This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json) Hash identifier: ILLdlKCNk9fR8wFaRIBcx7v/pAjwy9J4BgwNR3cMTWc= Subject key identifier: EC:73:0D:FD:CE:FE:74:4C:E9:2F:86:04:B3:01:71:F8:1C:E4:E8:58 Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47 Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47 Certificate serial: 019AF3521BBCF145C23E8BF7EB1301CD4824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft Manifest number: 0E8B Signing time: Sat 06 Dec 2025 11:00:35 +0000 Manifest this update: Sat 06 Dec 2025 11:00:35 +0000 Manifest next update: Sun 07 Dec 2025 11:00:35 +0000 Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=) 2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=) 3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: RDu9Ah+xK61Ww+jupy/naIbpL8t5AnrGcDRP+GR+GTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:1b:bc:f1:45:c2:3e:8b:f7:eb:13:01:cd:48:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47 Validity Not Before: Dec 6 11:00:35 2025 GMT Not After : Dec 7 11:00:35 2025 GMT Subject: CN=ec730dfdcefe744ce92f8604b30171f81ce4e858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:6c:5b:46:ff:3e:69:3d:51:92:4c:e3:32: 6c:e6:a3:86:87:53:c7:f7:1b:bd:3f:b3:03:7c:8f: 13:15:84:65:ce:3f:87:d2:ae:22:f5:68:f0:f1:1e: 23:b5:79:3c:8f:09:09:c2:0e:5e:a4:3b:4f:d2:83: a7:54:13:d9:12:6d:ee:b3:a4:c0:43:48:84:f2:6f: 9b:6d:0d:c2:92:88:2e:b4:78:56:2e:37:fb:cf:e3: 25:5f:f5:92:79:11:30:03:1d:76:54:11:14:22:cd: 81:6d:8b:a2:cc:28:42:85:32:b8:08:17:0e:92:9b: 86:69:f3:1d:67:39:be:57:8b:ae:0c:e8:22:e3:99: 92:a6:ae:c9:d5:dd:20:89:b0:f6:71:04:43:e7:90: 04:88:3c:dc:90:14:9a:1b:76:58:08:0e:b5:94:fa: e4:c1:cc:76:7b:72:87:e0:6b:c5:8d:62:1c:b4:66: 0f:b3:70:69:0b:f9:b7:eb:79:e2:49:17:f9:90:d4: 42:29:e2:64:78:5f:c1:f4:9f:15:0c:34:a7:42:b6: f8:b8:87:3c:fc:ad:7a:07:05:6b:bd:9c:61:78:b6: da:85:2a:52:e8:bc:d9:08:b4:77:b4:80:4c:4b:06: c5:c1:9a:a5:e6:68:c4:b1:d6:0a:9e:cb:6f:9e:0a: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:73:0D:FD:CE:FE:74:4C:E9:2F:86:04:B3:01:71:F8:1C:E4:E8:58 X509v3 Authority Key Identifier: keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:57:90:82:b6:60:99:1b:33:6c:e0:d7:7e:51:2e:b5:24:e8: 08:28:1f:1e:ea:d0:88:b8:af:d4:cd:1a:8e:f5:6f:13:2c:6e: 9a:bd:02:90:c2:78:cd:70:99:3e:2c:7e:47:16:ae:46:f6:88: e3:f8:83:59:02:2a:01:99:35:1e:b6:5d:9a:8e:9c:c0:53:2f: a2:03:cb:4a:2e:4a:28:3f:f7:43:01:6c:11:fd:e9:a1:e7:3f: 5c:90:c6:89:a1:2a:ae:5d:f2:92:82:59:e4:22:89:5b:3f:e7: 48:dc:ea:00:8e:32:46:dd:a4:5b:fb:4c:2a:07:c3:64:3c:f1: 6b:49:f0:7e:d0:f8:da:a6:f4:87:b5:34:5d:ce:df:22:20:3f: 9e:6b:38:9a:f2:e0:06:4a:c1:49:b3:52:03:57:5b:39:e1:9c: bf:a9:d4:24:59:cf:f4:f3:0a:02:bd:ce:f7:b4:cb:97:70:60: bc:b5:bf:17:37:24:89:63:ae:39:bc:b0:7a:e7:23:e7:78:63: ae:29:2d:64:4c:9e:1b:35:57:7d:36:3e:77:02:5c:d3:d8:ef: 17:09:1d:13:7c:77:be:ac:8f:f9:13:4f:d0:d2:09:d5:8e:3a: 98:57:64:b3:cf:ce:1f:7b:15:05:b7:93:db:92:ce:44:85:07: c0:0c:92:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhu88UXCPov36xMBzUgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj NjZlNDcwHhcNMjUxMjA2MTEwMDM1WhcNMjUxMjA3MTEwMDM1WjAzMTEwLwYDVQQD EyhlYzczMGRmZGNlZmU3NDRjZTkyZjg2MDRiMzAxNzFmODFjZTRlODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3NsW0b/Pmk9UZJM4zJs5qOGh1PH 9xu9P7MDfI8TFYRlzj+H0q4i9Wjw8R4jtXk8jwkJwg5epDtP0oOnVBPZEm3us6TA Q0iE8m+bbQ3CkogutHhWLjf7z+MlX/WSeREwAx12VBEUIs2BbYuizChChTK4CBcO kpuGafMdZzm+V4uuDOgi45mSpq7J1d0gibD2cQRD55AEiDzckBSaG3ZYCA61lPrk wcx2e3KH4GvFjWIctGYPs3BpC/m363niSRf5kNRCKeJkeF/B9J8VDDSnQrb4uIc8 /K16BwVrvZxheLbahSpS6LzZCLR3tIBMSwbFwZql5mjEsdYKnstvngpeLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxzDf3O/nRM6S+GBLMBcfgc5OhYMB8GA1UdIwQY MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyVeQgrZg mRszbODXflEutSToCCgfHurQiLiv1M0ajvVvEyxumr0CkMJ4zXCZPix+RxauRvaI 4/iDWQIqAZk1HrZdmo6cwFMvogPLSi5KKD/3QwFsEf3poec/XJDGiaEqrl3ykoJZ 5CKJWz/nSNzqAI4yRt2kW/tMKgfDZDzxa0nwftD42qb0h7U0Xc7fIiA/nms4mvLg BkrBSbNSA1dbOeGcv6nUJFnP9PMKAr3O97TLl3BgvLW/FzckiWOuObyweucj53hj riktZEyeGzVXfTY+dwJc09jvFwkdE3x3vqyP+RNP0NIJ1Y46mFdks8/OH3sVBbeT 25LORIUHwAySnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:54 2025 by rpki-client