This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json) Hash identifier: SnWekXdsBoqIeFPDlf0scqmIR/0Qz3qN5au8jmY8mJo= Subject key identifier: 59:78:AA:4F:1B:BD:FB:29:81:14:2F:46:52:3A:C9:89:56:54:92:A3 Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56 Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656 Certificate serial: 019B4926BF4F64476641CF4C7FE9BD7931EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 03:00:34 +0000 Manifest this update: Tue 23 Dec 2025 03:00:34 +0000 Manifest next update: Wed 24 Dec 2025 03:00:34 +0000 Files and hashes: 1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: tGBgun5AA3AUhg8Qfq9Olm4Pf+XPe0HVwLvXmvoAq3o=) 2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:bf:4f:64:47:66:41:cf:4c:7f:e9:bd:79:31:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656 Validity Not Before: Dec 23 03:00:34 2025 GMT Not After : Dec 24 03:00:34 2025 GMT Subject: CN=5978aa4f1bbdfb2981142f46523ac989565492a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:76:38:e4:cf:43:ee:dc:54:47:cb:26:ff: ab:44:bc:62:bf:24:82:4b:66:d6:48:42:b1:31:8f: 1f:3c:57:23:5f:da:b3:5f:1f:3c:07:61:fe:b0:86: a3:dc:d0:70:0a:f6:b2:16:94:4e:af:05:c6:90:f3: c3:97:7b:24:a7:3a:79:25:a7:1e:21:c9:b6:35:30: f1:ff:3d:b0:75:76:85:c8:86:2e:9b:af:a0:38:74: 5e:e5:c1:da:86:2e:57:78:34:0e:72:2a:11:4a:75: 97:0d:91:4a:02:01:78:f6:88:36:48:4f:a1:c6:a9: 49:0c:cc:18:1f:d8:03:82:b0:e6:d5:31:97:9b:41: c4:a8:82:34:24:c3:ef:3d:48:d2:f8:c6:94:a9:c3: 6e:b7:45:78:8d:fc:ca:a6:4a:89:d4:37:f1:5c:19: 9c:b9:42:99:b4:8c:79:e9:05:a3:bb:62:5d:63:39: b0:16:d0:6a:6d:15:15:63:a8:89:47:64:36:5e:93: f7:33:ea:c3:7d:d7:03:6f:4e:52:a5:3c:65:da:f7: 3f:22:b9:3a:51:8e:9c:2f:2b:e0:eb:fd:3d:c0:ae: 6d:0c:cc:4d:fc:eb:6e:68:6d:f9:93:d1:03:7c:d0: b0:14:ce:f3:a8:6f:d7:c3:f0:89:95:5c:c0:5f:9e: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:78:AA:4F:1B:BD:FB:29:81:14:2F:46:52:3A:C9:89:56:54:92:A3 X509v3 Authority Key Identifier: keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:aa:5b:59:13:0d:6c:ee:01:f2:32:5d:65:00:7d:52:f5:bd: 3d:33:90:a1:b6:66:dc:c6:0e:01:f7:63:2d:17:a7:74:dc:ad: d1:50:63:65:c4:fb:7f:17:b2:a8:40:c0:b5:55:e0:12:ed:02: 88:4f:1e:4b:44:92:93:a3:ff:41:35:1a:e4:13:ba:3f:d4:a6: f1:94:7d:8b:8b:2b:be:96:70:63:a7:9a:77:67:45:24:b6:a1: e8:a3:02:f4:69:4b:5b:92:7d:9b:65:cc:cf:02:5a:d7:8d:76: 9e:94:a4:25:44:bc:4b:51:a9:1c:3b:74:1e:97:fa:15:b9:ab: 52:e3:c3:77:89:7f:16:ba:69:a5:39:3d:ec:03:c1:7d:01:2c: 8c:d9:39:86:f0:b1:b0:2d:1b:71:33:ac:30:00:ed:46:b8:53: 3d:4a:51:31:71:42:d4:f9:50:1d:1d:3e:52:5c:78:5f:d3:26: 01:0b:58:ae:fc:a5:95:53:69:d3:98:08:f8:5c:23:35:0a:61: 4d:dc:30:19:78:ad:65:b6:a5:9e:b3:f3:39:e4:18:99:cb:a2: d1:fe:29:8f:26:25:4b:79:cc:ca:b0:95:16:2d:dc:54:73:33: 44:02:67:e7:6b:06:22:3a:08:2d:2d:54:c4:2a:0a:70:2f:69: de:19:a2:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJr9PZEdmQc9Mf+m9eTHvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNWU5ODk0N2ZjOTQ4ZDViNjJkZmI4NWE3Y2IzYTcyYTA2 NzI2NTYwHhcNMjUxMjIzMDMwMDM0WhcNMjUxMjI0MDMwMDM0WjAzMTEwLwYDVQQD Eyg1OTc4YWE0ZjFiYmRmYjI5ODExNDJmNDY1MjNhYzk4OTU2NTQ5MmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV12OOTPQ+7cVEfLJv+rRLxivySC S2bWSEKxMY8fPFcjX9qzXx88B2H+sIaj3NBwCvayFpROrwXGkPPDl3skpzp5Jace Icm2NTDx/z2wdXaFyIYum6+gOHRe5cHahi5XeDQOcioRSnWXDZFKAgF49og2SE+h xqlJDMwYH9gDgrDm1TGXm0HEqII0JMPvPUjS+MaUqcNut0V4jfzKpkqJ1DfxXBmc uUKZtIx56QWju2JdYzmwFtBqbRUVY6iJR2Q2XpP3M+rDfdcDb05SpTxl2vc/Irk6 UY6cLyvg6/09wK5tDMxN/OtuaG35k9EDfNCwFM7zqG/Xw/CJlVzAX54c7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFl4qk8bvfspgRQvRlI6yYlWVJKjMB8GA1UdIwQY MBaAFDJemJR/yUjVti37hafLOnKgZyZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2It NGNhZWM5N2Y3ZDkyLzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2ItNGNhZWM5N2Y3ZDky LzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6pbWRMN bO4B8jJdZQB9UvW9PTOQobZm3MYOAfdjLRendNyt0VBjZcT7fxeyqEDAtVXgEu0C iE8eS0SSk6P/QTUa5BO6P9Sm8ZR9i4srvpZwY6ead2dFJLah6KMC9GlLW5J9m2XM zwJa1412npSkJUS8S1GpHDt0Hpf6FbmrUuPDd4l/FrpppTk97APBfQEsjNk5hvCx sC0bcTOsMADtRrhTPUpRMXFC1PlQHR0+Ulx4X9MmAQtYrvyllVNp05gI+FwjNQph TdwwGXitZbalnrPzOeQYmcui0f4pjyYlS3nMyrCVFi3cVHMzRAJn52sGIjoILS1U xCoKcC9p3hmiQg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:51:20 2025 by rpki-client