This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft File: ML5SuuTUjd3Jy-wgdqupHJU64S4.mft (raw, json) Hash identifier: zwN0LEvGSMnIy0S4LfYhKfDmny7+PyDb+30bxNCNcz8= Subject key identifier: C5:7D:5A:AC:AE:AC:BD:F5:AD:20:4B:8A:6F:6A:F4:01:A9:E7:42:F6 Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E Certificate issuer: /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e Certificate serial: 019B454A28FF3E391587DF38462F48C97C7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft Manifest number: 141F Signing time: Mon 22 Dec 2025 09:00:46 +0000 Manifest this update: Mon 22 Dec 2025 09:00:46 +0000 Manifest next update: Tue 23 Dec 2025 09:00:46 +0000 Files and hashes: 1: ML5SuuTUjd3Jy-wgdqupHJU64S4.crl (hash: 7pRJcYGeFCir3MiSde8K27mcVqMg8d2SqLp8rkcuykk=) 2: VdtZIDR20QBsvLwRhmbNZAq9N1s.roa (hash: ne8PPRk8FY3v9PoVn0H4s7uRgTuomQzFJy3jouG0CbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:28:ff:3e:39:15:87:df:38:46:2f:48:c9:7c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e Validity Not Before: Dec 22 09:00:46 2025 GMT Not After : Dec 23 09:00:46 2025 GMT Subject: CN=c57d5aacaeacbdf5ad204b8a6f6af401a9e742f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a3:62:7e:bb:86:b6:ba:7c:f6:98:9d:4a:d2: d4:1d:b3:d8:89:2f:9c:f0:85:38:9a:b0:b4:1c:2a: ea:62:dd:0d:f4:e1:eb:19:a8:bd:57:38:24:ff:6c: 94:0d:ce:2e:41:c2:b1:30:b5:01:77:5a:4f:4f:ad: 04:b5:54:fa:08:44:b0:9b:20:80:2b:f8:d8:c9:ba: f2:0f:fc:79:d6:de:d8:7b:ca:f4:62:4f:27:7d:87: a5:65:ae:65:d4:c9:ae:02:fd:eb:20:ad:a0:59:bd: 6e:da:6f:f8:b5:d1:e8:55:f4:7a:8e:2f:7d:5a:2d: bf:5b:c3:9b:bf:8c:22:99:e6:e0:fb:c1:38:41:9a: 9e:5e:4b:6a:ad:e0:12:7c:1e:a3:48:5a:db:81:8c: 3d:50:b4:93:73:ce:f5:ba:fa:9d:da:b0:eb:c3:49: 5a:6d:4b:65:4d:55:a3:17:8e:89:92:f3:20:14:e9: fd:a5:4a:85:4b:ef:21:ab:df:05:69:ad:38:ab:47: b8:d3:b0:b1:cb:fc:16:24:14:a2:a6:00:a9:e9:21: da:9f:02:49:51:0c:d0:ee:07:5b:3b:0d:b9:f7:04: f3:df:ab:b8:05:dd:e7:72:fe:fe:e9:97:b7:54:5f: 11:b7:b6:22:ae:7a:a6:54:b7:cd:7b:0b:02:92:ba: 43:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7D:5A:AC:AE:AC:BD:F5:AD:20:4B:8A:6F:6A:F4:01:A9:E7:42:F6 X509v3 Authority Key Identifier: keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8a:21:9f:32:09:4a:f1:4e:e0:d9:eb:c6:13:07:19:65:71: 98:5f:50:7c:cc:1f:ba:8b:58:00:ff:15:d0:35:4f:96:da:54: d0:df:bd:57:c1:af:83:a4:22:54:1c:14:a2:31:af:42:0c:de: ea:99:a9:b4:87:0d:87:a1:c0:8c:43:7e:3d:da:be:ba:a8:3e: 0a:ba:e8:a4:f8:33:43:60:81:d7:36:58:b0:86:8d:6b:98:ae: cf:00:8a:9c:9e:4f:fb:f2:21:11:75:a4:2e:04:92:8b:3f:aa: dd:38:cb:63:11:cc:18:03:8c:a1:a7:0c:85:8c:8c:95:85:4b: 6b:03:a3:40:47:d2:04:73:67:80:7c:7d:78:12:48:19:c8:02: 9b:1d:f8:38:b5:e5:eb:28:a9:19:bb:53:dc:40:b6:67:c7:1f: 0f:ba:82:b3:58:4e:de:1f:4e:26:e7:54:6a:0e:45:21:d5:84: c0:4f:95:24:47:1e:c2:19:b2:c4:cd:de:53:06:c9:09:58:b5: eb:a2:3b:66:9e:02:64:d7:f9:34:cc:fe:fc:f2:37:7c:27:42: 91:6a:6c:69:7c:dc:92:e5:b9:44:98:59:c9:25:b8:65:c7:63: fd:12:dc:58:d2:1c:b2:d8:c2:02:7d:00:97:77:85:f6:ef:86: bc:7e:f4:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSij/PjkVh984Ri9IyXx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYmU1MmJhZTRkNDhkZGRjOWNiZWMyMDc2YWJhOTFjOTUz YWUxMmUwHhcNMjUxMjIyMDkwMDQ2WhcNMjUxMjIzMDkwMDQ2WjAzMTEwLwYDVQQD EyhjNTdkNWFhY2FlYWNiZGY1YWQyMDRiOGE2ZjZhZjQwMWE5ZTc0MmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qNifruGtrp89pidStLUHbPYiS+c 8IU4mrC0HCrqYt0N9OHrGai9Vzgk/2yUDc4uQcKxMLUBd1pPT60EtVT6CESwmyCA K/jYybryD/x51t7Ye8r0Yk8nfYelZa5l1MmuAv3rIK2gWb1u2m/4tdHoVfR6ji99 Wi2/W8Obv4wimebg+8E4QZqeXktqreASfB6jSFrbgYw9ULSTc871uvqd2rDrw0la bUtlTVWjF46JkvMgFOn9pUqFS+8hq98Faa04q0e407Cxy/wWJBSipgCp6SHanwJJ UQzQ7gdbOw259wTz36u4Bd3ncv7+6Ze3VF8Rt7YirnqmVLfNewsCkrpDawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMV9WqyurL31rSBLim9q9AGp50L2MB8GA1UdIwQY MBaAFDC+Urrk1I3dycvsIHarqRyVOuEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgt ZDgwZjVlYTYyZDQ0LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81ZjU3NWYtOTkyYy00OGU5LTkxNTgtZDgwZjVlYTYyZDQ0 LzEvTUw1U3V1VFVqZDNKeS13Z2RxdXBISlU2NFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYohnzIJ SvFO4NnrxhMHGWVxmF9QfMwfuotYAP8V0DVPltpU0N+9V8Gvg6QiVBwUojGvQgze 6pmptIcNh6HAjEN+Pdq+uqg+CrropPgzQ2CB1zZYsIaNa5iuzwCKnJ5P+/IhEXWk LgSSiz+q3TjLYxHMGAOMoacMhYyMlYVLawOjQEfSBHNngHx9eBJIGcgCmx34OLXl 6yipGbtT3EC2Z8cfD7qCs1hO3h9OJudUag5FIdWEwE+VJEcewhmyxM3eUwbJCVi1 66I7Zp4CZNf5NMz+/PI3fCdCkWpsaXzckuW5RJhZySW4Zcdj/RLcWNIcstjCAn0A l3eF9u+GvH70Tg== -----END CERTIFICATE-----Generated at Mon Dec 22 15:39:43 2025 by rpki-client