This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json) Hash identifier: 9GxS9GQhabnqigG6u4srBDa7VCu1mZOB1bby+SYSoMY= Subject key identifier: AC:13:97:7F:AD:EB:3C:BD:F8:36:DB:CA:01:34:5B:CC:D1:02:C6:72 Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33 Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533 Certificate serial: 019B3C105FC53B3375B945B5CD2C390B2D05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft Manifest number: 1676 Signing time: Sat 20 Dec 2025 14:01:04 +0000 Manifest this update: Sat 20 Dec 2025 14:01:04 +0000 Manifest next update: Sun 21 Dec 2025 14:01:04 +0000 Files and hashes: 1: CFfUxIFh9E3XN1EntjmEwUZAUfA.roa (hash: LKtIJVn3SPxlyKkXSz+8d7gF12Vd76h6cTs7tmGxKjM=) 2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: Mj84XHDtQOfLDe5BEegViIqtm5aq+tVFEOhBMB26ljg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:5f:c5:3b:33:75:b9:45:b5:cd:2c:39:0b:2d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533 Validity Not Before: Dec 20 14:01:04 2025 GMT Not After : Dec 21 14:01:04 2025 GMT Subject: CN=ac13977fadeb3cbdf836dbca01345bccd102c672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:ad:38:19:f1:88:d1:59:3e:eb:8b:0c:4e: 42:f1:d0:5f:e4:a5:2e:aa:d1:8a:a7:d2:9d:49:ab: e7:4e:e8:dc:94:34:d7:97:03:c6:71:73:f8:ab:79: 8b:37:4b:42:47:e8:40:cd:4b:58:b4:21:ae:b1:28: 68:ca:43:07:64:69:7e:ea:98:d1:aa:9c:63:61:d0: ae:51:98:41:1c:c8:ea:ee:d9:58:b9:8c:c0:4a:e2: d0:af:91:79:8f:19:48:c8:26:96:c9:e6:11:02:d6: 78:ad:43:ed:3c:8f:6d:26:40:78:79:ed:6b:29:b2: 48:50:ae:66:35:93:0b:f0:79:03:c6:b1:19:67:5f: 70:29:f2:69:ec:bb:e9:72:59:4b:f3:78:7e:41:f3: bd:b2:4b:de:98:4f:fe:00:14:52:b8:96:93:e2:de: 67:c4:43:f9:7c:c4:83:c7:d8:e7:bf:a3:3f:ef:0a: 12:74:69:36:85:c6:d7:c4:ef:f0:26:37:98:26:d2: a4:c6:3e:dd:49:2e:4b:d0:9e:75:8c:fb:a1:83:60: 2a:d8:ce:87:93:6d:9f:e4:08:5f:a4:43:fd:a3:d8: 65:b2:50:c7:91:21:f1:b9:2d:e1:f4:3a:14:a2:cb: f8:95:48:5f:64:79:35:6c:12:9d:e5:05:6f:11:7d: ad:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:13:97:7F:AD:EB:3C:BD:F8:36:DB:CA:01:34:5B:CC:D1:02:C6:72 X509v3 Authority Key Identifier: keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:7e:e7:14:93:d7:6b:8f:18:c3:75:74:83:b3:fd:fe:fb:09: 21:f1:f7:ad:eb:5a:fe:9d:5d:62:3b:04:91:d7:68:50:ad:d9: 03:da:92:a8:f4:9b:21:84:3f:07:28:d5:35:f7:b7:d2:72:c1: 30:95:a8:38:7b:80:38:bf:24:9d:88:6e:fc:89:47:07:48:9f: 3c:2d:42:c6:70:a4:3c:d8:a3:6c:99:b8:bf:08:30:7e:61:f1: f0:eb:ae:3d:e9:b0:9a:89:4b:03:9d:da:29:a8:56:63:00:31: 1e:ad:24:38:68:04:2c:46:f1:d3:23:5e:c1:75:96:49:19:90: a9:b2:4a:73:56:bd:d8:16:da:b2:cd:bc:9d:72:07:d7:65:1a: a6:c7:ea:69:4b:07:be:43:39:4a:b4:6e:70:61:fd:6b:0d:73: e9:35:f5:29:74:53:dd:e9:b8:68:67:68:fd:0b:91:74:91:3e: 35:ab:3e:1a:dc:7d:63:51:28:3c:8b:c9:aa:f8:8a:5b:43:44: de:3d:c3:ef:62:da:bd:54:fb:2e:4c:35:25:cb:d8:86:1f:7b: 0a:a1:4b:42:70:fd:95:0b:28:7d:fd:66:c6:79:e2:80:70:8a: 55:cc:93:03:a0:5c:09:35:64:68:3a:f6:dc:44:f4:3a:78:19: 50:d9:45:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EF/FOzN1uUW1zSw5Cy0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNWE4YjY4OGRlYWRiYjkxZWZiZTA3NzIzMDhiYWM5ZjMw NGE1MzMwHhcNMjUxMjIwMTQwMTA0WhcNMjUxMjIxMTQwMTA0WjAzMTEwLwYDVQQD EyhhYzEzOTc3ZmFkZWIzY2JkZjgzNmRiY2EwMTM0NWJjY2QxMDJjNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGStOBnxiNFZPuuLDE5C8dBf5KUu qtGKp9KdSavnTujclDTXlwPGcXP4q3mLN0tCR+hAzUtYtCGusShoykMHZGl+6pjR qpxjYdCuUZhBHMjq7tlYuYzASuLQr5F5jxlIyCaWyeYRAtZ4rUPtPI9tJkB4ee1r KbJIUK5mNZML8HkDxrEZZ19wKfJp7LvpcllL83h+QfO9skvemE/+ABRSuJaT4t5n xEP5fMSDx9jnv6M/7woSdGk2hcbXxO/wJjeYJtKkxj7dSS5L0J51jPuhg2Aq2M6H k22f5AhfpEP9o9hlslDHkSHxuS3h9DoUosv4lUhfZHk1bBKd5QVvEX2tBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwTl3+t6zy9+DbbygE0W8zRAsZyMB8GA1UdIwQY MBaAFDJai2iN6tu5HvvgdyMIusnzBKUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjIt YmI0YTg2NzJjYzBjLzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjItYmI0YTg2NzJjYzBj LzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3n7nFJPX a48Yw3V0g7P9/vsJIfH3reta/p1dYjsEkddoUK3ZA9qSqPSbIYQ/ByjVNfe30nLB MJWoOHuAOL8knYhu/IlHB0ifPC1CxnCkPNijbJm4vwgwfmHx8OuuPemwmolLA53a KahWYwAxHq0kOGgELEbx0yNewXWWSRmQqbJKc1a92Bbass28nXIH12UapsfqaUsH vkM5SrRucGH9aw1z6TX1KXRT3em4aGdo/QuRdJE+Nas+Gtx9Y1EoPIvJqviKW0NE 3j3D72LavVT7Lkw1JcvYhh97CqFLQnD9lQsoff1mxnnigHCKVcyTA6BcCTVkaDr2 3ET0OngZUNlFJg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:09:16 2025 by rpki-client