This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft File: v16_5FjImQcA8EwBsRMuOjdiPeU.mft (raw, json) Hash identifier: i7iyMTgfSfOOTNL4HxywwuM1wq/l3fxepqRXTCIneAs= Subject key identifier: 52:E3:EB:63:00:0B:AA:35:53:A3:18:DC:FA:70:68:52:88:7D:39:F9 Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5 Certificate issuer: /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5 Certificate serial: 019AF4650EC8BEEC432E2B63F6153CEE7AB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 16:00:54 +0000 Manifest this update: Sat 06 Dec 2025 16:00:54 +0000 Manifest next update: Sun 07 Dec 2025 16:00:54 +0000 Files and hashes: 1: i6hB2IahOI67PvpUTSQc2nj4R3g.roa (hash: d+MeIEX0oXT1ILgVQ/KLqsvbNLNFr38pDADmv1QHEqI=) 2: v16_5FjImQcA8EwBsRMuOjdiPeU.crl (hash: y16BKQuzSWeFOAYvqMcDlVNGaxP7PUNaI9kvhN8xbrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:0e:c8:be:ec:43:2e:2b:63:f6:15:3c:ee:7a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5 Validity Not Before: Dec 6 16:00:54 2025 GMT Not After : Dec 7 16:00:54 2025 GMT Subject: CN=52e3eb63000baa3553a318dcfa706852887d39f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:2b:69:79:e6:1c:8d:a2:7c:a5:d9:1d:89: ca:d3:bf:a2:13:80:29:0e:0a:4b:58:dc:c1:f4:56: ec:0a:db:ee:05:67:ba:70:a6:0f:e4:0b:2e:23:44: 25:9e:f5:f7:05:95:ad:59:96:ae:ee:73:ad:b4:49: f3:80:ed:f1:c4:c8:d1:0a:20:55:2a:20:f5:f5:2e: 8c:b5:6e:5b:27:ff:3c:9c:c5:4a:a5:da:58:60:aa: ef:4d:3b:6b:64:96:64:a6:f5:c9:87:af:10:57:af: b9:b5:95:3a:36:68:78:aa:51:56:0b:35:18:62:c5: 7d:41:b6:27:d3:4a:a7:92:73:a5:df:10:3a:31:ad: 15:11:74:69:5c:1f:20:b0:e7:55:b9:24:de:55:5c: 72:c8:ad:51:50:6f:ec:f7:cc:84:bb:1c:cd:1d:04: e9:75:d2:6d:d3:8c:0c:1f:c2:95:81:c6:3e:58:dc: d2:97:2d:2e:db:43:a4:23:54:9c:36:de:dd:66:dd: 11:59:5a:1f:4e:2c:cd:8d:50:a3:bd:e2:84:d3:e2: 86:43:b6:95:ad:a3:5d:0b:c5:88:ae:ba:9e:b1:e4: 2f:b3:0f:5a:76:70:f0:ab:a1:ce:26:43:29:f4:dc: 10:08:28:93:70:de:63:af:25:89:72:91:86:8a:9e: 08:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E3:EB:63:00:0B:AA:35:53:A3:18:DC:FA:70:68:52:88:7D:39:F9 X509v3 Authority Key Identifier: keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1a:88:62:ad:76:8b:0a:eb:7e:44:82:eb:e0:14:bd:f5:ae: 24:dc:a1:7e:fc:27:b6:82:93:3d:67:1a:3e:cb:3e:e9:ac:75: 67:7c:73:a2:39:cc:76:f0:88:4d:23:b6:24:19:bf:0d:5b:57: 6b:bd:bf:f0:ba:22:a1:1d:c7:f1:83:76:fc:14:ba:5a:ec:d5: 0d:2b:f8:83:cc:7b:6b:5d:ce:11:b9:60:61:e4:71:2c:38:5c: 78:f2:3c:c2:c8:39:4a:89:ad:b9:7b:61:34:2a:40:bf:80:7c: 6c:4f:31:f1:28:b5:ab:96:35:6a:29:6c:e8:37:b9:9b:4f:cd: 6e:90:95:b0:9e:6e:76:28:92:52:02:b2:f7:bf:6a:2e:5e:99: c2:10:af:e1:93:ad:1b:8f:fe:65:3d:01:91:dc:75:8e:40:8e: 7b:f7:df:74:b1:02:d6:de:98:52:96:e5:65:9b:25:7b:81:36: 1c:7c:a3:05:ed:1b:d8:38:e1:73:a5:b4:8c:e5:5f:4e:2e:d7: dd:3f:73:63:05:93:c0:57:70:89:19:8b:f1:00:f2:6e:f5:ff: b2:26:05:49:a4:48:f2:06:71:b5:2a:a7:5d:df:ef:e4:fe:1b: 26:21:91:4a:bd:66:3d:b5:a3:f6:58:ba:a5:17:7f:6d:65:1e: 0e:b8:67:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQ7IvuxDLitj9hU87nqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWViZmU0NThjODk5MDcwMGYwNGMwMWIxMTMyZTNhMzc2 MjNkZTUwHhcNMjUxMjA2MTYwMDU0WhcNMjUxMjA3MTYwMDU0WjAzMTEwLwYDVQQD Eyg1MmUzZWI2MzAwMGJhYTM1NTNhMzE4ZGNmYTcwNjg1Mjg4N2QzOWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynkraXnmHI2ifKXZHYnK07+iE4Ap DgpLWNzB9FbsCtvuBWe6cKYP5AsuI0QlnvX3BZWtWZau7nOttEnzgO3xxMjRCiBV KiD19S6MtW5bJ/88nMVKpdpYYKrvTTtrZJZkpvXJh68QV6+5tZU6Nmh4qlFWCzUY YsV9QbYn00qnknOl3xA6Ma0VEXRpXB8gsOdVuSTeVVxyyK1RUG/s98yEuxzNHQTp ddJt04wMH8KVgcY+WNzSly0u20OkI1ScNt7dZt0RWVofTizNjVCjveKE0+KGQ7aV raNdC8WIrrqeseQvsw9adnDwq6HOJkMp9NwQCCiTcN5jryWJcpGGip4I/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLj62MAC6o1U6MY3PpwaFKIfTn5MB8GA1UdIwQY MBaAFL9ev+RYyJkHAPBMAbETLjo3Yj3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjE2XzVGakltUWNBOEV3QnNSTXVPamRpUGVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80MDQwZWUtMDdiZC00M2M0LTg1MDgt MDU4Mzk0MWVlYTcxLzEvdjE2XzVGakltUWNBOEV3QnNSTXVPamRpUGVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny80MDQwZWUtMDdiZC00M2M0LTg1MDgtMDU4Mzk0MWVlYTcx LzEvdjE2XzVGakltUWNBOEV3QnNSTXVPamRpUGVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxqIYq12 iwrrfkSC6+AUvfWuJNyhfvwntoKTPWcaPss+6ax1Z3xzojnMdvCITSO2JBm/DVtX a72/8LoioR3H8YN2/BS6WuzVDSv4g8x7a13OEblgYeRxLDhcePI8wsg5SomtuXth NCpAv4B8bE8x8Si1q5Y1ails6De5m0/NbpCVsJ5udiiSUgKy979qLl6ZwhCv4ZOt G4/+ZT0Bkdx1jkCOe/ffdLEC1t6YUpblZZsle4E2HHyjBe0b2Djhc6W0jOVfTi7X 3T9zYwWTwFdwiRmL8QDybvX/siYFSaRI8gZxtSqnXd/v5P4bJiGRSr1mPbWj9li6 pRd/bWUeDrhnfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:16 2025 by rpki-client