This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: wb93/rAL5M754RPUHFasY8isQQFxhDicrbE5XsMgKnU= Subject key identifier: C5:94:71:0B:40:64:C7:CA:CB:47:17:B7:BD:58:71:92:46:A8:01:33 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019AF8422CC857EED9BB179BA752E559AEB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1771 Signing time: Sun 07 Dec 2025 10:01:17 +0000 Manifest this update: Sun 07 Dec 2025 10:01:17 +0000 Manifest next update: Mon 08 Dec 2025 10:01:17 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: q2czJ9PgxhgIgpmu+xQB/iBN+lrN+fHiezlyJB51V1Y=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:42:2c:c8:57:ee:d9:bb:17:9b:a7:52:e5:59:ae:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Dec 7 10:01:17 2025 GMT Not After : Dec 8 10:01:17 2025 GMT Subject: CN=c594710b4064c7cacb4717b7bd58719246a80133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:86:56:49:02:98:60:bd:0e:24:f8:98:df: e3:b8:e3:c3:f3:e8:c5:5f:52:82:b1:eb:f9:7d:57: 20:1d:bb:79:c9:2e:de:fb:bc:17:85:30:09:28:8c: 74:90:66:de:a5:73:89:38:d4:e5:cc:c1:fc:b2:1e: 90:ef:e4:9b:9a:9f:d8:ea:b7:4d:f2:b5:53:97:91: 52:16:40:97:6f:ea:6b:1c:cd:56:64:6d:d5:80:b4: c2:4e:19:01:31:2c:00:42:5a:de:38:d5:18:7f:38: 21:dd:c5:7b:19:37:09:5b:54:7b:bf:e3:86:9a:6f: c2:a0:12:4f:a5:d9:93:51:a4:76:91:60:d5:51:a2: 00:a3:b8:02:93:12:87:6d:b3:ac:9c:5c:a1:46:01: be:6e:69:94:62:cd:1c:13:8b:3c:98:c9:08:fb:f4: 25:31:5c:ff:09:c2:9f:a1:09:bf:cf:56:a9:84:af: ea:3e:ae:37:62:e0:f0:b5:9d:e3:67:1f:20:26:4d: cc:08:13:85:54:6c:b8:cd:ea:1a:e3:63:26:ae:48: 0a:13:e3:d6:96:56:0a:14:16:d8:80:82:69:66:73: 06:01:aa:5a:80:3f:10:40:4b:3f:bb:78:97:31:b6: 33:a1:57:0f:e2:bd:8f:aa:8d:d5:ea:10:4a:0c:a4: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:94:71:0B:40:64:C7:CA:CB:47:17:B7:BD:58:71:92:46:A8:01:33 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9a:e6:65:da:36:c6:77:07:00:9e:51:d5:0d:2f:a7:d5:d1: b9:40:cc:c1:08:87:b5:9d:17:b1:88:c8:db:4f:6b:79:cd:0d: 06:01:29:57:04:6b:18:a2:d3:87:8b:27:ce:ea:34:48:62:7f: 18:d7:2e:09:1d:5d:e6:de:65:4b:17:1f:ba:a9:96:70:72:1c: e0:85:f0:a6:84:16:0e:d8:fe:01:59:fa:87:05:3b:d0:5b:94: 3a:9a:93:2b:49:e3:dc:dc:06:d1:b6:83:7b:d3:fe:d0:f1:7e: 12:72:83:03:5d:78:5b:22:d5:f5:0b:31:26:07:81:6a:49:97: 4e:31:ce:6e:3a:8c:08:1b:66:d8:14:d5:40:4b:94:f8:73:4f: 2a:fa:7c:d6:37:9e:50:e1:29:08:76:71:1c:fe:08:4a:53:cd: c6:86:51:9c:59:66:c7:bb:26:14:65:14:2a:a5:f8:c7:d8:5b: 0b:5c:29:21:0b:2c:e1:0f:17:f9:87:95:e3:34:6e:81:71:10: 92:e4:72:8d:f7:60:43:ef:3e:45:39:89:c5:eb:79:81:a4:db: f1:19:c2:28:9a:09:f9:6f:6d:d4:ff:1f:cd:c7:55:ae:da:42: ac:f4:28:0c:70:c1:77:4b:91:13:41:25:db:d2:63:02:f3:16: 5f:ae:58:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4QizIV+7Zuxebp1LlWa64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUxMjA3MTAwMTE3WhcNMjUxMjA4MTAwMTE3WjAzMTEwLwYDVQQD EyhjNTk0NzEwYjQwNjRjN2NhY2I0NzE3YjdiZDU4NzE5MjQ2YTgwMTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDWGVkkCmGC9DiT4mN/juOPD8+jF X1KCsev5fVcgHbt5yS7e+7wXhTAJKIx0kGbepXOJONTlzMH8sh6Q7+Sbmp/Y6rdN 8rVTl5FSFkCXb+prHM1WZG3VgLTCThkBMSwAQlreONUYfzgh3cV7GTcJW1R7v+OG mm/CoBJPpdmTUaR2kWDVUaIAo7gCkxKHbbOsnFyhRgG+bmmUYs0cE4s8mMkI+/Ql MVz/CcKfoQm/z1aphK/qPq43YuDwtZ3jZx8gJk3MCBOFVGy4zeoa42MmrkgKE+PW llYKFBbYgIJpZnMGAapagD8QQEs/u3iXMbYzoVcP4r2Pqo3V6hBKDKRutQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWUcQtAZMfKy0cXt71YcZJGqAEzMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMprmZdo2 xncHAJ5R1Q0vp9XRuUDMwQiHtZ0XsYjI209rec0NBgEpVwRrGKLTh4snzuo0SGJ/ GNcuCR1d5t5lSxcfuqmWcHIc4IXwpoQWDtj+AVn6hwU70FuUOpqTK0nj3NwG0baD e9P+0PF+EnKDA114WyLV9QsxJgeBakmXTjHObjqMCBtm2BTVQEuU+HNPKvp81jee UOEpCHZxHP4ISlPNxoZRnFlmx7smFGUUKqX4x9hbC1wpIQss4Q8X+YeV4zRugXEQ kuRyjfdgQ+8+RTmJxet5gaTb8RnCKJoJ+W9t1P8fzcdVrtpCrPQoDHDBd0uRE0El 29JjAvMWX65YPA== -----END CERTIFICATE-----Generated at Sun Dec 7 16:41:13 2025 by rpki-client