This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json) Hash identifier: IEfTX19VfuTcXnfP0ttubOuVTgG8XL0m8Ybksl055iE= Subject key identifier: 68:47:68:F7:76:72:76:F9:95:B9:CB:FD:32:51:68:DC:AE:17:23:54 Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47 Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47 Certificate serial: 019B12383662E9F7132BF4412B7A3CB78EB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft Manifest number: 0E9B Signing time: Fri 12 Dec 2025 11:00:32 +0000 Manifest this update: Fri 12 Dec 2025 11:00:32 +0000 Manifest next update: Sat 13 Dec 2025 11:00:32 +0000 Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=) 2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=) 3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: SDk165RHJOe6xvbwMoTrwOPaFdNvk0UZpWXn1W3Z/eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:36:62:e9:f7:13:2b:f4:41:2b:7a:3c:b7:8e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47 Validity Not Before: Dec 12 11:00:32 2025 GMT Not After : Dec 13 11:00:32 2025 GMT Subject: CN=684768f7767276f995b9cbfd325168dcae172354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8b:bf:cc:e9:fc:c3:38:c2:92:a0:d9:12:30: 5e:93:a7:22:cf:fe:9a:2e:c6:01:5b:77:05:48:3f: aa:8c:55:1f:2c:13:99:49:ba:14:b1:5b:93:da:4d: 65:d8:4c:a5:34:97:74:5b:1f:2b:02:45:22:b0:16: 70:cd:9b:c5:7f:2d:52:92:de:c5:c6:36:ce:bb:5a: 42:e7:e4:7d:fc:bf:11:7d:ca:34:c8:92:5f:62:dd: a0:52:c2:32:c5:48:42:13:89:1a:e8:70:ae:60:c1: 21:13:6e:99:c5:ee:39:92:23:b6:2f:dd:87:1a:b8: 6d:c8:d0:95:c2:9b:d5:18:c4:9b:2f:c8:9a:fa:33: d7:33:7a:24:b1:e9:ae:20:29:75:6e:9a:55:7f:8c: 8d:c0:91:f9:e1:d3:a4:5d:af:86:9f:a0:d0:de:13: 31:30:c4:d2:85:03:ec:b3:96:54:c2:ca:57:86:a2: d8:74:41:98:7e:42:48:1e:80:57:a6:cd:e0:6b:22: e6:ca:63:18:27:ce:84:d5:8d:42:9a:ff:47:b4:a4: d5:83:d8:42:5d:27:4b:2c:70:67:b4:d7:01:31:1e: d8:62:62:fd:07:59:87:b7:68:46:2a:4d:12:4d:df: 2d:c4:f8:b4:01:6e:6b:12:e7:5b:e3:33:9c:00:32: ef:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:68:F7:76:72:76:F9:95:B9:CB:FD:32:51:68:DC:AE:17:23:54 X509v3 Authority Key Identifier: keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:6e:f3:0a:00:66:e2:25:2e:c7:24:69:d3:3b:f4:bf:74:d7: c8:ef:02:9c:af:0b:31:0b:07:af:c0:ad:58:de:75:49:45:e8: aa:52:a1:e7:b3:bb:b8:d5:a5:17:cb:83:2f:1d:dd:f9:cb:a7: 8a:c2:b9:8c:25:47:e7:2b:66:97:28:5a:d6:cc:5c:98:8e:18: 5e:09:34:d4:37:d9:ad:7c:10:f7:a5:33:dd:ff:e5:a9:de:49: 81:21:e2:79:07:9c:2c:cf:c5:12:c2:74:bd:bf:3d:12:50:67: 56:02:ef:ac:2d:36:c3:28:fd:68:33:a6:29:09:87:0d:b0:7d: 1a:c1:94:e4:c6:08:a7:ef:6a:ac:21:88:48:d4:c6:2d:ca:26: 21:dc:2a:fc:5c:e9:29:21:36:a8:cd:9b:59:32:c9:18:d9:5b: a3:69:08:e8:95:53:4a:f9:cd:7b:de:b1:f7:90:04:ed:1e:ee: 6c:a7:e1:85:85:00:6f:82:b8:72:d8:32:dc:55:fd:25:6d:ed: 62:9f:d7:f0:c4:51:2f:e9:53:2f:0f:69:69:83:25:e8:c6:d3: 03:a8:b1:97:56:d3:4f:d4:16:17:61:2b:d2:09:f9:fc:77:b4: b7:d6:21:3b:14:a5:96:74:66:ef:c0:60:8f:81:69:fd:ee:06: fa:9e:c3:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSODZi6fcTK/RBK3o8t46zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj NjZlNDcwHhcNMjUxMjEyMTEwMDMyWhcNMjUxMjEzMTEwMDMyWjAzMTEwLwYDVQQD Eyg2ODQ3NjhmNzc2NzI3NmY5OTViOWNiZmQzMjUxNjhkY2FlMTcyMzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14u/zOn8wzjCkqDZEjBek6ciz/6a LsYBW3cFSD+qjFUfLBOZSboUsVuT2k1l2EylNJd0Wx8rAkUisBZwzZvFfy1Skt7F xjbOu1pC5+R9/L8Rfco0yJJfYt2gUsIyxUhCE4ka6HCuYMEhE26Zxe45kiO2L92H GrhtyNCVwpvVGMSbL8ia+jPXM3oksemuICl1bppVf4yNwJH54dOkXa+Gn6DQ3hMx MMTShQPss5ZUwspXhqLYdEGYfkJIHoBXps3gayLmymMYJ86E1Y1Cmv9HtKTVg9hC XSdLLHBntNcBMR7YYmL9B1mHt2hGKk0STd8txPi0AW5rEudb4zOcADLvXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhHaPd2cnb5lbnL/TJRaNyuFyNUMB8GA1UdIwQY MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuW7zCgBm 4iUuxyRp0zv0v3TXyO8CnK8LMQsHr8CtWN51SUXoqlKh57O7uNWlF8uDLx3d+cun isK5jCVH5ytmlyha1sxcmI4YXgk01DfZrXwQ96Uz3f/lqd5JgSHieQecLM/FEsJ0 vb89ElBnVgLvrC02wyj9aDOmKQmHDbB9GsGU5MYIp+9qrCGISNTGLcomIdwq/Fzp KSE2qM2bWTLJGNlbo2kI6JVTSvnNe96x95AE7R7ubKfhhYUAb4K4ctgy3FX9JW3t Yp/X8MRRL+lTLw9paYMl6MbTA6ixl1bTT9QWF2Er0gn5/He0t9YhOxSllnRm78Bg j4Fp/e4G+p7DIw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:19:44 2025 by rpki-client