This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft File: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft (raw, json) Hash identifier: 5fyFdsd1P2O9O9o3YkYKGrFEUL7qUfzdbDCmF5ZtN7w= Subject key identifier: E5:8A:40:3E:27:B0:A3:99:7E:67:FC:8E:C3:A2:6C:6F:AA:48:84:BF Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7 Certificate issuer: /CN=32507f9e078be89932e91b23acf882ab467c6aa7 Certificate serial: 019AF19B27DBCA39E213E294814BB309CAE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft Manifest number: 0CD6 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl (hash: ZmTFfzYGsF+27O3buxYn1Ejt/5P5ynoRLRcfrXO5Nq0=) 2: QfrRCybDqFm7xRQ9KjUz6BIzKE0.roa (hash: YrxsXgfls6BVbz+S7KqunX1/zH0o4Orz7g8fkYHg2uk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:27:db:ca:39:e2:13:e2:94:81:4b:b3:09:ca:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=e58a403e27b0a3997e67fc8ec3a26c6faa4884bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:45:24:9c:8e:c6:f8:51:91:59:fc:4c:db: 27:55:40:86:48:1d:20:54:23:6c:ad:6e:58:13:5f: 6e:18:57:51:a2:a8:ff:65:08:c3:c7:92:bb:33:d5: 2d:16:cc:b2:a2:77:dd:a9:df:be:c7:ab:25:da:fa: 65:4f:65:4b:9e:52:25:81:45:1c:8e:e6:bd:c2:82: 44:78:b2:f9:f8:98:87:bb:94:ba:36:80:3a:38:2b: 2f:4d:e8:ca:6b:fe:2d:0e:d1:a7:10:52:ad:13:81: 89:d7:19:0a:e3:e3:9d:71:66:11:d2:2b:48:d6:23: af:e9:03:a3:81:5a:b2:a4:20:2f:40:63:99:98:66: 15:6d:ad:77:8f:81:bb:ab:48:ab:0e:d9:e5:0b:e7: 29:cf:57:b1:a0:c6:2e:12:02:27:ad:26:71:06:13: a6:2a:cd:2f:dc:b0:5d:c1:42:19:5e:7f:02:17:be: 17:02:39:7b:79:43:7c:46:32:64:5f:28:7b:75:b0: b5:e8:17:40:8c:2b:ca:13:e1:e2:65:2e:a9:d9:fc: 7c:5f:1a:55:00:a4:b9:90:ea:6f:60:e2:6b:e4:52: 44:f5:db:7c:30:42:14:e7:f3:c2:fc:d5:aa:11:60: dd:63:ad:24:df:2b:e1:25:5f:e2:ce:62:0b:ff:49: 2f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8A:40:3E:27:B0:A3:99:7E:67:FC:8E:C3:A2:6C:6F:AA:48:84:BF X509v3 Authority Key Identifier: keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ce:e2:64:d8:df:15:55:a2:d1:4d:fe:14:db:f0:98:3c:bb: 94:75:ca:df:28:ec:49:38:97:67:d4:2b:72:a0:04:a3:07:ca: ec:cb:9e:2d:04:ba:49:42:e7:9d:32:aa:f1:ba:22:ae:84:21: 7c:b0:a1:4b:ed:58:0b:e3:6a:9c:1a:9b:4a:f0:3a:0e:5a:85: 6e:ba:ca:76:7e:83:a9:71:5b:51:ab:53:39:58:39:e1:e2:12: ab:a9:b1:37:d3:1e:d1:7b:83:29:69:90:ce:2c:04:ec:4d:4e: 1f:05:e9:24:89:e9:a3:a2:1e:5f:94:99:f4:31:2a:aa:5c:86: 8d:57:6e:ff:d7:c0:ec:54:5b:04:21:07:cc:56:2c:d1:73:5d: 42:ca:a3:7f:57:ae:f1:47:52:f8:93:87:02:21:45:95:07:b0: 20:41:90:fc:3f:27:43:80:c5:03:9b:da:1c:3a:5f:52:8d:25: a9:a1:ae:b7:6e:ef:0e:93:b3:cb:d8:c2:f9:d4:63:6a:e2:a0: 57:87:4b:73:57:2f:6a:33:e6:fb:42:f1:26:1d:d0:5b:be:60: 5f:42:62:08:4a:9d:b8:db:5a:8a:d3:55:e8:41:d6:1e:56:51: 48:7d:0b:36:56:32:d0:2e:d9:e4:a1:54:7f:b8:1e:8d:38:65: 0a:0c:e1:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyfbyjniE+KUgUuzCcrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA3ZjllMDc4YmU4OTkzMmU5MWIyM2FjZjg4MmFiNDY3 YzZhYTcwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD EyhlNThhNDAzZTI3YjBhMzk5N2U2N2ZjOGVjM2EyNmM2ZmFhNDg4NGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1BFJJyOxvhRkVn8TNsnVUCGSB0g VCNsrW5YE19uGFdRoqj/ZQjDx5K7M9UtFsyyonfdqd++x6sl2vplT2VLnlIlgUUc jua9woJEeLL5+JiHu5S6NoA6OCsvTejKa/4tDtGnEFKtE4GJ1xkK4+OdcWYR0itI 1iOv6QOjgVqypCAvQGOZmGYVba13j4G7q0irDtnlC+cpz1exoMYuEgInrSZxBhOm Ks0v3LBdwUIZXn8CF74XAjl7eUN8RjJkXyh7dbC16BdAjCvKE+HiZS6p2fx8XxpV AKS5kOpvYOJr5FJE9dt8MEIU5/PC/NWqEWDdY60k3yvhJV/izmIL/0kvIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWKQD4nsKOZfmf8jsOibG+qSIS/MB8GA1UdIwQY MBaAFDJQf54Hi+iZMukbI6z4gqtGfGqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEt OWQxOTZhMGUzMmEwLzEvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEtOWQxOTZhMGUzMmEw LzEvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATc7iZNjf FVWi0U3+FNvwmDy7lHXK3yjsSTiXZ9QrcqAEowfK7MueLQS6SULnnTKq8boiroQh fLChS+1YC+NqnBqbSvA6DlqFbrrKdn6DqXFbUatTOVg54eISq6mxN9Me0XuDKWmQ ziwE7E1OHwXpJInpo6IeX5SZ9DEqqlyGjVdu/9fA7FRbBCEHzFYs0XNdQsqjf1eu 8UdS+JOHAiFFlQewIEGQ/D8nQ4DFA5vaHDpfUo0lqaGut27vDpOzy9jC+dRjauKg V4dLc1cvajPm+0LxJh3QW75gX0JiCEqduNtaitNV6EHWHlZRSH0LNlYy0C7Z5KFU f7gejThlCgzhiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:00 2025 by rpki-client