This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft File: Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft (raw, json) Hash identifier: QotDG8GYFSyWGS/f778uQStmN8WH6VODI+HUwFNCM2c= Subject key identifier: 1E:93:A7:04:05:05:C7:C4:E6:37:71:60:6F:30:F0:3C:25:0B:73:91 Authority key identifier: 32:58:25:EE:C0:EB:29:BD:73:09:A6:3B:DD:E1:AB:AB:4A:2F:D1:20 Certificate issuer: /CN=325825eec0eb29bd7309a63bdde1abab4a2fd120 Certificate serial: 019B5A1AD6FF20155FE155BEA227C7791D25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mlgl7sDrKb1zCaY73eGrq0ov0SA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft Manifest number: 17 Signing time: Fri 26 Dec 2025 10:01:06 +0000 Manifest this update: Fri 26 Dec 2025 10:01:06 +0000 Manifest next update: Sat 27 Dec 2025 10:01:06 +0000 Files and hashes: 1: Mlgl7sDrKb1zCaY73eGrq0ov0SA.crl (hash: 2dDWokwQfQiYNROKsGZVrkLnXjpXMFKNR583LRSV1wo=) 2: _N2EzhO-sI-hW3uxZmSur0wvPcc.asa (hash: N3nDgYngcNpGOWA9Gx/XAjPMkOw+AGT9AcOb9PWgf4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft rsync://rpki.ripe.net/repository/DEFAULT/Mlgl7sDrKb1zCaY73eGrq0ov0SA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d6:ff:20:15:5f:e1:55:be:a2:27:c7:79:1d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325825eec0eb29bd7309a63bdde1abab4a2fd120 Validity Not Before: Dec 26 10:01:06 2025 GMT Not After : Dec 27 10:01:06 2025 GMT Subject: CN=1e93a7040505c7c4e63771606f30f03c250b7391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:72:11:2a:68:36:ed:5f:39:ec:66:80:5d: 30:9e:fc:c5:21:07:2b:6a:f5:c3:c8:cf:ac:86:21: 55:de:d9:46:4c:a0:71:9d:01:cc:d8:43:fd:60:f7: f0:d8:ba:cb:5b:3a:8f:d3:dc:5b:50:ed:45:42:00: 95:65:e8:c5:82:51:02:0e:7f:e8:58:88:bb:ef:7b: c0:92:65:42:2d:35:2e:67:e5:c2:c6:96:7c:ad:cc: 69:c4:28:21:33:6c:63:f0:c9:5b:f2:97:d2:e4:fd: 06:96:30:90:5c:ff:a8:3a:e2:c7:41:5b:ba:e1:53: bb:21:72:98:84:25:37:c5:eb:b8:93:be:0c:de:ca: 3c:fb:f1:84:30:f7:b3:03:a4:8f:97:bf:7a:bb:42: dd:b5:51:e9:05:5a:3d:9a:47:71:06:81:7b:2e:bd: e6:d3:28:61:d7:37:cd:22:2f:9d:1a:68:b4:be:16: 2d:57:c3:98:7b:79:d8:40:06:b1:80:4c:00:75:bd: a2:50:ee:d8:18:58:46:54:bf:51:55:0a:ea:c3:ec: d7:5d:31:a1:54:a4:c4:6d:1a:26:92:2c:7f:9d:d2: f2:69:6a:1d:23:58:29:18:36:47:21:d8:4d:86:46: cc:78:bb:7d:10:29:18:f2:42:a5:eb:ac:6e:d2:f0: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:93:A7:04:05:05:C7:C4:E6:37:71:60:6F:30:F0:3C:25:0B:73:91 X509v3 Authority Key Identifier: keyid:32:58:25:EE:C0:EB:29:BD:73:09:A6:3B:DD:E1:AB:AB:4A:2F:D1:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlgl7sDrKb1zCaY73eGrq0ov0SA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a5:9b:b6:fc:e6:bf:79:a0:cd:11:97:ae:36:ca:77:a5:54: 13:e6:f6:c6:32:0e:aa:cf:99:97:6f:65:e1:92:bd:c8:ce:0e: e7:e1:7b:c5:fb:4c:a3:09:b6:63:7b:23:99:01:9b:09:0c:02: b6:77:82:fd:3e:f7:80:04:6e:52:0f:01:32:fc:6f:8c:fc:73: a1:26:a7:76:3e:73:57:ad:16:72:b5:65:6c:d3:ae:fe:6a:bc: d8:8e:db:56:d6:aa:41:07:48:69:dc:a1:62:bb:6e:5d:ec:41: 89:b8:3b:e4:05:3c:1c:70:bc:70:d2:c0:ff:c6:3e:c3:97:f4: a4:9e:04:72:6e:02:6b:08:1b:a9:c3:32:96:6c:6d:87:6f:c0: f5:7f:d9:af:13:be:ca:ae:20:5f:11:bf:b1:2f:b7:a2:d4:69: cb:f3:03:5a:97:ce:4e:02:d8:e9:d5:48:7d:be:ec:9f:67:7b: c6:17:f8:8b:a4:79:87:95:c4:fc:25:19:13:f4:87:5a:2c:18: 13:5c:d5:26:bd:8d:fd:8f:04:97:9b:5a:b1:44:6f:60:38:30: 2b:a8:b3:7a:93:93:f6:6a:81:e9:e6:63:d6:23:d7:9f:d2:16: d5:c3:93:99:09:95:57:47:b8:39:9a:4d:e7:4c:e3:ad:b6:75: a9:f4:c7:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtb/IBVf4VW+oifHeR0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTgyNWVlYzBlYjI5YmQ3MzA5YTYzYmRkZTFhYmFiNGEy ZmQxMjAwHhcNMjUxMjI2MTAwMTA2WhcNMjUxMjI3MTAwMTA2WjAzMTEwLwYDVQQD EygxZTkzYTcwNDA1MDVjN2M0ZTYzNzcxNjA2ZjMwZjAzYzI1MGI3MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YdyESpoNu1fOexmgF0wnvzFIQcr avXDyM+shiFV3tlGTKBxnQHM2EP9YPfw2LrLWzqP09xbUO1FQgCVZejFglECDn/o WIi773vAkmVCLTUuZ+XCxpZ8rcxpxCghM2xj8Mlb8pfS5P0GljCQXP+oOuLHQVu6 4VO7IXKYhCU3xeu4k74M3so8+/GEMPezA6SPl796u0LdtVHpBVo9mkdxBoF7Lr3m 0yhh1zfNIi+dGmi0vhYtV8OYe3nYQAaxgEwAdb2iUO7YGFhGVL9RVQrqw+zXXTGh VKTEbRomkix/ndLyaWodI1gpGDZHIdhNhkbMeLt9ECkY8kKl66xu0vA6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6TpwQFBcfE5jdxYG8w8DwlC3ORMB8GA1UdIwQY MBaAFDJYJe7A6ym9cwmmO93hq6tKL9EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxnbDdzRHJLYjF6Q2FZNzNlR3JxMG92MFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMDg2MDQtOWJlYS00YWQxLWJjMDYt NzliNmUxMmVhMmM1LzEvTWxnbDdzRHJLYjF6Q2FZNzNlR3JxMG92MFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMDg2MDQtOWJlYS00YWQxLWJjMDYtNzliNmUxMmVhMmM1 LzEvTWxnbDdzRHJLYjF6Q2FZNzNlR3JxMG92MFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaWbtvzm v3mgzRGXrjbKd6VUE+b2xjIOqs+Zl29l4ZK9yM4O5+F7xftMowm2Y3sjmQGbCQwC tneC/T73gARuUg8BMvxvjPxzoSandj5zV60WcrVlbNOu/mq82I7bVtaqQQdIadyh YrtuXexBibg75AU8HHC8cNLA/8Y+w5f0pJ4Ecm4CawgbqcMylmxth2/A9X/ZrxO+ yq4gXxG/sS+3otRpy/MDWpfOTgLY6dVIfb7sn2d7xhf4i6R5h5XE/CUZE/SHWiwY E1zVJr2N/Y8El5tasURvYDgwK6izepOT9mqB6eZj1iPXn9IW1cOTmQmVV0e4OZpN 50zjrbZ1qfTHhQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:18 2025 by rpki-client