This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json) Hash identifier: NBW4/lQ1HqqN5Mi1M95nRCjbmY3x3vx9cfwOeipYmOM= Subject key identifier: E7:2E:DE:2F:29:00:15:36:28:8A:73:05:F9:C2:1E:67:20:98:89:D9 Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad Certificate serial: 019AF12EBE975A605F0095447781A2FCE4F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft Manifest number: 1521 Signing time: Sat 06 Dec 2025 01:02:43 +0000 Manifest this update: Sat 06 Dec 2025 01:02:43 +0000 Manifest next update: Sun 07 Dec 2025 01:02:43 +0000 Files and hashes: 1: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: P532dqJIwoTTs1pc71BLCBxb0/FdZeWkOBA4JAB5dCU=) 2: wrVdtsFJg-xxcwL89uUP6qnVtLk.roa (hash: Y5fuW3nl7fba2JKNfboUC/pVBV59jurhYdqhnS+frGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:be:97:5a:60:5f:00:95:44:77:81:a2:fc:e4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad Validity Not Before: Dec 6 01:02:43 2025 GMT Not After : Dec 7 01:02:43 2025 GMT Subject: CN=e72ede2f29001536288a7305f9c21e67209889d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:78:f1:ba:88:e2:f2:09:28:ee:18:50:a2: 31:ef:60:64:09:d3:a2:bd:89:74:77:63:b8:ff:9c: 04:3b:d6:7e:2a:f9:16:cf:02:40:52:95:c6:0e:84: cc:8c:77:48:3e:28:e3:dc:c9:6f:b5:0e:3e:2e:80: d0:bb:44:8d:8b:fc:ba:ab:01:6d:8a:36:8d:ed:d0: 58:74:cf:ea:52:e6:91:b1:33:19:00:5c:e9:a5:c9: 75:46:bf:77:9d:c1:08:51:ca:1c:2d:2c:a7:f1:74: d9:86:5f:01:7d:7c:07:94:ab:8b:5f:9f:41:2e:62: 79:8d:a6:c3:b6:30:6f:01:7e:b9:12:7b:8b:5e:79: e1:4f:bb:48:8b:a5:3b:93:33:7f:98:43:ba:2a:1e: cd:ed:71:a1:03:e5:9b:86:fe:e4:d1:1d:be:f6:98: 59:1d:10:56:85:01:7e:7b:3e:b2:a9:14:aa:f7:8a: 71:de:e6:b7:d3:fc:c8:0d:a4:d1:4e:6e:12:e7:0c: 5a:61:c8:14:af:6d:cb:4b:3b:b1:0d:42:50:cb:d2: ee:bb:21:3f:13:c5:84:ac:5a:a5:57:6c:a4:e0:24: 98:eb:9a:06:86:88:e5:25:34:52:e7:92:30:6c:6f: 93:2c:38:49:17:b9:33:05:d0:10:b7:b5:7c:d0:0d: 15:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2E:DE:2F:29:00:15:36:28:8A:73:05:F9:C2:1E:67:20:98:89:D9 X509v3 Authority Key Identifier: keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:08:19:c1:cf:a7:c6:fd:ea:d0:e4:c5:e8:bb:40:47:08:9e: c6:cb:64:30:9d:b4:d8:eb:2e:c8:db:83:44:1a:fd:64:a5:e9: a6:c8:a2:c9:e2:5d:22:d7:88:95:24:a7:b7:37:d6:e4:9b:8e: 5a:23:39:69:9a:29:80:62:02:1d:65:b4:dd:52:11:18:fc:7b: 0d:4b:c7:1c:c8:54:42:ff:05:14:06:83:17:cf:d1:ff:58:a4: 65:49:25:e8:2e:fe:d7:5c:07:5d:db:95:57:a6:03:18:8c:4d: ae:63:15:29:8d:9b:bb:ea:5d:f7:ec:d1:3f:c6:5b:07:f9:13: 45:60:81:67:50:10:ad:60:20:34:ed:4c:90:fc:5f:c4:21:6c: bd:18:e0:33:ca:03:4c:4c:0f:d4:11:b2:12:59:cf:f4:9f:a4: 8d:4f:f5:a7:3a:00:14:8c:07:aa:eb:ff:87:67:34:ee:27:b9: 51:8d:98:be:87:2b:88:b1:af:0a:d4:f8:01:14:f4:96:23:2a: df:b5:0f:7e:a1:e6:65:66:6b:a5:0b:c7:31:76:91:f0:71:bd: c7:4e:b6:69:e5:7d:26:26:0e:0d:bd:cd:3b:a9:49:91:f7:4e: 83:bb:a6:e2:c2:13:76:7c:97:d6:e9:fc:b3:16:5a:59:00:d6: e1:4b:ff:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLr6XWmBfAJVEd4Gi/OT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTA4NTNhMjRhOGM3NjIyMzRlODkxM2E0YTViMjk4NWMz MzFkYWQwHhcNMjUxMjA2MDEwMjQzWhcNMjUxMjA3MDEwMjQzWjAzMTEwLwYDVQQD EyhlNzJlZGUyZjI5MDAxNTM2Mjg4YTczMDVmOWMyMWU2NzIwOTg4OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9l48bqI4vIJKO4YUKIx72BkCdOi vYl0d2O4/5wEO9Z+KvkWzwJAUpXGDoTMjHdIPijj3MlvtQ4+LoDQu0SNi/y6qwFt ijaN7dBYdM/qUuaRsTMZAFzppcl1Rr93ncEIUcocLSyn8XTZhl8BfXwHlKuLX59B LmJ5jabDtjBvAX65EnuLXnnhT7tIi6U7kzN/mEO6Kh7N7XGhA+Wbhv7k0R2+9phZ HRBWhQF+ez6yqRSq94px3ua30/zIDaTRTm4S5wxaYcgUr23LSzuxDUJQy9LuuyE/ E8WErFqlV2yk4CSY65oGhojlJTRS55IwbG+TLDhJF7kzBdAQt7V80A0VmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcu3i8pABU2KIpzBfnCHmcgmInZMB8GA1UdIwQY MBaAFJpQhTokqMdiI06JE6SlsphcMx2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgt ODhiNThkMDJiMmExLzEvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgtODhiNThkMDJiMmEx LzEvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4QgZwc+n xv3q0OTF6LtARwiexstkMJ202OsuyNuDRBr9ZKXppsiiyeJdIteIlSSntzfW5JuO WiM5aZopgGICHWW03VIRGPx7DUvHHMhUQv8FFAaDF8/R/1ikZUkl6C7+11wHXduV V6YDGIxNrmMVKY2bu+pd9+zRP8ZbB/kTRWCBZ1AQrWAgNO1MkPxfxCFsvRjgM8oD TEwP1BGyElnP9J+kjU/1pzoAFIwHquv/h2c07ie5UY2YvocriLGvCtT4ART0liMq 37UPfqHmZWZrpQvHMXaR8HG9x062aeV9JiYODb3NO6lJkfdOg7um4sITdnyX1un8 sxZaWQDW4Uv/2w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:41 2025 by rpki-client