This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft File: mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json) Hash identifier: BJHLDKT43Qh7oWysAfj+sT9QrFR18NTs7shZt2VPHIw= Subject key identifier: 95:73:3A:B2:02:78:0C:CB:5A:5B:0F:EB:79:8F:B2:D8:80:F8:C4:A1 Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B Certificate issuer: /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b Certificate serial: 019AF1646EEDAEE9A12E8950CF8203D7D9B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft Manifest number: 0635 Signing time: Sat 06 Dec 2025 02:01:22 +0000 Manifest this update: Sat 06 Dec 2025 02:01:22 +0000 Manifest next update: Sun 07 Dec 2025 02:01:22 +0000 Files and hashes: 1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: XwQlzftG6V3xtY5WKcoiEQNJ1mJqSmOZAzouZACyzX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6e:ed:ae:e9:a1:2e:89:50:cf:82:03:d7:d9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b Validity Not Before: Dec 6 02:01:22 2025 GMT Not After : Dec 7 02:01:22 2025 GMT Subject: CN=95733ab202780ccb5a5b0feb798fb2d880f8c4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:e6:22:0a:40:03:a7:ba:47:8a:4f:f1:db: ff:9f:32:a6:a4:2e:ad:ac:f8:e6:c6:84:29:79:63: ba:95:75:25:c6:7b:6e:cc:03:32:2a:18:03:e4:64: c2:8b:ad:b1:05:ff:60:f5:17:b8:de:90:a4:e0:06: 79:45:15:94:0d:a4:57:71:af:9c:69:79:64:76:c1: 7d:5f:5d:5d:e5:ca:e8:d0:2f:3c:80:56:8a:9d:02: 84:cc:23:78:ef:60:10:a3:c8:b3:bd:3e:05:d0:d8: 45:7c:a6:5d:e0:fe:ca:12:ad:5f:14:10:38:45:9c: 78:b5:52:75:34:1e:b6:d9:db:f2:82:45:74:ad:f6: 3e:8a:7e:8c:3f:b9:9a:68:be:1a:fc:8f:ae:bc:d1: c0:11:47:6d:e0:0a:03:3b:8b:96:05:00:dc:45:50: 5c:d0:e8:52:a3:6f:57:62:f0:0f:42:80:58:9a:8f: 43:24:57:22:b9:c4:fd:29:86:4e:42:b2:23:0d:a3: 1d:8d:db:ec:47:59:8f:8b:b2:9d:d9:8f:3e:10:29: 52:74:f7:0f:be:3f:c5:af:00:e9:e2:bd:a3:6f:99: ba:c3:34:42:31:06:e6:04:1e:d4:bf:44:43:08:fd: 53:e8:39:b3:18:87:01:26:2a:6c:22:f2:ee:51:ce: 6c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:73:3A:B2:02:78:0C:CB:5A:5B:0F:EB:79:8F:B2:D8:80:F8:C4:A1 X509v3 Authority Key Identifier: keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f0:56:15:4e:a9:77:ac:b3:e8:2e:42:56:e1:5c:b3:f9:e7: 6d:95:b3:95:30:d7:e2:57:de:4b:d0:0d:f1:b6:b9:47:0e:45: 65:c8:db:90:17:a9:88:70:19:37:79:2d:86:f8:5c:76:03:bf: bb:df:a4:7f:81:bf:82:35:97:5a:a8:de:97:e1:3b:d4:e1:62: 43:49:a3:02:90:ba:6a:37:a1:b2:aa:38:7c:9f:73:24:54:30: fc:8d:45:44:86:f7:5d:1c:2c:bd:9a:34:6e:f7:99:56:e2:54: 5a:a7:5a:2a:89:24:fa:38:da:4c:d2:5d:93:f1:02:e3:a1:e0: dc:84:31:19:cd:df:b4:db:19:9a:4d:52:0f:82:36:a0:fd:09: ad:b8:53:37:fc:88:19:26:b6:a0:e9:42:f1:08:ed:40:da:a6: 83:8b:ba:42:3f:0c:f6:57:50:36:7a:2b:55:95:bf:7d:5d:b1: bf:88:e3:2e:08:7d:7d:cc:bc:cb:9b:8e:78:2b:65:bb:b7:c2: 12:e3:c6:25:91:0d:f8:48:af:fa:3b:00:1d:75:c3:97:fa:ea: 67:92:ed:c9:6a:e9:7b:05:6f:86:a0:e2:a1:15:de:8b:11:79: bd:e5:e5:a5:75:14:a1:09:c3:d8:c3:c4:40:22:89:2e:ff:16: 96:5d:76:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZG7trumhLolQz4ID19m5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YmZlNzQ0ZTNkMmRkNDIzMTYxNGU3ZTRiYWQ0NGQ0NTUy ZjA5MWIwHhcNMjUxMjA2MDIwMTIyWhcNMjUxMjA3MDIwMTIyWjAzMTEwLwYDVQQD Eyg5NTczM2FiMjAyNzgwY2NiNWE1YjBmZWI3OThmYjJkODgwZjhjNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquLmIgpAA6e6R4pP8dv/nzKmpC6t rPjmxoQpeWO6lXUlxntuzAMyKhgD5GTCi62xBf9g9Re43pCk4AZ5RRWUDaRXca+c aXlkdsF9X11d5cro0C88gFaKnQKEzCN472AQo8izvT4F0NhFfKZd4P7KEq1fFBA4 RZx4tVJ1NB622dvygkV0rfY+in6MP7maaL4a/I+uvNHAEUdt4AoDO4uWBQDcRVBc 0OhSo29XYvAPQoBYmo9DJFciucT9KYZOQrIjDaMdjdvsR1mPi7Kd2Y8+EClSdPcP vj/FrwDp4r2jb5m6wzRCMQbmBB7Uv0RDCP1T6DmzGIcBJipsIvLuUc5slwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVzOrICeAzLWlsP63mPstiA+MShMB8GA1UdIwQY MBaAFJi/50Tj0t1CMWFOfkutRNRVLwkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUxfblJPUFMzVUl4WVU1LVM2MUUxRlV2Q1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80YWUzN2YtOWE4Mi00YmFjLWJjMGIt MWZhZmE2Yzg1MDUyLzEvbUxfblJPUFMzVUl4WVU1LVM2MUUxRlV2Q1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80YWUzN2YtOWE4Mi00YmFjLWJjMGItMWZhZmE2Yzg1MDUy LzEvbUxfblJPUFMzVUl4WVU1LVM2MUUxRlV2Q1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/BWFU6p d6yz6C5CVuFcs/nnbZWzlTDX4lfeS9AN8ba5Rw5FZcjbkBepiHAZN3kthvhcdgO/ u9+kf4G/gjWXWqjel+E71OFiQ0mjApC6ajehsqo4fJ9zJFQw/I1FRIb3XRwsvZo0 bveZVuJUWqdaKokk+jjaTNJdk/EC46Hg3IQxGc3ftNsZmk1SD4I2oP0JrbhTN/yI GSa2oOlC8QjtQNqmg4u6Qj8M9ldQNnorVZW/fV2xv4jjLgh9fcy8y5uOeCtlu7fC EuPGJZEN+Eiv+jsAHXXDl/rqZ5LtyWrpewVvhqDioRXeixF5veXlpXUUoQnD2MPE QCKJLv8Wll12qg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:44 2025 by rpki-client