This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft File: MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json) Hash identifier: D60d+ZtsnuKONJZafQbYA44Ep/ka8ZGtTSENBLaR5j0= Subject key identifier: 9C:4A:D0:4B:56:AE:3B:D2:23:58:D5:FE:EC:59:33:35:4F:5A:6B:79 Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0 Certificate issuer: /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0 Certificate serial: 019AF1D1E1C8B6310F5548F982688B92E5C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft Manifest number: 063E Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: NdfGcxfildG679vgHl7rrGeWbBuxdn/EyxFejsCSjL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e1:c8:b6:31:0f:55:48:f9:82:68:8b:92:e5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0 Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=9c4ad04b56ae3bd22358d5feec5933354f5a6b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:45:05:04:00:73:4a:1b:33:bc:ce:74:2f:ee: ce:c7:24:fd:0b:cc:8d:57:6c:14:46:8e:62:75:f3: 06:ed:c1:90:a2:bd:65:21:28:e9:03:0f:52:59:03: 53:ed:33:f4:5f:95:01:53:e2:27:44:74:d8:bb:ac: 62:6d:2e:28:b6:ce:6a:d8:cd:ea:1e:64:f4:c6:21: 08:d2:9f:91:30:57:0b:1c:37:83:48:ab:01:39:94: 94:a8:b0:d4:ff:96:bf:69:91:a2:95:30:19:36:fc: 8c:49:6b:8d:26:52:9e:88:0a:00:64:32:d4:d9:55: a0:17:10:ba:5e:ef:40:b9:2c:2c:54:1b:ed:ec:cf: 45:d3:67:52:9b:89:27:98:97:1a:64:ec:aa:53:e3: da:57:96:49:4d:41:77:4d:40:d4:13:8c:f8:ac:07: 8a:f9:46:91:17:ac:8a:b5:57:1e:8c:e7:aa:67:1e: dd:be:66:b2:6b:ea:86:1d:43:70:d7:25:6f:fc:43: a9:43:32:29:5c:08:85:0b:9d:d0:dc:4e:e9:67:bb: b0:1f:f5:7d:b4:ff:6b:2f:8c:f9:b7:99:39:b1:2c: 8b:84:58:c5:13:20:cc:42:ca:bb:1e:67:a8:27:53: 6e:b4:d4:04:1b:ec:04:97:ba:d0:e4:53:b4:7d:6c: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4A:D0:4B:56:AE:3B:D2:23:58:D5:FE:EC:59:33:35:4F:5A:6B:79 X509v3 Authority Key Identifier: keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:60:49:c1:91:8b:a6:67:38:1f:d9:31:1c:31:5d:59:f9:b6: fa:01:07:20:24:1a:4c:de:9d:5b:26:fa:88:f2:40:66:e9:ff: 01:1c:5e:51:bc:7a:88:f8:1b:78:2b:d8:20:f9:17:09:f5:17: 3c:ee:f4:ca:75:8a:5c:df:ad:4e:d1:a7:cf:00:4a:4c:e8:d5: b9:23:4e:71:de:1c:40:22:1c:a9:c6:17:23:2d:55:8e:fb:c1: 24:63:48:53:25:68:c8:47:36:31:c5:58:4f:93:74:56:a1:21: 0b:be:63:74:16:19:80:c4:ba:ee:f9:bc:0f:2d:79:72:b8:eb: 5f:a5:7a:61:27:07:24:6a:13:be:8f:71:53:10:f5:11:01:72: bb:74:b6:9d:42:27:52:01:dc:18:94:f5:10:3f:f8:07:04:6f: fd:a7:b5:70:96:a9:c0:b5:83:c1:8d:5a:a5:76:0b:8c:30:05: 2a:02:88:80:d7:44:8c:96:23:d3:fc:a0:6c:02:f8:a1:f0:aa: 3a:11:1a:b7:2c:22:7b:66:e3:c4:9e:c3:0b:7b:d4:21:e9:66: c3:7d:23:94:89:19:0f:d9:5f:5c:58:08:5c:90:54:db:e1:59: 93:7a:da:27:7f:0f:38:f9:df:62:4e:66:11:76:5a:51:f1:8e: 7e:01:01:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eHItjEPVUj5gmiLkuXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYjdhOTUzMjgwYjZmOTk4ZmMxMWM0N2NiZTkxYjgyNjMz NjRlYjAwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD Eyg5YzRhZDA0YjU2YWUzYmQyMjM1OGQ1ZmVlYzU5MzMzNTRmNWE2Yjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0UFBABzShszvM50L+7OxyT9C8yN V2wURo5idfMG7cGQor1lISjpAw9SWQNT7TP0X5UBU+InRHTYu6xibS4ots5q2M3q HmT0xiEI0p+RMFcLHDeDSKsBOZSUqLDU/5a/aZGilTAZNvyMSWuNJlKeiAoAZDLU 2VWgFxC6Xu9AuSwsVBvt7M9F02dSm4knmJcaZOyqU+PaV5ZJTUF3TUDUE4z4rAeK +UaRF6yKtVcejOeqZx7dvmaya+qGHUNw1yVv/EOpQzIpXAiFC53Q3E7pZ7uwH/V9 tP9rL4z5t5k5sSyLhFjFEyDMQsq7HmeoJ1NutNQEG+wEl7rQ5FO0fWxpxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxK0EtWrjvSI1jV/uxZMzVPWmt5MB8GA1UdIwQY MBaAFDC3qVMoC2+Zj8EcR8vpG4JjNk6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgt OWM3MTY5YjdhMmU0LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgtOWM3MTY5YjdhMmU0 LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2BJwZGL pmc4H9kxHDFdWfm2+gEHICQaTN6dWyb6iPJAZun/ARxeUbx6iPgbeCvYIPkXCfUX PO70ynWKXN+tTtGnzwBKTOjVuSNOcd4cQCIcqcYXIy1VjvvBJGNIUyVoyEc2McVY T5N0VqEhC75jdBYZgMS67vm8Dy15crjrX6V6YScHJGoTvo9xUxD1EQFyu3S2nUIn UgHcGJT1ED/4BwRv/ae1cJapwLWDwY1apXYLjDAFKgKIgNdEjJYj0/ygbAL4ofCq OhEatywie2bjxJ7DC3vUIelmw30jlIkZD9lfXFgIXJBU2+FZk3raJ38POPnfYk5m EXZaUfGOfgEBRg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:23 2025 by rpki-client