This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json) Hash identifier: UwgLMNqzp5j0K6RG0lRMD2nG7vLtiNnilpH7CL61Ax8= Subject key identifier: 65:5D:E5:1C:A6:C9:ED:E1:5D:62:2B:E7:BE:85:11:CE:67:84:B3:65 Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Certificate serial: 019B3EA353AF1E08319F86F965EC54A2D3F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft Manifest number: 1795 Signing time: Sun 21 Dec 2025 02:00:49 +0000 Manifest this update: Sun 21 Dec 2025 02:00:49 +0000 Manifest next update: Mon 22 Dec 2025 02:00:49 +0000 Files and hashes: 1: 37xCCUhytigOkbo8skkNphl6CDo.roa (hash: EZZOllbO3rU0Aq71pT+LnxPWU1OR5RUdYC5xtbHlqV0=) 2: EzlaPz9ay6RZ4KUo_Zx1lcWyYyE.roa (hash: 8mVwmiELeQwOp0IzUJ7CNWnPRJxXboTOfv7waHdL35E=) 3: HmloYPhthfBI7_3S01XoeHMHM_0.roa (hash: zT7e2sKU35SC+6Uf05YzOC00VreFA+3zPNOd9kp3exg=) 4: aBb_QnqfCmFuIbPpQn9d7-oaQds.roa (hash: 9cT2/7QK1Jv3/LAJrIXNohZ9zwR8FjnbBcxZKBheYgE=) 5: bJE571Es9mWytmWy8Hm2hU0LvwQ.roa (hash: G4ykv8ElUqNocIC2Di9TU9f+tq6JYb2XSPQUlNwbQs8=) 6: jNEc9JKntfCRYR_UowBHCVGcgfU.roa (hash: wUVreTUUoleXZY0NQI3FxCnAa07OL9N5o1BFPoQRf+k=) 7: lPFksRdLJVDV0BeRSYCopl0nK1A.roa (hash: Z/l2sT/TM2PqTeCwRcYw3ZHE/PJvSKLQBMiM2PLHoBk=) 8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: bQKcejMjKXUJD9/vLnkWn9jwQDwYQdDcBqECv4uZ970=) 9: rxtrSvmD_RFnWzieVlVkl0VvNHg.roa (hash: /miHkpCVQbdxK2uWlYSN1Ko3dggZV4gzjlL/pMNtIqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:53:af:1e:08:31:9f:86:f9:65:ec:54:a2:d3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Validity Not Before: Dec 21 02:00:49 2025 GMT Not After : Dec 22 02:00:49 2025 GMT Subject: CN=655de51ca6c9ede15d622be7be8511ce6784b365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0b:e3:2b:88:6f:99:bc:ed:f4:41:74:11:60: a2:be:0d:db:00:6b:c9:6b:73:a8:e3:7e:d6:e4:13: 72:ad:bd:cb:9a:d6:26:90:f0:87:10:7b:cf:56:5e: dc:9c:1d:9c:4a:14:c0:3f:39:d1:27:a4:43:2c:39: 24:13:5c:16:79:2a:03:10:7c:2c:4b:e2:2c:a2:dd: dc:6a:25:b5:77:04:81:f5:f1:7c:f1:57:49:bf:45: 30:08:dd:49:aa:e3:61:cc:e7:2a:f7:53:82:ad:00: 0e:08:32:ae:ea:ff:9e:78:93:f1:71:c1:ed:84:3b: 01:5e:d6:fe:9e:bf:07:6c:39:6d:3f:f0:92:1c:db: 76:d1:8b:06:96:22:0b:40:9b:a3:22:a6:74:0c:43: d2:b8:1a:0d:64:84:97:b6:6b:e1:75:75:bd:51:a2: 84:6a:f4:8e:51:20:1d:f3:37:a9:5a:07:95:96:93: e7:35:ca:3e:3a:80:a5:3a:48:c2:0b:24:96:5f:7d: ad:d2:1b:04:f6:b7:db:03:4c:a0:a3:e8:7b:04:b9: cb:ed:8f:69:53:56:f3:3a:35:36:f5:4e:63:4e:81: f5:7c:19:f1:88:c7:0f:ed:42:1e:00:b6:fb:b3:10: 01:8c:25:8a:7a:10:e8:27:ac:78:fe:0b:a7:1a:90: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5D:E5:1C:A6:C9:ED:E1:5D:62:2B:E7:BE:85:11:CE:67:84:B3:65 X509v3 Authority Key Identifier: keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:70:a4:ff:5a:0a:5c:be:87:2e:94:11:fd:16:ad:6e:a5:2a: 51:de:a6:86:5e:8b:24:70:de:7d:e7:d9:b5:c8:25:3c:cd:fe: b1:59:71:53:06:e6:da:65:6f:b8:aa:70:61:c5:d7:7d:56:56: 8b:47:cd:17:d6:a6:fe:fc:17:c7:30:a1:73:ea:d3:0e:18:7a: 7a:2a:bd:b2:a8:24:b8:99:75:40:30:c3:96:e2:f0:92:1d:2f: 93:84:cd:4a:fb:2b:38:4e:af:78:ae:f3:48:b9:b6:d2:41:73: 34:c0:18:c3:d2:bd:7b:e0:41:10:3e:47:98:ff:00:26:de:c2: 88:a9:e7:aa:94:b6:e4:35:ff:a9:0e:8e:b0:62:af:1f:59:4d: 37:2f:c5:df:f5:dc:8d:87:7c:80:1d:6d:37:a4:d0:13:2a:63: f6:18:b7:f4:3c:e1:b4:d5:1a:20:9f:c6:dd:c3:da:60:25:a1: 6c:22:fd:12:51:c1:bc:b7:88:a1:ef:ec:87:94:8c:ca:b2:60: fe:dd:c0:7c:1d:5d:cb:52:5f:1e:a7:33:50:97:b1:c5:0b:aa: 44:c2:94:07:fc:9b:42:bf:fe:f6:c9:c4:41:50:96:51:ac:a6: aa:92:66:42:b4:12:43:1f:fc:3e:b9:ec:08:f2:68:d6:94:0d: 69:a3:f6:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o1OvHggxn4b5ZexUotPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk NThjNDYwHhcNMjUxMjIxMDIwMDQ5WhcNMjUxMjIyMDIwMDQ5WjAzMTEwLwYDVQQD Eyg2NTVkZTUxY2E2YzllZGUxNWQ2MjJiZTdiZTg1MTFjZTY3ODRiMzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywvjK4hvmbzt9EF0EWCivg3bAGvJ a3Oo437W5BNyrb3LmtYmkPCHEHvPVl7cnB2cShTAPznRJ6RDLDkkE1wWeSoDEHws S+Isot3caiW1dwSB9fF88VdJv0UwCN1JquNhzOcq91OCrQAOCDKu6v+eeJPxccHt hDsBXtb+nr8HbDltP/CSHNt20YsGliILQJujIqZ0DEPSuBoNZISXtmvhdXW9UaKE avSOUSAd8zepWgeVlpPnNco+OoClOkjCCySWX32t0hsE9rfbA0ygo+h7BLnL7Y9p U1bzOjU29U5jToH1fBnxiMcP7UIeALb7sxABjCWKehDoJ6x4/gunGpBYXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVd5Rymye3hXWIr576FEc5nhLNlMB8GA1UdIwQY MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt N2QxNmI5MGRiZTcyLzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXCk/1oK XL6HLpQR/RatbqUqUd6mhl6LJHDefefZtcglPM3+sVlxUwbm2mVvuKpwYcXXfVZW i0fNF9am/vwXxzChc+rTDhh6eiq9sqgkuJl1QDDDluLwkh0vk4TNSvsrOE6veK7z SLm20kFzNMAYw9K9e+BBED5HmP8AJt7CiKnnqpS25DX/qQ6OsGKvH1lNNy/F3/Xc jYd8gB1tN6TQEypj9hi39DzhtNUaIJ/G3cPaYCWhbCL9ElHBvLeIoe/sh5SMyrJg /t3AfB1dy1JfHqczUJexxQuqRMKUB/ybQr/+9snEQVCWUaymqpJmQrQSQx/8Prns CPJo1pQNaaP23w== -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:13 2025 by rpki-client