This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json) Hash identifier: vc6PG56Ngw5vL4v5XWBpYgCDFm9cjMGYFuPWZkVqg8w= Subject key identifier: A9:A3:79:D5:E7:4E:39:66:B6:4D:75:EA:5B:B7:A7:6B:7A:7F:5D:F8 Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56 Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656 Certificate serial: 019AF23F809D0DB6D6AA6C59AE85A7BDBE32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:39 +0000 Manifest this update: Sat 06 Dec 2025 06:00:39 +0000 Manifest next update: Sun 07 Dec 2025 06:00:39 +0000 Files and hashes: 1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: W87XcXyHoZHdnvIvieOY6HC6R4VM3xtcV3i8g58TPUs=) 2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:80:9d:0d:b6:d6:aa:6c:59:ae:85:a7:bd:be:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656 Validity Not Before: Dec 6 06:00:39 2025 GMT Not After : Dec 7 06:00:39 2025 GMT Subject: CN=a9a379d5e74e3966b64d75ea5bb7a76b7a7f5df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:76:83:b3:34:11:ab:5d:cb:e5:c6:84:fe:39: ee:fb:54:f4:27:a5:0a:0a:ba:cc:39:15:ca:b9:9b: 33:5f:34:85:86:da:a3:3d:2e:39:45:d3:40:40:72: 14:0e:ff:87:67:17:a3:1e:21:36:ea:ea:9f:be:9f: 8e:66:c3:a6:db:e1:1f:06:a2:dd:24:0e:40:08:11: 63:a8:5a:5d:7a:b9:ee:df:8d:34:12:5e:2a:d8:fd: 83:73:e6:35:6f:fd:49:06:8e:71:10:50:26:fb:93: 2e:00:cd:5f:41:94:ea:20:5f:59:d4:b5:85:da:f1: 2c:50:91:a3:a6:58:21:c2:96:0d:39:06:b8:de:2a: a1:6a:cd:e4:e1:cd:86:ef:14:64:e0:e1:85:3f:86: 47:28:29:e0:ea:99:2f:1f:80:20:06:db:cd:ea:79: 64:b2:1f:76:7a:d4:11:61:56:64:9d:6c:25:39:61: c3:9e:51:4a:05:79:33:cb:cc:3d:fe:34:54:68:00: 24:85:10:1e:22:dc:1a:10:a2:a4:10:36:1b:bc:f6: bf:53:3d:50:13:df:34:8e:2b:96:54:4d:c7:0e:b6: 93:11:e7:2f:ca:ac:9e:6c:c1:83:de:4c:e4:00:59: cf:4f:48:4c:b4:fd:87:8e:69:a9:92:39:79:9d:82: c5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A3:79:D5:E7:4E:39:66:B6:4D:75:EA:5B:B7:A7:6B:7A:7F:5D:F8 X509v3 Authority Key Identifier: keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7b:91:1d:1e:d7:56:0b:17:0b:70:b3:3a:0c:59:d8:61:3a: 43:d5:c3:98:80:fa:6c:9a:a2:83:d5:63:40:d8:df:a3:bf:b8: 34:e2:2d:39:1c:fb:0a:3c:91:e6:59:b1:3e:07:88:ab:a7:b9: 95:6c:67:5c:c8:c5:d9:6b:0f:d9:9d:32:a8:b0:cd:bf:c3:c6: f1:af:85:6a:b6:43:01:2a:07:2e:36:99:c0:7f:0a:f4:8b:b8: 57:b7:47:5f:0a:31:99:4d:a6:4d:17:83:23:6d:d0:b2:ef:d5: fa:24:39:fb:1a:af:a1:5b:fc:f3:71:3b:8f:63:90:06:6f:00: de:e6:63:1f:7d:5b:a9:d1:89:61:25:10:5f:c9:36:f5:01:cf: 55:b6:da:dd:24:28:ef:89:26:a2:49:7d:c6:4c:23:2a:d5:db: 06:87:f4:5b:02:33:35:98:9b:60:1f:6a:0c:f3:6d:a2:5d:06: 48:a2:fa:90:1a:72:17:2f:b5:57:47:75:83:26:9e:71:02:3c: 56:d1:5b:32:16:41:a4:1a:7b:03:0c:8c:8e:15:61:a8:53:23: 2e:9d:d1:2d:03:cd:2b:c6:2a:7a:57:f2:a6:27:8b:46:fe:6c: a2:ae:90:24:41:18:4a:94:5b:40:c3:9c:f6:9a:d4:be:73:01: 17:09:42:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4CdDbbWqmxZroWnvb4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNWU5ODk0N2ZjOTQ4ZDViNjJkZmI4NWE3Y2IzYTcyYTA2 NzI2NTYwHhcNMjUxMjA2MDYwMDM5WhcNMjUxMjA3MDYwMDM5WjAzMTEwLwYDVQQD EyhhOWEzNzlkNWU3NGUzOTY2YjY0ZDc1ZWE1YmI3YTc2YjdhN2Y1ZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHaDszQRq13L5caE/jnu+1T0J6UK CrrMORXKuZszXzSFhtqjPS45RdNAQHIUDv+HZxejHiE26uqfvp+OZsOm2+EfBqLd JA5ACBFjqFpdernu3400El4q2P2Dc+Y1b/1JBo5xEFAm+5MuAM1fQZTqIF9Z1LWF 2vEsUJGjplghwpYNOQa43iqhas3k4c2G7xRk4OGFP4ZHKCng6pkvH4AgBtvN6nlk sh92etQRYVZknWwlOWHDnlFKBXkzy8w9/jRUaAAkhRAeItwaEKKkEDYbvPa/Uz1Q E980jiuWVE3HDraTEecvyqyebMGD3kzkAFnPT0hMtP2Hjmmpkjl5nYLFvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmjedXnTjlmtk116lu3p2t6f134MB8GA1UdIwQY MBaAFDJemJR/yUjVti37hafLOnKgZyZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2It NGNhZWM5N2Y3ZDkyLzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2ItNGNhZWM5N2Y3ZDky LzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHuRHR7X VgsXC3CzOgxZ2GE6Q9XDmID6bJqig9VjQNjfo7+4NOItORz7CjyR5lmxPgeIq6e5 lWxnXMjF2WsP2Z0yqLDNv8PG8a+FarZDASoHLjaZwH8K9Iu4V7dHXwoxmU2mTReD I23Qsu/V+iQ5+xqvoVv883E7j2OQBm8A3uZjH31bqdGJYSUQX8k29QHPVbba3SQo 74kmokl9xkwjKtXbBof0WwIzNZibYB9qDPNtol0GSKL6kBpyFy+1V0d1gyaecQI8 VtFbMhZBpBp7AwyMjhVhqFMjLp3RLQPNK8YqelfypieLRv5soq6QJEEYSpRbQMOc 9prUvnMBFwlCLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:25 2025 by rpki-client