This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft File: MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json) Hash identifier: xUh9bVizclUnKhGx4dKhfALhf1E6X7DAbni/W5gbtsw= Subject key identifier: 4B:D1:16:BF:BD:17:84:36:23:41:02:4E:48:CC:58:40:B5:76:04:26 Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC Certificate issuer: /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc Certificate serial: 019B5975D5952ED6F9FF2D94430D3617794A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 07:00:53 +0000 Manifest this update: Fri 26 Dec 2025 07:00:53 +0000 Manifest next update: Sat 27 Dec 2025 07:00:53 +0000 Files and hashes: 1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: oUbN+Ry7jMnz6cCXCToLrtDgZW/yMMEVnGLeJMheBXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:d5:95:2e:d6:f9:ff:2d:94:43:0d:36:17:79:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc Validity Not Before: Dec 26 07:00:53 2025 GMT Not After : Dec 27 07:00:53 2025 GMT Subject: CN=4bd116bfbd1784362341024e48cc5840b5760426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:6a:dc:ca:61:78:53:6a:78:6c:76:77:b6: 33:d1:90:58:99:a1:f9:a5:1a:c1:0d:f0:ff:20:25: 44:9c:a1:39:e7:4d:b4:73:08:31:8c:6f:ea:31:0d: 2b:8a:3a:50:2f:b7:1d:f7:92:96:cf:e6:1f:17:f2: 1e:8b:43:0a:23:b6:5a:5f:b0:09:69:54:d6:1a:82: 35:56:8d:ed:82:ca:7c:9b:d3:ab:55:5c:fb:d6:c2: 9b:28:24:e6:29:c6:7e:1c:e9:c6:44:eb:d2:a3:e0: 77:b8:5d:f3:9e:78:c9:a1:36:d9:df:a9:6c:8e:ef: 92:7e:71:28:d2:98:f1:96:24:69:fa:d9:75:2e:74: 27:8b:66:6a:b2:c1:00:58:22:f5:ca:d6:30:bf:ec: 32:2b:48:42:59:84:31:95:15:7a:26:cc:43:cb:dc: e9:88:06:00:6e:7a:43:cc:e0:db:a7:9a:6f:fd:ca: f4:ea:9d:08:6c:8d:68:32:56:c4:8e:b9:94:a7:51: 17:ea:3a:3b:8a:48:9b:7e:d0:b2:96:1a:b9:f6:5a: 39:43:61:65:13:6b:3b:53:09:2f:42:6b:e8:a6:e5: ea:50:a6:64:dd:c0:9c:1e:0d:fe:2f:dc:09:80:f2: ef:bf:72:80:40:47:d7:ff:07:33:06:68:4e:db:f4: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D1:16:BF:BD:17:84:36:23:41:02:4E:48:CC:58:40:B5:76:04:26 X509v3 Authority Key Identifier: keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ef:57:47:75:c6:57:74:09:06:4d:15:e1:fd:00:9b:43:02: 99:83:1a:93:ed:83:77:3c:23:8b:8a:90:fa:ce:c3:33:c3:59: d1:b4:7b:a2:23:e3:9b:c5:d1:16:90:44:6a:76:b0:c5:81:77: 3e:ee:06:75:29:40:39:7a:4f:41:3d:c2:08:a4:bb:de:ad:d8: 80:c1:fb:a0:51:88:e1:64:fc:6d:8d:b4:40:4d:9e:d3:3f:6e: bd:77:1a:1e:9b:21:0f:a0:03:e4:cb:98:e0:45:0e:ae:e3:86: 8f:4a:ec:b3:84:34:82:b2:c8:da:b1:e2:47:a1:6d:bd:ac:c0: 84:5f:8d:23:d7:ea:b9:b9:ea:63:3f:93:97:fb:33:95:02:4f: 69:14:bb:87:b8:59:66:6c:87:63:2c:71:83:bd:ac:d6:d8:fb: e9:9e:32:bd:f6:c8:80:70:7f:4c:93:37:b7:b4:85:fd:50:9a: bd:76:19:eb:f3:57:9a:aa:52:0f:cb:1e:2c:d5:32:59:8f:32: bc:62:6c:9e:53:23:a8:5b:3b:3b:14:7f:6c:cc:e8:5d:ff:9e: 29:a6:95:6f:ca:48:1c:95:ca:2a:5a:5c:3c:af:7f:b5:14:84: b6:aa:bc:25:6a:ce:35:40:b9:b8:26:0d:0c:1b:cd:0e:2c:f1: 86:e2:f4:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZddWVLtb5/y2UQw02F3lKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwY2JiNGVhODU3ZjdiMmEyNTkwMmVlMDdhYWUyZTcxMjJk Y2Q1Y2MwHhcNMjUxMjI2MDcwMDUzWhcNMjUxMjI3MDcwMDUzWjAzMTEwLwYDVQQD Eyg0YmQxMTZiZmJkMTc4NDM2MjM0MTAyNGU0OGNjNTg0MGI1NzYwNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYdq3MpheFNqeGx2d7Yz0ZBYmaH5 pRrBDfD/ICVEnKE55020cwgxjG/qMQ0rijpQL7cd95KWz+YfF/Iei0MKI7ZaX7AJ aVTWGoI1Vo3tgsp8m9OrVVz71sKbKCTmKcZ+HOnGROvSo+B3uF3znnjJoTbZ36ls ju+SfnEo0pjxliRp+tl1LnQni2ZqssEAWCL1ytYwv+wyK0hCWYQxlRV6JsxDy9zp iAYAbnpDzODbp5pv/cr06p0IbI1oMlbEjrmUp1EX6jo7ikibftCylhq59lo5Q2Fl E2s7UwkvQmvopuXqUKZk3cCcHg3+L9wJgPLvv3KAQEfX/wczBmhO2/Q9BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvRFr+9F4Q2I0ECTkjMWEC1dgQmMB8GA1UdIwQY MBaAFDDLtOqFf3sqJZAu4HquLnEi3NXMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU11MDZvVl9leW9sa0M3Z2VxNHVjU0xjMWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMGFiNjctMzJjNC00NzJkLTkyNjgt Y2ZjZDc2NjI4M2E3LzEvTU11MDZvVl9leW9sa0M3Z2VxNHVjU0xjMWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wMGFiNjctMzJjNC00NzJkLTkyNjgtY2ZjZDc2NjI4M2E3 LzEvTU11MDZvVl9leW9sa0M3Z2VxNHVjU0xjMWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPO9XR3XG V3QJBk0V4f0Am0MCmYMak+2Ddzwji4qQ+s7DM8NZ0bR7oiPjm8XRFpBEanawxYF3 Pu4GdSlAOXpPQT3CCKS73q3YgMH7oFGI4WT8bY20QE2e0z9uvXcaHpshD6AD5MuY 4EUOruOGj0rss4Q0grLI2rHiR6FtvazAhF+NI9fqubnqYz+Tl/szlQJPaRS7h7hZ ZmyHYyxxg72s1tj76Z4yvfbIgHB/TJM3t7SF/VCavXYZ6/NXmqpSD8seLNUyWY8y vGJsnlMjqFs7OxR/bMzoXf+eKaaVb8pIHJXKKlpcPK9/tRSEtqq8JWrONUC5uCYN DBvNDizxhuL0pg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:19 2025 by rpki-client