This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json) Hash identifier: TpPFc6JmMAGemsrawazXEb+3FxYkLu9B6+ofUfPdGtQ= Subject key identifier: CE:CA:2D:07:3B:FE:FD:D8:33:3D:03:E7:CC:C7:EA:4B:90:0D:7B:0F Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76 Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76 Certificate serial: 019B43C99BB4DA44AD557E35618773B20A20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 02:00:44 +0000 Manifest this update: Mon 22 Dec 2025 02:00:44 +0000 Manifest next update: Tue 23 Dec 2025 02:00:44 +0000 Files and hashes: 1: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: UeqxvOOHe3HcI0K0DqjNmo15f6ChK/UoFJih+IabT58=) 2: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (hash: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:9b:b4:da:44:ad:55:7e:35:61:87:73:b2:0a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76 Validity Not Before: Dec 22 02:00:44 2025 GMT Not After : Dec 23 02:00:44 2025 GMT Subject: CN=ceca2d073bfefdd8333d03e7ccc7ea4b900d7b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:8c:d8:cc:4e:96:06:3d:3c:28:9c:ce:e5: 5d:78:f3:ba:a8:51:54:31:92:5e:c9:4d:a8:e4:bd: 67:ec:80:1a:5d:db:83:bf:39:b2:32:a1:e1:3e:d7: 2a:6d:96:b9:3a:c6:9b:61:1d:80:5a:55:a5:b4:61: ad:e9:15:fb:a0:85:38:bf:2a:73:73:f0:04:5f:2b: 8f:ad:86:f2:1c:31:ca:d8:1a:8e:d2:c5:fd:37:f8: 20:89:fe:ec:b9:20:5d:ef:71:97:79:3d:86:85:7c: bf:fd:ac:64:2f:9d:cc:68:d9:4b:0a:17:1b:40:ee: 54:4a:21:08:3c:83:1d:9f:b3:38:e6:85:e3:17:b3: a8:23:78:f1:02:aa:30:2f:ee:32:62:55:0f:6d:ba: 9f:8e:18:a4:fb:03:88:b6:c7:13:d3:c8:55:dc:db: 41:ff:14:ec:c8:de:36:9b:18:34:f5:79:8b:f5:84: 6b:5e:99:80:10:f1:51:a2:ff:cf:01:6f:e9:9d:b9: 6c:a5:25:08:d2:17:d4:4f:2d:cc:c0:21:6c:b6:38: 98:e6:23:f2:14:6d:0d:f3:93:4d:ae:64:d2:b6:e4: 5a:75:f2:71:ab:47:a7:db:06:34:ab:8c:30:25:6d: 67:fd:a0:3e:d1:38:41:94:a6:5e:d8:79:06:9f:c5: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CA:2D:07:3B:FE:FD:D8:33:3D:03:E7:CC:C7:EA:4B:90:0D:7B:0F X509v3 Authority Key Identifier: keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:06:08:a6:fb:76:be:6d:b1:4a:92:05:59:82:f2:4e:ce:64: 88:ab:f5:77:ac:ca:d8:62:2b:29:23:3e:68:7f:6a:bd:6f:a4: 2c:6e:49:b0:f6:e9:db:1d:48:50:06:ae:15:0a:4c:06:ce:cc: 94:df:62:f5:31:62:96:22:d8:12:3e:c5:d7:98:d6:95:87:2d: 3b:30:df:7a:73:d4:53:4f:ce:90:25:b7:4b:fa:f3:83:86:22: 4b:eb:0b:91:54:02:23:e2:6f:ca:2b:61:2b:9a:88:77:28:7e: 99:d9:70:51:78:e6:a8:90:e4:1e:d4:19:09:86:14:b6:9b:46: 2d:c7:3c:dd:0d:a8:d5:be:9a:84:8d:18:b4:ab:31:ee:1c:8a: cc:37:d6:25:7c:c4:d0:9b:78:9e:44:bc:85:b8:42:08:13:59: 27:9b:66:7c:19:98:ad:ed:ed:e8:94:b0:e9:b2:0e:5a:57:7c: 59:0f:17:9a:5c:f9:95:2a:db:c6:60:d4:e8:13:e5:0c:f0:69: 29:c5:b7:5b:51:79:0d:fd:5a:8a:62:9b:8b:01:91:8e:6b:f3: b0:5b:29:87:f8:31:99:89:11:27:ce:12:c1:7a:ba:5b:e6:0f: 15:09:00:cb:aa:70:48:03:2a:2f:d9:4d:ec:4d:44:bc:96:5e: 46:de:97:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyZu02kStVX41YYdzsgogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTM2MjU0YjNlNzQ5MDA2NzViYzZlYmQ1MGFlODI1ODI4 YjlhNzYwHhcNMjUxMjIyMDIwMDQ0WhcNMjUxMjIzMDIwMDQ0WjAzMTEwLwYDVQQD EyhjZWNhMmQwNzNiZmVmZGQ4MzMzZDAzZTdjY2M3ZWE0YjkwMGQ3YjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK+M2MxOlgY9PCiczuVdePO6qFFU MZJeyU2o5L1n7IAaXduDvzmyMqHhPtcqbZa5OsabYR2AWlWltGGt6RX7oIU4vypz c/AEXyuPrYbyHDHK2BqO0sX9N/ggif7suSBd73GXeT2GhXy//axkL53MaNlLChcb QO5USiEIPIMdn7M45oXjF7OoI3jxAqowL+4yYlUPbbqfjhik+wOItscT08hV3NtB /xTsyN42mxg09XmL9YRrXpmAEPFRov/PAW/pnblspSUI0hfUTy3MwCFstjiY5iPy FG0N85NNrmTStuRadfJxq0en2wY0q4wwJW1n/aA+0ThBlKZe2HkGn8UexwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7KLQc7/v3YMz0D58zH6kuQDXsPMB8GA1UdIwQY MBaAFDJTYlSz50kAZ1vG69UK6CWCi5p2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUt YTU3ZDQ4ODc0NGMyLzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85NmQ3MzAtMzhlZi00YjIxLWIxZmUtYTU3ZDQ4ODc0NGMy LzEvTWxOaVZMUG5TUUJuVzhicjFRcm9KWUtMbW5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigYIpvt2 vm2xSpIFWYLyTs5kiKv1d6zK2GIrKSM+aH9qvW+kLG5JsPbp2x1IUAauFQpMBs7M lN9i9TFiliLYEj7F15jWlYctOzDfenPUU0/OkCW3S/rzg4YiS+sLkVQCI+Jvyith K5qIdyh+mdlwUXjmqJDkHtQZCYYUtptGLcc83Q2o1b6ahI0YtKsx7hyKzDfWJXzE 0Jt4nkS8hbhCCBNZJ5tmfBmYre3t6JSw6bIOWld8WQ8Xmlz5lSrbxmDU6BPlDPBp KcW3W1F5Df1aimKbiwGRjmvzsFsph/gxmYkRJ84SwXq6W+YPFQkAy6pwSAMqL9lN 7E1EvJZeRt6X4A== -----END CERTIFICATE-----Generated at Mon Dec 22 10:05:29 2025 by rpki-client