This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json) Hash identifier: p3M9HTR5gUnC8MFN47C8l+CjewPIy7aNmkqF8cVp21Y= Subject key identifier: 0C:60:97:37:7E:18:CF:2D:D1:AA:C2:E4:71:FC:99:52:65:DF:D7:8A Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47 Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47 Certificate serial: 019B3AC68915E58AD45AC938EC56C59FCD41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft Manifest number: 0EB0 Signing time: Sat 20 Dec 2025 08:00:48 +0000 Manifest this update: Sat 20 Dec 2025 08:00:48 +0000 Manifest next update: Sun 21 Dec 2025 08:00:48 +0000 Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=) 2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=) 3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: ar6TRqU/eBSrkH8hfL1EDLMdE3wnPe9riN2ylt22rpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:89:15:e5:8a:d4:5a:c9:38:ec:56:c5:9f:cd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47 Validity Not Before: Dec 20 08:00:48 2025 GMT Not After : Dec 21 08:00:48 2025 GMT Subject: CN=0c6097377e18cf2dd1aac2e471fc995265dfd78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:4f:82:27:4a:7c:f8:16:8c:13:d1:37:92: 70:78:8e:1a:86:ab:f1:33:0c:a7:59:83:f6:21:d6: 6d:5b:53:7f:30:dc:f1:d5:52:2b:23:e5:ab:4e:df: 03:e6:a8:cc:df:66:64:67:bc:fb:1d:9d:fd:a2:9b: 52:e6:c8:a4:f9:0e:15:c6:46:4f:74:0c:f9:1c:ba: 46:1f:73:24:90:3e:be:2f:44:50:6a:4d:c8:c9:a1: 97:b9:8d:c8:ce:1f:2f:7c:b8:aa:77:c7:53:4d:b6: 8e:45:eb:83:ce:0d:37:eb:48:54:6f:2a:cb:49:cc: e7:2d:c8:12:69:66:32:93:11:3b:75:5e:55:ab:6e: 94:ee:1b:b8:02:ee:41:5f:a5:fb:43:8e:b5:3f:1b: db:b8:c5:71:04:7b:b9:cc:b2:3a:1b:70:dd:b8:fb: 60:be:cb:93:80:41:c6:5b:3a:d4:40:e1:a2:98:68: d3:c1:6c:2b:ea:fd:aa:bc:8b:70:67:3e:3b:39:0c: 44:ef:9e:42:4b:34:d2:da:47:19:7f:d3:51:b8:4a: 33:59:7c:ff:92:95:6f:5d:45:af:85:5c:ea:53:0e: f1:2f:0a:51:ab:bf:ba:68:16:1e:3e:e9:40:27:88: 5d:50:82:08:26:c3:ea:33:3d:e5:03:a9:90:3d:d0: 93:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:60:97:37:7E:18:CF:2D:D1:AA:C2:E4:71:FC:99:52:65:DF:D7:8A X509v3 Authority Key Identifier: keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:46:a4:36:cc:a1:2b:81:35:4a:cc:3c:1a:6e:5e:18:c2:f2: 60:af:12:f6:19:97:5c:ec:d1:75:b7:b0:49:2d:c2:8c:30:c1: 08:4c:ea:9a:93:13:b5:78:95:77:5c:44:69:7c:88:50:75:ee: 6f:69:b6:ea:d1:58:93:67:bb:86:f7:f4:5f:fa:c0:40:b5:3e: 4c:b6:0c:5a:f9:6f:26:57:69:20:08:02:c5:f0:4e:6f:f4:13: c7:34:2c:4b:43:46:8b:16:be:dc:c6:b3:de:96:39:e5:20:ec: 40:75:2f:ea:a4:bf:3d:0e:ae:a6:74:52:7f:5d:cd:ab:51:a9: 2b:e8:5c:6c:c5:75:8d:78:6b:86:9b:96:3e:44:67:81:82:7d: b6:a2:44:ae:8b:b6:a1:d2:2c:44:34:8c:e0:a3:98:2f:4d:d0: 34:f4:88:7d:40:2a:c9:bd:a8:d7:da:b5:ea:56:90:ec:e3:d5: 34:99:e6:8a:20:c0:c8:d1:15:5a:eb:53:f4:fd:71:bf:9e:39: b9:29:01:11:24:b0:a1:2c:bb:94:e6:cb:47:1a:ac:6b:dc:29: 49:b8:f0:90:ac:51:6a:22:ee:b1:4b:28:53:97:3a:38:c1:fd: d7:68:c6:6a:32:21:b5:73:f6:03:36:ea:5c:f6:1e:11:c8:3f: ab:42:56:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xokV5YrUWsk47FbFn81BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj NjZlNDcwHhcNMjUxMjIwMDgwMDQ4WhcNMjUxMjIxMDgwMDQ4WjAzMTEwLwYDVQQD EygwYzYwOTczNzdlMThjZjJkZDFhYWMyZTQ3MWZjOTk1MjY1ZGZkNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jtPgidKfPgWjBPRN5JweI4ahqvx MwynWYP2IdZtW1N/MNzx1VIrI+WrTt8D5qjM32ZkZ7z7HZ39optS5sik+Q4VxkZP dAz5HLpGH3MkkD6+L0RQak3IyaGXuY3Izh8vfLiqd8dTTbaOReuDzg0360hUbyrL ScznLcgSaWYykxE7dV5Vq26U7hu4Au5BX6X7Q461PxvbuMVxBHu5zLI6G3DduPtg vsuTgEHGWzrUQOGimGjTwWwr6v2qvItwZz47OQxE755CSzTS2kcZf9NRuEozWXz/ kpVvXUWvhVzqUw7xLwpRq7+6aBYePulAJ4hdUIIIJsPqMz3lA6mQPdCTwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxglzd+GM8t0arC5HH8mVJl39eKMB8GA1UdIwQY MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEakNsyh K4E1Ssw8Gm5eGMLyYK8S9hmXXOzRdbewSS3CjDDBCEzqmpMTtXiVd1xEaXyIUHXu b2m26tFYk2e7hvf0X/rAQLU+TLYMWvlvJldpIAgCxfBOb/QTxzQsS0NGixa+3Maz 3pY55SDsQHUv6qS/PQ6upnRSf13Nq1GpK+hcbMV1jXhrhpuWPkRngYJ9tqJErou2 odIsRDSM4KOYL03QNPSIfUAqyb2o19q16laQ7OPVNJnmiiDAyNEVWutT9P1xv545 uSkBESSwoSy7lObLRxqsa9wpSbjwkKxRaiLusUsoU5c6OMH912jGajIhtXP2Azbq XPYeEcg/q0JWng== -----END CERTIFICATE-----Generated at Sat Dec 20 10:42:33 2025 by rpki-client