This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft File: ML5SuuTUjd3Jy-wgdqupHJU64S4.mft (raw, json) Hash identifier: jgY+1lwSEbhqR1MjcBr1ztp14Y+vvhe2BdC+CZKgq3U= Subject key identifier: C8:8D:10:4B:3E:F3:05:D6:47:1F:2E:81:0B:76:0D:29:CC:D1:16:6A Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E Certificate issuer: /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e Certificate serial: 019AF23F87B8FA1379788102467697751959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft Manifest number: 13F4 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: ML5SuuTUjd3Jy-wgdqupHJU64S4.crl (hash: xmUphcty3+Z7qjgwDAkmD5j/1FCaL3OHfeFEdP+izzc=) 2: VdtZIDR20QBsvLwRhmbNZAq9N1s.roa (hash: ne8PPRk8FY3v9PoVn0H4s7uRgTuomQzFJy3jouG0CbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:87:b8:fa:13:79:78:81:02:46:76:97:75:19:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=c88d104b3ef305d6471f2e810b760d29ccd1166a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:6f:d4:7a:b8:b6:59:65:66:1e:1c:40:9f: 6e:68:1d:b1:db:63:c8:a4:77:11:12:95:7e:72:0b: af:78:88:b7:c6:7a:8f:72:68:5f:95:ff:22:73:40: 49:14:7f:2b:23:70:23:a3:3d:be:0c:c6:55:27:cb: 6a:d7:9e:9e:d9:88:e4:51:1b:c9:9b:95:9c:42:01: 63:b8:32:dc:c2:e4:ad:c8:1a:6e:12:df:b8:d3:f5: 98:ac:e4:2b:69:6b:c3:4f:78:bb:80:d2:b1:2c:5d: 5e:99:d4:d7:54:39:b3:06:bc:ef:c5:63:b1:17:e1: 51:25:33:b9:a0:79:04:32:92:de:ba:e2:36:18:9a: af:2d:c1:88:6b:f2:72:54:39:48:1c:92:dc:95:66: 96:55:98:bb:ef:b9:f1:64:5c:53:11:99:12:c1:0c: f9:54:74:16:93:97:aa:4b:72:88:86:01:b9:1d:41: 6d:7c:be:4e:03:01:32:01:a4:ab:75:40:47:28:76: 9e:83:55:14:cb:c9:e8:0a:d8:7c:b8:7f:c2:84:9d: 69:d5:9e:ea:3b:67:f1:b1:71:6d:ed:e3:67:7f:cb: c0:5c:d5:42:d3:33:34:df:b4:23:67:4a:7a:c9:b1: 12:19:28:06:be:7f:2a:aa:03:bf:ac:ef:70:e8:e5: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8D:10:4B:3E:F3:05:D6:47:1F:2E:81:0B:76:0D:29:CC:D1:16:6A X509v3 Authority Key Identifier: keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:34:8e:e8:05:25:70:80:28:a1:ce:bf:a3:35:28:58:98:e1: bf:9f:75:f3:7d:ef:81:48:f5:7e:6d:80:f6:fb:29:26:db:fd: 2d:5a:e3:eb:54:76:65:3f:45:d9:6b:60:ed:83:35:20:e4:98: 89:f7:2e:5a:40:ae:85:b1:da:df:47:1e:af:fd:49:40:a0:81: f5:01:57:5b:23:6a:dc:34:c6:13:b3:3a:7b:dc:a5:37:dc:a7: 21:6b:eb:83:1e:66:35:45:67:00:b5:05:22:d9:2b:df:0d:18: 53:da:7e:4b:b0:96:e4:1a:61:5c:6a:19:c8:a2:27:48:bf:87: 5c:7b:c1:5e:cb:0e:85:0f:82:7d:6d:62:84:9a:aa:7c:2d:05: 94:8a:7b:29:0c:58:13:0d:ac:03:96:7d:18:53:f6:1d:8a:36: 9f:2c:b9:18:06:30:e5:cb:88:a4:66:66:77:45:d7:16:a4:a5: 3c:3a:60:84:b9:e7:ec:84:cd:c8:84:41:13:0b:4f:7b:dd:ab: 23:9f:6c:0c:a8:64:59:92:0a:57:1d:c1:42:54:fe:b8:94:23: 4b:3d:74:61:64:e7:6b:5d:10:f2:b1:b5:df:91:00:57:02:bf: ae:8f:c6:0d:46:45:76:5f:4e:63:81:7d:9b:07:d5:18:25:bf: 99:47:b7:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4e4+hN5eIECRnaXdRlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYmU1MmJhZTRkNDhkZGRjOWNiZWMyMDc2YWJhOTFjOTUz YWUxMmUwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD EyhjODhkMTA0YjNlZjMwNWQ2NDcxZjJlODEwYjc2MGQyOWNjZDExNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4Fv1Hq4tlllZh4cQJ9uaB2x22PI pHcREpV+cguveIi3xnqPcmhflf8ic0BJFH8rI3Ajoz2+DMZVJ8tq156e2YjkURvJ m5WcQgFjuDLcwuStyBpuEt+40/WYrOQraWvDT3i7gNKxLF1emdTXVDmzBrzvxWOx F+FRJTO5oHkEMpLeuuI2GJqvLcGIa/JyVDlIHJLclWaWVZi777nxZFxTEZkSwQz5 VHQWk5eqS3KIhgG5HUFtfL5OAwEyAaSrdUBHKHaeg1UUy8noCth8uH/ChJ1p1Z7q O2fxsXFt7eNnf8vAXNVC0zM037QjZ0p6ybESGSgGvn8qqgO/rO9w6OUK/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiNEEs+8wXWRx8ugQt2DSnM0RZqMB8GA1UdIwQY MBaAFDC+Urrk1I3dycvsIHarqRyVOuEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgt ZDgwZjVlYTYyZDQ0LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgtZDgwZjVlYTYyZDQ0 LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzSO6AUl cIAooc6/ozUoWJjhv591833vgUj1fm2A9vspJtv9LVrj61R2ZT9F2Wtg7YM1IOSY ifcuWkCuhbHa30cer/1JQKCB9QFXWyNq3DTGE7M6e9ylN9ynIWvrgx5mNUVnALUF Itkr3w0YU9p+S7CW5BphXGoZyKInSL+HXHvBXssOhQ+CfW1ihJqqfC0FlIp7KQxY Ew2sA5Z9GFP2HYo2nyy5GAYw5cuIpGZmd0XXFqSlPDpghLnn7ITNyIRBEwtPe92r I59sDKhkWZIKVx3BQlT+uJQjSz10YWTna10Q8rG135EAVwK/ro/GDUZFdl9OY4F9 mwfVGCW/mUe36Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:54 2025 by rpki-client