This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft File: rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft (raw, json) Hash identifier: fnItFF8j/CNUk5ezLdKQDK3VqbJimk9EZuT34/1Z8FY= Subject key identifier: F3:E5:05:3C:C2:A3:DB:99:EB:A1:D5:23:73:24:65:92:2E:98:E4:F0 Authority key identifier: AC:C2:C5:94:A4:7C:87:66:22:7F:D9:A5:12:89:4E:F8:AA:34:B6:07 Certificate issuer: /CN=acc2c594a47c8766227fd9a512894ef8aa34b607 Certificate serial: 019AF12DBF6B0EF94546FAEAB6739D2038B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft Manifest number: 58 Signing time: Sat 06 Dec 2025 01:01:38 +0000 Manifest this update: Sat 06 Dec 2025 01:01:38 +0000 Manifest next update: Sun 07 Dec 2025 01:01:38 +0000 Files and hashes: 1: rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl (hash: LN6AcDOMQezuNYb5FGoE9AH/Ipksc9E6rl6hQf7INo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:bf:6b:0e:f9:45:46:fa:ea:b6:73:9d:20:38:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc2c594a47c8766227fd9a512894ef8aa34b607 Validity Not Before: Dec 6 01:01:38 2025 GMT Not After : Dec 7 01:01:38 2025 GMT Subject: CN=f3e5053cc2a3db99eba1d523732465922e98e4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:25:34:7b:08:37:06:26:52:ee:e7:e2:14: cc:aa:89:2e:a0:4b:47:d7:51:bc:0f:af:63:c1:2a: 70:e7:ec:85:08:07:e5:cd:a9:14:2c:a5:e2:fd:a9: 47:9a:08:04:f0:44:4a:80:fd:31:cc:c6:04:3a:64: 78:2d:4c:f7:26:44:2f:1b:5a:76:97:ab:e0:b3:a6: f6:d2:aa:42:b0:2a:fe:14:a3:60:a3:b0:44:a0:e6: 64:96:de:b8:01:f7:ab:a7:d8:0c:a5:fd:1b:c8:68: 46:78:26:0a:8c:83:2b:bf:91:c7:7e:2f:ab:e9:91: 6a:2d:ae:67:40:af:ef:e3:26:14:dc:1e:3a:1a:a5: 67:38:c0:c1:d0:63:39:b0:fe:4f:bd:df:19:6e:19: 79:e6:f9:94:d8:c1:1c:02:e3:e2:1a:ad:85:b0:a6: 13:b9:68:91:e1:0d:f1:f4:15:00:b6:7f:a3:eb:b9: 50:ce:e7:69:ae:1b:0c:51:9d:a5:73:31:5f:b1:b4: 27:dc:c4:d2:97:3d:c3:93:2a:29:01:71:23:d2:95: 5c:53:cb:1f:39:6a:f1:16:45:f8:bf:c0:b2:1e:ce: 9d:27:ac:40:9f:3d:9d:1b:a3:b8:b2:eb:04:f7:27: 4f:dc:a5:d6:13:73:e5:ce:e2:79:af:35:d7:ab:cf: 97:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E5:05:3C:C2:A3:DB:99:EB:A1:D5:23:73:24:65:92:2E:98:E4:F0 X509v3 Authority Key Identifier: keyid:AC:C2:C5:94:A4:7C:87:66:22:7F:D9:A5:12:89:4E:F8:AA:34:B6:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:35:e5:74:02:95:97:8c:3d:87:1d:d3:82:ed:ab:96:03:47: b7:d3:fd:e0:eb:ac:a5:54:e5:90:1a:82:bb:45:83:80:b2:02: ac:a2:14:6e:f5:5c:8e:0d:c2:dc:34:e5:8d:49:5d:7d:8e:60: 23:71:56:bf:7e:47:d7:d3:e6:79:28:b5:f2:80:80:ce:b7:27: 4b:35:c8:88:87:21:68:18:77:41:18:68:2f:d2:70:11:f3:a0: 3c:bd:f5:cc:5a:d9:46:84:1c:0d:bf:31:b7:62:5b:a9:72:7b: 70:4a:1d:39:12:ef:82:95:ff:b6:07:e3:01:72:f7:f1:b1:4d: 90:20:79:a1:78:08:0c:09:f1:7d:2e:2f:72:e4:f9:2d:4a:15: f3:de:1b:11:1f:5e:76:1e:7c:81:22:53:a6:f7:18:a4:fc:93: 87:63:03:cc:9a:51:10:01:4a:47:d4:e8:3b:be:f4:48:ed:b9: 33:ec:40:f6:65:75:0d:ee:25:2d:a2:50:e3:dc:19:d8:9a:03: 10:7a:ae:c3:6d:a1:5a:cb:bb:05:d3:e2:0f:6a:6b:67:f7:a7: ff:1f:88:d8:7e:f0:87:17:58:2f:8c:15:bc:68:0a:d6:f4:9c: 3a:c5:bd:2a:cd:cd:b5:fe:45:a4:3f:74:4b:13:49:23:e0:d3: 1a:df:a2:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLb9rDvlFRvrqtnOdIDi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzJjNTk0YTQ3Yzg3NjYyMjdmZDlhNTEyODk0ZWY4YWEz NGI2MDcwHhcNMjUxMjA2MDEwMTM4WhcNMjUxMjA3MDEwMTM4WjAzMTEwLwYDVQQD EyhmM2U1MDUzY2MyYTNkYjk5ZWJhMWQ1MjM3MzI0NjU5MjJlOThlNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqklNHsINwYmUu7n4hTMqokuoEtH 11G8D69jwSpw5+yFCAflzakULKXi/alHmggE8ERKgP0xzMYEOmR4LUz3JkQvG1p2 l6vgs6b20qpCsCr+FKNgo7BEoOZklt64Aferp9gMpf0byGhGeCYKjIMrv5HHfi+r 6ZFqLa5nQK/v4yYU3B46GqVnOMDB0GM5sP5Pvd8Zbhl55vmU2MEcAuPiGq2FsKYT uWiR4Q3x9BUAtn+j67lQzudprhsMUZ2lczFfsbQn3MTSlz3DkyopAXEj0pVcU8sf OWrxFkX4v8CyHs6dJ6xAnz2dG6O4susE9ydP3KXWE3PlzuJ5rzXXq8+XLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPlBTzCo9uZ66HVI3MkZZIumOTwMB8GA1UdIwQY MBaAFKzCxZSkfIdmIn/ZpRKJTviqNLYHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1MRmxLUjhoMllpZjltbEVvbE8tS28wdGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YjYzNDAtYjI2MS00YThkLWI1Yjct ZDVkODE0MmIyZGVhLzEvck1MRmxLUjhoMllpZjltbEVvbE8tS28wdGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi83YjYzNDAtYjI2MS00YThkLWI1YjctZDVkODE0MmIyZGVh LzEvck1MRmxLUjhoMllpZjltbEVvbE8tS28wdGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjXldAKV l4w9hx3Tgu2rlgNHt9P94OuspVTlkBqCu0WDgLICrKIUbvVcjg3C3DTljUldfY5g I3FWv35H19PmeSi18oCAzrcnSzXIiIchaBh3QRhoL9JwEfOgPL31zFrZRoQcDb8x t2JbqXJ7cEodORLvgpX/tgfjAXL38bFNkCB5oXgIDAnxfS4vcuT5LUoV894bER9e dh58gSJTpvcYpPyTh2MDzJpREAFKR9ToO770SO25M+xA9mV1De4lLaJQ49wZ2JoD EHquw22hWsu7BdPiD2prZ/en/x+I2H7whxdYL4wVvGgK1vScOsW9Ks3Ntf5FpD90 SxNJI+DTGt+igg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:38 2025 by rpki-client