This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft File: w16ED0bhmFswYQC1wTG7uGO33AY.mft (raw, json) Hash identifier: acS+k+p9l8w8ke6gNDbjaqPsZ/XGdeHdV8Tx/AevX5U= Subject key identifier: 11:38:80:68:B4:36:30:99:1E:5B:0F:F9:0D:2D:49:1D:7B:6A:60:3B Authority key identifier: C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06 Certificate issuer: /CN=c35e840f46e1985b306100b5c131bbb863b7dc06 Certificate serial: 019B5ABF23F18A9F903FC69AF8BDE44701AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft Manifest number: 1619 Signing time: Fri 26 Dec 2025 13:00:34 +0000 Manifest this update: Fri 26 Dec 2025 13:00:34 +0000 Manifest next update: Sat 27 Dec 2025 13:00:34 +0000 Files and hashes: 1: w16ED0bhmFswYQC1wTG7uGO33AY.crl (hash: G9Ngnymjb7/8WO/hS0yEbif13u7I35GqB+RUpARzHxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:23:f1:8a:9f:90:3f:c6:9a:f8:bd:e4:47:01:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35e840f46e1985b306100b5c131bbb863b7dc06 Validity Not Before: Dec 26 13:00:34 2025 GMT Not After : Dec 27 13:00:34 2025 GMT Subject: CN=11388068b43630991e5b0ff90d2d491d7b6a603b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:25:b8:ce:a2:be:23:04:8f:33:6d:eb:9b:36: cb:1e:8f:b8:5f:e8:4f:90:52:d1:71:d3:f7:9d:1b: f7:01:fd:5c:f8:44:80:86:6c:42:36:b8:8a:5e:bc: c4:7d:be:c3:9e:86:94:62:0a:35:8a:b7:20:34:9d: 62:da:51:79:32:a0:e2:7e:d3:eb:f9:ce:a7:23:34: 49:06:c7:83:f1:25:9e:ad:e5:e9:97:c0:86:38:aa: 90:22:c9:3c:c8:c8:d8:a0:25:fa:67:77:2b:6a:f2: 24:45:69:80:6a:6b:cf:fe:52:4b:84:06:f0:da:b9: fe:bd:e1:2b:12:e8:4f:91:53:3f:86:5b:45:3c:8d: 06:e1:18:3f:05:c4:25:69:ac:47:28:00:7b:8f:a2: fa:44:53:81:21:3b:86:06:72:c4:14:be:36:c8:ba: c1:e1:eb:83:34:60:95:36:d7:03:85:53:11:ce:c9: ec:8f:fe:d4:9f:e3:c3:89:1e:70:29:55:74:65:17: 02:cb:c3:1e:6e:06:9d:5a:57:7c:05:fe:35:67:52: b5:3c:3a:0c:4c:e9:a9:9c:00:4d:ff:58:74:de:57: a3:ac:97:ad:3c:43:73:4b:56:20:8b:2a:62:80:18: 45:61:a1:73:de:32:75:b3:33:70:4f:df:7e:3c:c9: cb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:38:80:68:B4:36:30:99:1E:5B:0F:F9:0D:2D:49:1D:7B:6A:60:3B X509v3 Authority Key Identifier: keyid:C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:5b:dc:d3:f2:24:7f:b5:2a:ca:63:1a:0e:c0:c8:07:69:1b: 84:e8:25:ea:ce:2b:01:17:b4:8c:0d:e8:88:db:b7:2e:34:a8: a9:84:68:42:1a:11:90:40:3d:77:0a:ea:83:27:43:b4:0d:dd: f7:c5:60:b6:69:0c:d3:74:a3:22:9e:d2:59:80:47:23:35:6e: 82:93:af:1c:ed:47:f3:f1:cb:69:92:eb:d0:31:5d:25:be:73: f4:a8:96:fb:26:e4:dc:9f:55:a1:1d:18:fd:e4:2a:76:13:0c: 56:97:06:9a:47:01:c4:f9:5a:c3:7f:21:93:91:ff:d0:7b:dc: 0f:5a:65:78:47:14:3e:db:73:c8:26:7b:4a:b5:b4:21:c0:95: cf:a8:ee:a5:a5:26:7d:91:6c:b6:2a:27:e0:5c:78:64:19:f8: 61:69:1b:e6:ef:16:67:84:d2:f9:37:30:3e:68:c1:c0:22:63: 2d:ac:a9:32:e4:6a:7a:be:77:20:38:87:e6:14:c6:25:e4:04: d5:d2:4c:2c:89:02:4d:de:7d:1f:1e:e0:49:26:c5:f4:61:86: 00:73:c2:6d:c5:29:d5:07:6c:e6:f0:26:8c:2e:e4:9c:d1:74: 6e:e4:d9:49:04:c0:d2:39:ae:dd:ef:cb:a2:47:61:c0:b1:c4: d8:06:41:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavyPxip+QP8aa+L3kRwGtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWU4NDBmNDZlMTk4NWIzMDYxMDBiNWMxMzFiYmI4NjNi N2RjMDYwHhcNMjUxMjI2MTMwMDM0WhcNMjUxMjI3MTMwMDM0WjAzMTEwLwYDVQQD EygxMTM4ODA2OGI0MzYzMDk5MWU1YjBmZjkwZDJkNDkxZDdiNmE2MDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SW4zqK+IwSPM23rmzbLHo+4X+hP kFLRcdP3nRv3Af1c+ESAhmxCNriKXrzEfb7DnoaUYgo1ircgNJ1i2lF5MqDiftPr +c6nIzRJBseD8SWereXpl8CGOKqQIsk8yMjYoCX6Z3cravIkRWmAamvP/lJLhAbw 2rn+veErEuhPkVM/hltFPI0G4Rg/BcQlaaxHKAB7j6L6RFOBITuGBnLEFL42yLrB 4euDNGCVNtcDhVMRzsnsj/7Un+PDiR5wKVV0ZRcCy8MebgadWld8Bf41Z1K1PDoM TOmpnABN/1h03lejrJetPENzS1YgiypigBhFYaFz3jJ1szNwT99+PMnLjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBE4gGi0NjCZHlsP+Q0tSR17amA7MB8GA1UdIwQY MBaAFMNehA9G4ZhbMGEAtcExu7hjt9wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84ZGJjYTMtNjkzNC00NGFlLThmYzkt MmY4ZDQyNDBjNDM2LzEvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84ZGJjYTMtNjkzNC00NGFlLThmYzktMmY4ZDQyNDBjNDM2 LzEvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVvc0/Ik f7UqymMaDsDIB2kbhOgl6s4rARe0jA3oiNu3LjSoqYRoQhoRkEA9dwrqgydDtA3d 98VgtmkM03SjIp7SWYBHIzVugpOvHO1H8/HLaZLr0DFdJb5z9KiW+ybk3J9VoR0Y /eQqdhMMVpcGmkcBxPlaw38hk5H/0HvcD1pleEcUPttzyCZ7SrW0IcCVz6jupaUm fZFstion4Fx4ZBn4YWkb5u8WZ4TS+TcwPmjBwCJjLaypMuRqer53IDiH5hTGJeQE 1dJMLIkCTd59Hx7gSSbF9GGGAHPCbcUp1Qds5vAmjC7knNF0buTZSQTA0jmu3e/L okdhwLHE2AZBeQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:21 2025 by rpki-client