This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json) Hash identifier: BSY2WrfKCL3KHuIrIsTgauwsXul8cwpyn+zrNINvh1c= Subject key identifier: 54:88:D6:B7:35:2C:23:14:C4:BF:A2:8F:1B:4A:D6:8B:52:E1:6E:3C Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad Certificate serial: 019B2EF9DD0E7682957A0676BCE89030BB0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft Manifest number: 1541 Signing time: Thu 18 Dec 2025 01:01:25 +0000 Manifest this update: Thu 18 Dec 2025 01:01:25 +0000 Manifest next update: Fri 19 Dec 2025 01:01:25 +0000 Files and hashes: 1: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: Q8k6A+DoHCeksDEMcLqvFanFbB93Fnspqzoqujepri4=) 2: wrVdtsFJg-xxcwL89uUP6qnVtLk.roa (hash: Y5fuW3nl7fba2JKNfboUC/pVBV59jurhYdqhnS+frGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:dd:0e:76:82:95:7a:06:76:bc:e8:90:30:bb:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad Validity Not Before: Dec 18 01:01:25 2025 GMT Not After : Dec 19 01:01:25 2025 GMT Subject: CN=5488d6b7352c2314c4bfa28f1b4ad68b52e16e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:97:67:56:09:11:6a:9b:83:0b:2f:f9:a7: 60:79:c8:4b:db:43:64:c2:f9:5f:80:d9:5e:9e:06: 4a:2d:c0:92:aa:fa:4a:be:f9:8e:17:5e:5a:84:fb: 3e:e7:e5:aa:53:5d:0c:38:25:2e:ef:2f:3f:44:ff: 87:93:29:85:5c:58:93:b8:6b:a5:9c:c6:fd:73:7d: 7c:af:4d:04:45:e9:54:9f:14:08:d7:93:d5:ee:b6: a6:2a:50:96:21:b8:bf:fd:4c:25:d5:0b:62:a0:91: 73:74:79:c7:b3:b7:91:fb:07:cd:06:77:e7:c2:fa: 7c:4c:68:d5:ea:73:6e:a3:7e:26:6f:e3:7d:ba:b3: f6:78:e5:c1:3a:a4:6c:aa:22:ca:66:67:42:af:8a: 45:d1:98:a6:98:09:50:a6:ac:35:22:9e:8b:0c:41: 6d:0d:84:26:25:17:bf:75:0b:85:82:1f:52:eb:1e: 6a:3d:d6:2f:eb:2d:6f:79:92:73:61:cc:a4:c6:49: 96:90:94:c1:e4:de:69:bd:38:97:bf:23:4a:57:e5: 10:91:f8:35:cf:59:ed:25:ed:56:f7:5c:06:5c:c0: da:e5:58:ed:7c:63:6b:b1:20:2c:ad:9f:3d:99:c5: 8b:e3:07:19:7b:04:d5:39:b5:fa:08:de:17:86:fc: 68:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:88:D6:B7:35:2C:23:14:C4:BF:A2:8F:1B:4A:D6:8B:52:E1:6E:3C X509v3 Authority Key Identifier: keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f2:d3:d3:f3:a4:d9:fb:e8:9f:00:00:92:ea:7a:23:0d:6a:a4: 16:10:0e:c6:93:73:7a:db:59:ff:a7:ca:92:9b:b8:ac:cd:a2: 75:f3:f2:56:4b:d2:91:cd:f8:8f:15:0d:9e:f5:19:72:cc:b2: 66:0f:6c:60:9a:63:5c:b7:eb:f8:1f:0d:a3:4a:fe:a9:9b:02: f1:3d:50:db:61:82:ab:20:10:45:28:6f:c5:6e:86:fb:dc:24: b3:e5:4a:6a:94:ce:84:1f:8a:5e:b1:0e:80:ec:92:39:1b:e3: de:16:36:fa:0f:75:ae:dd:9a:15:06:81:25:9a:3f:aa:5a:76: d6:9c:ad:6c:0f:32:ee:8c:ff:cb:13:2a:0c:ba:af:14:7b:31: 6e:9f:6e:b3:84:54:bc:a4:a7:51:81:b9:2e:02:68:52:7f:45: 43:09:84:82:98:65:11:8f:e5:e6:b1:fb:dc:e7:7d:49:11:67: a3:1d:f2:c4:14:4d:2d:0f:8c:ea:b2:0c:ab:67:30:ca:85:25: 1c:97:3c:8c:88:d5:ec:11:c0:40:d2:18:de:8c:4e:f7:8e:2f: 9d:49:89:67:77:9c:ad:98:ac:14:34:58:59:a0:80:6d:67:7d: ac:73:89:35:d8:f7:1d:74:fc:11:d0:2a:71:80:c2:9c:d8:46: 66:14:1c:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+d0OdoKVegZ2vOiQMLsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTA4NTNhMjRhOGM3NjIyMzRlODkxM2E0YTViMjk4NWMz MzFkYWQwHhcNMjUxMjE4MDEwMTI1WhcNMjUxMjE5MDEwMTI1WjAzMTEwLwYDVQQD Eyg1NDg4ZDZiNzM1MmMyMzE0YzRiZmEyOGYxYjRhZDY4YjUyZTE2ZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYSXZ1YJEWqbgwsv+adgechL20Nk wvlfgNlengZKLcCSqvpKvvmOF15ahPs+5+WqU10MOCUu7y8/RP+HkymFXFiTuGul nMb9c318r00ERelUnxQI15PV7ramKlCWIbi//Uwl1QtioJFzdHnHs7eR+wfNBnfn wvp8TGjV6nNuo34mb+N9urP2eOXBOqRsqiLKZmdCr4pF0ZimmAlQpqw1Ip6LDEFt DYQmJRe/dQuFgh9S6x5qPdYv6y1veZJzYcykxkmWkJTB5N5pvTiXvyNKV+UQkfg1 z1ntJe1W91wGXMDa5VjtfGNrsSAsrZ89mcWL4wcZewTVObX6CN4XhvxoPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSI1rc1LCMUxL+ijxtK1otS4W48MB8GA1UdIwQY MBaAFJpQhTokqMdiI06JE6SlsphcMx2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgt ODhiNThkMDJiMmExLzEvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgtODhiNThkMDJiMmEx LzEvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8tPT86TZ ++ifAACS6nojDWqkFhAOxpNzettZ/6fKkpu4rM2idfPyVkvSkc34jxUNnvUZcsyy Zg9sYJpjXLfr+B8No0r+qZsC8T1Q22GCqyAQRShvxW6G+9wks+VKapTOhB+KXrEO gOySORvj3hY2+g91rt2aFQaBJZo/qlp21pytbA8y7oz/yxMqDLqvFHsxbp9us4RU vKSnUYG5LgJoUn9FQwmEgphlEY/l5rH73Od9SRFnox3yxBRNLQ+M6rIMq2cwyoUl HJc8jIjV7BHAQNIY3oxO944vnUmJZ3ecrZisFDRYWaCAbWd9rHOJNdj3HXT8EdAq cYDCnNhGZhQcxg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:54:33 2025 by rpki-client