This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json) Hash identifier: PELFB2fGfkciB4T40W/xv+ZhlR+FP7Wt4F3QPogKyrA= Subject key identifier: D9:5B:F2:CB:E2:B1:7E:BA:B7:C8:9D:6A:DC:50:85:0C:6E:F7:A4:F1 Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30 Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30 Certificate serial: 019B578795C1C36C5E45166A1DB54E4D5A95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft Manifest number: 0D5B Signing time: Thu 25 Dec 2025 22:01:01 +0000 Manifest this update: Thu 25 Dec 2025 22:01:01 +0000 Manifest next update: Fri 26 Dec 2025 22:01:01 +0000 Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: J8lIHDkBvVtbyz+6SHixkexnw/b/Z49dGJ267acnKgs=) 2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:87:95:c1:c3:6c:5e:45:16:6a:1d:b5:4e:4d:5a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30 Validity Not Before: Dec 25 22:01:01 2025 GMT Not After : Dec 26 22:01:01 2025 GMT Subject: CN=d95bf2cbe2b17ebab7c89d6adc50850c6ef7a4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:c8:ba:09:54:86:82:83:fe:3f:ce:e2:a7: 98:d2:b6:4d:8e:39:d6:90:80:78:1c:87:32:8c:0e: 65:b1:09:ff:f3:52:a9:3f:47:80:64:b2:c8:ee:86: 9c:7c:44:4a:fa:4f:d2:01:76:c8:48:57:c9:d6:5f: 6a:7c:9f:78:7b:87:a0:57:86:2c:a3:ba:ca:be:96: 9d:95:50:ff:17:8f:ab:d4:9f:aa:f9:3c:ec:e6:e1: 46:e0:29:20:6d:54:bc:ca:17:c3:f3:b3:1d:a5:5b: 36:3e:29:8f:83:a4:a7:62:33:03:b0:2f:ef:89:19: 0d:cc:e5:92:93:ac:d5:23:8d:ae:0f:5f:99:77:d6: ea:42:7f:8f:4e:c2:62:5b:7f:81:ff:21:70:c6:89: 20:1a:b0:a2:7d:04:4d:59:4d:80:41:29:57:3f:bf: 0e:38:b6:ad:0d:3b:2c:6f:24:6f:dd:ce:60:5e:b0: 10:fa:9c:54:57:07:54:43:cf:58:0e:14:4a:95:2f: d7:54:79:62:e4:05:08:0f:59:6a:db:c0:83:66:de: 84:28:eb:d4:c7:5f:a5:a3:56:33:1c:cc:aa:ce:a9: 0c:fa:77:a7:e3:4b:d5:73:37:da:77:33:87:cf:4d: 3d:8e:58:12:f1:b9:79:1b:74:51:f4:e2:72:c4:2e: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5B:F2:CB:E2:B1:7E:BA:B7:C8:9D:6A:DC:50:85:0C:6E:F7:A4:F1 X509v3 Authority Key Identifier: keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f8:e4:c0:65:d6:15:4c:8b:3e:f8:05:bb:1b:71:ed:25:6a: d8:35:39:a9:fb:af:23:58:de:2e:e9:74:7c:b6:fa:f0:3b:5b: 6d:d0:58:dd:5f:2e:a5:c5:ab:c1:f6:db:df:05:3f:ff:73:ef: 97:07:bc:1e:8f:b2:14:8c:65:af:26:62:50:e6:c4:e6:b5:c4: 2e:82:61:4d:7f:4a:1e:26:6e:c0:b3:fa:fe:c0:ef:fe:9e:68: 1a:77:2d:4c:7d:2c:39:8b:d9:34:e5:2e:2e:d4:ed:00:1d:20: 71:05:92:a5:ba:49:d1:fe:d3:6c:c2:8c:96:fe:e9:0f:92:db: 67:d3:55:af:8d:8e:1c:0d:c1:5c:68:d5:46:dc:b0:1c:6c:54: e3:db:15:ae:11:73:88:ec:a5:f4:fe:cd:35:13:b7:8d:86:10: 53:51:0e:3e:47:83:16:ef:38:65:31:73:7b:99:6d:20:23:a5: 76:47:8a:8a:6e:ae:86:ce:d1:bb:ff:af:bf:9a:5b:bf:02:d1: 59:c6:fa:a4:d8:d5:95:61:86:24:6a:93:7a:ab:02:13:e2:2e: 39:1f:49:5f:a2:4f:9c:51:e6:c7:e7:fc:74:e1:bc:8b:43:c5: b5:63:a1:ad:1f:5f:af:65:c1:bf:6c:d8:58:53:ca:55:37:96: 10:79:19:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXh5XBw2xeRRZqHbVOTVqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTQ1NzY4ZjQ3YzM1Nzg1ZWViYWQ3YTM0MzhhNGIxYzRm OGRjMzAwHhcNMjUxMjI1MjIwMTAxWhcNMjUxMjI2MjIwMTAxWjAzMTEwLwYDVQQD EyhkOTViZjJjYmUyYjE3ZWJhYjdjODlkNmFkYzUwODUwYzZlZjdhNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQDIuglUhoKD/j/O4qeY0rZNjjnW kIB4HIcyjA5lsQn/81KpP0eAZLLI7oacfERK+k/SAXbISFfJ1l9qfJ94e4egV4Ys o7rKvpadlVD/F4+r1J+q+Tzs5uFG4CkgbVS8yhfD87MdpVs2PimPg6SnYjMDsC/v iRkNzOWSk6zVI42uD1+Zd9bqQn+PTsJiW3+B/yFwxokgGrCifQRNWU2AQSlXP78O OLatDTssbyRv3c5gXrAQ+pxUVwdUQ89YDhRKlS/XVHli5AUID1lq28CDZt6EKOvU x1+lo1YzHMyqzqkM+nen40vVczfadzOHz009jlgS8bl5G3RR9OJyxC6XaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlb8svisX66t8idatxQhQxu96TxMB8GA1UdIwQY MBaAFDJUV2j0fDV4XuutejQ4pLHE+NwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxSWGFQUjhOWGhlNjYxNk5EaWtzY1Q0M0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80N2JjNzYtOTc0ZS00MDE4LTk0ZmQt N2Y0NmM4YzY4ZTdlLzEvTWxSWGFQUjhOWGhlNjYxNk5EaWtzY1Q0M0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80N2JjNzYtOTc0ZS00MDE4LTk0ZmQtN2Y0NmM4YzY4ZTdl LzEvTWxSWGFQUjhOWGhlNjYxNk5EaWtzY1Q0M0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/jkwGXW FUyLPvgFuxtx7SVq2DU5qfuvI1jeLul0fLb68DtbbdBY3V8upcWrwfbb3wU//3Pv lwe8Ho+yFIxlryZiUObE5rXELoJhTX9KHiZuwLP6/sDv/p5oGnctTH0sOYvZNOUu LtTtAB0gcQWSpbpJ0f7TbMKMlv7pD5LbZ9NVr42OHA3BXGjVRtywHGxU49sVrhFz iOyl9P7NNRO3jYYQU1EOPkeDFu84ZTFze5ltICOldkeKim6uhs7Ru/+vv5pbvwLR Wcb6pNjVlWGGJGqTeqsCE+IuOR9JX6JPnFHmx+f8dOG8i0PFtWOhrR9fr2XBv2zY WFPKVTeWEHkZbQ== -----END CERTIFICATE-----Generated at Thu Dec 25 23:51:53 2025 by rpki-client