This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft File: h16pmc28YATHGlRwyg7HrnOCCPo.mft (raw, json) Hash identifier: Pkr+qHXozWmCp/dkdJCPwpozhHs2zI0alevQSl8jR2U= Subject key identifier: E3:52:B1:08:D0:EF:7D:DF:75:B7:93:0C:70:28:F3:87:62:C1:87:61 Authority key identifier: 87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA Certificate issuer: /CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa Certificate serial: 019B3532BF8AA1DA862CF272FE4999B4C408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft Manifest number: 06E5 Signing time: Fri 19 Dec 2025 06:01:16 +0000 Manifest this update: Fri 19 Dec 2025 06:01:16 +0000 Manifest next update: Sat 20 Dec 2025 06:01:16 +0000 Files and hashes: 1: h16pmc28YATHGlRwyg7HrnOCCPo.crl (hash: gGvHygCbMuQ4GKkSrUxf/vMLAvMvVDyjK0mllLDJ964=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:bf:8a:a1:da:86:2c:f2:72:fe:49:99:b4:c4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa Validity Not Before: Dec 19 06:01:16 2025 GMT Not After : Dec 20 06:01:16 2025 GMT Subject: CN=e352b108d0ef7ddf75b7930c7028f38762c18761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:16:e8:60:8d:c4:9f:26:97:63:72:2a:74: 51:4b:ff:21:ac:56:d7:d0:ce:00:42:06:ff:a6:16: d2:3e:8a:ad:4e:1d:c6:f2:c2:c3:eb:3f:66:70:4d: a8:79:37:cc:50:b8:6e:9d:d7:8d:d7:58:15:20:66: a1:ed:81:10:1d:f9:2f:24:a0:63:84:ba:7f:5e:40: c2:a1:1d:09:bd:31:b1:9e:74:aa:98:d6:7b:f0:49: 0a:4d:e3:ea:ba:20:3b:6b:04:48:dc:e0:68:27:22: fa:ac:cf:d5:01:77:16:61:4d:21:08:41:3e:ec:3c: f6:fc:95:75:46:66:49:65:0a:10:84:4b:8f:b2:9a: a2:da:68:59:64:87:f2:72:89:50:17:b5:78:68:9b: 2e:20:8e:b8:5b:a4:be:54:88:cc:1b:70:0c:31:34: be:2f:15:de:1b:7b:3f:28:40:2f:07:f1:e3:8a:ca: e0:c0:a1:0e:63:e8:94:13:9d:be:25:82:c5:99:88: 43:a4:18:ba:0c:96:43:42:97:b6:8f:ba:de:92:80: fd:4e:a3:36:29:dd:ad:d4:7f:c8:60:34:b7:49:43: 61:b1:37:9e:d8:62:ef:46:e6:69:79:84:95:85:64: 95:89:ae:d2:19:1e:7e:7a:ea:08:1d:fa:26:3a:cb: 79:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:52:B1:08:D0:EF:7D:DF:75:B7:93:0C:70:28:F3:87:62:C1:87:61 X509v3 Authority Key Identifier: keyid:87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fb:13:46:46:02:b1:a5:78:b7:55:aa:df:63:48:55:5d:58: 10:30:3f:84:b9:8a:09:6c:47:6a:a0:be:87:cd:60:5a:82:a8: db:bf:0c:ca:e6:99:07:2c:b1:7a:8e:81:c4:f0:93:87:03:b6: d5:0b:5c:e8:6e:a7:9e:da:7b:7d:a4:e1:13:fa:a4:a3:cf:fd: 03:37:49:a3:31:75:fd:bd:cb:1d:46:fd:ed:17:5b:00:64:77: ef:cf:3f:22:f8:6c:e0:66:ff:60:72:79:79:9f:fe:2d:97:25: 98:a3:2b:a6:af:7d:10:48:05:41:0c:e5:2a:70:d6:f2:37:73: 5b:28:0d:40:92:56:b6:ef:cb:de:7a:38:e8:5b:58:98:58:71: 10:12:13:e9:fe:26:37:06:f1:f3:68:5e:bc:b3:3d:40:47:52: 25:2b:b3:cb:da:e9:5d:66:55:7e:9b:ea:3a:ff:32:1f:f1:7e: 89:ff:e0:f2:7e:65:90:95:ab:fc:93:bd:20:7d:fd:a0:b6:d2: 39:c1:07:1f:43:05:83:d1:e2:89:6e:e5:9e:54:8c:70:02:3f: 61:c4:6e:77:93:a3:f1:61:a6:5c:a7:91:f5:a3:3f:4f:a4:ab: dd:25:7a:71:93:d0:68:fd:ca:9c:d3:20:02:42:d3:d2:dc:af: 55:0e:8b:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mr+KodqGLPJy/kmZtMQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NWVhOTk5Y2RiYzYwMDRjNzFhNTQ3MGNhMGVjN2FlNzM4 MjA4ZmEwHhcNMjUxMjE5MDYwMTE2WhcNMjUxMjIwMDYwMTE2WjAzMTEwLwYDVQQD EyhlMzUyYjEwOGQwZWY3ZGRmNzViNzkzMGM3MDI4ZjM4NzYyYzE4NzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKQW6GCNxJ8ml2NyKnRRS/8hrFbX 0M4AQgb/phbSPoqtTh3G8sLD6z9mcE2oeTfMULhundeN11gVIGah7YEQHfkvJKBj hLp/XkDCoR0JvTGxnnSqmNZ78EkKTePquiA7awRI3OBoJyL6rM/VAXcWYU0hCEE+ 7Dz2/JV1RmZJZQoQhEuPspqi2mhZZIfycolQF7V4aJsuII64W6S+VIjMG3AMMTS+ LxXeG3s/KEAvB/HjisrgwKEOY+iUE52+JYLFmYhDpBi6DJZDQpe2j7rekoD9TqM2 Kd2t1H/IYDS3SUNhsTee2GLvRuZpeYSVhWSVia7SGR5+euoIHfomOst5cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONSsQjQ733fdbeTDHAo84diwYdhMB8GA1UdIwQY MBaAFIdeqZnNvGAExxpUcMoOx65zggj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDE2cG1jMjhZQVRIR2xSd3lnN0hybk9DQ1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ODdmMTAtMTc0NC00OWRmLWJkN2Ut NGQxMmZkMjVkOTc4LzEvaDE2cG1jMjhZQVRIR2xSd3lnN0hybk9DQ1BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS82ODdmMTAtMTc0NC00OWRmLWJkN2UtNGQxMmZkMjVkOTc4 LzEvaDE2cG1jMjhZQVRIR2xSd3lnN0hybk9DQ1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPsTRkYC saV4t1Wq32NIVV1YEDA/hLmKCWxHaqC+h81gWoKo278MyuaZByyxeo6BxPCThwO2 1Qtc6G6nntp7faThE/qko8/9AzdJozF1/b3LHUb97RdbAGR3788/Ivhs4Gb/YHJ5 eZ/+LZclmKMrpq99EEgFQQzlKnDW8jdzWygNQJJWtu/L3no46FtYmFhxEBIT6f4m Nwbx82hevLM9QEdSJSuzy9rpXWZVfpvqOv8yH/F+if/g8n5lkJWr/JO9IH39oLbS OcEHH0MFg9HiiW7lnlSMcAI/YcRud5Oj8WGmXKeR9aM/T6Sr3SV6cZPQaP3KnNMg AkLT0tyvVQ6LIw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:13:32 2025 by rpki-client