This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json) Hash identifier: iaQJkhBz7r8a4k59WDk1WYrGbR1p6KTinb6YKIOXw4Y= Subject key identifier: A1:53:3F:FC:9A:A4:A1:35:55:C3:00:F4:97:D4:FA:D0:76:EE:61:F1 Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56 Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656 Certificate serial: 019B2C2F553DC932059557E0A203B56F1540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 12:00:57 +0000 Manifest this update: Wed 17 Dec 2025 12:00:57 +0000 Manifest next update: Thu 18 Dec 2025 12:00:57 +0000 Files and hashes: 1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: +eKBZnAhOhRQnvquGT5fUeEYi7AR7bJMYq6bp+FukgY=) 2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:55:3d:c9:32:05:95:57:e0:a2:03:b5:6f:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656 Validity Not Before: Dec 17 12:00:57 2025 GMT Not After : Dec 18 12:00:57 2025 GMT Subject: CN=a1533ffc9aa4a13555c300f497d4fad076ee61f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:56:94:fe:ed:05:de:8c:ac:91:08:b0:26: d9:1f:4b:f5:1a:b1:09:9d:92:1d:a5:47:e0:f7:60: 2d:b6:dc:17:27:70:37:52:2d:72:97:a0:0d:72:cb: e5:3e:d3:1d:64:10:08:4c:43:27:61:81:b1:8f:7b: 81:21:ce:7e:03:0e:15:1a:7b:72:3b:99:d9:40:76: 95:96:34:26:b9:22:0f:7e:bb:a2:73:b4:b4:cc:7a: 6d:3d:34:59:81:92:90:47:93:13:b5:f4:7c:ac:a3: 20:4f:65:d8:5f:e3:36:74:73:cd:4d:9d:70:d0:e6: ae:98:0b:28:10:52:3f:c0:8e:5a:cd:67:03:55:4d: c9:8f:1e:79:dc:9c:b6:b4:db:78:1c:1f:3e:6b:87: d5:f7:d0:ab:0a:05:d1:69:73:0b:1f:17:b1:a0:ee: 04:6b:c2:d7:91:25:08:6e:61:02:57:46:e6:dd:e4: 8d:53:f6:3e:63:eb:5a:22:8e:70:13:5f:74:0d:ec: 55:e1:3d:61:2e:b4:18:6c:7c:d4:99:0d:fc:b0:f8: 60:ac:1b:4f:ab:f1:00:07:07:31:17:7b:fd:a8:b1: 9d:bf:a6:8d:c7:17:cf:cd:5a:d9:72:63:dc:c9:80: 11:35:88:7f:fe:f0:0a:ca:fa:c4:78:40:3b:7f:5f: 45:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:53:3F:FC:9A:A4:A1:35:55:C3:00:F4:97:D4:FA:D0:76:EE:61:F1 X509v3 Authority Key Identifier: keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b1:80:34:6b:83:f8:13:f0:7e:c4:67:c9:57:26:4d:b2:2e: 69:0e:df:8f:b6:01:8e:d3:85:fa:aa:05:3a:2f:a9:b8:81:58: aa:a2:b6:12:a6:58:78:9e:a6:a1:1d:47:98:be:5a:6c:fa:99: 1d:ad:c9:50:43:70:2f:e3:7d:9f:02:64:fb:a9:94:1d:4e:cc: 4d:20:43:a9:ab:12:44:67:e4:e5:ba:20:0d:2e:6f:20:2d:da: 56:f1:8d:f3:0a:71:7a:b3:28:6e:0e:f8:61:0a:a5:43:df:f0: ac:46:58:86:e4:06:c6:a6:2b:65:7e:7f:64:ac:c2:71:85:d4: d6:d4:39:e2:0c:68:56:0b:4e:55:08:16:ba:b4:f7:03:bb:86: de:4d:23:16:fb:7e:86:69:75:1f:d7:e6:e9:72:7d:c3:e7:ee: ab:71:a6:02:22:c9:2c:eb:e2:fd:ea:67:f7:9e:71:17:19:b6: 01:65:95:d8:4f:3e:26:ef:c3:de:88:1f:44:24:27:44:1e:08: 2a:89:21:71:eb:b5:a9:46:71:2c:b0:3b:9f:09:97:0e:19:bf: 6d:43:01:34:46:b4:74:9f:04:0f:18:ec:bf:22:ec:17:6c:19: 76:7f:74:e6:f2:18:2d:82:c3:4b:12:78:eb:0d:f0:e2:5a:1c: cf:c4:97:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL1U9yTIFlVfgogO1bxVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNWU5ODk0N2ZjOTQ4ZDViNjJkZmI4NWE3Y2IzYTcyYTA2 NzI2NTYwHhcNMjUxMjE3MTIwMDU3WhcNMjUxMjE4MTIwMDU3WjAzMTEwLwYDVQQD EyhhMTUzM2ZmYzlhYTRhMTM1NTVjMzAwZjQ5N2Q0ZmFkMDc2ZWU2MWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DJWlP7tBd6MrJEIsCbZH0v1GrEJ nZIdpUfg92AtttwXJ3A3Ui1yl6ANcsvlPtMdZBAITEMnYYGxj3uBIc5+Aw4VGnty O5nZQHaVljQmuSIPfruic7S0zHptPTRZgZKQR5MTtfR8rKMgT2XYX+M2dHPNTZ1w 0OaumAsoEFI/wI5azWcDVU3Jjx553Jy2tNt4HB8+a4fV99CrCgXRaXMLHxexoO4E a8LXkSUIbmECV0bm3eSNU/Y+Y+taIo5wE190DexV4T1hLrQYbHzUmQ38sPhgrBtP q/EABwcxF3v9qLGdv6aNxxfPzVrZcmPcyYARNYh//vAKyvrEeEA7f19FmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFTP/yapKE1VcMA9JfU+tB27mHxMB8GA1UdIwQY MBaAFDJemJR/yUjVti37hafLOnKgZyZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2It NGNhZWM5N2Y3ZDkyLzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2ItNGNhZWM5N2Y3ZDky LzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrGANGuD +BPwfsRnyVcmTbIuaQ7fj7YBjtOF+qoFOi+puIFYqqK2EqZYeJ6moR1HmL5abPqZ Ha3JUENwL+N9nwJk+6mUHU7MTSBDqasSRGfk5bogDS5vIC3aVvGN8wpxerMobg74 YQqlQ9/wrEZYhuQGxqYrZX5/ZKzCcYXU1tQ54gxoVgtOVQgWurT3A7uG3k0jFvt+ hml1H9fm6XJ9w+fuq3GmAiLJLOvi/epn955xFxm2AWWV2E8+Ju/D3ogfRCQnRB4I Kokhceu1qUZxLLA7nwmXDhm/bUMBNEa0dJ8EDxjsvyLsF2wZdn905vIYLYLDSxJ4 6w3w4locz8SXNw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:36:23 2025 by rpki-client