This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft File: MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json) Hash identifier: NC5Sc9rp06XrcVL4UHyylywS+j+/jSvySHVbE573vJM= Subject key identifier: 3B:5C:7F:E5:C6:AA:99:32:2B:68:07:6F:4F:F9:A6:C9:83:4E:2F:D2 Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0 Certificate issuer: /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0 Certificate serial: 019B25F62AC8AAEA32B1758797D46EA66DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft Manifest number: 0659 Signing time: Tue 16 Dec 2025 07:00:48 +0000 Manifest this update: Tue 16 Dec 2025 07:00:48 +0000 Manifest next update: Wed 17 Dec 2025 07:00:48 +0000 Files and hashes: 1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: h3aS9zWUB0TbfZAANkCbCSR58NQYIi5JOfXUADrE9To=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:2a:c8:aa:ea:32:b1:75:87:97:d4:6e:a6:6d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0 Validity Not Before: Dec 16 07:00:48 2025 GMT Not After : Dec 17 07:00:48 2025 GMT Subject: CN=3b5c7fe5c6aa99322b68076f4ff9a6c9834e2fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:08:94:94:4a:93:e7:ac:00:8f:3b:91:83: ed:6d:8a:c4:28:67:25:bb:34:be:01:7e:83:88:c3: c1:02:34:4a:79:19:70:d8:b9:22:06:be:52:16:b8: b5:d7:d1:7b:98:f8:c6:11:37:0f:7a:b4:f0:5c:ec: 84:13:d5:95:3e:32:a9:8f:e7:5b:de:2b:e0:90:e3: d8:05:e7:9f:5d:e6:9a:5b:fb:d4:66:1c:96:53:39: f5:df:5f:3d:ff:0b:60:7b:35:08:d6:9c:4f:79:b5: d7:34:73:82:aa:92:87:f0:79:ef:48:d7:50:8d:6c: 88:d3:88:ac:ae:d4:6c:d0:65:26:e3:1a:6c:72:d3: 10:5f:4b:5d:d7:17:1f:d5:3e:83:b6:44:25:c5:bd: 86:0f:19:c5:bd:2b:c5:0c:80:37:35:83:01:9a:8f: c5:22:13:aa:83:77:32:97:e3:24:7a:d7:1e:e0:a8: 29:81:5e:36:98:ab:7d:9c:43:eb:08:b0:fd:7b:bf: 2a:eb:78:ef:0c:ba:5b:eb:93:30:77:37:21:56:ba: f6:fe:41:ad:d0:01:c5:d4:34:31:45:c0:40:48:09: ff:0c:e0:a3:cf:ed:4b:13:62:01:99:2f:0c:ee:5e: 72:4d:80:91:c3:bc:90:cc:72:a2:fb:0c:58:c6:75: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5C:7F:E5:C6:AA:99:32:2B:68:07:6F:4F:F9:A6:C9:83:4E:2F:D2 X509v3 Authority Key Identifier: keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8f:a1:0f:8a:ed:af:b3:fe:43:d1:43:d9:ab:0e:8f:45:9e: ed:c1:5d:16:b9:ff:57:13:66:94:ab:79:d8:c1:1d:50:9e:a7: 74:3d:fe:98:f1:5a:e6:d8:d6:3b:5d:2f:ff:fc:2f:81:cd:44: 1b:f4:01:20:ff:37:d6:a9:d8:d9:b3:32:b5:46:50:33:0c:64: 60:f0:87:c3:10:e5:90:f4:bd:c3:9c:f6:b3:f3:ea:be:2a:bc: fe:51:2e:d4:2c:f7:10:8e:20:09:07:0a:9e:f9:52:de:30:9c: a2:89:35:5e:f9:75:c6:6c:27:0e:b8:f4:31:ee:13:04:d3:4c: 3c:4d:29:0f:be:22:a5:e7:c9:75:c8:d8:a4:4c:52:6a:7e:23: 3a:2f:6e:71:58:90:08:b9:93:14:82:cb:33:d1:e1:f1:31:06: 4a:cf:8d:0d:ec:8d:1f:d5:bd:57:ca:06:e8:f0:d0:9c:69:58: 65:97:85:ec:db:81:c5:d6:23:45:b8:ef:97:e2:63:7b:38:06: b8:b5:44:53:82:84:df:fd:16:78:4f:e3:c6:52:38:9f:d0:35: 04:d6:8c:4e:1d:3b:ec:13:5a:1a:25:a5:1a:27:c4:e0:64:74: 24:6a:0c:5f:d2:eb:a4:30:a5:58:6c:7b:e9:c1:ea:30:6f:c1: 46:9f:e8:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9irIquoysXWHl9Rupm3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYjdhOTUzMjgwYjZmOTk4ZmMxMWM0N2NiZTkxYjgyNjMz NjRlYjAwHhcNMjUxMjE2MDcwMDQ4WhcNMjUxMjE3MDcwMDQ4WjAzMTEwLwYDVQQD EygzYjVjN2ZlNWM2YWE5OTMyMmI2ODA3NmY0ZmY5YTZjOTgzNGUyZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTEIlJRKk+esAI87kYPtbYrEKGcl uzS+AX6DiMPBAjRKeRlw2LkiBr5SFri119F7mPjGETcPerTwXOyEE9WVPjKpj+db 3ivgkOPYBeefXeaaW/vUZhyWUzn13189/wtgezUI1pxPebXXNHOCqpKH8HnvSNdQ jWyI04isrtRs0GUm4xpsctMQX0td1xcf1T6DtkQlxb2GDxnFvSvFDIA3NYMBmo/F IhOqg3cyl+Mketce4KgpgV42mKt9nEPrCLD9e78q63jvDLpb65MwdzchVrr2/kGt 0AHF1DQxRcBASAn/DOCjz+1LE2IBmS8M7l5yTYCRw7yQzHKi+wxYxnXA/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtcf+XGqpkyK2gHb0/5psmDTi/SMB8GA1UdIwQY MBaAFDC3qVMoC2+Zj8EcR8vpG4JjNk6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgt OWM3MTY5YjdhMmU0LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgtOWM3MTY5YjdhMmU0 LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeo+hD4rt r7P+Q9FD2asOj0We7cFdFrn/VxNmlKt52MEdUJ6ndD3+mPFa5tjWO10v//wvgc1E G/QBIP831qnY2bMytUZQMwxkYPCHwxDlkPS9w5z2s/Pqviq8/lEu1Cz3EI4gCQcK nvlS3jCcook1Xvl1xmwnDrj0Me4TBNNMPE0pD74ipefJdcjYpExSan4jOi9ucViQ CLmTFILLM9Hh8TEGSs+NDeyNH9W9V8oG6PDQnGlYZZeF7NuBxdYjRbjvl+JjezgG uLVEU4KE3/0WeE/jxlI4n9A1BNaMTh077BNaGiWlGifE4GR0JGoMX9LrpDClWGx7 6cHqMG/BRp/o9g== -----END CERTIFICATE-----Generated at Tue Dec 16 10:50:37 2025 by rpki-client