This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json) Hash identifier: uX5hB0G3AjIFS19zUh+Ynt+RPDZ8iu5rUsaTbjpabwY= Subject key identifier: E2:1D:2F:3D:4A:BF:32:9B:7D:D8:4F:A4:57:26:9B:22:D3:0E:77:49 Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76 Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76 Certificate serial: 019AF49BDF3CD9005C6185F79305E90298B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 17:00:47 +0000 Manifest this update: Sat 06 Dec 2025 17:00:47 +0000 Manifest next update: Sun 07 Dec 2025 17:00:47 +0000 Files and hashes: 1: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: j7shG3AcG963U+cJxXQ5ERdkDWs9F9If0x/+gGJZUV4=) 2: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (hash: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:df:3c:d9:00:5c:61:85:f7:93:05:e9:02:98:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76 Validity Not Before: Dec 6 17:00:47 2025 GMT Not After : Dec 7 17:00:47 2025 GMT Subject: CN=e21d2f3d4abf329b7dd84fa457269b22d30e7749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:2b:24:e9:8d:b6:4e:1d:de:65:fb:af:49: 86:2f:89:2b:a9:c6:07:54:ed:9f:f5:53:fd:d3:7d: 00:a1:46:87:bc:60:b8:70:b5:6d:2a:ec:29:6a:1d: 2a:8f:ce:c7:89:2f:83:98:95:44:c9:40:64:5f:14: cf:78:dd:27:e1:60:df:57:0a:23:54:bc:30:35:f2: 2e:e8:ec:03:bf:04:3a:6c:55:f2:c6:0a:52:21:21: 5a:98:6f:18:b1:ea:98:00:5b:43:f7:4c:d0:f9:0d: d9:37:ed:c2:b6:0e:60:ee:52:2a:af:df:e9:0c:55: 0b:5e:cb:fb:e1:0c:ab:33:71:97:b8:62:52:92:47: 72:e2:51:32:81:a8:7f:4b:31:30:21:4f:27:bf:32: 9b:f9:96:64:5d:85:fb:21:68:b6:fa:55:cf:38:f4: 1b:90:a7:98:d1:8d:af:eb:96:6e:3b:1d:ad:32:72: 99:ec:a1:40:18:84:c6:6c:a1:f7:78:4f:8f:7d:c9: 24:f4:c5:9b:ce:a9:10:14:ca:89:66:8b:69:cd:c1: 07:3d:f1:5f:32:14:46:d3:e5:04:b5:bf:21:6e:3f: 86:15:6c:35:89:57:6c:77:89:1f:8e:5f:e7:bf:dd: 13:3a:2b:8e:9c:42:ef:37:57:81:ce:35:a5:b9:a1: b0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1D:2F:3D:4A:BF:32:9B:7D:D8:4F:A4:57:26:9B:22:D3:0E:77:49 X509v3 Authority Key Identifier: keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:dc:10:a6:bf:27:64:58:2e:5a:95:5f:d1:c1:08:1f:ed:35: d8:5a:5f:60:33:39:ab:7c:1d:d7:09:7b:42:a3:6e:59:89:01: 5b:b5:aa:87:d2:77:0d:96:e4:6c:47:ee:f3:66:69:d8:68:39: 63:87:20:bd:4b:6f:42:54:93:2e:df:5a:cb:ab:bf:d1:9a:91: 1b:66:18:fe:4d:b0:96:3e:0a:b4:b5:be:37:8d:6a:e5:1e:0e: 6a:cd:2a:60:25:68:b4:26:fd:14:8c:47:a6:98:f2:df:ab:44: 84:f7:1c:7b:25:75:c4:9e:91:68:a7:b7:65:73:71:bd:5d:ec: 7d:3f:2f:dc:e8:00:09:db:0d:71:84:e5:d2:6c:2a:68:72:27: 88:0e:ac:15:23:ce:ed:04:a7:12:16:5b:f8:64:2a:f4:d2:dd: a4:b4:55:c6:3a:41:62:b0:fe:77:bb:2a:9f:7d:ed:e9:73:02: a0:3e:10:c2:4b:63:38:81:bd:3e:da:78:b8:42:9e:96:43:16: e8:22:ae:fe:db:73:cc:69:82:e5:d5:9e:2b:71:90:0f:36:6e: 40:c0:72:88:69:5b:3e:db:7b:a5:b8:e3:89:81:a2:0a:4c:90: a9:e7:3e:4b:d0:17:c6:87:5a:f2:96:26:5e:4c:bf:43:ce:6a: 6d:e3:58:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9882QBcYYX3kwXpApiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTM2MjU0YjNlNzQ5MDA2NzViYzZlYmQ1MGFlODI1ODI4 YjlhNzYwHhcNMjUxMjA2MTcwMDQ3WhcNMjUxMjA3MTcwMDQ3WjAzMTEwLwYDVQQD EyhlMjFkMmYzZDRhYmYzMjliN2RkODRmYTQ1NzI2OWIyMmQzMGU3NzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOsrJOmNtk4d3mX7r0mGL4krqcYH VO2f9VP9030AoUaHvGC4cLVtKuwpah0qj87HiS+DmJVEyUBkXxTPeN0n4WDfVwoj VLwwNfIu6OwDvwQ6bFXyxgpSISFamG8YseqYAFtD90zQ+Q3ZN+3Ctg5g7lIqr9/p DFULXsv74QyrM3GXuGJSkkdy4lEygah/SzEwIU8nvzKb+ZZkXYX7IWi2+lXPOPQb kKeY0Y2v65ZuOx2tMnKZ7KFAGITGbKH3eE+Pfckk9MWbzqkQFMqJZotpzcEHPfFf MhRG0+UEtb8hbj+GFWw1iVdsd4kfjl/nv90TOiuOnELvN1eBzjWluaGwRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIdLz1KvzKbfdhPpFcmmyLTDndJMB8GA1UdIwQY MBaAFDJTYlSz50kAZ1vG69UK6CWCi5p2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUt YTU3ZDQ4ODc0NGMyLzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUtYTU3ZDQ4ODc0NGMy LzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9wQpr8n ZFguWpVf0cEIH+012FpfYDM5q3wd1wl7QqNuWYkBW7Wqh9J3DZbkbEfu82Zp2Gg5 Y4cgvUtvQlSTLt9ay6u/0ZqRG2YY/k2wlj4KtLW+N41q5R4Oas0qYCVotCb9FIxH ppjy36tEhPcceyV1xJ6RaKe3ZXNxvV3sfT8v3OgACdsNcYTl0mwqaHIniA6sFSPO 7QSnEhZb+GQq9NLdpLRVxjpBYrD+d7sqn33t6XMCoD4QwktjOIG9Ptp4uEKelkMW 6CKu/ttzzGmC5dWeK3GQDzZuQMByiGlbPtt7pbjjiYGiCkyQqec+S9AXxoda8pYm Xky/Q85qbeNYmA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:48 2025 by rpki-client