This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json) Hash identifier: o0FtZjeFfJRjPmWydsHuZW6atec8azGG1VrJ25Ipv5A= Subject key identifier: 28:82:DD:24:66:35:63:AA:FF:F6:B9:FD:25:19:84:A0:45:4C:48:A2 Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76 Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76 Certificate serial: 019B24E37A543039E312F34EA7B28B3DD282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 02:00:46 +0000 Manifest this update: Tue 16 Dec 2025 02:00:46 +0000 Manifest next update: Wed 17 Dec 2025 02:00:46 +0000 Files and hashes: 1: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: Jin8iGKyq24iDlL8TL5FTgciedf04h6QO0kbbTDMCiI=) 2: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (hash: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:7a:54:30:39:e3:12:f3:4e:a7:b2:8b:3d:d2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76 Validity Not Before: Dec 16 02:00:46 2025 GMT Not After : Dec 17 02:00:46 2025 GMT Subject: CN=2882dd24663563aafff6b9fd251984a0454c48a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:32:6e:53:18:85:0c:a9:0a:f1:89:f9:0c:ff: f7:ac:1a:0b:8d:c3:0b:ae:c2:9a:a3:a6:05:7c:e2: 1e:ae:2b:cf:d1:c5:e2:04:c5:7c:14:67:34:94:ca: 61:10:c2:20:a3:d3:23:b6:1e:83:ec:dd:c8:45:c4: 2e:a3:23:47:0d:4a:73:9c:48:ba:c1:19:85:4c:5f: 0c:9a:74:07:24:f8:a3:b4:38:45:f6:4f:e3:5a:75: 46:31:30:85:bc:9c:e3:d9:6f:e9:61:b3:49:96:f9: 4c:5e:77:0a:b3:fb:0f:ec:ec:5b:54:13:a1:a2:e6: a5:ee:43:84:31:4d:3f:d6:a6:d3:c1:d2:ec:a3:37: 0e:93:16:19:fa:0d:df:ac:0e:fa:23:3d:be:b2:f1: 1d:a1:c0:c2:60:e7:26:d8:99:34:53:c1:b4:56:a9: 41:48:4d:a9:18:c3:b1:77:d1:45:6b:b8:19:89:7b: 83:05:07:b3:51:f5:7e:8e:b3:63:0c:70:9d:b7:9b: 63:c5:22:ac:bf:30:73:63:14:43:1b:14:16:af:7f: b7:c1:a6:ae:46:a2:b0:4e:e3:6c:81:94:f2:b8:61: 7f:19:09:f1:1d:74:f3:b6:8f:6a:84:02:4e:b5:4f: 5e:7c:2b:03:c9:e4:a9:0c:2c:e2:d2:5e:bc:a0:3e: 19:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:82:DD:24:66:35:63:AA:FF:F6:B9:FD:25:19:84:A0:45:4C:48:A2 X509v3 Authority Key Identifier: keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:3a:6f:a7:92:e1:19:66:1e:bb:0b:9c:85:2a:b2:c5:af:0b: ae:3f:94:97:09:f6:5e:75:30:f4:25:9c:99:31:60:35:82:45: f9:9c:ab:13:2d:f1:0f:aa:50:9b:0e:02:2d:84:c7:83:33:bf: 62:18:02:13:4f:4d:1a:d3:4c:e8:03:b1:27:e8:ca:15:0c:cc: d7:ec:4b:55:17:8d:8d:2d:ef:f8:91:aa:24:6e:d6:4a:43:e0: 77:d3:8b:50:c5:9e:24:ca:94:24:77:8a:1d:7a:ec:d8:55:ff: 5d:02:0c:a6:c0:21:af:1b:2a:b0:1e:e3:90:65:77:11:24:5f: 32:26:5f:68:6c:53:a3:98:8c:84:c1:c0:c9:7e:16:be:69:76: bd:70:82:39:ab:26:4c:36:7d:45:b6:7a:c8:20:8f:db:ac:ee: 00:af:4c:47:c8:59:fa:46:b7:bc:b8:b7:b9:4e:4e:75:cc:76: 30:a1:07:67:05:0d:ce:c9:58:a3:f1:03:a8:e8:a8:79:ca:9d: a3:2f:6e:f3:4f:44:fa:7b:04:33:68:42:47:e6:5d:f5:ed:8b: 40:c0:1a:2d:49:e0:d4:37:aa:2d:35:da:c5:45:32:2f:60:8b: 01:a6:92:d5:27:ab:8f:3e:0b:2e:d0:1f:ab:7a:5f:20:f9:65: 93:71:bd:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk43pUMDnjEvNOp7KLPdKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTM2MjU0YjNlNzQ5MDA2NzViYzZlYmQ1MGFlODI1ODI4 YjlhNzYwHhcNMjUxMjE2MDIwMDQ2WhcNMjUxMjE3MDIwMDQ2WjAzMTEwLwYDVQQD EygyODgyZGQyNDY2MzU2M2FhZmZmNmI5ZmQyNTE5ODRhMDQ1NGM0OGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDJuUxiFDKkK8Yn5DP/3rBoLjcML rsKao6YFfOIerivP0cXiBMV8FGc0lMphEMIgo9Mjth6D7N3IRcQuoyNHDUpznEi6 wRmFTF8MmnQHJPijtDhF9k/jWnVGMTCFvJzj2W/pYbNJlvlMXncKs/sP7OxbVBOh oual7kOEMU0/1qbTwdLsozcOkxYZ+g3frA76Iz2+svEdocDCYOcm2Jk0U8G0VqlB SE2pGMOxd9FFa7gZiXuDBQezUfV+jrNjDHCdt5tjxSKsvzBzYxRDGxQWr3+3waau RqKwTuNsgZTyuGF/GQnxHXTzto9qhAJOtU9efCsDyeSpDCzi0l68oD4ZUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiC3SRmNWOq//a5/SUZhKBFTEiiMB8GA1UdIwQY MBaAFDJTYlSz50kAZ1vG69UK6CWCi5p2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUt YTU3ZDQ4ODc0NGMyLzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUtYTU3ZDQ4ODc0NGMy LzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjpvp5Lh GWYeuwuchSqyxa8Lrj+Ulwn2XnUw9CWcmTFgNYJF+ZyrEy3xD6pQmw4CLYTHgzO/ YhgCE09NGtNM6AOxJ+jKFQzM1+xLVReNjS3v+JGqJG7WSkPgd9OLUMWeJMqUJHeK HXrs2FX/XQIMpsAhrxsqsB7jkGV3ESRfMiZfaGxTo5iMhMHAyX4Wvml2vXCCOasm TDZ9RbZ6yCCP26zuAK9MR8hZ+ka3vLi3uU5Odcx2MKEHZwUNzslYo/EDqOioecqd oy9u809E+nsEM2hCR+Zd9e2LQMAaLUng1DeqLTXaxUUyL2CLAaaS1Serjz4LLtAf q3pfIPllk3G9vg== -----END CERTIFICATE-----Generated at Tue Dec 16 06:34:49 2025 by rpki-client