This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft File: MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft (raw, json) Hash identifier: LN0b1FPr7DVOEFnorxQqAj4jhYZXJ1LVbAU6neTymCE= Subject key identifier: 83:1A:B1:D9:C1:2C:6D:B3:DF:C9:84:62:C1:9A:46:F7:14:74:B9:8B Authority key identifier: 32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6 Certificate issuer: /CN=32e88a8c3f2f24d693316d1f211edeeb232342a6 Certificate serial: 019B405B692D2A510D778B6D61E0A8756AB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft Manifest number: 091D Signing time: Sun 21 Dec 2025 10:01:31 +0000 Manifest this update: Sun 21 Dec 2025 10:01:31 +0000 Manifest next update: Mon 22 Dec 2025 10:01:31 +0000 Files and hashes: 1: MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl (hash: 6rkgQRItJZ5DBLhGUuy/qOCpvEclh1RqzmCUunbOL8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:69:2d:2a:51:0d:77:8b:6d:61:e0:a8:75:6a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e88a8c3f2f24d693316d1f211edeeb232342a6 Validity Not Before: Dec 21 10:01:31 2025 GMT Not After : Dec 22 10:01:31 2025 GMT Subject: CN=831ab1d9c12c6db3dfc98462c19a46f71474b98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:8d:fa:b9:f9:e6:56:10:8e:f2:57:75:cd: d3:f1:72:d2:d2:7d:d6:fa:ac:a6:cd:9f:8d:15:dd: 00:9d:dd:b1:dc:bd:4f:52:e8:3c:0b:95:70:3f:cf: b6:8d:63:f3:d0:65:4c:13:03:fa:00:22:10:ff:8d: 10:2f:48:ad:b4:48:28:2d:6e:42:86:90:f1:b0:1e: 43:b4:79:84:12:9c:12:f3:66:45:d3:27:c2:a1:ca: e5:17:bb:9c:0c:67:30:15:54:e8:0f:ca:93:e3:f4: e5:9e:1c:40:d3:63:77:99:2b:d4:1a:9f:96:96:da: 47:00:0d:fc:48:99:b0:69:a0:dc:39:03:8c:4c:08: 56:59:df:74:fc:58:a5:94:a6:97:a0:b0:55:8f:7e: ff:d4:f6:da:d4:68:7f:6b:ff:da:0a:db:1f:1b:7c: 77:46:87:9e:0c:a2:24:20:39:97:39:69:ce:5d:47: 77:f7:f9:a2:76:94:5b:8f:56:31:52:da:3d:53:70: 8e:14:56:d5:d8:f7:a9:90:8d:de:55:39:e0:4f:f0: 78:99:59:3f:d2:f0:ec:fa:65:e4:60:07:11:f7:ac: 53:0b:8b:14:0d:fd:d3:b5:51:17:97:0b:bd:b0:b4: 21:3a:90:de:02:c3:cb:4a:83:9c:c2:79:47:11:17: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1A:B1:D9:C1:2C:6D:B3:DF:C9:84:62:C1:9A:46:F7:14:74:B9:8B X509v3 Authority Key Identifier: keyid:32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f7:f8:7d:f7:5c:29:74:6c:e8:23:66:c5:cd:81:7c:ba:90: fc:9e:4a:f4:08:a0:2f:be:56:75:7f:bc:ef:a6:20:40:13:29: c2:b5:92:6f:51:a6:03:2b:2c:4f:b3:da:2a:0b:e3:70:f2:84: 16:6e:ff:1d:1d:7a:e5:18:20:02:38:55:90:5c:df:53:ac:2b: 14:cd:4f:6e:f3:db:52:9a:f1:2d:a6:14:1b:0a:81:da:6c:74: 17:6a:c8:e5:c6:20:2d:0a:18:70:e4:9d:ac:ca:77:41:d2:a3: 52:ba:08:42:82:5b:68:16:24:76:35:19:b4:7c:ca:c8:6b:d8: 92:e2:10:cf:7c:6c:06:69:82:95:90:d3:32:94:c5:a1:b3:6c: 03:c5:89:91:3c:cb:7c:79:87:8e:17:87:18:db:0c:cf:23:df: a3:0f:75:c0:d2:33:00:29:cf:be:8f:55:d6:c1:ed:ef:02:44: 26:21:4b:d9:f6:a4:4d:b2:93:09:f3:94:8b:0e:ed:48:d9:49: d9:00:e0:25:91:3e:1e:3c:ff:64:93:f6:c5:48:09:2c:6e:97: fa:11:1f:da:ab:6f:d9:01:d8:d6:e3:c4:70:0a:20:19:3f:31: c1:55:bc:65:86:05:17:e4:90:1e:a6:25:7d:1b:95:b7:ff:61: 40:3b:b4:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW2ktKlENd4ttYeCodWq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZTg4YThjM2YyZjI0ZDY5MzMxNmQxZjIxMWVkZWViMjMy MzQyYTYwHhcNMjUxMjIxMTAwMTMxWhcNMjUxMjIyMTAwMTMxWjAzMTEwLwYDVQQD Eyg4MzFhYjFkOWMxMmM2ZGIzZGZjOTg0NjJjMTlhNDZmNzE0NzRiOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pCN+rn55lYQjvJXdc3T8XLS0n3W +qymzZ+NFd0And2x3L1PUug8C5VwP8+2jWPz0GVMEwP6ACIQ/40QL0ittEgoLW5C hpDxsB5DtHmEEpwS82ZF0yfCocrlF7ucDGcwFVToD8qT4/TlnhxA02N3mSvUGp+W ltpHAA38SJmwaaDcOQOMTAhWWd90/FillKaXoLBVj37/1Pba1Gh/a//aCtsfG3x3 RoeeDKIkIDmXOWnOXUd39/midpRbj1YxUto9U3COFFbV2PepkI3eVTngT/B4mVk/ 0vDs+mXkYAcR96xTC4sUDf3TtVEXlwu9sLQhOpDeAsPLSoOcwnlHEReoHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMasdnBLG2z38mEYsGaRvcUdLmLMB8GA1UdIwQY MBaAFDLoiow/LyTWkzFtHyEe3usjI0KmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVpS2pEOHZKTmFUTVcwZklSN2U2eU1qUXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wNmQzYmUtMDI1Yi00ZDEwLWE3OTkt NzkxNjE1ODczZDk0LzEvTXVpS2pEOHZKTmFUTVcwZklSN2U2eU1qUXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wNmQzYmUtMDI1Yi00ZDEwLWE3OTktNzkxNjE1ODczZDk0 LzEvTXVpS2pEOHZKTmFUTVcwZklSN2U2eU1qUXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqff4ffdc KXRs6CNmxc2BfLqQ/J5K9AigL75WdX+876YgQBMpwrWSb1GmAyssT7PaKgvjcPKE Fm7/HR165RggAjhVkFzfU6wrFM1PbvPbUprxLaYUGwqB2mx0F2rI5cYgLQoYcOSd rMp3QdKjUroIQoJbaBYkdjUZtHzKyGvYkuIQz3xsBmmClZDTMpTFobNsA8WJkTzL fHmHjheHGNsMzyPfow91wNIzACnPvo9V1sHt7wJEJiFL2fakTbKTCfOUiw7tSNlJ 2QDgJZE+Hjz/ZJP2xUgJLG6X+hEf2qtv2QHY1uPEcAogGT8xwVW8ZYYFF+SQHqYl fRuVt/9hQDu0bQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:46:51 2025 by rpki-client