This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json) Hash identifier: zTZbpz4NNcyKmAUGkY6GXbw1xLqJTqKCw9h5eFM5TKk= Subject key identifier: 6F:23:5B:5C:3D:6A:51:7E:3D:9A:7D:7A:D2:BB:80:10:6A:42:F9:59 Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54 Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954 Certificate serial: 019B597673522E6625C3EDED898EC2190FFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft Manifest number: 1178 Signing time: Fri 26 Dec 2025 07:01:33 +0000 Manifest this update: Fri 26 Dec 2025 07:01:33 +0000 Manifest next update: Sat 27 Dec 2025 07:01:33 +0000 Files and hashes: 1: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: giMwDj6IXRzbzcBlgnrq4kxSixtXiRfH3isqtXRUZnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:73:52:2e:66:25:c3:ed:ed:89:8e:c2:19:0f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954 Validity Not Before: Dec 26 07:01:33 2025 GMT Not After : Dec 27 07:01:33 2025 GMT Subject: CN=6f235b5c3d6a517e3d9a7d7ad2bb80106a42f959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e9:ab:6e:20:d3:3a:4a:f5:39:98:25:c5:c8: 8f:0f:bb:d4:ee:df:13:9e:de:17:37:cf:ab:66:31: da:8d:71:50:31:a4:e3:6c:b6:15:e9:e8:06:de:39: c5:61:26:62:67:be:08:87:e5:99:ba:77:8c:06:14: d1:fb:a9:ee:50:68:de:87:84:49:3c:61:0e:9c:f3: ab:45:c7:a1:0f:9d:ad:05:d7:1f:db:6a:57:27:7b: 60:76:78:c3:3d:28:a0:96:e6:bf:79:05:01:6a:12: 77:73:0e:d9:8d:42:00:e6:18:3f:79:ed:ba:67:47: 28:f4:00:22:44:57:ff:65:32:d5:c5:6e:ee:5f:37: dd:cc:d1:fe:e0:56:c6:9f:61:b3:ff:f2:87:7b:32: 76:63:e0:ea:dc:59:ea:94:ff:c2:02:3f:9d:ce:19: 68:ba:ba:64:eb:4a:b7:e4:89:79:ec:4e:91:43:86: d0:11:6d:2c:75:c3:f7:b1:b1:95:8d:71:3d:99:d7: 78:68:36:8c:02:04:95:3b:3a:54:e7:22:ae:b1:f5: 72:cb:40:d7:8f:32:bb:5a:36:ee:24:21:2f:3b:01: 62:d8:69:dd:6f:0f:ba:ac:c3:22:f9:64:d6:1b:f4: d8:33:66:74:d1:cb:bb:cd:39:9f:85:9f:69:4c:95: 5c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:23:5B:5C:3D:6A:51:7E:3D:9A:7D:7A:D2:BB:80:10:6A:42:F9:59 X509v3 Authority Key Identifier: keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8a:52:98:66:98:51:ed:9e:15:d0:0a:be:d2:ba:f8:cf:5a: 8b:1f:d9:43:a2:f9:00:81:98:2f:d3:35:4b:b7:0e:25:6d:64: f6:d6:87:47:b7:95:e6:74:63:8e:d5:36:d7:10:ff:8a:77:a5: 55:ae:a4:c4:9c:d9:7a:e7:78:35:e6:8b:e8:be:e5:33:ea:dd: 49:91:c1:40:db:0e:fa:0a:c8:3a:b7:43:08:b9:99:21:54:69: 40:93:56:ea:8b:df:82:37:cd:58:73:64:9a:fe:74:42:19:00: b5:a3:c2:3b:0a:5c:eb:f7:c4:8d:79:90:9f:60:5c:89:9e:65: 22:e5:28:cf:7b:37:9b:d8:36:7d:78:be:25:82:c2:0a:43:f6: e5:bf:7c:5d:3d:ea:bc:14:c9:f0:21:48:0a:d6:25:78:c2:2f: 89:88:10:db:c7:e3:7e:f0:10:21:ce:07:46:2a:14:ba:f1:5a: de:70:ec:db:6b:3a:28:ae:87:1c:1d:3a:18:11:37:6a:b3:fa: 6f:8a:66:85:cd:25:5f:04:7e:17:aa:0c:bd:91:34:88:3b:eb: 92:4f:84:99:34:85:57:0f:74:d9:62:24:db:bc:8f:67:10:6f: 94:89:41:f2:76:36:bd:fc:a4:21:5a:57:a7:83:16:63:e8:a4: 19:cb:82:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdnNSLmYlw+3tiY7CGQ/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YjVjYTcxOGYzYjlhOTM5YTUxMzY0MWJkODVjYzk0ZmE0 MDE5NTQwHhcNMjUxMjI2MDcwMTMzWhcNMjUxMjI3MDcwMTMzWjAzMTEwLwYDVQQD Eyg2ZjIzNWI1YzNkNmE1MTdlM2Q5YTdkN2FkMmJiODAxMDZhNDJmOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOmrbiDTOkr1OZglxciPD7vU7t8T nt4XN8+rZjHajXFQMaTjbLYV6egG3jnFYSZiZ74Ih+WZuneMBhTR+6nuUGjeh4RJ PGEOnPOrRcehD52tBdcf22pXJ3tgdnjDPSiglua/eQUBahJ3cw7ZjUIA5hg/ee26 Z0co9AAiRFf/ZTLVxW7uXzfdzNH+4FbGn2Gz//KHezJ2Y+Dq3FnqlP/CAj+dzhlo urpk60q35Il57E6RQ4bQEW0sdcP3sbGVjXE9mdd4aDaMAgSVOzpU5yKusfVyy0DX jzK7WjbuJCEvOwFi2Gndbw+6rMMi+WTWG/TYM2Z00cu7zTmfhZ9pTJVc0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8jW1w9alF+PZp9etK7gBBqQvlZMB8GA1UdIwQY MBaAFJi1ynGPO5qTmlE2Qb2FzJT6QBlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEt YzQyYWIwMTk4MzczLzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEtYzQyYWIwMTk4Mzcz LzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIpSmGaY Ue2eFdAKvtK6+M9aix/ZQ6L5AIGYL9M1S7cOJW1k9taHR7eV5nRjjtU21xD/inel Va6kxJzZeud4NeaL6L7lM+rdSZHBQNsO+grIOrdDCLmZIVRpQJNW6ovfgjfNWHNk mv50QhkAtaPCOwpc6/fEjXmQn2BciZ5lIuUoz3s3m9g2fXi+JYLCCkP25b98XT3q vBTJ8CFICtYleMIviYgQ28fjfvAQIc4HRioUuvFa3nDs22s6KK6HHB06GBE3arP6 b4pmhc0lXwR+F6oMvZE0iDvrkk+EmTSFVw902WIk27yPZxBvlIlB8nY2vfykIVpX p4MWY+ikGcuCaA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:04 2025 by rpki-client