This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft File: w16ED0bhmFswYQC1wTG7uGO33AY.mft (raw, json) Hash identifier: vqknOiFF82cap84SWu0gllw+obT5HwOlroEDZ1Ist6E= Subject key identifier: 47:A7:36:DA:B7:39:69:F6:2C:36:62:CA:57:FE:72:AB:AD:FD:EC:E6 Authority key identifier: C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06 Certificate issuer: /CN=c35e840f46e1985b306100b5c131bbb863b7dc06 Certificate serial: 019AF464C47A14E83A411B17A97E04558CD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft Manifest number: 15E4 Signing time: Sat 06 Dec 2025 16:00:35 +0000 Manifest this update: Sat 06 Dec 2025 16:00:35 +0000 Manifest next update: Sun 07 Dec 2025 16:00:35 +0000 Files and hashes: 1: w16ED0bhmFswYQC1wTG7uGO33AY.crl (hash: oO3vMa/9wig9UD9ItxdE4UbahWET3w9epSn88Z+RKmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c4:7a:14:e8:3a:41:1b:17:a9:7e:04:55:8c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35e840f46e1985b306100b5c131bbb863b7dc06 Validity Not Before: Dec 6 16:00:35 2025 GMT Not After : Dec 7 16:00:35 2025 GMT Subject: CN=47a736dab73969f62c3662ca57fe72abadfdece6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:90:c0:6e:7f:4f:b8:57:05:57:57:be:f1: 38:55:61:2c:45:5f:7b:50:66:45:28:f5:4a:1c:aa: 5c:35:ea:68:27:d4:e5:6d:62:b3:f7:47:d1:a5:ba: fa:55:75:f8:29:25:53:5e:3e:13:4e:6d:cc:ec:91: 9c:2d:6d:91:c9:03:bf:02:b0:e3:06:89:08:bc:39: 1b:e4:0e:df:dc:d8:30:2e:c7:d8:a3:94:89:33:3d: 5b:75:01:1d:08:9f:ec:d7:48:02:ef:d0:82:b1:06: 16:d1:7e:30:b6:c6:2e:46:4a:46:f7:85:a3:9e:20: 62:10:a9:37:59:f9:55:bd:bb:45:5c:fd:4a:98:26: 4f:c0:f4:c7:4e:bd:c1:9b:ee:73:94:fb:07:69:1d: 96:44:30:d7:d2:0d:f2:64:9e:84:94:cf:c6:d3:3a: f6:89:4c:4b:85:67:6c:63:60:17:dc:dd:2c:87:a8: 5d:45:82:d9:4a:b2:1d:c7:e7:8a:56:ca:6c:5e:24: 26:15:a7:33:cc:aa:8c:29:72:2e:3d:64:8e:86:5e: 83:e5:ba:a7:1b:90:c1:fe:95:60:70:83:8e:c1:a9: 40:07:35:6d:5c:d4:96:f9:ff:5f:c0:d1:71:e0:ed: e6:ab:38:8d:4c:aa:c8:20:f3:6a:86:a8:18:74:3c: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A7:36:DA:B7:39:69:F6:2C:36:62:CA:57:FE:72:AB:AD:FD:EC:E6 X509v3 Authority Key Identifier: keyid:C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:26:06:33:91:bb:0f:bf:e3:3e:6b:cc:f8:c1:3a:85:9d:f5: 94:ee:ad:95:2b:e9:28:f2:48:7f:17:6d:d4:24:c0:9c:92:fc: 7e:fc:a3:91:64:16:48:ad:68:3c:39:b0:a0:91:c0:85:ea:20: f4:c3:e6:4a:a5:44:1d:fa:1f:52:85:b3:8d:d7:25:b5:6f:59: f0:1c:b1:2f:23:c1:99:21:13:db:51:0d:c0:e1:dc:ec:9a:4b: 30:1d:d1:00:42:ff:90:0e:c0:0c:59:43:8c:4b:f3:0a:80:61: a7:68:15:72:9a:10:9c:0c:01:9b:86:f3:b1:a5:92:44:32:47: e7:32:b0:56:78:9f:49:7e:e0:b5:43:61:5d:ff:01:dd:63:1f: 08:08:26:50:7d:61:7c:15:94:9c:a9:d7:7e:e8:58:c6:8c:7a: 91:e6:6b:72:61:46:1f:24:33:19:c9:ee:f7:3c:b9:a9:51:ef: 87:ef:4c:45:a1:96:c0:6b:8e:d5:57:39:a3:06:93:c9:93:6e: 2a:27:79:96:91:95:69:97:3f:3b:4d:14:d0:0a:53:6a:67:db: 58:7a:eb:f8:31:cf:46:68:4d:33:ae:b7:e0:82:b4:c0:5e:70: 80:db:76:5a:71:22:51:f5:0a:9d:36:6b:1d:6d:4e:47:29:3c: 3a:d1:5c:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMR6FOg6QRsXqX4EVYzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWU4NDBmNDZlMTk4NWIzMDYxMDBiNWMxMzFiYmI4NjNi N2RjMDYwHhcNMjUxMjA2MTYwMDM1WhcNMjUxMjA3MTYwMDM1WjAzMTEwLwYDVQQD Eyg0N2E3MzZkYWI3Mzk2OWY2MmMzNjYyY2E1N2ZlNzJhYmFkZmRlY2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcCQwG5/T7hXBVdXvvE4VWEsRV97 UGZFKPVKHKpcNepoJ9TlbWKz90fRpbr6VXX4KSVTXj4TTm3M7JGcLW2RyQO/ArDj BokIvDkb5A7f3NgwLsfYo5SJMz1bdQEdCJ/s10gC79CCsQYW0X4wtsYuRkpG94Wj niBiEKk3WflVvbtFXP1KmCZPwPTHTr3Bm+5zlPsHaR2WRDDX0g3yZJ6ElM/G0zr2 iUxLhWdsY2AX3N0sh6hdRYLZSrIdx+eKVspsXiQmFaczzKqMKXIuPWSOhl6D5bqn G5DB/pVgcIOOwalABzVtXNSW+f9fwNFx4O3mqziNTKrIIPNqhqgYdDweFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEenNtq3OWn2LDZiylf+cqut/ezmMB8GA1UdIwQY MBaAFMNehA9G4ZhbMGEAtcExu7hjt9wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84ZGJjYTMtNjkzNC00NGFlLThmYzkt MmY4ZDQyNDBjNDM2LzEvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84ZGJjYTMtNjkzNC00NGFlLThmYzktMmY4ZDQyNDBjNDM2 LzEvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyYGM5G7 D7/jPmvM+ME6hZ31lO6tlSvpKPJIfxdt1CTAnJL8fvyjkWQWSK1oPDmwoJHAheog 9MPmSqVEHfofUoWzjdcltW9Z8ByxLyPBmSET21ENwOHc7JpLMB3RAEL/kA7ADFlD jEvzCoBhp2gVcpoQnAwBm4bzsaWSRDJH5zKwVnifSX7gtUNhXf8B3WMfCAgmUH1h fBWUnKnXfuhYxox6keZrcmFGHyQzGcnu9zy5qVHvh+9MRaGWwGuO1Vc5owaTyZNu Kid5lpGVaZc/O00U0ApTamfbWHrr+DHPRmhNM6634IK0wF5wgNt2WnEiUfUKnTZr HW1ORyk8OtFcoA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:53 2025 by rpki-client