This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json) Hash identifier: yMkMF2i0rE0J9XHkb2IE7E5W4ka4bBhnSJ6gG686m2g= Subject key identifier: 12:95:37:09:3D:3B:C1:4C:8D:99:66:2C:1F:48:86:F8:5D:89:1E:43 Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56 Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656 Certificate serial: 019B1EAAB5F2CDE52CC2FD867672C28B308C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 21:01:02 +0000 Manifest this update: Sun 14 Dec 2025 21:01:02 +0000 Manifest next update: Mon 15 Dec 2025 21:01:02 +0000 Files and hashes: 1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: QlZNk5y6a3oJ9m3JTScFLbo0h8/AZYlLZF2bCpjwXZo=) 2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:b5:f2:cd:e5:2c:c2:fd:86:76:72:c2:8b:30:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656 Validity Not Before: Dec 14 21:01:02 2025 GMT Not After : Dec 15 21:01:02 2025 GMT Subject: CN=129537093d3bc14c8d99662c1f4886f85d891e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:66:b3:fb:0a:d7:a3:56:d8:d3:50:ef:e8:06: 03:41:1b:48:c2:7b:44:c2:de:b9:67:dc:a2:2c:74: dc:fa:6b:f2:f0:96:6f:0e:f0:0f:4b:a8:44:26:b7: 16:03:0c:d2:eb:8c:a1:87:42:95:a3:b9:d9:8b:f7: 64:13:55:6f:10:1a:bb:c1:14:92:57:37:71:95:8b: d5:7f:88:75:ab:ac:37:b5:3b:4f:11:21:cf:13:91: 4b:65:e4:fa:c4:d6:a1:d9:d1:ee:96:d9:fa:7c:e4: 07:47:4f:21:3f:6a:67:84:60:6e:ed:a1:78:e6:8b: 14:c5:5c:00:42:e4:06:b3:b9:93:c7:aa:19:19:41: f0:9c:1f:fe:d4:82:5e:75:e1:a5:f7:7f:bc:be:e0: b8:8e:8e:61:af:1c:c9:df:96:03:59:8b:8f:96:f7: eb:7a:8e:55:e9:d4:04:42:a5:a6:1b:32:88:4f:8b: dc:0d:f0:b7:b5:b0:2b:fd:5e:69:1c:93:86:31:b2: 1c:d7:42:74:3f:53:4f:9f:e8:37:73:f5:04:a3:ef: b5:16:b8:b0:0e:04:8e:a1:74:b5:94:49:d9:4d:94: ee:1d:cf:c1:71:f5:14:fe:77:e2:c4:51:6e:da:c0: 2b:fc:32:ce:18:21:2c:df:82:84:a5:2b:bc:50:9b: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:95:37:09:3D:3B:C1:4C:8D:99:66:2C:1F:48:86:F8:5D:89:1E:43 X509v3 Authority Key Identifier: keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:51:a9:95:7b:bb:a8:6f:86:69:ab:26:8f:f5:bc:ae:64:8b: 53:07:67:c5:27:78:75:38:78:35:33:8f:67:de:f6:3d:77:a1: f4:e3:7d:56:eb:29:24:30:ff:83:36:95:15:ac:d0:3b:a9:dc: cf:28:7a:dd:98:3e:3c:ef:93:eb:1a:45:c6:cb:9c:78:1b:df: 91:35:a2:dc:f7:da:b9:57:29:81:62:1c:c8:ed:7b:93:9e:b4: 32:18:ab:1e:50:f5:2b:c9:80:7a:d2:bd:1f:f4:80:0b:fb:97: 21:ca:ac:e2:d1:ed:cb:5a:e5:2f:ec:9d:99:0a:d1:5b:a0:b5: a5:a6:c6:5d:d2:c9:5c:c7:98:a3:56:37:22:69:03:1f:ed:ce: e0:fe:7d:f3:5d:74:82:16:95:5e:37:bd:b4:96:30:b9:87:5e: 9b:07:1d:cb:f4:f5:c8:22:84:1f:f3:9f:ef:43:99:3e:47:73: 41:78:f9:da:e2:af:15:3c:31:33:7b:2f:a9:26:23:02:b7:3f: 6c:81:82:43:7e:e1:3a:c3:9e:35:76:12:8e:c1:9e:45:46:97: 96:6b:4a:5a:de:54:4f:43:f7:29:7e:a3:8d:b6:85:a5:ae:d5: a4:ce:1e:ff:19:2f:be:f2:95:f8:b9:97:33:f0:df:aa:51:6f: e5:a2:36:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqrXyzeUswv2GdnLCizCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNWU5ODk0N2ZjOTQ4ZDViNjJkZmI4NWE3Y2IzYTcyYTA2 NzI2NTYwHhcNMjUxMjE0MjEwMTAyWhcNMjUxMjE1MjEwMTAyWjAzMTEwLwYDVQQD EygxMjk1MzcwOTNkM2JjMTRjOGQ5OTY2MmMxZjQ4ODZmODVkODkxZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2az+wrXo1bY01Dv6AYDQRtIwntE wt65Z9yiLHTc+mvy8JZvDvAPS6hEJrcWAwzS64yhh0KVo7nZi/dkE1VvEBq7wRSS VzdxlYvVf4h1q6w3tTtPESHPE5FLZeT6xNah2dHultn6fOQHR08hP2pnhGBu7aF4 5osUxVwAQuQGs7mTx6oZGUHwnB/+1IJedeGl93+8vuC4jo5hrxzJ35YDWYuPlvfr eo5V6dQEQqWmGzKIT4vcDfC3tbAr/V5pHJOGMbIc10J0P1NPn+g3c/UEo++1Friw DgSOoXS1lEnZTZTuHc/BcfUU/nfixFFu2sAr/DLOGCEs34KEpSu8UJuZVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKVNwk9O8FMjZlmLB9IhvhdiR5DMB8GA1UdIwQY MBaAFDJemJR/yUjVti37hafLOnKgZyZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2It NGNhZWM5N2Y3ZDkyLzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2ItNGNhZWM5N2Y3ZDky LzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalGplXu7 qG+Gaasmj/W8rmSLUwdnxSd4dTh4NTOPZ972PXeh9ON9VuspJDD/gzaVFazQO6nc zyh63Zg+PO+T6xpFxsuceBvfkTWi3PfauVcpgWIcyO17k560MhirHlD1K8mAetK9 H/SAC/uXIcqs4tHty1rlL+ydmQrRW6C1pabGXdLJXMeYo1Y3ImkDH+3O4P598110 ghaVXje9tJYwuYdemwcdy/T1yCKEH/Of70OZPkdzQXj52uKvFTwxM3svqSYjArc/ bIGCQ37hOsOeNXYSjsGeRUaXlmtKWt5UT0P3KX6jjbaFpa7VpM4e/xkvvvKV+LmX M/DfqlFv5aI23w== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:08 2025 by rpki-client