This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json) Hash identifier: tUjhFFLvu+bRJFTz2z8AlbB3uFhrhLbegWRSIXblNHg= Subject key identifier: DF:EB:ED:DF:7C:13:05:21:97:E2:B2:5B:1E:2E:C1:11:62:D7:B2:D1 Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67 Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067 Certificate serial: 019B5A672D3B9AE6B31C8E2C4B5A23C2423D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft Manifest number: 0135 Signing time: Fri 26 Dec 2025 11:24:29 +0000 Manifest this update: Fri 26 Dec 2025 11:24:29 +0000 Manifest next update: Sat 27 Dec 2025 11:24:29 +0000 Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: rvU6OAkgc4+DBfLow4PADZjSc57mVnIRKtAwjbp+orw=) 2: MnOUatBKTZb7h6nJNo1_K3OPHG8.roa (hash: 3KSha2Xq8Fc3EKzMHK4MhM7evfqGnA9efVV8wC7VXrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:67:2d:3b:9a:e6:b3:1c:8e:2c:4b:5a:23:c2:42:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067 Validity Not Before: Dec 26 11:24:29 2025 GMT Not After : Dec 27 11:24:29 2025 GMT Subject: CN=dfebeddf7c13052197e2b25b1e2ec11162d7b2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:52:20:00:8b:41:f9:5a:41:3f:97:7d:28:e5: dd:b1:6b:18:99:4a:56:ec:20:29:c9:54:2d:43:e2: 20:23:53:78:13:ac:5e:4e:98:01:fe:25:2b:b9:54: 07:c0:a0:5e:46:3a:90:db:9e:31:79:28:ad:d5:e3: c8:df:b1:4f:05:54:46:90:e3:80:73:7e:01:70:b1: f5:c1:5c:ce:06:4d:75:7c:fb:f6:ff:d0:fb:79:af: 5f:83:10:bd:55:ca:11:ba:37:09:48:99:b5:f5:46: f1:07:0e:c8:1c:5c:1e:bf:56:7a:86:c1:91:67:9f: ac:8f:08:e7:1b:9e:23:2e:e8:75:97:ba:8a:c9:d2: 32:89:98:be:46:1d:35:a9:83:99:ed:0c:27:b2:99: b6:18:3a:33:87:22:b1:49:f4:8a:6b:77:ef:4d:25: 02:cd:63:5c:ca:2d:ae:fb:77:0f:b1:ec:bd:58:eb: 2f:c8:9e:05:85:a1:b0:12:4d:9d:8c:a7:a7:fe:98: 99:cc:18:79:f9:77:fe:2d:dd:56:87:a4:87:7c:68: fd:a6:4f:a2:32:20:9b:f1:fd:51:48:28:ce:ea:fc: f1:c5:4f:db:94:1c:c9:f6:66:c8:60:16:71:f8:5c: b0:44:2a:91:65:80:2e:20:e1:ef:21:72:2d:73:d0: cb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EB:ED:DF:7C:13:05:21:97:E2:B2:5B:1E:2E:C1:11:62:D7:B2:D1 X509v3 Authority Key Identifier: keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:af:5a:62:c5:57:a6:4e:ce:d5:8f:f5:a4:68:fd:e2:b0:19: c5:0b:fc:f1:0e:8f:7c:ac:1d:90:72:e9:fd:77:0f:73:5b:37: 0c:d6:74:e3:84:a8:8c:68:6b:76:61:3a:54:0d:36:86:53:49: 11:e2:80:49:bc:6f:95:b8:77:80:ac:ec:67:89:b2:e7:c5:1f: d9:b6:2d:8a:54:e4:0f:f2:9c:55:82:03:6e:ac:9c:b0:24:6f: 93:a2:73:83:77:ab:8d:25:ee:c3:de:5d:0c:b4:28:a7:22:65: a9:f7:45:32:2a:4e:43:a5:b6:08:43:b1:0c:de:65:98:26:f6: ad:eb:d9:b0:aa:76:87:85:c8:73:de:8d:b9:60:4b:28:6a:20: 26:50:77:23:13:c3:88:14:d4:71:26:4e:8c:b7:e9:23:7b:eb: 61:68:b8:10:3d:22:0e:5a:d0:d7:19:28:b8:ca:29:d8:0a:76: a7:1b:58:d3:a1:01:0f:dd:cf:e4:a3:eb:d7:35:80:a8:80:c6: bf:5d:b8:1c:65:38:b6:e9:d7:5d:dd:80:1c:b1:95:5b:8f:48: 54:bc:98:f8:89:ab:b7:67:5b:78:64:57:67:2a:45:6f:56:5e: 8d:69:be:02:f6:01:38:06:96:f5:c0:6f:c0:73:7e:b1:b2:df: 0c:9b:0f:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaZy07muazHI4sS1ojwkI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YTgwMDY4YmQ3MzI4ZWY0MTEyMGY0Nzg4YzI4ZDNhOTIw NDcwNjcwHhcNMjUxMjI2MTEyNDI5WhcNMjUxMjI3MTEyNDI5WjAzMTEwLwYDVQQD EyhkZmViZWRkZjdjMTMwNTIxOTdlMmIyNWIxZTJlYzExMTYyZDdiMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFIgAItB+VpBP5d9KOXdsWsYmUpW 7CApyVQtQ+IgI1N4E6xeTpgB/iUruVQHwKBeRjqQ254xeSit1ePI37FPBVRGkOOA c34BcLH1wVzOBk11fPv2/9D7ea9fgxC9VcoRujcJSJm19UbxBw7IHFwev1Z6hsGR Z5+sjwjnG54jLuh1l7qKydIyiZi+Rh01qYOZ7Qwnspm2GDozhyKxSfSKa3fvTSUC zWNcyi2u+3cPsey9WOsvyJ4FhaGwEk2djKen/piZzBh5+Xf+Ld1Wh6SHfGj9pk+i MiCb8f1RSCjO6vzxxU/blBzJ9mbIYBZx+FywRCqRZYAuIOHvIXItc9DLZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/r7d98EwUhl+KyWx4uwRFi17LRMB8GA1UdIwQY MBaAFNeoAGi9cyjvQRIPR4jCjTqSBHBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hNDVkMWMtZTNiNi00ZjIzLWE4YzYt ZWYzMzJhMDI1NmQ2LzEvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hNDVkMWMtZTNiNi00ZjIzLWE4YzYtZWYzMzJhMDI1NmQ2 LzEvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU69aYsVX pk7O1Y/1pGj94rAZxQv88Q6PfKwdkHLp/XcPc1s3DNZ044SojGhrdmE6VA02hlNJ EeKASbxvlbh3gKzsZ4my58Uf2bYtilTkD/KcVYIDbqycsCRvk6Jzg3erjSXuw95d DLQopyJlqfdFMipOQ6W2CEOxDN5lmCb2revZsKp2h4XIc96NuWBLKGogJlB3IxPD iBTUcSZOjLfpI3vrYWi4ED0iDlrQ1xkouMop2Ap2pxtY06EBD93P5KPr1zWAqIDG v124HGU4tunXXd2AHLGVW49IVLyY+Imrt2dbeGRXZypFb1ZejWm+AvYBOAaW9cBv wHN+sbLfDJsP7Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:00 2025 by rpki-client