This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft File: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft (raw, json) Hash identifier: /5cxtJNqzwXVCdG0nfau5EbArD2qQci7HYXWpSd2Taw= Subject key identifier: E1:3C:5F:2B:7C:CE:2C:39:16:10:66:C9:1A:84:31:2F:E3:0B:7D:BE Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7 Certificate issuer: /CN=32507f9e078be89932e91b23acf882ab467c6aa7 Certificate serial: 019B31563AD921228D372DE0868CA09C5411 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft Manifest number: 0CF7 Signing time: Thu 18 Dec 2025 12:01:33 +0000 Manifest this update: Thu 18 Dec 2025 12:01:33 +0000 Manifest next update: Fri 19 Dec 2025 12:01:33 +0000 Files and hashes: 1: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl (hash: 33DJRf0hPS5IpxE8kfZnj95uPGYjXGwcC495XncnQSE=) 2: QfrRCybDqFm7xRQ9KjUz6BIzKE0.roa (hash: YrxsXgfls6BVbz+S7KqunX1/zH0o4Orz7g8fkYHg2uk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:3a:d9:21:22:8d:37:2d:e0:86:8c:a0:9c:54:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7 Validity Not Before: Dec 18 12:01:33 2025 GMT Not After : Dec 19 12:01:33 2025 GMT Subject: CN=e13c5f2b7cce2c39161066c91a84312fe30b7dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b3:3e:76:12:31:7c:ec:df:5b:39:00:57:17: 77:a7:f6:2a:23:13:cc:53:10:0e:49:36:51:b5:4d: ea:c0:00:52:2c:9e:af:64:9d:76:2b:c9:09:69:bc: a5:e3:12:e0:fe:b2:6c:40:f9:bc:17:0c:71:65:84: 83:9d:28:88:88:da:09:d5:0f:35:19:c4:b2:26:6b: 8e:e8:b5:1d:46:70:e5:59:58:87:94:2a:c0:91:cc: a5:fe:bb:3c:d2:14:8e:9c:51:bc:95:ec:d9:5e:6c: c1:28:07:8c:7d:44:62:5e:c9:e9:25:52:37:5b:58: 01:bd:3a:38:79:37:fc:61:c9:45:fb:8e:b6:8e:98: 6e:6f:97:60:25:10:e4:c8:df:c7:2d:24:59:e3:18: d2:d0:2c:cc:92:80:d3:55:d3:74:cf:d1:59:61:e0: e1:50:93:26:bb:af:0d:ca:09:55:ad:9c:87:84:1d: db:31:82:62:9c:c5:b5:8b:da:a6:22:67:36:48:d4: b2:74:05:3c:38:64:2b:ba:56:5b:f2:85:3a:fb:13: 9d:ce:60:44:17:f7:19:79:f1:0a:40:fc:42:7d:e8: f0:22:fe:dd:d8:08:c3:4b:5c:96:bc:f3:96:d4:21: 15:df:4f:19:9a:9f:71:02:cb:48:e8:a2:b6:06:e1: 81:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3C:5F:2B:7C:CE:2C:39:16:10:66:C9:1A:84:31:2F:E3:0B:7D:BE X509v3 Authority Key Identifier: keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:23:14:d0:0e:cd:d6:31:e2:24:01:3d:24:53:25:11:b7:67: 36:f0:2f:61:1b:2b:31:1e:e5:2a:88:77:91:4a:93:2f:6d:e4: b2:1b:91:03:65:9b:ce:64:9b:0e:66:8d:f8:56:73:b1:9e:65: 8a:22:a1:90:2c:cd:dd:18:1a:0d:b3:a3:1e:2b:5b:e4:e2:c8: 70:9e:8b:db:2f:c4:1c:d3:00:2c:53:ec:d5:5d:4f:a1:71:74: 3b:37:43:fb:09:5f:94:76:32:b5:bd:49:89:db:bc:6e:ce:08: 8f:fa:e8:07:f7:42:ac:1b:bf:82:c3:28:5a:2e:2d:5b:ed:c5: b0:fb:05:0b:54:85:58:a7:e1:d5:4a:c9:32:cf:8c:40:9c:97: 1f:1f:89:41:14:e2:cd:4f:a5:43:99:f1:47:85:29:3f:fe:2f: fe:52:a9:92:f0:e2:05:cb:67:1b:c1:6e:c3:27:11:88:de:02: b6:9b:fb:90:b1:58:18:a8:f4:dc:dd:49:0f:34:8e:01:60:ac: f3:3b:30:a2:61:e5:ae:53:ce:2a:e5:e8:71:18:2e:b5:4b:1f: 7a:31:8a:67:07:6d:95:d9:3c:52:cd:71:0b:4d:c3:27:e7:38: 18:62:98:b9:cd:50:34:a3:0a:e4:72:2b:47:88:c2:b3:c7:ee: 9f:9c:a6:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVjrZISKNNy3ghoygnFQRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA3ZjllMDc4YmU4OTkzMmU5MWIyM2FjZjg4MmFiNDY3 YzZhYTcwHhcNMjUxMjE4MTIwMTMzWhcNMjUxMjE5MTIwMTMzWjAzMTEwLwYDVQQD EyhlMTNjNWYyYjdjY2UyYzM5MTYxMDY2YzkxYTg0MzEyZmUzMGI3ZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbM+dhIxfOzfWzkAVxd3p/YqIxPM UxAOSTZRtU3qwABSLJ6vZJ12K8kJabyl4xLg/rJsQPm8FwxxZYSDnSiIiNoJ1Q81 GcSyJmuO6LUdRnDlWViHlCrAkcyl/rs80hSOnFG8lezZXmzBKAeMfURiXsnpJVI3 W1gBvTo4eTf8YclF+462jphub5dgJRDkyN/HLSRZ4xjS0CzMkoDTVdN0z9FZYeDh UJMmu68NyglVrZyHhB3bMYJinMW1i9qmImc2SNSydAU8OGQrulZb8oU6+xOdzmBE F/cZefEKQPxCfejwIv7d2AjDS1yWvPOW1CEV308Zmp9xAstI6KK2BuGBDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOE8Xyt8ziw5FhBmyRqEMS/jC32+MB8GA1UdIwQY MBaAFDJQf54Hi+iZMukbI6z4gqtGfGqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEt OWQxOTZhMGUzMmEwLzEvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEtOWQxOTZhMGUzMmEw LzEvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSMU0A7N 1jHiJAE9JFMlEbdnNvAvYRsrMR7lKoh3kUqTL23kshuRA2WbzmSbDmaN+FZzsZ5l iiKhkCzN3RgaDbOjHitb5OLIcJ6L2y/EHNMALFPs1V1PoXF0OzdD+wlflHYytb1J idu8bs4Ij/roB/dCrBu/gsMoWi4tW+3FsPsFC1SFWKfh1UrJMs+MQJyXHx+JQRTi zU+lQ5nxR4UpP/4v/lKpkvDiBctnG8FuwycRiN4Ctpv7kLFYGKj03N1JDzSOAWCs 8zswomHlrlPOKuXocRgutUsfejGKZwdtldk8Us1xC03DJ+c4GGKYuc1QNKMK5HIr R4jCs8fun5ymcg== -----END CERTIFICATE-----Generated at Thu Dec 18 16:15:12 2025 by rpki-client