This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft File: Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft (raw, json) Hash identifier: opJ+RRP5wuMW4n4nQJPPyGakSsvRQgnguXWrL3EilD8= Subject key identifier: 4A:7C:F1:84:DA:0B:C3:0F:74:FC:BC:F4:80:29:2B:A3:86:EE:C5:D6 Authority key identifier: 32:58:25:EE:C0:EB:29:BD:73:09:A6:3B:DD:E1:AB:AB:4A:2F:D1:20 Certificate issuer: /CN=325825eec0eb29bd7309a63bdde1abab4a2fd120 Certificate serial: 019B3F11CA4D3DCA9500458EA9D74277474D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mlgl7sDrKb1zCaY73eGrq0ov0SA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft Manifest number: 09 Signing time: Sun 21 Dec 2025 04:01:29 +0000 Manifest this update: Sun 21 Dec 2025 04:01:29 +0000 Manifest next update: Mon 22 Dec 2025 04:01:29 +0000 Files and hashes: 1: Mlgl7sDrKb1zCaY73eGrq0ov0SA.crl (hash: kFJuIKkVvENuZWJj+jTsCmwvlPz5RsoLvLWyTR9XpZ4=) 2: _N2EzhO-sI-hW3uxZmSur0wvPcc.asa (hash: N3nDgYngcNpGOWA9Gx/XAjPMkOw+AGT9AcOb9PWgf4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft rsync://rpki.ripe.net/repository/DEFAULT/Mlgl7sDrKb1zCaY73eGrq0ov0SA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:ca:4d:3d:ca:95:00:45:8e:a9:d7:42:77:47:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325825eec0eb29bd7309a63bdde1abab4a2fd120 Validity Not Before: Dec 21 04:01:29 2025 GMT Not After : Dec 22 04:01:29 2025 GMT Subject: CN=4a7cf184da0bc30f74fcbcf480292ba386eec5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:ed:89:ac:33:0d:17:38:4d:f7:60:d7:d6: db:89:51:57:20:52:18:04:59:f6:a7:69:a1:02:ad: 9f:e6:81:d1:eb:32:00:e8:4f:02:90:22:6b:c4:ec: 17:38:00:56:d3:cc:2a:b2:73:7a:26:07:a2:71:4a: 0e:24:62:7d:38:ea:cc:70:f5:24:1e:78:70:bb:1a: 5c:05:2b:c3:e1:c7:e3:3e:a5:54:cb:b3:05:c8:c2: cf:94:d2:90:03:5a:da:a6:b3:f5:c1:12:6b:af:e1: 8b:fc:7c:fc:e6:60:33:3b:1d:a6:86:67:d1:97:93: 93:75:5b:10:93:00:4e:2d:0e:15:9f:96:cf:66:e8: cb:d7:ff:b2:49:50:9a:40:1a:c6:ca:d1:61:99:e8: ff:9d:86:67:aa:d2:4d:14:8d:7f:21:86:2d:af:dc: 2b:49:c3:b9:d9:2e:9b:8e:d5:7a:4f:64:4e:91:fd: f8:21:f2:99:99:7a:00:52:f7:30:c5:ae:4a:bd:8f: 1f:04:a1:d1:dc:b9:a2:6b:83:90:2f:b8:07:08:03: a7:d4:ca:37:d6:6b:c7:00:4f:2f:ea:3c:97:48:c4: fb:98:8c:72:91:8d:74:3c:49:8b:6e:18:3f:b6:d6: 8d:d0:5e:36:a9:f4:60:80:55:5b:a3:ae:89:80:a6: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7C:F1:84:DA:0B:C3:0F:74:FC:BC:F4:80:29:2B:A3:86:EE:C5:D6 X509v3 Authority Key Identifier: keyid:32:58:25:EE:C0:EB:29:BD:73:09:A6:3B:DD:E1:AB:AB:4A:2F:D1:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlgl7sDrKb1zCaY73eGrq0ov0SA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fa:06:1b:af:05:b6:35:06:70:bf:56:28:28:3f:29:1e:b9: 4d:c9:62:bc:09:3c:f1:68:35:e5:17:5a:46:9f:20:b7:4d:e2: 9a:34:72:16:2d:32:8d:df:92:50:94:df:e8:6b:ca:0b:58:17: 33:00:5c:47:0b:8c:1f:8b:d0:3c:19:72:8d:9f:dc:38:e2:ba: f5:9d:e8:ef:e4:76:61:4d:25:ef:f0:d0:f2:a9:94:c4:a6:25: c0:f6:f1:a1:95:d0:56:b2:fa:50:65:2d:12:1c:5c:54:2f:09: a6:3f:d1:6c:6c:53:c9:68:4c:ce:7a:70:5d:c3:8c:34:46:d0: 08:1d:48:f4:a9:ca:eb:d1:c0:bf:08:52:0c:24:da:7a:e1:5c: 92:b9:f0:dc:2d:e3:ec:1b:27:c2:14:d4:f6:c6:b7:69:19:da: 67:37:85:76:96:cd:d5:0e:87:57:96:32:51:5c:30:5a:06:e2: 95:69:16:58:33:8b:e3:f9:cc:29:ad:fd:2f:a8:b2:b7:f2:3d: eb:44:3f:47:7d:e3:1a:97:e3:a8:42:3a:5c:00:a1:be:cc:fe: 69:b2:41:f4:e0:2c:03:f3:b5:e2:77:db:dd:fa:86:99:43:eb: 9d:c7:52:b2:fb:21:76:ca:2b:af:83:53:c2:6b:dc:ce:e3:31: ee:ff:43:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EcpNPcqVAEWOqddCd0dNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTgyNWVlYzBlYjI5YmQ3MzA5YTYzYmRkZTFhYmFiNGEy ZmQxMjAwHhcNMjUxMjIxMDQwMTI5WhcNMjUxMjIyMDQwMTI5WjAzMTEwLwYDVQQD Eyg0YTdjZjE4NGRhMGJjMzBmNzRmY2JjZjQ4MDI5MmJhMzg2ZWVjNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX7tiawzDRc4Tfdg19bbiVFXIFIY BFn2p2mhAq2f5oHR6zIA6E8CkCJrxOwXOABW08wqsnN6JgeicUoOJGJ9OOrMcPUk HnhwuxpcBSvD4cfjPqVUy7MFyMLPlNKQA1raprP1wRJrr+GL/Hz85mAzOx2mhmfR l5OTdVsQkwBOLQ4Vn5bPZujL1/+ySVCaQBrGytFhmej/nYZnqtJNFI1/IYYtr9wr ScO52S6bjtV6T2ROkf34IfKZmXoAUvcwxa5KvY8fBKHR3Lmia4OQL7gHCAOn1Mo3 1mvHAE8v6jyXSMT7mIxykY10PEmLbhg/ttaN0F42qfRggFVbo66JgKYq/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEp88YTaC8MPdPy89IApK6OG7sXWMB8GA1UdIwQY MBaAFDJYJe7A6ym9cwmmO93hq6tKL9EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxnbDdzRHJLYjF6Q2FZNzNlR3JxMG92MFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMDg2MDQtOWJlYS00YWQxLWJjMDYt NzliNmUxMmVhMmM1LzEvTWxnbDdzRHJLYjF6Q2FZNzNlR3JxMG92MFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMDg2MDQtOWJlYS00YWQxLWJjMDYtNzliNmUxMmVhMmM1 LzEvTWxnbDdzRHJLYjF6Q2FZNzNlR3JxMG92MFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfoGG68F tjUGcL9WKCg/KR65TclivAk88Wg15RdaRp8gt03imjRyFi0yjd+SUJTf6GvKC1gX MwBcRwuMH4vQPBlyjZ/cOOK69Z3o7+R2YU0l7/DQ8qmUxKYlwPbxoZXQVrL6UGUt EhxcVC8Jpj/RbGxTyWhMznpwXcOMNEbQCB1I9KnK69HAvwhSDCTaeuFckrnw3C3j 7BsnwhTU9sa3aRnaZzeFdpbN1Q6HV5YyUVwwWgbilWkWWDOL4/nMKa39L6iyt/I9 60Q/R33jGpfjqEI6XAChvsz+abJB9OAsA/O14nfb3fqGmUPrncdSsvshdsorr4NT wmvczuMx7v9DbA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:54:30 2025 by rpki-client