This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json) Hash identifier: ZBMXc/lhAZAXdHZaHM/yXzuYzMdytT7r7esqvU7vwSY= Subject key identifier: 32:C7:BE:B7:FF:BC:96:23:5D:07:5E:C5:94:68:3D:CF:63:8C:3C:1C Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33 Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533 Certificate serial: 019B41DB9B498A06917F18DA4E8F12FE948A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft Manifest number: 1679 Signing time: Sun 21 Dec 2025 17:01:09 +0000 Manifest this update: Sun 21 Dec 2025 17:01:09 +0000 Manifest next update: Mon 22 Dec 2025 17:01:09 +0000 Files and hashes: 1: CFfUxIFh9E3XN1EntjmEwUZAUfA.roa (hash: LKtIJVn3SPxlyKkXSz+8d7gF12Vd76h6cTs7tmGxKjM=) 2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: y9dxlhcDx4nWs5h8Q4MhTkseJ0gdUXGubjpLUEIlxbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:9b:49:8a:06:91:7f:18:da:4e:8f:12:fe:94:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533 Validity Not Before: Dec 21 17:01:09 2025 GMT Not After : Dec 22 17:01:09 2025 GMT Subject: CN=32c7beb7ffbc96235d075ec594683dcf638c3c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:a3:42:79:69:ff:59:af:10:b5:d6:84:06: 3f:d9:a3:c3:fd:27:76:64:ac:63:5f:83:b9:89:fb: 69:b9:6b:9f:61:b5:9f:45:9a:b5:42:40:6c:fa:43: d6:9a:52:33:72:c1:02:3c:4c:96:1e:d5:73:e6:81: ef:31:81:94:b5:8e:55:93:c6:0f:a3:eb:0f:2c:ca: 6d:2a:5b:b5:1a:c5:16:93:ae:c9:ed:8f:13:64:00: d2:04:ac:ab:4b:de:0d:5d:13:80:01:e2:b6:66:99: ca:b6:54:6f:80:2b:c6:12:79:39:0e:15:2b:c2:85: ce:b1:57:87:73:48:c7:94:a6:ca:f3:2e:eb:80:f1: b7:60:e6:43:3c:88:c0:f7:2a:1f:f2:18:c9:18:f6: c3:7c:a0:f9:92:12:9b:39:b3:f8:0a:32:bc:7c:f1: 30:c5:05:9c:04:6c:c2:ae:6c:b9:e9:cd:27:4b:e9: 28:12:6b:22:20:fa:82:26:19:37:76:4a:ae:72:8e: 1d:7d:d7:e3:eb:c3:cd:69:86:ef:be:e8:e1:96:d7: 47:14:99:af:bc:d0:a3:4f:76:45:11:e8:64:b5:34: 7d:b4:d8:d7:49:51:d4:80:e3:7e:a4:26:1a:c7:6f: 58:ba:a3:b8:0c:6e:38:8e:4f:45:b7:d5:be:82:62: 05:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C7:BE:B7:FF:BC:96:23:5D:07:5E:C5:94:68:3D:CF:63:8C:3C:1C X509v3 Authority Key Identifier: keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0d:fc:c9:4e:60:21:b4:25:69:f0:04:9b:d7:b0:65:fc:73: 7e:4e:46:55:50:39:4e:d3:62:59:e4:ce:19:1d:48:ae:30:70: 0c:18:3c:38:93:26:14:a5:60:fb:c4:a8:b1:7d:4d:61:1e:4c: eb:a3:18:83:3d:7c:91:27:12:cb:48:8f:62:81:70:cf:c1:03: ec:97:1a:ca:a6:c8:92:23:93:03:17:a5:29:fd:c9:f8:bf:c6: 16:a9:71:72:29:4a:c3:97:6b:84:65:3b:ba:08:10:84:a7:be: 34:cb:59:d8:56:47:d8:17:5d:86:9f:55:6c:07:e0:36:83:1a: 0b:5f:40:9f:b5:66:c4:fd:b6:6b:df:be:73:6c:6b:4a:bf:f9: 5d:ef:6f:d9:38:a0:63:67:d2:c9:99:5a:55:fb:09:68:bc:28: 67:69:64:04:37:3c:54:0e:60:79:93:92:b8:af:2f:03:83:95: 68:f3:5e:f5:e6:f9:78:70:c2:1d:ba:2a:f3:3f:10:ff:c2:24: 1f:d6:64:c7:1b:e5:c8:0a:af:f2:2b:88:c4:34:e0:5f:43:d4: 83:54:d0:ed:2d:7a:a1:19:58:6c:81:ce:40:7c:4b:f0:c1:1c: 65:35:c5:dd:28:fa:67:0b:02:9d:50:bd:4c:02:c9:63:2a:63: b0:19:25:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB25tJigaRfxjaTo8S/pSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNWE4YjY4OGRlYWRiYjkxZWZiZTA3NzIzMDhiYWM5ZjMw NGE1MzMwHhcNMjUxMjIxMTcwMTA5WhcNMjUxMjIyMTcwMTA5WjAzMTEwLwYDVQQD EygzMmM3YmViN2ZmYmM5NjIzNWQwNzVlYzU5NDY4M2RjZjYzOGMzYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+ajQnlp/1mvELXWhAY/2aPD/Sd2 ZKxjX4O5iftpuWufYbWfRZq1QkBs+kPWmlIzcsECPEyWHtVz5oHvMYGUtY5Vk8YP o+sPLMptKlu1GsUWk67J7Y8TZADSBKyrS94NXROAAeK2ZpnKtlRvgCvGEnk5DhUr woXOsVeHc0jHlKbK8y7rgPG3YOZDPIjA9yof8hjJGPbDfKD5khKbObP4CjK8fPEw xQWcBGzCrmy56c0nS+koEmsiIPqCJhk3dkquco4dfdfj68PNaYbvvujhltdHFJmv vNCjT3ZFEehktTR9tNjXSVHUgON+pCYax29YuqO4DG44jk9Ft9W+gmIFZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLHvrf/vJYjXQdexZRoPc9jjDwcMB8GA1UdIwQY MBaAFDJai2iN6tu5HvvgdyMIusnzBKUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjIt YmI0YTg2NzJjYzBjLzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjItYmI0YTg2NzJjYzBj LzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHw38yU5g IbQlafAEm9ewZfxzfk5GVVA5TtNiWeTOGR1IrjBwDBg8OJMmFKVg+8SosX1NYR5M 66MYgz18kScSy0iPYoFwz8ED7JcayqbIkiOTAxelKf3J+L/GFqlxcilKw5drhGU7 uggQhKe+NMtZ2FZH2Bddhp9VbAfgNoMaC19An7VmxP22a9++c2xrSr/5Xe9v2Tig Y2fSyZlaVfsJaLwoZ2lkBDc8VA5geZOSuK8vA4OVaPNe9eb5eHDCHboq8z8Q/8Ik H9ZkxxvlyAqv8iuIxDTgX0PUg1TQ7S16oRlYbIHOQHxL8MEcZTXF3Sj6ZwsCnVC9 TALJYypjsBklLg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:21:41 2025 by rpki-client