This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft File: ML5SuuTUjd3Jy-wgdqupHJU64S4.mft (raw, json) Hash identifier: k1NYPRgNtEfHxOaIcLOySYa4LNm6mw6k/c5FKE9xu4k= Subject key identifier: 2A:3C:E1:B3:3E:4F:17:F2:04:75:4B:B5:E5:E1:13:02:4E:3A:3A:E1 Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E Certificate issuer: /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e Certificate serial: 019B2C2FA6D2896EE01B0A368363BD3BAEF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft Manifest number: 1412 Signing time: Wed 17 Dec 2025 12:01:18 +0000 Manifest this update: Wed 17 Dec 2025 12:01:18 +0000 Manifest next update: Thu 18 Dec 2025 12:01:18 +0000 Files and hashes: 1: ML5SuuTUjd3Jy-wgdqupHJU64S4.crl (hash: SfmGQKZYHMNo2c/8tjlriLGEC1Vrt6qUCcTJXtpGbB8=) 2: VdtZIDR20QBsvLwRhmbNZAq9N1s.roa (hash: ne8PPRk8FY3v9PoVn0H4s7uRgTuomQzFJy3jouG0CbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:a6:d2:89:6e:e0:1b:0a:36:83:63:bd:3b:ae:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e Validity Not Before: Dec 17 12:01:18 2025 GMT Not After : Dec 18 12:01:18 2025 GMT Subject: CN=2a3ce1b33e4f17f204754bb5e5e113024e3a3ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3b:69:8f:08:c6:67:6f:59:88:e3:9e:08:dc: 7d:1b:9b:bc:43:dc:c5:41:04:ed:f4:5b:23:b8:e7: 60:16:8c:9f:3a:5d:23:f8:b4:94:4e:10:79:c1:6a: c6:a7:21:bc:db:61:3d:f8:99:62:06:2d:c9:bb:c1: e8:e4:19:e5:6c:38:65:4e:47:a5:34:d6:0f:17:1e: 18:74:86:f7:d8:f2:2c:cd:db:00:05:b4:71:fa:80: 57:9f:ee:46:6d:04:b6:f3:b9:4a:3e:bc:80:8f:d6: 7f:7a:d7:84:e8:c8:6c:b7:d8:78:89:5e:69:d6:42: d4:18:0c:8d:de:6e:06:9a:8e:d0:91:f1:cd:f1:36: bc:34:50:f9:2c:68:2b:6e:c1:97:68:0b:cc:52:be: 4d:14:a7:c4:7d:50:54:d3:ff:9b:3d:fa:d2:db:be: 76:c0:4d:06:c7:db:ee:cf:f2:67:a1:ab:40:ed:d8: f0:2a:b6:27:29:35:5d:fa:bd:ae:5a:5d:5c:cc:8d: a9:81:13:05:a7:16:cf:bb:44:a7:78:ab:4f:43:d1: 4f:30:69:c6:c9:ab:3f:d6:26:d0:3c:c7:10:ff:28: 17:bb:8f:2e:40:38:52:7b:d5:d6:4a:f9:60:9f:9e: 8a:7b:25:9a:7e:2a:ef:2a:16:26:a1:ef:b6:78:36: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3C:E1:B3:3E:4F:17:F2:04:75:4B:B5:E5:E1:13:02:4E:3A:3A:E1 X509v3 Authority Key Identifier: keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:7b:c5:0a:d5:8a:1f:78:64:eb:5e:63:50:3b:29:d2:e1:6f: 0e:14:fb:34:f0:fd:b8:b5:ea:54:fa:10:58:73:c4:0b:e1:50: fd:3f:73:b2:00:40:3b:44:b5:6c:dc:66:23:37:f1:e8:71:5f: d7:f9:1a:c6:7e:5d:52:0f:53:43:f5:e4:b2:ba:53:80:d3:99: 72:c3:16:34:38:20:36:e8:53:bc:2d:86:1b:01:31:b2:00:a4: 14:48:8f:14:60:17:dd:cb:f6:75:f1:23:06:42:8e:f9:a5:19: 04:e7:97:d7:4b:b8:ce:9f:4a:85:88:3b:e7:67:ac:91:d7:f2: 5a:b3:9e:15:11:80:8a:35:73:ea:e1:74:ca:94:df:74:03:43: c8:df:ea:40:20:43:cb:c8:7a:24:bd:ab:39:28:46:f2:88:fd: 52:d3:60:66:8b:64:7d:41:bc:de:87:32:25:0d:40:6f:b9:22: 24:82:1f:0b:6f:73:a7:86:5f:d6:90:b9:46:d0:81:87:44:65: 6c:72:4f:bf:8c:7d:bc:d5:9b:e3:8c:85:24:f4:21:c0:23:c4: 7f:30:a0:05:f2:ee:c7:7f:9d:24:2e:1d:dd:45:cd:ba:a1:56: 5c:fa:3c:17:fe:df:b1:9a:f1:24:e6:03:71:fa:8d:bd:c4:68: bf:cb:2b:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL6bSiW7gGwo2g2O9O67yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYmU1MmJhZTRkNDhkZGRjOWNiZWMyMDc2YWJhOTFjOTUz YWUxMmUwHhcNMjUxMjE3MTIwMTE4WhcNMjUxMjE4MTIwMTE4WjAzMTEwLwYDVQQD EygyYTNjZTFiMzNlNGYxN2YyMDQ3NTRiYjVlNWUxMTMwMjRlM2EzYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTtpjwjGZ29ZiOOeCNx9G5u8Q9zF QQTt9FsjuOdgFoyfOl0j+LSUThB5wWrGpyG822E9+JliBi3Ju8Ho5BnlbDhlTkel NNYPFx4YdIb32PIszdsABbRx+oBXn+5GbQS287lKPryAj9Z/eteE6Mhst9h4iV5p 1kLUGAyN3m4Gmo7QkfHN8Ta8NFD5LGgrbsGXaAvMUr5NFKfEfVBU0/+bPfrS2752 wE0Gx9vuz/JnoatA7djwKrYnKTVd+r2uWl1czI2pgRMFpxbPu0SneKtPQ9FPMGnG yas/1ibQPMcQ/ygXu48uQDhSe9XWSvlgn56KeyWafirvKhYmoe+2eDYqKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCo84bM+TxfyBHVLteXhEwJOOjrhMB8GA1UdIwQY MBaAFDC+Urrk1I3dycvsIHarqRyVOuEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgt ZDgwZjVlYTYyZDQ0LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgtZDgwZjVlYTYyZDQ0 LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHvFCtWK H3hk615jUDsp0uFvDhT7NPD9uLXqVPoQWHPEC+FQ/T9zsgBAO0S1bNxmIzfx6HFf 1/kaxn5dUg9TQ/XksrpTgNOZcsMWNDggNuhTvC2GGwExsgCkFEiPFGAX3cv2dfEj BkKO+aUZBOeX10u4zp9KhYg752eskdfyWrOeFRGAijVz6uF0ypTfdANDyN/qQCBD y8h6JL2rOShG8oj9UtNgZotkfUG83ocyJQ1Ab7kiJIIfC29zp4Zf1pC5RtCBh0Rl bHJPv4x9vNWb44yFJPQhwCPEfzCgBfLux3+dJC4d3UXNuqFWXPo8F/7fsZrxJOYD cfqNvcRov8srhA== -----END CERTIFICATE-----Generated at Wed Dec 17 21:06:59 2025 by rpki-client