This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json) Hash identifier: ed3WN0QrfYqFKZGsVeV3oJZtRfKEiNFu32YVly3VQvw= Subject key identifier: 40:D8:E6:29:1B:EE:A7:24:D0:DE:9B:88:06:F7:AD:0B:0C:52:0C:50 Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9 Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9 Certificate serial: 019B23D0A6D320E6E0EFCE9E654E5B6300FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft Manifest number: 0CEC Signing time: Mon 15 Dec 2025 21:00:35 +0000 Manifest this update: Mon 15 Dec 2025 21:00:35 +0000 Manifest next update: Tue 16 Dec 2025 21:00:35 +0000 Files and hashes: 1: c4U2evb93678CsrZ2ZQQemAPoFw.roa (hash: 5ZLOIZ+BzX8i3ipSMR9csvqZ6+nojKYy3y5RkNukgEE=) 2: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: SrtMqWcxrUdrosMch+PO6HsZYpsU0/iktEMM6I+IQCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:a6:d3:20:e6:e0:ef:ce:9e:65:4e:5b:63:00:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9 Validity Not Before: Dec 15 21:00:35 2025 GMT Not After : Dec 16 21:00:35 2025 GMT Subject: CN=40d8e6291beea724d0de9b8806f7ad0b0c520c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:10:54:b7:6f:2d:84:e0:46:39:9a:2e:14: a0:2b:aa:a6:ca:f2:c8:63:4c:d0:ff:bf:c3:ea:8a: 9d:b2:84:8a:e7:4e:45:1f:9c:17:15:6c:bd:a8:b3: 22:24:b9:0e:7a:f2:9f:07:e6:f9:e8:32:ff:3a:20: 71:1a:fe:7a:ea:2d:b4:7b:3c:f3:4d:c3:36:e9:95: 54:4d:c3:36:ba:e6:89:49:af:a5:6f:1c:a1:77:4e: de:6e:f3:fc:c0:60:54:77:c0:f9:71:cc:26:95:7b: 36:74:d0:7a:7c:0b:af:e9:35:99:98:5a:08:c7:fd: a1:e0:fd:bd:1a:97:17:6f:db:3e:16:7f:18:c3:c6: 15:2e:9b:0f:e9:4f:5f:a7:d2:0a:98:85:c3:8a:a6: cb:b0:dc:ce:b0:73:25:03:95:da:39:fa:5e:f0:c8: 08:0f:a2:65:85:bc:4c:da:99:3c:36:97:5b:8a:48: 32:bb:74:ce:a9:13:7e:c9:27:e6:00:30:92:53:19: 44:f4:32:02:b5:bc:b0:be:3e:0a:76:5e:37:12:73: 23:eb:d2:b4:58:05:e6:4c:16:22:50:cb:2a:74:c0: a3:52:9a:34:81:30:e0:e2:3c:c7:a1:d1:68:7f:0e: 9b:ef:a0:ef:11:68:7e:75:f7:6e:a3:ed:24:f3:a5: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D8:E6:29:1B:EE:A7:24:D0:DE:9B:88:06:F7:AD:0B:0C:52:0C:50 X509v3 Authority Key Identifier: keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2d:11:84:88:c6:20:53:a1:ea:24:3b:d4:4d:73:a2:ae:ed: 37:24:c9:86:68:77:f5:73:b7:2c:e5:ee:1b:78:97:c5:18:05: 98:a1:17:70:a9:d8:db:40:12:ee:7a:47:fb:50:c2:03:90:0f: 67:ca:32:8a:04:c1:aa:e0:15:a5:af:c0:2b:26:c4:08:7c:4c: 18:6f:54:99:07:83:02:84:b1:43:b2:dd:6c:16:f2:66:a4:53: c0:2f:1f:ea:e3:8f:ae:ab:c1:8a:fc:3a:0d:8a:8e:6a:d3:b9: 62:b2:07:43:22:51:7e:ff:29:5f:0b:eb:d3:12:e6:c4:49:67: 04:4d:70:71:1c:15:21:d6:54:ca:4e:6f:01:3f:a8:f9:98:b6: 7f:10:ed:f9:dc:38:1c:57:ca:53:63:7c:84:f8:04:85:39:46: 64:e0:5a:91:b2:15:f0:66:18:95:e9:8d:dc:dc:ed:23:68:10: 87:05:1d:9c:56:41:42:94:6b:8f:1f:f2:aa:c2:55:cc:50:d1: 58:a7:52:87:2b:d1:96:43:33:fe:d7:3c:8a:fa:7f:59:0f:e2: a6:15:0b:0d:c9:08:9d:49:22:46:4e:ed:95:88:ca:38:a4:44: aa:cb:4f:05:c7:2c:73:23:f4:ac:8c:31:d5:9a:dd:8d:d8:f5: 4e:23:4f:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0KbTIObg786eZU5bYwD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwY2JhYTZiMzZlNmNkNjg3NGM3OGVkNDVhNGY4ZGQ3MTcz MDMxZDkwHhcNMjUxMjE1MjEwMDM1WhcNMjUxMjE2MjEwMDM1WjAzMTEwLwYDVQQD Eyg0MGQ4ZTYyOTFiZWVhNzI0ZDBkZTliODgwNmY3YWQwYjBjNTIwYzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZYQVLdvLYTgRjmaLhSgK6qmyvLI Y0zQ/7/D6oqdsoSK505FH5wXFWy9qLMiJLkOevKfB+b56DL/OiBxGv566i20ezzz TcM26ZVUTcM2uuaJSa+lbxyhd07ebvP8wGBUd8D5ccwmlXs2dNB6fAuv6TWZmFoI x/2h4P29GpcXb9s+Fn8Yw8YVLpsP6U9fp9IKmIXDiqbLsNzOsHMlA5XaOfpe8MgI D6JlhbxM2pk8Npdbikgyu3TOqRN+ySfmADCSUxlE9DICtbywvj4Kdl43EnMj69K0 WAXmTBYiUMsqdMCjUpo0gTDg4jzHodFofw6b76DvEWh+dfduo+0k86UdAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDY5ikb7qck0N6biAb3rQsMUgxQMB8GA1UdIwQY MBaAFJDLqms25s1odMeO1FpPjdcXMDHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5Njgt YjZkNGM0ZmMwYzIxLzEva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5NjgtYjZkNGM0ZmMwYzIx LzEva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANS0RhIjG IFOh6iQ71E1zoq7tNyTJhmh39XO3LOXuG3iXxRgFmKEXcKnY20AS7npH+1DCA5AP Z8oyigTBquAVpa/AKybECHxMGG9UmQeDAoSxQ7LdbBbyZqRTwC8f6uOPrqvBivw6 DYqOatO5YrIHQyJRfv8pXwvr0xLmxElnBE1wcRwVIdZUyk5vAT+o+Zi2fxDt+dw4 HFfKU2N8hPgEhTlGZOBakbIV8GYYlemN3NztI2gQhwUdnFZBQpRrjx/yqsJVzFDR WKdShyvRlkMz/tc8ivp/WQ/iphULDckInUkiRk7tlYjKOKREqstPBccscyP0rIwx 1Zrdjdj1TiNPmQ== -----END CERTIFICATE-----Generated at Tue Dec 16 00:11:51 2025 by rpki-client