This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: AHdUW3s6A45PFgL9Xg7C32wJ+9WhwI/utLIfH5pdSj0= Subject key identifier: 7A:85:1B:08:38:0E:31:F0:70:71:F4:D4:1D:DF:D6:09:99:C8:52:F1 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019B3DC81B99B1AC72602CD2CA80FD6D6278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 22:01:22 +0000 Manifest this update: Sat 20 Dec 2025 22:01:22 +0000 Manifest next update: Sun 21 Dec 2025 22:01:22 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: 6ETZEsD1ObcAzqRn03SDpTrGNprZkMcnXVo1uJt8tZk=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:1b:99:b1:ac:72:60:2c:d2:ca:80:fd:6d:62:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Dec 20 22:01:22 2025 GMT Not After : Dec 21 22:01:22 2025 GMT Subject: CN=7a851b08380e31f07071f4d41ddfd60999c852f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:10:57:fa:a4:6c:ea:6d:9b:2b:ef:62:8a:f3: 14:23:a1:26:fe:ab:0a:24:1a:53:a7:34:80:f1:a3: 03:00:c4:26:8e:07:ee:bb:68:e0:d9:3c:06:de:53: 1b:01:47:87:fa:31:cb:d3:1d:74:33:4c:af:cb:e7: cb:5a:fd:18:8c:e7:b2:49:b5:33:6f:f7:ee:37:4f: 79:10:dd:e0:7f:eb:03:fb:30:65:c1:ee:40:1b:c6: e9:b2:b9:74:57:d1:f8:db:20:65:e1:18:22:c5:aa: dd:a7:97:c9:db:3e:14:56:3e:3b:b9:16:1a:12:ca: 81:6e:66:19:e8:da:a1:02:94:58:0c:c1:dc:12:ff: c3:01:16:15:84:39:2a:e5:aa:f5:fd:0d:b9:74:16: 8a:38:94:2c:a4:cd:8c:36:a5:f1:9a:55:82:38:26: 98:4b:60:39:16:b0:18:0a:bc:d8:9e:4c:d5:47:76: 55:74:f4:fd:7f:9c:6b:95:bf:b5:5a:ae:25:a9:a6: 4d:6d:27:0a:d5:ac:32:6d:11:07:fd:34:1f:71:2e: d8:34:b4:29:c7:8d:ca:f7:b4:00:66:8e:c8:1f:cc: 7d:06:16:2a:ca:4b:e4:6e:ed:42:c1:c1:b6:ba:7d: c7:e5:83:c9:6b:8b:f5:d4:b2:bf:05:6f:54:dd:74: 85:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:85:1B:08:38:0E:31:F0:70:71:F4:D4:1D:DF:D6:09:99:C8:52:F1 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ba:c8:20:ec:27:f1:40:40:31:a3:8b:2f:6a:7f:47:44:92: ea:15:02:33:72:d8:30:8d:3f:bf:c3:ae:94:61:da:03:e1:1c: 96:f6:67:8a:28:ed:fa:22:49:89:0e:71:2a:e0:de:d4:a8:5e: c1:b8:cc:fd:48:b8:5d:f3:b9:66:c1:9a:b7:2d:9e:20:d1:ed: d7:16:63:f5:cb:48:e7:f9:45:f1:3b:93:f1:65:01:73:6d:74: c2:fa:46:0e:33:63:13:a5:dc:8c:70:e6:77:f0:15:71:d7:9a: b9:1b:eb:c1:d8:ed:99:d9:94:f4:fc:91:7a:3e:79:ad:fd:af: dc:84:9c:4a:7d:e6:28:0e:79:38:43:bb:6c:ab:87:83:9c:47: ff:ca:63:fc:da:01:f2:5a:60:af:2a:fa:63:94:38:de:9b:26: 5a:87:fe:50:af:bf:52:c1:49:bd:7c:51:c2:9a:f8:d2:a0:6f: c3:35:ed:f0:75:bc:e5:ff:19:17:c0:b4:eb:b3:1e:14:52:0d: 00:d5:16:c2:85:ca:c4:f8:89:61:11:37:85:bb:be:23:e7:16: d5:5c:ab:12:5e:58:42:8e:d4:1c:71:69:28:84:e0:4e:b9:83: 20:4b:09:92:7b:30:5f:3e:92:f1:37:01:f2:5c:1f:33:d0:e0: 63:30:5e:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBuZsaxyYCzSyoD9bWJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUxMjIwMjIwMTIyWhcNMjUxMjIxMjIwMTIyWjAzMTEwLwYDVQQD Eyg3YTg1MWIwODM4MGUzMWYwNzA3MWY0ZDQxZGRmZDYwOTk5Yzg1MmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhBX+qRs6m2bK+9iivMUI6Em/qsK JBpTpzSA8aMDAMQmjgfuu2jg2TwG3lMbAUeH+jHL0x10M0yvy+fLWv0YjOeySbUz b/fuN095EN3gf+sD+zBlwe5AG8bpsrl0V9H42yBl4Rgixardp5fJ2z4UVj47uRYa EsqBbmYZ6NqhApRYDMHcEv/DARYVhDkq5ar1/Q25dBaKOJQspM2MNqXxmlWCOCaY S2A5FrAYCrzYnkzVR3ZVdPT9f5xrlb+1Wq4lqaZNbScK1awybREH/TQfcS7YNLQp x43K97QAZo7IH8x9BhYqykvkbu1CwcG2un3H5YPJa4v11LK/BW9U3XSFwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqFGwg4DjHwcHH01B3f1gmZyFLxMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7rIIOwn 8UBAMaOLL2p/R0SS6hUCM3LYMI0/v8OulGHaA+EclvZniijt+iJJiQ5xKuDe1Khe wbjM/Ui4XfO5ZsGaty2eINHt1xZj9ctI5/lF8TuT8WUBc210wvpGDjNjE6XcjHDm d/AVcdeauRvrwdjtmdmU9PyRej55rf2v3IScSn3mKA55OEO7bKuHg5xH/8pj/NoB 8lpgryr6Y5Q43psmWof+UK+/UsFJvXxRwpr40qBvwzXt8HW85f8ZF8C067MeFFIN ANUWwoXKxPiJYRE3hbu+I+cW1VyrEl5YQo7UHHFpKITgTrmDIEsJknswXz6S8TcB 8lwfM9DgYzBeAw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:47:45 2025 by rpki-client