This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json) Hash identifier: bopdQ3MBIt853J7oCHqZ2t2+ml4/PstdTUDOrp+pgwQ= Subject key identifier: 82:8F:ED:7B:42:77:94:0A:67:39:38:D3:4D:BF:5D:84:60:3C:FB:DE Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47 Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47 Certificate serial: 019B2B53A68CA355919F85D219B45CA7204F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft Manifest number: 0EA8 Signing time: Wed 17 Dec 2025 08:01:00 +0000 Manifest this update: Wed 17 Dec 2025 08:01:00 +0000 Manifest next update: Thu 18 Dec 2025 08:01:00 +0000 Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=) 2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=) 3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: 2Q76nouhvOX0MOv0I73qEOA0F4F8e1pFTwIkPKaHSWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:a6:8c:a3:55:91:9f:85:d2:19:b4:5c:a7:20:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47 Validity Not Before: Dec 17 08:01:00 2025 GMT Not After : Dec 18 08:01:00 2025 GMT Subject: CN=828fed7b4277940a673938d34dbf5d84603cfbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:4d:fe:3b:b5:7e:6d:12:57:89:78:44:fc: 66:57:6b:52:21:b4:f4:f0:4d:6d:6c:6e:e0:6e:26: a5:96:34:8e:a2:f5:67:93:56:40:89:93:ac:68:96: 0d:a3:cd:75:16:9a:be:73:0a:31:c4:f6:89:1c:3e: 2f:47:5e:ff:b9:83:a9:e5:70:21:77:c7:f1:c5:64: f5:1b:11:0c:ec:ba:c6:08:b0:cf:a3:71:62:dd:61: db:a9:d5:77:fa:d1:00:d0:9c:1f:90:6b:4e:cd:e4: 0b:cb:53:c0:dd:ab:15:05:c2:77:10:d3:a7:27:d1: c8:0d:52:de:41:0c:79:60:83:b6:7e:1a:77:fe:71: d1:0d:e5:89:01:3c:05:77:e7:d2:f8:6b:0c:f5:06: 4f:06:9f:ae:cd:66:5d:9f:5b:12:d3:63:3d:4f:2a: 4b:3f:bb:76:e4:68:d1:55:b7:d9:18:7b:87:de:3e: 9f:07:c3:7c:9f:f1:cd:0e:3d:bb:f0:79:ce:e8:f3: 39:44:85:16:fb:03:ed:40:c7:77:a9:45:de:9c:50: 2d:95:b7:15:c7:ed:0d:12:ae:37:3b:dc:14:27:d0: 53:16:1a:85:d2:a6:ea:56:3e:e2:bc:d2:42:b6:ab: da:68:b9:91:57:5e:16:41:15:52:70:5c:44:05:52: 13:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8F:ED:7B:42:77:94:0A:67:39:38:D3:4D:BF:5D:84:60:3C:FB:DE X509v3 Authority Key Identifier: keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:37:97:83:af:88:5b:a2:15:2a:f4:9d:bf:c1:01:50:17:7b: 89:a8:ed:e5:c5:21:a6:f9:26:69:5d:b0:47:e8:7f:48:00:b8: 01:af:4f:9a:aa:e4:f0:bd:77:37:cc:f6:8c:6c:2f:26:2b:66: 6a:6b:96:30:e7:b4:4a:7a:03:99:b2:e8:46:52:3b:82:d5:2a: 70:e4:44:e3:dd:a3:05:43:2a:a7:88:e2:95:96:46:1d:39:dd: 1f:99:f4:e4:fe:6a:56:ed:bd:7a:ea:ce:bc:27:ab:76:fd:47: f1:f9:8d:9b:3e:d6:a5:14:ee:8d:a9:0a:cc:8a:dc:0d:38:92: 5d:06:d2:e4:ef:fd:b2:6a:ec:c5:7c:4f:68:6e:a6:29:35:8c: b3:4f:f3:ff:46:37:77:79:a9:af:ba:27:45:91:e7:d0:ad:e4: f5:d6:f5:11:5a:51:66:77:4d:69:e2:40:8d:58:e2:ef:05:fd: 3a:dc:d4:35:b9:5a:79:75:06:25:f1:5c:2f:5e:89:46:db:91: d6:1f:45:04:fd:0a:7a:68:ff:dd:93:ca:5f:46:de:dd:dd:62: 8b:0f:71:c6:cc:de:b9:59:f3:01:d4:9d:5f:de:6c:54:9d:cc: 85:a6:79:d4:07:a5:ab:8e:db:a9:fa:c0:63:92:fc:c3:7c:66: fa:a3:be:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU6aMo1WRn4XSGbRcpyBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj NjZlNDcwHhcNMjUxMjE3MDgwMTAwWhcNMjUxMjE4MDgwMTAwWjAzMTEwLwYDVQQD Eyg4MjhmZWQ3YjQyNzc5NDBhNjczOTM4ZDM0ZGJmNWQ4NDYwM2NmYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7FN/ju1fm0SV4l4RPxmV2tSIbT0 8E1tbG7gbialljSOovVnk1ZAiZOsaJYNo811Fpq+cwoxxPaJHD4vR17/uYOp5XAh d8fxxWT1GxEM7LrGCLDPo3Fi3WHbqdV3+tEA0JwfkGtOzeQLy1PA3asVBcJ3ENOn J9HIDVLeQQx5YIO2fhp3/nHRDeWJATwFd+fS+GsM9QZPBp+uzWZdn1sS02M9TypL P7t25GjRVbfZGHuH3j6fB8N8n/HNDj278HnO6PM5RIUW+wPtQMd3qUXenFAtlbcV x+0NEq43O9wUJ9BTFhqF0qbqVj7ivNJCtqvaaLmRV14WQRVScFxEBVITAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKP7XtCd5QKZzk4002/XYRgPPveMB8GA1UdIwQY MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDeXg6+I W6IVKvSdv8EBUBd7iajt5cUhpvkmaV2wR+h/SAC4Aa9Pmqrk8L13N8z2jGwvJitm amuWMOe0SnoDmbLoRlI7gtUqcORE492jBUMqp4jilZZGHTndH5n05P5qVu29eurO vCerdv1H8fmNmz7WpRTujakKzIrcDTiSXQbS5O/9smrsxXxPaG6mKTWMs0/z/0Y3 d3mpr7onRZHn0K3k9db1EVpRZndNaeJAjVji7wX9OtzUNblaeXUGJfFcL16JRtuR 1h9FBP0Kemj/3ZPKX0be3d1iiw9xxszeuVnzAdSdX95sVJ3MhaZ51Aelq47bqfrA Y5L8w3xm+qO+gQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:31:53 2025 by rpki-client