2:9a:25:75:46:09:6f:0f:d6:fa:dc:bd:1e:f1:b2: 7f:03:f4:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm9pN9xTq+jsAsu8AaGiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWU4YjA3MDFlMzVkNjZhOTc4NzZkODA1NTAxMmE4OTY4 MmZkYzMwHhcNMjUxMjA2MDMwMTU0WhcNMjUxMjA3MDMwMTU0WjAzMTEwLwYDVQQD EyhiNTFjOWE4Nzc3N2YzOWI3ZWY4ZWU0MDljOTBlNmY0NmY5NjliNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ+O9F4pwRt4DE4QPTL9eRc4oieZ nxYTtSSYvSE0b2j/PrXd4Tw2uUJw4j+hr8LQNjL4YyXzot8yAJxEm0iyECVmJ8wk HiyJCQZI2QvR3lAKVjTfE2iXl0lJ1gbKpa2epXqIgNeQCftKfPv6iCnkHUVYTRAQ m1NgoijpIAcCgZmYHYMyuHYL6LBwsSrHJQNn55T6BTECsj9RUgtRPfqVklJYM3A5 Y8V75dcK39K4LVdOEnl0rz0zDkCi+XT8Oa4z3nZ/vQ7nE7qjY8PU1GwFoXdEB1Xa Uht+liVmhXk9fRSE7LooJF/fi942IX6doUVJ0yq2pEvUEeRPHJbbfveiMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUcmod3fzm3747kCckOb0b5abRQMB8GA1UdIwQY MBaAFGteiwcB411mqXh22AVQEqiWgv3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2Ut ZDk1NzI2NDY1M2UyLzEvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2UtZDk1NzI2NDY1M2Uy LzEvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX109YuUR pWJsXQ2OlMSoI+3SANhnrrv7xNylYxLOqfzZdbUK/ICPor7krFGaViO5Cat3bPcq zJxbbbQdz1sUVg0Ev9OS5e/UbbQmKJoh866ZVvqZ5SXtHmWFlUfOE6bOPKsSP1LP XIRT2vJRTPQJn1i3/PjTz27t0pTu+dxybvSuR9ByGKtrrrmZRMa95wYY/AJmkJ3g cq42TwqnDJfRB6K8PxCNUnmJdtyDLUn7IZ9TYuRav9ljD33Kk+HiccnU2ihP17dd AP4/mOxS22nqqH5YtM8zu0Xw6uRkK0Y4RNo6jE+gRc6MzKRVPlFH8poldUYJbw/W +ty9HvGyfwP0VQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:22 2025 by rpki-client