This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft File: MWxm5C6ILUAfr6K_pCru56dEZ3c.mft (raw, json) Hash identifier: jnvt53j7nYdZqVk1laXKu5l3SI5kpmA/meh397HSEdg= Subject key identifier: 7A:50:6B:4D:4A:37:F7:C5:27:20:44:CD:0E:A7:9E:88:AF:15:A7:3C Authority key identifier: 31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77 Certificate issuer: /CN=316c66e42e882d401fafa2bfa42aeee7a7446777 Certificate serial: 019AF12D37516E4C59B41696E8F84658133C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft Manifest number: 16C1 Signing time: Sat 06 Dec 2025 01:01:03 +0000 Manifest this update: Sat 06 Dec 2025 01:01:03 +0000 Manifest next update: Sun 07 Dec 2025 01:01:03 +0000 Files and hashes: 1: MWxm5C6ILUAfr6K_pCru56dEZ3c.crl (hash: DzYJbLjHqD6Gm02SiOefPRVV5ZbjxWygB+DIWIjUKZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:37:51:6e:4c:59:b4:16:96:e8:f8:46:58:13:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316c66e42e882d401fafa2bfa42aeee7a7446777 Validity Not Before: Dec 6 01:01:03 2025 GMT Not After : Dec 7 01:01:03 2025 GMT Subject: CN=7a506b4d4a37f7c5272044cd0ea79e88af15a73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:4f:5a:f2:16:c5:58:22:74:15:79:3d:f7: c9:fa:ef:83:9c:58:1e:5e:4d:00:76:60:79:73:55: 7a:48:ff:58:fb:92:3a:8f:91:39:a2:be:ec:db:4c: eb:02:eb:6c:32:ba:76:01:dc:11:96:1b:91:0d:d2: 21:24:ff:1a:5a:bf:36:34:d4:f4:53:2d:23:7d:fa: 39:be:08:cb:d1:07:4b:c6:03:e5:d1:b4:93:87:0e: 46:12:59:74:46:ac:25:be:be:a7:dc:71:8d:03:3f: c6:34:0b:64:40:b8:94:15:ca:d1:c8:bd:92:9d:c8: a3:ca:31:ea:62:a0:ef:01:08:02:b5:cd:12:e4:f5: ba:bb:4d:8d:42:b7:38:16:34:3a:13:4d:53:20:ee: 5d:06:69:fb:b1:35:1f:69:b9:d2:72:39:2c:ae:de: 2d:0b:09:6f:12:04:e7:a5:70:22:d3:9c:11:ea:6c: c1:51:34:61:69:2c:80:dd:7f:9e:44:06:bc:48:c1: 29:42:29:cb:61:70:52:8c:2f:12:71:07:86:30:bf: 22:c1:e3:7e:b1:2f:af:2b:3e:d3:ae:c4:b4:ab:f6: 85:95:52:6b:bd:98:4f:d5:4a:99:ed:2b:67:2e:4d: ef:3b:34:f7:31:ad:28:61:ee:b1:a2:91:52:41:07: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:50:6B:4D:4A:37:F7:C5:27:20:44:CD:0E:A7:9E:88:AF:15:A7:3C X509v3 Authority Key Identifier: keyid:31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:df:d1:e6:c0:84:4f:d4:e3:32:9a:46:ac:b2:03:b5:d6:ed: ba:b8:8d:8b:c5:db:fd:a1:1a:57:e9:08:44:f7:e4:07:37:fe: 5f:bf:d3:c2:ea:f8:f3:76:c3:ef:d3:a8:e3:5a:19:2c:d7:7d: f6:6b:d4:9c:22:4e:09:34:54:12:6a:0c:e0:20:28:6b:99:b0: 48:32:07:fa:1e:f0:a7:12:8e:94:6f:f6:91:1b:70:b2:a7:fd: 6a:b7:2d:3b:50:82:d5:40:ac:88:70:12:65:43:23:5d:74:49: 45:8e:37:47:a3:0c:b7:7d:d4:a8:c2:e9:1b:4d:6f:6a:c6:a8: e7:96:11:bc:39:ac:f5:62:4f:08:54:4c:e9:40:82:de:74:9f: b2:36:c0:0e:4e:01:4c:b6:4c:f6:ff:cd:67:3e:0b:4d:a1:b5: f1:cc:31:2f:eb:6f:23:f2:70:c2:d9:47:c0:1f:0d:e0:49:12: e5:2c:e5:0c:47:c1:f9:99:bf:c2:44:a0:67:d5:06:b5:ae:63: 08:93:65:46:7c:23:31:d5:a6:5a:e2:80:c7:a7:0a:e2:0a:eb: c6:52:62:48:da:52:fd:bf:ae:7a:c1:4e:43:76:18:3a:77:be: 9f:e9:2f:da:89:65:8e:4c:ab:ca:e9:56:cd:89:6e:9f:71:e9: c1:27:03:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTdRbkxZtBaW6PhGWBM8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNmM2NmU0MmU4ODJkNDAxZmFmYTJiZmE0MmFlZWU3YTc0 NDY3NzcwHhcNMjUxMjA2MDEwMTAzWhcNMjUxMjA3MDEwMTAzWjAzMTEwLwYDVQQD Eyg3YTUwNmI0ZDRhMzdmN2M1MjcyMDQ0Y2QwZWE3OWU4OGFmMTVhNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFRPWvIWxVgidBV5PffJ+u+DnFge Xk0AdmB5c1V6SP9Y+5I6j5E5or7s20zrAutsMrp2AdwRlhuRDdIhJP8aWr82NNT0 Uy0jffo5vgjL0QdLxgPl0bSThw5GEll0Rqwlvr6n3HGNAz/GNAtkQLiUFcrRyL2S ncijyjHqYqDvAQgCtc0S5PW6u02NQrc4FjQ6E01TIO5dBmn7sTUfabnScjksrt4t CwlvEgTnpXAi05wR6mzBUTRhaSyA3X+eRAa8SMEpQinLYXBSjC8ScQeGML8iweN+ sS+vKz7TrsS0q/aFlVJrvZhP1UqZ7StnLk3vOzT3Ma0oYe6xopFSQQf53wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpQa01KN/fFJyBEzQ6nnoivFac8MB8GA1UdIwQY MBaAFDFsZuQuiC1AH6+iv6Qq7uenRGd3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVd4bTVDNklMVUFmcjZLX3BDcnU1NmRFWjNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jMGY2NTItNWMxYy00YWZhLTg2Zjct OThkNjEzYjhkZGJkLzEvTVd4bTVDNklMVUFmcjZLX3BDcnU1NmRFWjNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jMGY2NTItNWMxYy00YWZhLTg2ZjctOThkNjEzYjhkZGJk LzEvTVd4bTVDNklMVUFmcjZLX3BDcnU1NmRFWjNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANN/R5sCE T9TjMppGrLIDtdbturiNi8Xb/aEaV+kIRPfkBzf+X7/Twur483bD79Oo41oZLNd9 9mvUnCJOCTRUEmoM4CAoa5mwSDIH+h7wpxKOlG/2kRtwsqf9arctO1CC1UCsiHAS ZUMjXXRJRY43R6MMt33UqMLpG01vasao55YRvDms9WJPCFRM6UCC3nSfsjbADk4B TLZM9v/NZz4LTaG18cwxL+tvI/JwwtlHwB8N4EkS5SzlDEfB+Zm/wkSgZ9UGta5j CJNlRnwjMdWmWuKAx6cK4grrxlJiSNpS/b+uesFOQ3YYOne+n+kv2olljkyryulW zYlun3HpwScDdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:55 2025 by rpki-client