This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft File: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft (raw, json) Hash identifier: pVd3L/ZWWcQFoRRqjqcORj+1xQr1FYjhzAL0lYZioYU= Subject key identifier: 4B:1F:FC:63:79:35:F3:9E:12:A3:E0:E8:90:4B:EC:E3:C0:05:CC:02 Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7 Certificate issuer: /CN=32507f9e078be89932e91b23acf882ab467c6aa7 Certificate serial: 019B334409AF0AEB34886E9F913F90D83FDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft Manifest number: 0CF8 Signing time: Thu 18 Dec 2025 21:00:55 +0000 Manifest this update: Thu 18 Dec 2025 21:00:55 +0000 Manifest next update: Fri 19 Dec 2025 21:00:55 +0000 Files and hashes: 1: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl (hash: v8KDrm0oQXwP55eecFW8oubplBZsxjcvFwMI+r2SkkQ=) 2: QfrRCybDqFm7xRQ9KjUz6BIzKE0.roa (hash: YrxsXgfls6BVbz+S7KqunX1/zH0o4Orz7g8fkYHg2uk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:09:af:0a:eb:34:88:6e:9f:91:3f:90:d8:3f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7 Validity Not Before: Dec 18 21:00:55 2025 GMT Not After : Dec 19 21:00:55 2025 GMT Subject: CN=4b1ffc637935f39e12a3e0e8904bece3c005cc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:2f:73:58:5c:50:eb:58:01:dd:78:66:d4: 6a:bd:1a:73:3c:8e:b4:1b:6d:dc:19:13:d6:c7:9e: ad:da:d3:8a:ee:24:b9:78:bd:ef:bc:19:f8:f9:19: 71:0c:65:72:6c:d9:af:99:02:33:19:ee:25:83:68: 16:0e:6f:c1:a9:90:92:c9:3b:0f:6b:21:ef:e7:2d: d6:d5:9a:ad:2b:98:92:0d:4d:76:d2:31:7a:66:5b: 5c:a9:04:b5:49:fd:64:70:7f:49:84:79:f8:7a:4f: c1:1f:fb:a6:f9:be:d4:e1:3d:be:04:f4:ca:87:2f: 3a:1c:1c:6e:4c:aa:b4:b0:7a:25:eb:9a:3e:c2:df: b5:22:9d:49:7e:3b:13:a8:a0:03:cf:8f:0f:43:94: af:9b:2c:95:a1:e0:ee:cd:ec:ff:db:76:c1:e1:04: 89:4b:81:eb:e1:b1:04:4f:22:7a:54:e9:0a:74:66: a5:ea:0d:5d:45:8e:95:bd:e7:ff:fb:9c:9d:4c:66: 24:20:30:0d:dc:70:d8:5c:de:d2:c6:77:58:64:f9: 2a:83:7a:b6:e9:5a:8e:53:6d:5d:c6:bc:71:b8:e9: c1:f9:d0:1a:b9:74:69:26:41:d9:62:a5:0f:37:77: a0:39:e6:29:13:72:72:6e:26:83:67:1c:3a:c7:eb: 93:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1F:FC:63:79:35:F3:9E:12:A3:E0:E8:90:4B:EC:E3:C0:05:CC:02 X509v3 Authority Key Identifier: keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8e:a0:55:32:25:78:73:87:9c:3b:56:24:34:ed:02:86:ab: 03:5b:6e:93:6b:03:60:bb:90:42:54:e8:0d:a1:95:26:5c:d1: 0b:c1:98:c9:07:78:ff:e7:dd:12:32:c8:a0:03:c7:da:bf:9b: c5:7f:b7:36:3b:3e:07:f8:75:02:f8:c3:99:5a:a8:82:1d:fa: 54:8a:9a:44:4b:14:b4:2d:58:a8:28:c9:64:94:bb:41:67:87: 1c:b6:d2:f5:fe:4f:e4:17:7d:22:79:f6:4d:3a:be:df:f5:d8: ce:1b:10:53:dc:88:29:9c:8b:49:36:c7:b6:f6:9a:f2:51:8a: 67:df:ac:d8:94:8f:b3:1d:7e:f3:8e:f5:f9:63:4f:d6:6a:94: d7:20:ae:1f:1d:f2:20:c8:c9:a3:72:51:18:00:16:5b:d4:f6: 29:3c:9d:6b:da:b4:62:74:38:08:ab:fa:6a:e3:f6:28:2f:47: 11:9a:91:2e:45:d5:c1:f4:dc:68:c0:7f:b8:5f:b5:4e:3c:ab: 25:92:9f:d6:e8:c6:ec:e5:c3:88:61:80:bc:6a:88:a5:40:68: 19:0e:32:37:2e:18:e0:ae:1e:4f:27:f5:fa:b7:7d:04:b5:43: 09:ed:a0:12:18:86:31:d1:d8:cc:31:d5:85:de:79:03:26:6c: 8c:be:44:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRAmvCus0iG6fkT+Q2D/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA3ZjllMDc4YmU4OTkzMmU5MWIyM2FjZjg4MmFiNDY3 YzZhYTcwHhcNMjUxMjE4MjEwMDU1WhcNMjUxMjE5MjEwMDU1WjAzMTEwLwYDVQQD Eyg0YjFmZmM2Mzc5MzVmMzllMTJhM2UwZTg5MDRiZWNlM2MwMDVjYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhYvc1hcUOtYAd14ZtRqvRpzPI60 G23cGRPWx56t2tOK7iS5eL3vvBn4+RlxDGVybNmvmQIzGe4lg2gWDm/BqZCSyTsP ayHv5y3W1ZqtK5iSDU120jF6ZltcqQS1Sf1kcH9JhHn4ek/BH/um+b7U4T2+BPTK hy86HBxuTKq0sHol65o+wt+1Ip1JfjsTqKADz48PQ5SvmyyVoeDuzez/23bB4QSJ S4Hr4bEETyJ6VOkKdGal6g1dRY6Vvef/+5ydTGYkIDAN3HDYXN7SxndYZPkqg3q2 6VqOU21dxrxxuOnB+dAauXRpJkHZYqUPN3egOeYpE3JybiaDZxw6x+uTCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsf/GN5NfOeEqPg6JBL7OPABcwCMB8GA1UdIwQY MBaAFDJQf54Hi+iZMukbI6z4gqtGfGqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEt OWQxOTZhMGUzMmEwLzEvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEtOWQxOTZhMGUzMmEw LzEvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ46gVTIl eHOHnDtWJDTtAoarA1tuk2sDYLuQQlToDaGVJlzRC8GYyQd4/+fdEjLIoAPH2r+b xX+3Njs+B/h1AvjDmVqogh36VIqaREsUtC1YqCjJZJS7QWeHHLbS9f5P5Bd9Inn2 TTq+3/XYzhsQU9yIKZyLSTbHtvaa8lGKZ9+s2JSPsx1+8471+WNP1mqU1yCuHx3y IMjJo3JRGAAWW9T2KTyda9q0YnQ4CKv6auP2KC9HEZqRLkXVwfTcaMB/uF+1Tjyr JZKf1ujG7OXDiGGAvGqIpUBoGQ4yNy4Y4K4eTyf1+rd9BLVDCe2gEhiGMdHYzDHV hd55AyZsjL5EVA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:18 2025 by rpki-client