This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft File: MWxm5C6ILUAfr6K_pCru56dEZ3c.mft (raw, json) Hash identifier: NREFJBqp/ImAMqwVztdABYiLfEoOYPq7iZIast980+w= Subject key identifier: FD:0C:B7:CB:A5:BA:8B:7D:0A:ED:2D:85:17:D5:B2:73:83:94:BB:9B Authority key identifier: 31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77 Certificate issuer: /CN=316c66e42e882d401fafa2bfa42aeee7a7446777 Certificate serial: 019B32D74E816EB59F6916409E711FE6129C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft Manifest number: 16E3 Signing time: Thu 18 Dec 2025 19:02:09 +0000 Manifest this update: Thu 18 Dec 2025 19:02:09 +0000 Manifest next update: Fri 19 Dec 2025 19:02:09 +0000 Files and hashes: 1: MWxm5C6ILUAfr6K_pCru56dEZ3c.crl (hash: NOAo6w4ynpf6pALNnSvGioN/t55rMJpsHzRLy/ExsFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:4e:81:6e:b5:9f:69:16:40:9e:71:1f:e6:12:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316c66e42e882d401fafa2bfa42aeee7a7446777 Validity Not Before: Dec 18 19:02:09 2025 GMT Not After : Dec 19 19:02:09 2025 GMT Subject: CN=fd0cb7cba5ba8b7d0aed2d8517d5b2738394bb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:c9:73:2a:e8:18:02:c4:48:ad:53:0e:0c: ec:5e:2d:1e:ce:49:a7:d1:76:96:91:c1:02:93:6d: d3:3b:8d:ae:30:04:49:e0:b1:c7:da:57:f6:b0:1f: 6e:a7:5b:72:b6:b4:ad:80:54:95:0b:b6:b3:bd:50: 04:a9:2e:e3:15:43:30:fc:92:8a:04:c0:1e:6e:b5: 06:a6:ec:3b:5b:e8:3c:e9:9a:29:f4:ae:47:e3:b2: 5e:6b:13:84:ce:53:f1:4d:96:64:d6:0c:de:bc:04: fc:42:33:96:82:7e:da:b8:d9:5d:5f:c3:3e:2f:44: ed:94:ba:96:36:2d:14:dc:19:ac:ce:e2:02:c3:a7: 7e:67:fd:26:16:ae:7e:b7:cf:a3:4e:bf:ae:95:ea: 78:24:50:fd:d4:87:ff:d5:34:d3:55:ec:3f:7a:7c: 8c:b6:45:fc:c6:be:97:23:9f:32:da:31:0b:c7:d9: 37:f9:aa:68:ba:9d:6e:04:75:5f:7e:49:31:04:4a: ca:6d:92:c0:f5:4a:3c:8b:91:80:1b:ce:23:8a:48: a0:f5:55:c0:0f:75:8b:22:b1:3b:4b:a8:76:f9:2a: 63:fd:96:76:ce:7d:e1:3b:ca:56:b3:d3:c2:ab:85: 24:ea:da:2b:f1:d8:16:fb:4a:99:71:e5:70:af:23: 94:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0C:B7:CB:A5:BA:8B:7D:0A:ED:2D:85:17:D5:B2:73:83:94:BB:9B X509v3 Authority Key Identifier: keyid:31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6a:d9:ba:77:bb:54:5a:e8:c9:06:a0:df:3c:33:f4:85:81: 72:9f:b7:71:8f:4e:c9:f7:39:1b:77:93:70:5f:60:80:dd:7c: 40:c1:66:bc:22:3e:3f:b7:d5:b3:67:45:f2:04:88:43:04:bd: 48:e3:65:c5:03:fb:fc:1b:16:6e:e1:8b:27:e3:8b:2e:49:6a: 1d:9d:02:35:ff:fd:79:a0:7a:76:45:f5:2a:2c:1a:99:90:b3: 1f:30:dc:f2:1e:69:80:a9:e8:29:d8:5b:60:d1:79:13:60:a7: f0:40:ae:01:3d:4a:2a:d1:0d:0a:68:b3:d7:a8:c7:1f:47:25: 17:21:4b:c8:f8:44:48:d3:c1:d0:d1:b8:72:4a:19:7e:b0:d8: 66:99:4e:01:f3:99:76:2a:e2:71:6f:81:ce:03:bb:f2:2b:24: 47:7c:90:21:f7:19:93:be:41:87:db:f5:ca:54:3d:d7:99:a9: 2e:da:ff:19:57:8e:4c:5d:33:30:4e:82:ea:b8:f6:25:60:08: 8e:0e:ac:95:fb:29:af:55:e3:56:ce:7c:a8:ec:54:04:0b:5d: fd:9b:c9:41:61:1c:4f:4f:8c:57:1b:0b:cb:c2:aa:74:7d:3b: d6:dd:66:e9:ae:7e:8c:bf:9c:97:40:90:ac:53:80:73:56:c9: 63:f3:3c:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy106BbrWfaRZAnnEf5hKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNmM2NmU0MmU4ODJkNDAxZmFmYTJiZmE0MmFlZWU3YTc0 NDY3NzcwHhcNMjUxMjE4MTkwMjA5WhcNMjUxMjE5MTkwMjA5WjAzMTEwLwYDVQQD EyhmZDBjYjdjYmE1YmE4YjdkMGFlZDJkODUxN2Q1YjI3MzgzOTRiYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw03JcyroGALESK1TDgzsXi0ezkmn 0XaWkcECk23TO42uMARJ4LHH2lf2sB9up1tytrStgFSVC7azvVAEqS7jFUMw/JKK BMAebrUGpuw7W+g86Zop9K5H47JeaxOEzlPxTZZk1gzevAT8QjOWgn7auNldX8M+ L0TtlLqWNi0U3BmszuICw6d+Z/0mFq5+t8+jTr+ulep4JFD91If/1TTTVew/enyM tkX8xr6XI58y2jELx9k3+apoup1uBHVffkkxBErKbZLA9Uo8i5GAG84jikig9VXA D3WLIrE7S6h2+Spj/ZZ2zn3hO8pWs9PCq4Uk6tor8dgW+0qZceVwryOUrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0Mt8uluot9Cu0thRfVsnODlLubMB8GA1UdIwQY MBaAFDFsZuQuiC1AH6+iv6Qq7uenRGd3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVd4bTVDNklMVUFmcjZLX3BDcnU1NmRFWjNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jMGY2NTItNWMxYy00YWZhLTg2Zjct OThkNjEzYjhkZGJkLzEvTVd4bTVDNklMVUFmcjZLX3BDcnU1NmRFWjNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jMGY2NTItNWMxYy00YWZhLTg2ZjctOThkNjEzYjhkZGJk LzEvTVd4bTVDNklMVUFmcjZLX3BDcnU1NmRFWjNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWrZune7 VFroyQag3zwz9IWBcp+3cY9Oyfc5G3eTcF9ggN18QMFmvCI+P7fVs2dF8gSIQwS9 SONlxQP7/BsWbuGLJ+OLLklqHZ0CNf/9eaB6dkX1KiwamZCzHzDc8h5pgKnoKdhb YNF5E2Cn8ECuAT1KKtENCmiz16jHH0clFyFLyPhESNPB0NG4ckoZfrDYZplOAfOZ diricW+BzgO78iskR3yQIfcZk75Bh9v1ylQ915mpLtr/GVeOTF0zME6C6rj2JWAI jg6slfspr1XjVs58qOxUBAtd/ZvJQWEcT0+MVxsLy8KqdH071t1m6a5+jL+cl0CQ rFOAc1bJY/M8fQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:29:34 2025 by rpki-client