This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json) Hash identifier: cGac68w9vgNkSjKJqmR+MyquI/Ny8x80oF4ZVv2Le6E= Subject key identifier: FC:92:12:7E:FE:4F:67:4E:D8:5E:30:38:2F:7A:F6:C3:C8:05:BF:3C Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67 Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067 Certificate serial: 019AF2E43703FF22BA49C9D7B25E629E74BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft Manifest number: FD Signing time: Sat 06 Dec 2025 09:00:33 +0000 Manifest this update: Sat 06 Dec 2025 09:00:33 +0000 Manifest next update: Sun 07 Dec 2025 09:00:33 +0000 Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: /F8nq+cD86vZ70hqjAp5PgYogV0LMHtoc83a0IILpNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:37:03:ff:22:ba:49:c9:d7:b2:5e:62:9e:74:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067 Validity Not Before: Dec 6 09:00:33 2025 GMT Not After : Dec 7 09:00:33 2025 GMT Subject: CN=fc92127efe4f674ed85e30382f7af6c3c805bf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:eb:59:e2:bc:3d:5e:3b:4f:33:aa:fd:ea: 89:c2:d9:d2:b8:06:f1:76:62:67:7c:99:a4:fb:0e: ea:49:40:44:de:b4:f9:91:2f:79:2f:12:aa:2b:33: 0a:f1:2b:b5:88:a9:2f:64:f2:01:c2:c9:63:59:53: 4e:b5:49:08:0f:53:95:32:da:1c:a3:2e:bc:4f:21: 4e:d6:24:ff:d9:6d:14:05:66:a4:a9:96:67:6c:a5: 64:5c:7d:89:2f:0f:29:4b:71:5c:f1:9b:34:8f:fc: 35:6b:b8:a2:a2:ce:78:d6:80:12:e4:d0:bd:94:85: c5:d8:86:1d:4d:2d:2d:76:86:17:cb:5c:8c:86:7d: b2:da:72:e7:b4:c6:00:bf:bb:60:9e:9a:09:0c:bc: e9:66:de:76:60:d9:4a:bb:ae:44:bc:27:50:ee:b2: b4:f8:4d:b3:16:6e:1d:54:2e:1d:61:2c:0f:6c:fb: 60:a5:c9:fe:76:fa:bf:b7:bc:99:75:3c:7d:13:18: 0d:1b:ec:f9:0f:56:a0:a4:45:a2:49:8e:1f:e9:a2: 07:94:0f:dd:63:db:de:c1:78:b1:68:7a:d2:26:03: 4b:ec:9d:53:e6:a8:0c:49:be:a2:c1:60:ae:ba:91: b4:bd:a3:ea:82:69:6b:36:34:e4:c7:95:46:a3:bc: c7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:92:12:7E:FE:4F:67:4E:D8:5E:30:38:2F:7A:F6:C3:C8:05:BF:3C X509v3 Authority Key Identifier: keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b6:df:4c:c7:6e:a7:4a:f6:d8:71:78:19:6a:b4:9c:12:c3: e6:1f:01:58:3d:b5:b2:16:1d:de:c8:21:29:82:3a:bc:e4:ed: 7a:d9:67:68:13:de:72:72:f1:7e:26:91:d9:89:0f:e8:11:20: 0a:89:8a:0a:40:62:9c:b4:e5:c7:76:aa:e4:19:c0:25:03:cd: c4:28:f5:c9:51:e3:74:31:89:68:99:06:b9:2c:c4:25:be:ce: 90:b8:69:0e:86:9c:63:57:c7:44:1f:54:a5:df:5a:00:0d:f1: 74:5c:84:ef:8d:00:fa:9c:fc:2d:cd:5a:44:59:17:a9:13:1a: b8:eb:8c:cd:d9:dd:57:98:aa:b2:5e:ee:9a:d0:19:59:f0:2f: 4c:80:04:a3:b2:cf:82:87:3e:ec:50:12:5d:89:fe:f7:82:cf: 47:9e:34:a0:f5:79:1a:8d:86:64:2d:a7:20:8d:1a:f6:be:6a: 18:d6:9c:f5:98:a9:8d:02:c8:57:9b:67:6e:03:ca:b0:df:ba: e9:ae:61:a4:61:25:5b:11:a1:82:4a:33:78:d2:62:17:80:ea: f0:f8:6d:37:f7:8a:bf:5a:d2:07:f7:d1:79:a9:1e:5b:af:1d: 0b:e4:59:ae:3c:36:9a:cf:49:36:60:00:a8:ff:82:0c:38:44: 91:2e:5d:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DcD/yK6ScnXsl5innS7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YTgwMDY4YmQ3MzI4ZWY0MTEyMGY0Nzg4YzI4ZDNhOTIw NDcwNjcwHhcNMjUxMjA2MDkwMDMzWhcNMjUxMjA3MDkwMDMzWjAzMTEwLwYDVQQD EyhmYzkyMTI3ZWZlNGY2NzRlZDg1ZTMwMzgyZjdhZjZjM2M4MDViZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytfrWeK8PV47TzOq/eqJwtnSuAbx dmJnfJmk+w7qSUBE3rT5kS95LxKqKzMK8Su1iKkvZPIBwsljWVNOtUkID1OVMtoc oy68TyFO1iT/2W0UBWakqZZnbKVkXH2JLw8pS3Fc8Zs0j/w1a7iios541oAS5NC9 lIXF2IYdTS0tdoYXy1yMhn2y2nLntMYAv7tgnpoJDLzpZt52YNlKu65EvCdQ7rK0 +E2zFm4dVC4dYSwPbPtgpcn+dvq/t7yZdTx9ExgNG+z5D1agpEWiSY4f6aIHlA/d Y9vewXixaHrSJgNL7J1T5qgMSb6iwWCuupG0vaPqgmlrNjTkx5VGo7zHaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPySEn7+T2dO2F4wOC969sPIBb88MB8GA1UdIwQY MBaAFNeoAGi9cyjvQRIPR4jCjTqSBHBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hNDVkMWMtZTNiNi00ZjIzLWE4YzYt ZWYzMzJhMDI1NmQ2LzEvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hNDVkMWMtZTNiNi00ZjIzLWE4YzYtZWYzMzJhMDI1NmQ2 LzEvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7bfTMdu p0r22HF4GWq0nBLD5h8BWD21shYd3sghKYI6vOTtetlnaBPecnLxfiaR2YkP6BEg ComKCkBinLTlx3aq5BnAJQPNxCj1yVHjdDGJaJkGuSzEJb7OkLhpDoacY1fHRB9U pd9aAA3xdFyE740A+pz8Lc1aRFkXqRMauOuMzdndV5iqsl7umtAZWfAvTIAEo7LP goc+7FASXYn+94LPR540oPV5Go2GZC2nII0a9r5qGNac9ZipjQLIV5tnbgPKsN+6 6a5hpGElWxGhgkozeNJiF4Dq8PhtN/eKv1rSB/fReakeW68dC+RZrjw2ms9JNmAA qP+CDDhEkS5dyg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:51:55 2025 by rpki-client