This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft File: B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft (raw, json) Hash identifier: mklDuVO+P4Nm9Bb7QnMqyTuufps5+AlNYXQdM7yu7aw= Subject key identifier: 14:EB:DD:44:63:7B:52:F9:25:8A:F7:0C:5C:7F:5C:18:2F:E5:1D:9A Authority key identifier: B1:6B:56:A2:1D:F7:BE:D8:B9:A7:54:D8:4F:E5:93:12:73:61:D6:AB Certificate issuer: /CN=b16b56a21df7bed8b9a754d84fe593127361d6ab Certificate serial: 546C5B0BE5D6A3334165CCAF327793A08F90E92F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWtWoh33vti5p1TYT-WTEnNh1qs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft Manifest number: 12 Signing time: Fri 26 Dec 2025 13:35:34 +0000 Manifest this update: Fri 26 Dec 2025 13:30:34 +0000 Manifest next update: Sat 27 Dec 2025 17:06:34 +0000 Files and hashes: 1: B16B56A21DF7BED8B9A754D84FE593127361D6AB.crl (hash: AlVamtz4kZm/GbZNqBNzw24uH4jk+o8jRFnou8u2xsg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.crl rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft rsync://rpki.ripe.net/repository/DEFAULT/sWtWoh33vti5p1TYT-WTEnNh1qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6c:5b:0b:e5:d6:a3:33:41:65:cc:af:32:77:93:a0:8f:90:e9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b16b56a21df7bed8b9a754d84fe593127361d6ab Validity Not Before: Dec 26 13:30:34 2025 GMT Not After : Dec 27 17:06:34 2025 GMT Subject: CN=14EBDD44637B52F9258AF70C5C7F5C182FE51D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:e9:e4:ff:aa:ba:72:73:02:8d:c3:ff:e1: 46:01:2a:c0:4e:37:92:c0:37:2a:60:a1:bb:c0:3f: d9:55:7b:cf:97:f8:34:cc:6f:4a:2e:82:a1:d2:c8: 0b:31:43:81:c8:03:9d:7b:62:c5:fc:4d:8e:4c:89: 1f:e9:1b:7f:7d:54:6d:11:49:25:fa:75:da:af:2e: 13:f1:ec:28:a2:59:e2:69:80:6a:60:e3:53:b5:a4: d3:05:e9:78:18:f6:fd:1f:83:72:80:e5:89:12:5d: 4c:27:b2:11:a3:71:42:c2:1d:72:f3:a3:b8:8f:9f: 1f:70:59:5c:2a:b8:bf:a2:50:36:25:1f:c3:0d:79: c4:19:95:77:e4:31:2b:49:d0:ef:39:1f:41:46:af: 0c:59:01:02:27:bb:13:31:08:f7:95:82:aa:7b:0d: 0b:cf:19:72:07:21:63:54:a4:f2:94:14:3d:c9:2d: 35:18:bb:3a:a0:37:3e:a5:e2:9f:7f:d9:39:19:96: 9e:c8:28:97:1b:b2:d2:fe:45:84:f5:aa:94:07:b7: 0d:93:c0:48:8c:4c:83:40:5b:a1:09:75:ee:7b:e1: c4:e0:79:1a:dc:dc:ff:40:4c:57:8e:78:fa:8b:71: 4c:49:bb:22:5d:e4:80:b3:d3:81:85:1e:da:57:c2: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EB:DD:44:63:7B:52:F9:25:8A:F7:0C:5C:7F:5C:18:2F:E5:1D:9A X509v3 Authority Key Identifier: keyid:B1:6B:56:A2:1D:F7:BE:D8:B9:A7:54:D8:4F:E5:93:12:73:61:D6:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWtWoh33vti5p1TYT-WTEnNh1qs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:15:1b:1d:92:aa:d1:7a:1d:f4:b4:ed:d6:7b:51:8f:ce:7d: ca:21:4d:29:19:94:c7:58:dc:55:5b:a9:36:70:ea:96:68:1c: 0d:fb:03:65:2a:b7:a4:4a:b0:ef:f3:b9:2d:46:0b:6b:40:6a: bf:ca:f6:a9:06:09:6c:0a:97:e3:61:e7:ea:3c:56:69:68:7a: 74:5c:13:67:a3:b3:04:e2:7c:e9:66:5c:6f:aa:a8:fc:9b:d0: 62:7e:05:8c:b8:2f:9e:0c:4b:d0:bf:8c:ab:51:34:cf:51:ac: 29:61:2a:fc:f3:45:c5:3b:2b:0f:5b:02:3b:19:98:0b:0d:23: bd:aa:90:90:d2:aa:0e:73:7b:bc:5c:3e:52:2a:0f:93:70:47: 7f:ba:99:7c:e6:a9:b6:be:2c:a0:c3:15:f5:7e:df:61:d8:2e: d4:9f:5a:28:64:d0:f6:33:75:43:d9:8d:b7:ee:76:93:50:71: d7:ac:64:f1:42:fc:bb:3e:1e:b8:e6:37:f5:42:8f:cf:d1:3d: c7:a9:8c:44:98:c4:78:5c:34:4a:a9:46:fe:ca:e4:6e:bf:f7: e1:1e:18:48:8a:e2:7f:8f:89:e9:92:c5:60:64:59:8b:63:49: ad:a4:2c:84:86:cc:e1:a9:b8:c5:c5:3e:77:ba:f4:e9:2b:40: 3b:65:13:c3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVGxbC+XWozNBZcyvMneToI+Q6S8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE2YjU2YTIxZGY3YmVkOGI5YTc1NGQ4NGZlNTkzMTI3 MzYxZDZhYjAeFw0yNTEyMjYxMzMwMzRaFw0yNTEyMjcxNzA2MzRaMDMxMTAvBgNV BAMTKDE0RUJERDQ0NjM3QjUyRjkyNThBRjcwQzVDN0Y1QzE4MkZFNTFEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnOnk/6q6cnMCjcP/4UYBKsBO N5LANypgobvAP9lVe8+X+DTMb0ougqHSyAsxQ4HIA517YsX8TY5MiR/pG399VG0R SSX6ddqvLhPx7CiiWeJpgGpg41O1pNMF6XgY9v0fg3KA5YkSXUwnshGjcULCHXLz o7iPnx9wWVwquL+iUDYlH8MNecQZlXfkMStJ0O85H0FGrwxZAQInuxMxCPeVgqp7 DQvPGXIHIWNUpPKUFD3JLTUYuzqgNz6l4p9/2TkZlp7IKJcbstL+RYT1qpQHtw2T wEiMTINAW6EJde574cTgeRrc3P9ATFeOePqLcUxJuyJd5ICz04GFHtpXwiJRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFOvdRGN7UvklivcMXH9cGC/lHZowHwYDVR0j BBgwFoAUsWtWoh33vti5p1TYT+WTEnNh1qswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTFhZTBhNTctOWYxMC00NjEyLThmNjUtYzkwMzJiNDE1 MzVjLzAvQjE2QjU2QTIxREY3QkVEOEI5QTc1NEQ4NEZFNTkzMTI3MzYxRDZBQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NXdFdvaDMzdnRpNXAxVFlULVdURW5O aDFxcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MWFlMGE1Ny05 ZjEwLTQ2MTItOGY2NS1jOTAzMmI0MTUzNWMvMC9CMTZCNTZBMjFERjdCRUQ4QjlB NzU0RDg0RkU1OTMxMjczNjFENkFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRUbHZKq0Xod9LTt1ntR j859yiFNKRmUx1jcVVupNnDqlmgcDfsDZSq3pEqw7/O5LUYLa0Bqv8r2qQYJbAqX 42Hn6jxWaWh6dFwTZ6OzBOJ86WZcb6qo/JvQYn4FjLgvngxL0L+Mq1E0z1GsKWEq /PNFxTsrD1sCOxmYCw0jvaqQkNKqDnN7vFw+UioPk3BHf7qZfOaptr4soMMV9X7f Ydgu1J9aKGTQ9jN1Q9mNt+52k1Bx16xk8UL8uz4euOY39UKPz9E9x6mMRJjEeFw0 SqlG/srkbr/34R4YSIrif4+J6ZLFYGRZi2NJraQshIbM4am4xcU+d7r06StAO2UT ww== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:24 2025 by rpki-client