This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json) Hash identifier: u9YrMihO/fTKXEur1FXrgB2K7Qis2AkBbr3aTbF3wXQ= Subject key identifier: 82:B4:FC:B4:C5:39:6F:7C:A0:F3:83:6D:32:64:F2:CC:BD:60:82:58 Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33 Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533 Certificate serial: 019AF0BF8E929E89EE9CC39F5077B91D6329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft Manifest number: 164F Signing time: Fri 05 Dec 2025 23:01:16 +0000 Manifest this update: Fri 05 Dec 2025 23:01:16 +0000 Manifest next update: Sat 06 Dec 2025 23:01:16 +0000 Files and hashes: 1: CFfUxIFh9E3XN1EntjmEwUZAUfA.roa (hash: LKtIJVn3SPxlyKkXSz+8d7gF12Vd76h6cTs7tmGxKjM=) 2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: xq6nSrhCqs8igtJrq2YaF9r8U2GOJyy0FfYeJ3Hru+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8e:92:9e:89:ee:9c:c3:9f:50:77:b9:1d:63:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533 Validity Not Before: Dec 5 23:01:16 2025 GMT Not After : Dec 6 23:01:16 2025 GMT Subject: CN=82b4fcb4c5396f7ca0f3836d3264f2ccbd608258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:9d:38:93:c3:c6:4b:78:29:26:dc:b9:a7: cb:51:7e:c2:bd:13:9b:53:e1:bc:45:f9:eb:9a:84: 4c:68:ff:a7:ca:55:fd:64:0e:f6:01:5a:52:6b:2d: 71:a8:55:61:7d:78:2d:0a:55:b7:ef:dd:32:aa:17: d5:db:99:cf:c5:54:4c:d0:47:a7:0c:a8:cd:6b:42: df:29:e3:30:3c:00:e0:3c:6e:cd:12:11:bb:58:e6: 5b:98:06:19:01:a6:10:dc:6e:c6:ce:5a:0b:bc:56: a8:58:c1:ff:94:24:86:c9:4c:ee:f8:8c:75:8e:c2: 08:17:d6:f8:49:9c:90:65:1c:db:e4:2a:8a:21:60: 06:10:19:f2:ad:ac:7a:20:ec:5a:f3:44:3c:c5:13: f0:24:95:4d:48:82:bd:e1:dc:1e:03:de:5d:ee:7b: 99:8b:87:6c:ed:b0:23:49:57:0d:49:d7:29:9e:44: 20:b2:62:66:1f:47:f7:74:3f:b1:59:56:2e:94:7b: 1a:0e:9e:42:9a:0f:90:d2:7b:46:74:a5:4f:1c:d7: 8c:09:29:e4:46:89:ea:51:1a:b4:9d:50:80:ad:29: 80:40:ce:2b:70:22:68:a2:ea:25:9f:36:3a:50:a4: a4:5b:af:4d:44:cd:fb:cb:81:33:36:e9:34:a5:a0: de:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B4:FC:B4:C5:39:6F:7C:A0:F3:83:6D:32:64:F2:CC:BD:60:82:58 X509v3 Authority Key Identifier: keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:86:08:74:76:98:82:73:7c:98:3d:75:a1:2a:0e:60:e0:4d: c1:80:36:fa:0b:7b:ee:ef:73:0f:4d:9f:e0:62:8e:ca:ba:25: 21:54:27:ac:4a:4e:79:ab:4c:d3:96:6c:51:70:22:92:04:4d: 50:ad:16:0f:1e:8e:ef:4f:91:42:b9:2f:c2:e0:f7:5d:75:a9: 01:bf:f2:61:12:a9:af:91:b5:a7:ff:40:52:b9:b7:39:9d:77: a8:24:b9:ba:d8:bb:82:57:10:93:68:83:f5:e3:ec:e9:89:03: 77:05:52:2c:28:79:5a:8a:1a:5f:1b:ae:90:13:37:7a:fa:b0: 9f:d1:cb:bd:86:dd:25:dc:06:d4:78:13:a2:ca:1c:75:c9:c3: 02:56:bb:43:8d:86:cd:8f:96:98:49:2b:ef:1c:ba:37:3e:60: 15:95:7d:d1:41:21:e8:c3:32:5c:fd:ba:90:01:dc:29:56:ef: 28:6c:58:60:50:0e:fc:8a:da:c0:ea:98:e1:00:c8:20:b1:08: 1f:3f:98:c6:c9:99:8a:ae:ec:f5:bc:b7:a6:07:9f:57:99:bb: 94:83:f1:80:58:5c:f8:6c:d2:30:bb:43:11:85:f6:eb:fc:31: 8e:ba:c7:44:7c:1c:dd:41:78:43:09:85:b2:9a:38:69:20:c8: 2e:f3:a2:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv46SnonunMOfUHe5HWMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNWE4YjY4OGRlYWRiYjkxZWZiZTA3NzIzMDhiYWM5ZjMw NGE1MzMwHhcNMjUxMjA1MjMwMTE2WhcNMjUxMjA2MjMwMTE2WjAzMTEwLwYDVQQD Eyg4MmI0ZmNiNGM1Mzk2ZjdjYTBmMzgzNmQzMjY0ZjJjY2JkNjA4MjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnSdOJPDxkt4KSbcuafLUX7CvROb U+G8RfnrmoRMaP+nylX9ZA72AVpSay1xqFVhfXgtClW3790yqhfV25nPxVRM0Een DKjNa0LfKeMwPADgPG7NEhG7WOZbmAYZAaYQ3G7GzloLvFaoWMH/lCSGyUzu+Ix1 jsIIF9b4SZyQZRzb5CqKIWAGEBnyrax6IOxa80Q8xRPwJJVNSIK94dweA95d7nuZ i4ds7bAjSVcNSdcpnkQgsmJmH0f3dD+xWVYulHsaDp5Cmg+Q0ntGdKVPHNeMCSnk RonqURq0nVCArSmAQM4rcCJoouolnzY6UKSkW69NRM37y4EzNuk0paDeWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK0/LTFOW98oPODbTJk8sy9YIJYMB8GA1UdIwQY MBaAFDJai2iN6tu5HvvgdyMIusnzBKUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjIt YmI0YTg2NzJjYzBjLzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjItYmI0YTg2NzJjYzBj LzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIYIdHaY gnN8mD11oSoOYOBNwYA2+gt77u9zD02f4GKOyrolIVQnrEpOeatM05ZsUXAikgRN UK0WDx6O70+RQrkvwuD3XXWpAb/yYRKpr5G1p/9AUrm3OZ13qCS5uti7glcQk2iD 9ePs6YkDdwVSLCh5WooaXxuukBM3evqwn9HLvYbdJdwG1HgTosocdcnDAla7Q42G zY+WmEkr7xy6Nz5gFZV90UEh6MMyXP26kAHcKVbvKGxYYFAO/IrawOqY4QDIILEI Hz+YxsmZiq7s9by3pgefV5m7lIPxgFhc+GzSMLtDEYX26/wxjrrHRHwc3UF4QwmF spo4aSDILvOiqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:08 2025 by rpki-client