This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json) Hash identifier: ncTWcSwYdSe6mlK4qrl+APRr4nGjXXcoWyMOZwtgdvA= Subject key identifier: FD:26:AD:44:EA:1D:A5:31:E8:A6:B3:C8:6D:03:C3:88:4F:81:B7:8B Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55 Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055 Certificate serial: 019B390FAD61C290D6553AA61182B2F0FC78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft Manifest number: 0E6B Signing time: Sat 20 Dec 2025 00:01:26 +0000 Manifest this update: Sat 20 Dec 2025 00:01:26 +0000 Manifest next update: Sun 21 Dec 2025 00:01:26 +0000 Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: D4BTepLqPjeYg3Wq2FigLtMs0kcTYrtR9+XjD38hpR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:ad:61:c2:90:d6:55:3a:a6:11:82:b2:f0:fc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055 Validity Not Before: Dec 20 00:01:26 2025 GMT Not After : Dec 21 00:01:26 2025 GMT Subject: CN=fd26ad44ea1da531e8a6b3c86d03c3884f81b78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:c5:25:5c:39:61:de:ea:ad:9a:cb:a4:bd: 02:10:08:a2:56:81:fc:ee:c3:9e:44:39:ed:a4:7d: 59:5c:86:b8:8b:bd:65:20:32:a7:0b:da:ac:0f:9a: d1:47:8d:84:1e:57:69:c3:81:63:3d:e1:b3:b2:40: 71:29:26:0c:87:5a:31:66:f3:ca:8c:77:e3:9a:e0: 64:76:cb:b0:0a:6a:e5:59:b2:46:14:7b:3e:92:d2: 51:3b:92:3f:53:b7:dd:04:99:32:7a:a4:b9:6d:ce: f0:de:31:d5:8e:27:63:72:e0:39:ef:a1:fe:5f:d6: 3e:6e:bc:c5:5f:13:ae:7f:61:c1:1d:ca:5e:42:10: fb:69:ae:8e:d5:02:5e:d9:45:f8:ca:a4:5e:b0:2d: 52:05:f2:8f:11:31:96:20:50:7f:c4:f8:dc:02:cf: 4e:2d:a0:ae:47:27:c0:7b:d4:c9:9f:37:4e:13:0b: 56:c1:13:cb:8f:16:13:75:6d:b2:19:23:66:ba:c0: 86:1f:76:b2:62:c1:04:56:cc:59:f0:e2:37:ae:f1: db:ac:45:25:7d:ce:a6:8b:08:65:c3:27:a6:ed:3c: fa:9e:3c:64:a4:7c:99:a1:03:18:d7:11:7a:a1:1b: da:5f:d1:86:a4:64:82:92:28:07:2d:6c:5a:24:4e: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:26:AD:44:EA:1D:A5:31:E8:A6:B3:C8:6D:03:C3:88:4F:81:B7:8B X509v3 Authority Key Identifier: keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c6:95:5f:04:d1:1d:63:ba:ca:fa:7a:77:eb:a0:73:4e:3b: 60:3c:76:36:72:f3:55:71:0b:7e:3f:69:9a:f3:78:e6:e8:e4: ab:bc:38:1a:fe:39:c2:41:9e:4b:f3:d4:2c:6d:97:79:d3:c2: 5a:bf:89:a5:f7:94:64:5f:34:6e:e6:c1:f1:5b:7a:02:38:43: 45:4c:32:c9:74:cc:e1:be:36:3b:1a:f3:1b:e7:54:0f:79:a9: 39:43:9b:6f:a2:bf:fc:89:0e:af:6d:e2:5f:26:83:a9:07:ef: ce:ff:a7:78:f3:7c:d6:2b:89:04:3a:75:2e:bd:e1:bd:1a:6d: bf:81:1d:c6:85:d9:c9:68:2d:70:bd:96:cd:22:6a:55:3f:95: b8:d6:39:b4:8c:f3:c2:26:5f:11:23:79:a4:34:96:d6:4e:88: 73:db:29:09:13:ef:a8:d3:6d:68:22:7d:b6:5d:9c:22:e2:15: ab:d4:16:1f:e5:5a:fe:f9:55:4c:b9:d8:90:9b:20:0a:f8:3d: 5d:8f:06:3e:fb:12:cc:54:47:c2:a3:4e:22:f3:40:34:89:a6: 43:60:bc:43:f7:ed:e1:21:8a:09:ab:c5:84:e6:bb:e0:fc:2b: 3c:7b:1b:98:d6:31:27:75:5f:79:27:10:c3:43:09:df:7e:24: 4e:8f:7a:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D61hwpDWVTqmEYKy8Px4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjk0MmRkYWRiYzlhYzkwYjRlY2ZiZWZhZGIyMzEzMjNh NjcwNTUwHhcNMjUxMjIwMDAwMTI2WhcNMjUxMjIxMDAwMTI2WjAzMTEwLwYDVQQD EyhmZDI2YWQ0NGVhMWRhNTMxZThhNmIzYzg2ZDAzYzM4ODRmODFiNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc3FJVw5Yd7qrZrLpL0CEAiiVoH8 7sOeRDntpH1ZXIa4i71lIDKnC9qsD5rRR42EHldpw4FjPeGzskBxKSYMh1oxZvPK jHfjmuBkdsuwCmrlWbJGFHs+ktJRO5I/U7fdBJkyeqS5bc7w3jHVjidjcuA576H+ X9Y+brzFXxOuf2HBHcpeQhD7aa6O1QJe2UX4yqResC1SBfKPETGWIFB/xPjcAs9O LaCuRyfAe9TJnzdOEwtWwRPLjxYTdW2yGSNmusCGH3ayYsEEVsxZ8OI3rvHbrEUl fc6miwhlwyem7Tz6njxkpHyZoQMY1xF6oRvaX9GGpGSCkigHLWxaJE79rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0mrUTqHaUx6KazyG0Dw4hPgbeLMB8GA1UdIwQY MBaAFJq5Qt2tvJrJC07PvvrbIxMjpnBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84MmNkNTctZWZkOS00NjY5LThhNDkt YzYxYWI1NmQzNTk3LzEvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84MmNkNTctZWZkOS00NjY5LThhNDktYzYxYWI1NmQzNTk3 LzEvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcaVXwTR HWO6yvp6d+ugc047YDx2NnLzVXELfj9pmvN45ujkq7w4Gv45wkGeS/PULG2XedPC Wr+JpfeUZF80bubB8Vt6AjhDRUwyyXTM4b42OxrzG+dUD3mpOUObb6K//IkOr23i XyaDqQfvzv+nePN81iuJBDp1Lr3hvRptv4EdxoXZyWgtcL2WzSJqVT+VuNY5tIzz wiZfESN5pDSW1k6Ic9spCRPvqNNtaCJ9tl2cIuIVq9QWH+Va/vlVTLnYkJsgCvg9 XY8GPvsSzFRHwqNOIvNANImmQ2C8Q/ft4SGKCavFhOa74PwrPHsbmNYxJ3VfeScQ w0MJ334kTo966w== -----END CERTIFICATE-----Generated at Sat Dec 20 07:40:03 2025 by rpki-client