This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft File: ML2W-0iWciqJyEZRjLXmbLVMhU8.mft (raw, json) Hash identifier: WVePBXmmr8AxV6EAlBPJf1wu04WEkJ5EoPWgzMl5qG4= Subject key identifier: A0:D7:81:8A:5B:49:44:69:03:5D:96:D7:4D:50:EA:78:54:B1:18:C5 Authority key identifier: 30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F Certificate issuer: /CN=30bd96fb4896722a89c846518cb5e66cb54c854f Certificate serial: 019AF208E0A695C00B47B20E597CC9A1CE0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: ML2W-0iWciqJyEZRjLXmbLVMhU8.crl (hash: se8/qS+RMUHIIstsBz1cjXkLPhk4CsAi7bApF4tnqZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e0:a6:95:c0:0b:47:b2:0e:59:7c:c9:a1:ce:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30bd96fb4896722a89c846518cb5e66cb54c854f Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=a0d7818a5b494469035d96d74d50ea7854b118c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0f:34:e6:05:60:f5:35:fb:84:16:02:f8:30: af:85:11:fa:d6:cc:ce:e8:a4:14:af:f3:46:e8:f5: 40:0f:0d:72:ca:14:fb:f1:ff:9a:56:32:d3:98:dc: 77:75:9d:2c:12:bb:5c:b5:c9:f3:75:5b:7f:f0:4d: e9:1b:d4:db:f5:e0:9d:c5:34:25:36:57:b1:d2:60: ef:35:e4:25:f4:df:3d:94:28:69:9e:6f:1f:eb:fc: 26:5e:2b:92:00:da:d2:a9:4b:1c:63:b7:f8:2d:f0: 51:d8:a2:cf:40:66:52:38:87:bd:de:85:5b:1a:c0: 99:1e:08:b4:dd:39:24:0d:d2:b8:71:33:8f:a0:f3: 71:51:e6:2c:44:79:c4:da:4a:7a:e6:59:a5:55:3d: 75:eb:07:43:a9:84:5e:7d:67:8c:8a:25:9e:7d:b4: 03:13:ff:23:e0:ea:a7:c8:d8:86:38:32:36:fd:77: 1d:a0:04:ad:e9:e6:b2:82:0d:ef:23:08:47:f2:45: 6d:82:87:32:a0:35:4d:e7:c8:0d:6a:8c:40:55:d7: 8f:a4:46:2e:76:2e:c2:36:8b:79:e3:61:36:b2:31: af:e4:a9:25:e2:94:b7:e1:4e:87:4d:9c:6f:31:dc: 09:0b:f6:7c:3a:96:d2:e1:89:6a:9b:b7:77:4c:55: 98:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D7:81:8A:5B:49:44:69:03:5D:96:D7:4D:50:EA:78:54:B1:18:C5 X509v3 Authority Key Identifier: keyid:30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:52:44:a3:81:7d:c9:be:94:e4:5d:bd:a2:bd:6a:2c:90:a6: f1:64:8e:1d:5c:1f:d5:18:a0:8b:aa:36:fa:53:5e:d6:71:80: 38:d6:32:f4:08:78:1d:a9:6a:32:72:b4:4a:8d:de:6d:83:41: 07:68:67:8b:66:31:38:1a:52:7e:71:a8:57:95:3d:4f:3a:b6: cd:de:f3:8e:08:a5:7f:67:f8:35:d8:fe:f2:af:63:09:58:59: d1:3c:15:d2:02:42:58:99:6d:ee:a1:63:3a:61:fd:50:2a:d8: 66:c5:ec:24:d0:82:a3:e2:83:86:9a:66:92:10:60:45:88:00: e6:7f:ca:7b:4c:09:e0:3c:b6:30:49:6e:3b:46:c0:bd:4a:0d: 69:14:6a:35:3e:ba:99:0a:7b:cf:d6:c8:29:fa:b2:3b:15:7a: 5f:c3:19:31:30:e0:c4:20:cb:d2:7c:99:f9:01:b5:b7:dd:9f: 20:57:cb:db:92:3c:92:d2:54:dc:60:ee:e4:bb:44:de:5f:02: de:f7:63:e5:86:a9:50:cb:18:4b:9a:00:02:1b:f7:21:3e:a0: 0f:ca:da:3f:54:00:2b:f6:f7:12:53:00:95:c3:0e:e5:ed:79: f3:bc:6d:c9:99:1f:98:fd:b2:8f:ee:f2:0e:90:cd:14:07:55: e2:66:68:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOCmlcALR7IOWXzJoc4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYmQ5NmZiNDg5NjcyMmE4OWM4NDY1MThjYjVlNjZjYjU0 Yzg1NGYwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EyhhMGQ3ODE4YTViNDk0NDY5MDM1ZDk2ZDc0ZDUwZWE3ODU0YjExOGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g805gVg9TX7hBYC+DCvhRH61szO 6KQUr/NG6PVADw1yyhT78f+aVjLTmNx3dZ0sErtctcnzdVt/8E3pG9Tb9eCdxTQl Nlex0mDvNeQl9N89lChpnm8f6/wmXiuSANrSqUscY7f4LfBR2KLPQGZSOIe93oVb GsCZHgi03TkkDdK4cTOPoPNxUeYsRHnE2kp65lmlVT116wdDqYRefWeMiiWefbQD E/8j4OqnyNiGODI2/XcdoASt6eaygg3vIwhH8kVtgocyoDVN58gNaoxAVdePpEYu di7CNot542E2sjGv5Kkl4pS34U6HTZxvMdwJC/Z8OpbS4Ylqm7d3TFWYVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDXgYpbSURpA12W101Q6nhUsRjFMB8GA1UdIwQY MBaAFDC9lvtIlnIqichGUYy15my1TIVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUwyVy0waVdjaXFKeUVaUmpMWG1iTFZNaFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zOGIwOGEtZGQ0NS00ZDNkLWIwMWIt MjkwNDdlYmU4YmJiLzEvTUwyVy0waVdjaXFKeUVaUmpMWG1iTFZNaFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zOGIwOGEtZGQ0NS00ZDNkLWIwMWItMjkwNDdlYmU4YmJi LzEvTUwyVy0waVdjaXFKeUVaUmpMWG1iTFZNaFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFJEo4F9 yb6U5F29or1qLJCm8WSOHVwf1Rigi6o2+lNe1nGAONYy9Ah4HalqMnK0So3ebYNB B2hni2YxOBpSfnGoV5U9Tzq2zd7zjgilf2f4Ndj+8q9jCVhZ0TwV0gJCWJlt7qFj OmH9UCrYZsXsJNCCo+KDhppmkhBgRYgA5n/Ke0wJ4Dy2MEluO0bAvUoNaRRqNT66 mQp7z9bIKfqyOxV6X8MZMTDgxCDL0nyZ+QG1t92fIFfL25I8ktJU3GDu5LtE3l8C 3vdj5YapUMsYS5oAAhv3IT6gD8raP1QAK/b3ElMAlcMO5e1587xtyZkfmP2yj+7y DpDNFAdV4mZopA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:45 2025 by rpki-client