This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft File: MlPNw--1IdnV5wqcxeRxsBWGA2o.mft (raw, json) Hash identifier: S4SmG60TZwEeH/qK/ZocRPHra0OzM1nQ8ZrqC9+k1S4= Subject key identifier: D6:87:A7:6F:8F:38:67:7D:FE:C3:7E:23:C2:23:36:54:F9:82:29:39 Authority key identifier: 32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A Certificate issuer: /CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a Certificate serial: 019AF12DA20FD7DBF1FC6966E7EB0D33B2B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft Manifest number: 0A85 Signing time: Sat 06 Dec 2025 01:01:30 +0000 Manifest this update: Sat 06 Dec 2025 01:01:30 +0000 Manifest next update: Sun 07 Dec 2025 01:01:30 +0000 Files and hashes: 1: MlPNw--1IdnV5wqcxeRxsBWGA2o.crl (hash: HBijjsC6+Z9kyiIdtYOzNMuUOb64FBhj8c84g1u/81A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a2:0f:d7:db:f1:fc:69:66:e7:eb:0d:33:b2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a Validity Not Before: Dec 6 01:01:30 2025 GMT Not After : Dec 7 01:01:30 2025 GMT Subject: CN=d687a76f8f38677dfec37e23c2233654f9822939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:fe:f8:6b:7a:86:bc:6d:6d:fb:52:fb:13: ce:e5:fd:61:3a:34:fd:6c:c2:e9:c6:9a:1e:4c:a7: 83:35:35:f5:27:e0:21:2e:10:2b:9d:7b:9a:d4:3b: f6:a7:51:b6:6d:c1:a0:db:3e:fc:cb:25:a6:b7:6f: ca:43:ce:a5:d4:76:4b:62:13:0e:10:1e:ac:e1:3f: 4a:8c:a7:c5:ea:bf:e2:41:a6:2b:31:6f:ed:f1:28: b2:1b:05:1a:8f:22:ee:7c:2d:68:03:e1:eb:ae:6a: 62:5d:80:49:3a:c4:13:d3:6a:64:72:6e:49:e0:65: 74:8c:4e:08:16:dc:3d:43:5f:be:84:39:dc:35:61: 08:bc:22:1c:c0:56:dc:24:8f:bc:6c:36:12:e2:16: 5c:64:a7:95:25:34:5a:40:bb:83:53:01:d3:cc:e1: eb:b7:0c:bf:f7:9e:d8:67:ea:e7:0a:ad:b6:af:62: f3:cc:8b:d5:c1:12:07:9d:c5:61:a4:ab:8f:84:9d: 9f:12:0f:70:eb:ee:d1:9e:84:0c:8c:c2:e3:4c:23: 9e:1e:2f:89:3e:58:07:49:45:86:09:1d:b4:53:8e: 9d:70:5f:1f:bf:8b:89:02:2a:af:9c:1c:82:49:f8: 95:b8:84:06:fc:50:77:3f:e2:ec:8e:43:be:5a:03: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:87:A7:6F:8F:38:67:7D:FE:C3:7E:23:C2:23:36:54:F9:82:29:39 X509v3 Authority Key Identifier: keyid:32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2e:ec:5d:b6:5e:f7:ee:27:50:0b:2e:b7:0a:0d:ac:d6:a4: 1b:0f:79:b3:91:9f:5d:f9:f3:97:7b:f5:c7:19:84:79:80:ab: 97:02:7a:07:2f:f1:e7:61:c1:8b:e1:7a:12:6e:e1:b6:69:e0: 4e:8d:84:58:b0:54:c1:91:3d:a4:cf:e8:be:43:61:78:4d:5a: 45:6b:ce:88:86:d7:9c:e3:94:c6:15:00:d2:4d:66:b7:b9:be: e7:48:27:b5:06:7c:f4:f1:c9:7b:96:46:40:65:30:e9:99:41: e0:cd:15:92:b1:a7:ba:78:42:5f:ef:cc:4e:25:87:8e:dc:31: cf:5d:40:db:e9:64:db:ac:eb:b1:d5:f3:40:06:62:9f:c9:1a: ee:8a:fc:23:79:1a:47:6c:6f:82:89:18:4a:e8:62:73:20:d0: 5e:2d:41:ce:e8:24:c2:06:cb:71:a3:2d:83:cc:3e:97:e9:04: e1:18:f2:12:6e:b7:6d:27:8c:06:88:3c:52:a9:db:71:7e:38: f6:bf:d3:6c:08:b1:d3:03:fd:61:e2:66:4e:e7:b4:bf:34:78: 14:23:eb:54:59:54:46:56:a5:ce:20:89:54:36:55:f2:94:8c: 3b:0c:65:53:9d:43:73:e8:55:35:05:30:ca:0b:0e:3c:09:9c: e1:65:f1:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaIP19vx/Glm5+sNM7K5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTNjZGMzZWZiNTIxZDlkNWU3MGE5Y2M1ZTQ3MWIwMTU4 NjAzNmEwHhcNMjUxMjA2MDEwMTMwWhcNMjUxMjA3MDEwMTMwWjAzMTEwLwYDVQQD EyhkNjg3YTc2ZjhmMzg2NzdkZmVjMzdlMjNjMjIzMzY1NGY5ODIyOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojb++Gt6hrxtbftS+xPO5f1hOjT9 bMLpxpoeTKeDNTX1J+AhLhArnXua1Dv2p1G2bcGg2z78yyWmt2/KQ86l1HZLYhMO EB6s4T9KjKfF6r/iQaYrMW/t8SiyGwUajyLufC1oA+HrrmpiXYBJOsQT02pkcm5J 4GV0jE4IFtw9Q1++hDncNWEIvCIcwFbcJI+8bDYS4hZcZKeVJTRaQLuDUwHTzOHr twy/957YZ+rnCq22r2LzzIvVwRIHncVhpKuPhJ2fEg9w6+7RnoQMjMLjTCOeHi+J PlgHSUWGCR20U46dcF8fv4uJAiqvnByCSfiVuIQG/FB3P+LsjkO+WgOdhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaHp2+POGd9/sN+I8IjNlT5gik5MB8GA1UdIwQY MBaAFDJTzcPvtSHZ1ecKnMXkcbAVhgNqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxQTnctLTFJZG5WNXdxY3hlUnhzQldHQTJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MWExMTUtZGU4Ni00NDA3LWE5NjMt MWM1YzIwZDEzZWY4LzEvTWxQTnctLTFJZG5WNXdxY3hlUnhzQldHQTJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS81MWExMTUtZGU4Ni00NDA3LWE5NjMtMWM1YzIwZDEzZWY4 LzEvTWxQTnctLTFJZG5WNXdxY3hlUnhzQldHQTJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWS7sXbZe 9+4nUAsutwoNrNakGw95s5GfXfnzl3v1xxmEeYCrlwJ6By/x52HBi+F6Em7htmng To2EWLBUwZE9pM/ovkNheE1aRWvOiIbXnOOUxhUA0k1mt7m+50gntQZ89PHJe5ZG QGUw6ZlB4M0VkrGnunhCX+/MTiWHjtwxz11A2+lk26zrsdXzQAZin8ka7or8I3ka R2xvgokYSuhicyDQXi1BzugkwgbLcaMtg8w+l+kE4RjyEm63bSeMBog8UqnbcX44 9r/TbAix0wP9YeJmTue0vzR4FCPrVFlURlalziCJVDZV8pSMOwxlU51Dc+hVNQUw ygsOPAmc4WXxzA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:01 2025 by rpki-client