This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft File: ml_TZv526ZmG92gN_M89y5TW3hQ.mft (raw, json) Hash identifier: /MMY1mL1PPk3LZtpUY56yvbv3VW3jClJJ5W4GqBAFRo= Subject key identifier: 4E:7A:8A:23:1A:FC:5C:25:55:44:EB:CC:A3:AF:3F:FD:96:B2:82:A4 Authority key identifier: 9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14 Certificate issuer: /CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14 Certificate serial: 019AF50ADF459A8409F597E581A36F03C1D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft Manifest number: 05F0 Signing time: Sat 06 Dec 2025 19:02:01 +0000 Manifest this update: Sat 06 Dec 2025 19:02:01 +0000 Manifest next update: Sun 07 Dec 2025 19:02:01 +0000 Files and hashes: 1: ml_TZv526ZmG92gN_M89y5TW3hQ.crl (hash: dPEQ9uw0btrd3gJohbO/SPjeZonBpoLW4nkCNhZJBnI=) 2: nzhgmUHMBkXurs4lxO-vVG71nK8.roa (hash: naLy7uq1sBONgf+ZVhFHwkdla3yLH7XoG0HQQOUDogs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:df:45:9a:84:09:f5:97:e5:81:a3:6f:03:c1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14 Validity Not Before: Dec 6 19:02:01 2025 GMT Not After : Dec 7 19:02:01 2025 GMT Subject: CN=4e7a8a231afc5c255544ebcca3af3ffd96b282a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:4e:6c:f0:28:8e:ba:de:46:b2:bd:91:76: ac:3f:21:4b:9c:af:b6:ed:f4:fd:0c:0a:bc:9e:70: 6b:59:de:e0:68:e8:60:e6:8e:71:5f:e0:6a:3c:b0: da:93:8f:0e:81:54:a7:1b:ad:6d:34:98:34:70:99: 1d:8c:56:71:9c:b0:dc:79:8f:4a:62:98:e4:16:b9: d5:6f:bb:ad:b6:2c:a1:eb:f9:c1:6b:5e:e2:e8:0a: 60:90:7e:92:28:ad:79:bf:f2:40:ac:6c:b6:a1:43: e0:c8:9c:ef:d5:bd:a3:d6:d3:38:7b:7f:ff:fd:0b: ae:17:39:7e:62:01:ee:86:b0:a0:e1:1e:e5:0d:67: 80:ec:f8:c9:73:60:3a:3e:d7:15:dd:4c:ed:55:e4: 81:6f:67:12:e5:9a:f6:cf:59:8f:b5:4f:df:68:a9: f0:58:73:4e:cc:4d:e6:bf:1b:3e:17:4a:81:5b:3f: 61:9f:10:69:c4:47:4c:c3:27:6c:0f:e4:c7:b5:b0: bf:58:a6:ab:f9:7d:24:b4:64:d8:65:05:e4:ea:9c: d4:28:f4:2b:2b:20:eb:2a:6e:c7:ee:29:4f:e4:37: 49:2d:ea:7a:80:a1:36:68:bd:0d:70:b4:c9:38:b7: f4:d7:fb:80:e0:51:47:42:3a:98:e6:31:34:f9:f7: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7A:8A:23:1A:FC:5C:25:55:44:EB:CC:A3:AF:3F:FD:96:B2:82:A4 X509v3 Authority Key Identifier: keyid:9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:39:ca:5e:b6:6b:9b:a3:99:0d:30:d8:30:76:b5:77:c3:89: 1c:7f:b4:f8:51:e2:d2:93:7f:a2:22:56:d7:05:2b:69:b0:34: 20:69:19:ec:84:b3:bf:0a:5a:17:ea:07:b1:b6:9e:3b:49:24: ae:c7:4b:a2:33:21:af:33:0d:62:3c:cf:23:b5:9e:2c:3a:b4: 0c:43:58:e5:20:ce:ec:e6:dc:51:00:0e:0f:24:0d:5f:05:4b: 3a:e4:c7:50:6b:9c:78:19:08:93:90:e9:98:42:de:69:13:01: 51:2c:f5:3b:28:76:70:7c:62:2b:1e:24:91:b5:2b:68:d1:f6: a2:69:8e:7f:75:90:af:7c:0d:72:f3:4f:bb:5d:77:6a:c9:96: d2:2d:5c:fc:d6:1a:a8:6e:19:8a:10:b0:1f:a8:b9:1f:d1:eb: 0c:ec:d0:55:fb:15:5f:3c:5a:76:46:aa:4d:c7:08:fb:d2:c3: 3e:4a:7d:bf:c1:d9:66:63:ec:e3:a0:23:3c:ed:4d:42:04:eb: 45:09:2c:c3:f5:d8:16:9a:d0:03:16:ee:97:bf:c1:79:78:b3: 28:da:fd:c2:9c:05:29:82:92:31:76:2b:bc:db:a5:2d:50:54: 27:ee:2d:44:09:da:59:99:d4:93:2c:ee:fb:d3:3b:8a:f4:ae: 81:02:c4:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ct9FmoQJ9ZflgaNvA8HRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNWZkMzY2ZmU3NmU5OTk4NmY3NjgwZGZjY2YzZGNiOTRk NmRlMTQwHhcNMjUxMjA2MTkwMjAxWhcNMjUxMjA3MTkwMjAxWjAzMTEwLwYDVQQD Eyg0ZTdhOGEyMzFhZmM1YzI1NTU0NGViY2NhM2FmM2ZmZDk2YjI4MmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMhObPAojrreRrK9kXasPyFLnK+2 7fT9DAq8nnBrWd7gaOhg5o5xX+BqPLDak48OgVSnG61tNJg0cJkdjFZxnLDceY9K YpjkFrnVb7uttiyh6/nBa17i6ApgkH6SKK15v/JArGy2oUPgyJzv1b2j1tM4e3// /QuuFzl+YgHuhrCg4R7lDWeA7PjJc2A6PtcV3UztVeSBb2cS5Zr2z1mPtU/faKnw WHNOzE3mvxs+F0qBWz9hnxBpxEdMwydsD+THtbC/WKar+X0ktGTYZQXk6pzUKPQr KyDrKm7H7ilP5DdJLep6gKE2aL0NcLTJOLf01/uA4FFHQjqY5jE0+feVBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE56iiMa/FwlVUTrzKOvP/2WsoKkMB8GA1UdIwQY MBaAFJpf02b+dumZhvdoDfzPPcuU1t4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxfVFp2NTI2Wm1HOTJnTl9NODl5NVRXM2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85NDM0MjYtYTVlZS00N2U5LWFkODIt NzhmOTJlYjFiNjJmLzEvbWxfVFp2NTI2Wm1HOTJnTl9NODl5NVRXM2hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85NDM0MjYtYTVlZS00N2U5LWFkODItNzhmOTJlYjFiNjJm LzEvbWxfVFp2NTI2Wm1HOTJnTl9NODl5NVRXM2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdznKXrZr m6OZDTDYMHa1d8OJHH+0+FHi0pN/oiJW1wUrabA0IGkZ7ISzvwpaF+oHsbaeO0kk rsdLojMhrzMNYjzPI7WeLDq0DENY5SDO7ObcUQAODyQNXwVLOuTHUGuceBkIk5Dp mELeaRMBUSz1Oyh2cHxiKx4kkbUraNH2ommOf3WQr3wNcvNPu113asmW0i1c/NYa qG4ZihCwH6i5H9HrDOzQVfsVXzxadkaqTccI+9LDPkp9v8HZZmPs46AjPO1NQgTr RQksw/XYFprQAxbul7/BeXizKNr9wpwFKYKSMXYrvNulLVBUJ+4tRAnaWZnUkyzu +9M7ivSugQLECg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:13 2025 by rpki-client