This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft File: mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json) Hash identifier: 7dNoWgL7lHBbF5crhoao6DV3VXKwHnf1gxOzApcqMLk= Subject key identifier: F0:CE:17:B7:0B:73:50:DC:04:91:17:07:C5:B6:45:8F:01:51:71:F2 Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B Certificate issuer: /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b Certificate serial: 019B21ABB15F713ACFE0112EDF59557488D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft Manifest number: 064E Signing time: Mon 15 Dec 2025 11:00:58 +0000 Manifest this update: Mon 15 Dec 2025 11:00:58 +0000 Manifest next update: Tue 16 Dec 2025 11:00:58 +0000 Files and hashes: 1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: 67VhSvpiCrpMFXQ+DK9UsL1K2TIhmFtvw6q81Cz+bZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:b1:5f:71:3a:cf:e0:11:2e:df:59:55:74:88:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b Validity Not Before: Dec 15 11:00:58 2025 GMT Not After : Dec 16 11:00:58 2025 GMT Subject: CN=f0ce17b70b7350dc04911707c5b6458f015171f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:96:d4:e2:22:2e:1b:bc:d8:0c:c1:2f:30: 9b:60:15:22:30:dd:de:a0:34:cb:51:e5:7a:49:78: 2c:49:02:f0:43:b9:95:f9:11:86:94:84:9a:48:2d: f4:8d:c8:7d:41:f1:f6:5b:f2:c1:88:59:7c:1b:0b: a9:64:1d:01:78:6c:06:10:12:6f:42:92:30:53:a5: 15:bc:33:f4:73:39:0e:40:90:3b:f7:e0:ff:a0:06: eb:3a:5a:3c:2a:6e:0a:c6:db:74:af:f0:8c:8b:dc: c0:17:66:78:55:ba:08:26:2c:a9:bb:b1:ab:20:a1: 42:f1:9d:a7:80:5c:e9:82:e1:58:fd:e1:b7:1b:4c: 74:bf:a1:2f:57:b2:5b:61:7a:1b:36:d1:95:bd:13: 5d:34:58:06:07:81:ad:57:32:bb:b0:ef:22:1c:e2: 69:b2:9b:92:e6:f1:60:fe:62:a9:c9:98:62:7d:62: 76:e5:62:ce:3a:cd:23:e0:b9:6d:df:a8:b1:cb:48: 59:c9:21:7f:f8:34:93:ac:90:42:dd:a7:0f:51:ec: aa:d1:fd:c9:1c:b8:8f:06:b0:51:d3:3b:b4:03:6b: e1:68:82:0a:ae:55:46:2f:46:c1:92:64:e5:71:d3: 0f:a7:c9:d2:d4:b1:32:ac:fd:b4:ba:21:cd:02:af: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CE:17:B7:0B:73:50:DC:04:91:17:07:C5:B6:45:8F:01:51:71:F2 X509v3 Authority Key Identifier: keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4d:82:a1:c1:d8:4e:e0:8b:a1:48:5c:85:b5:a8:00:dd:29: b4:f3:91:bf:a0:c7:2b:71:c7:a5:25:ef:3d:f7:4d:64:f7:89: 48:a5:93:fb:18:2d:d8:26:ac:a0:d5:71:1e:4e:a1:ea:39:55: 61:00:6d:e4:e1:74:ad:16:a9:73:97:39:c9:60:2b:8a:ad:84: e6:a1:e9:ad:02:a1:25:22:c6:c8:0e:11:a8:31:fc:06:8f:83: 0b:c8:9a:e0:b0:af:af:5f:3e:d4:2f:b8:ee:82:9b:27:7f:c6: 02:16:15:ba:f8:a6:44:23:32:76:ea:f1:36:ec:c2:4c:26:b6: ca:17:11:fb:d9:9c:79:10:a4:73:c2:b2:39:48:41:1c:f3:bd: 57:40:63:16:18:0e:37:cc:ba:f8:af:a7:a8:09:88:c5:35:06: bf:40:2e:ce:36:52:34:89:b2:00:88:ab:5c:8c:98:2b:82:2e: f3:88:04:77:e8:4f:00:b8:df:62:0e:2c:70:36:31:2d:7a:52: f9:f1:17:6f:6a:e7:d0:71:38:35:6e:e2:5e:14:eb:34:14:c1: 3a:f2:a8:a4:25:95:13:8c:8a:81:3a:d5:12:2e:5a:fc:02:cb: 87:14:27:25:40:fa:e2:b0:c9:c7:38:df:45:78:a3:27:5a:d8: 5f:f0:3c:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq7FfcTrP4BEu31lVdIjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YmZlNzQ0ZTNkMmRkNDIzMTYxNGU3ZTRiYWQ0NGQ0NTUy ZjA5MWIwHhcNMjUxMjE1MTEwMDU4WhcNMjUxMjE2MTEwMDU4WjAzMTEwLwYDVQQD EyhmMGNlMTdiNzBiNzM1MGRjMDQ5MTE3MDdjNWI2NDU4ZjAxNTE3MWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUWW1OIiLhu82AzBLzCbYBUiMN3e oDTLUeV6SXgsSQLwQ7mV+RGGlISaSC30jch9QfH2W/LBiFl8GwupZB0BeGwGEBJv QpIwU6UVvDP0czkOQJA79+D/oAbrOlo8Km4Kxtt0r/CMi9zAF2Z4VboIJiypu7Gr IKFC8Z2ngFzpguFY/eG3G0x0v6EvV7JbYXobNtGVvRNdNFgGB4GtVzK7sO8iHOJp spuS5vFg/mKpyZhifWJ25WLOOs0j4Llt36ixy0hZySF/+DSTrJBC3acPUeyq0f3J HLiPBrBR0zu0A2vhaIIKrlVGL0bBkmTlcdMPp8nS1LEyrP20uiHNAq8cKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDOF7cLc1DcBJEXB8W2RY8BUXHyMB8GA1UdIwQY MBaAFJi/50Tj0t1CMWFOfkutRNRVLwkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUxfblJPUFMzVUl4WVU1LVM2MUUxRlV2Q1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80YWUzN2YtOWE4Mi00YmFjLWJjMGIt MWZhZmE2Yzg1MDUyLzEvbUxfblJPUFMzVUl4WVU1LVM2MUUxRlV2Q1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80YWUzN2YtOWE4Mi00YmFjLWJjMGItMWZhZmE2Yzg1MDUy LzEvbUxfblJPUFMzVUl4WVU1LVM2MUUxRlV2Q1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc02CocHY TuCLoUhchbWoAN0ptPORv6DHK3HHpSXvPfdNZPeJSKWT+xgt2CasoNVxHk6h6jlV YQBt5OF0rRapc5c5yWAriq2E5qHprQKhJSLGyA4RqDH8Bo+DC8ia4LCvr18+1C+4 7oKbJ3/GAhYVuvimRCMydurxNuzCTCa2yhcR+9mceRCkc8KyOUhBHPO9V0BjFhgO N8y6+K+nqAmIxTUGv0AuzjZSNImyAIirXIyYK4Iu84gEd+hPALjfYg4scDYxLXpS +fEXb2rn0HE4NW7iXhTrNBTBOvKopCWVE4yKgTrVEi5a/ALLhxQnJUD64rDJxzjf RXijJ1rYX/A8LA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:21:15 2025 by rpki-client