This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json) Hash identifier: 3WuoE73GZpt2OhSwJAqEzP7SHDgdhY/qtYZU3LYwt+E= Subject key identifier: 86:61:1D:09:D1:7E:6B:14:AD:3B:B1:CC:B4:CB:B2:88:38:FC:E7:DA Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39 Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839 Certificate serial: 019B43C9FD70D734FD180B69E4C2A0A1DD2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 02:01:09 +0000 Manifest this update: Mon 22 Dec 2025 02:01:09 +0000 Manifest next update: Tue 23 Dec 2025 02:01:09 +0000 Files and hashes: 1: muOJscw5niFvztjTnsPuifwguDk.crl (hash: e01/MUSxcULPLNDWAiHFwM24cWc61/CfFp/WseR8Lc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:fd:70:d7:34:fd:18:0b:69:e4:c2:a0:a1:dd:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839 Validity Not Before: Dec 22 02:01:09 2025 GMT Not After : Dec 23 02:01:09 2025 GMT Subject: CN=86611d09d17e6b14ad3bb1ccb4cbb28838fce7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:18:2d:8b:4f:eb:f9:2e:81:3e:0e:f5:03:61: 78:67:48:20:fb:6e:95:b9:7a:42:c6:c3:7e:c8:6a: 4e:91:4f:14:26:f3:ae:02:c0:c0:61:5d:e5:1a:a1: 8a:f4:1d:f7:79:be:12:2c:b4:b3:f7:62:c4:e2:d7: 3f:d7:d4:33:66:45:24:fd:fc:3f:cd:26:8b:77:27: 52:f9:86:1c:07:84:52:aa:67:26:a6:fe:03:9e:ba: e8:54:03:4c:cc:65:0d:b9:ec:b0:40:e8:0b:aa:59: ed:be:d8:a8:fc:88:ec:5e:c3:3b:f0:43:cc:c2:bd: a2:4f:73:ef:5a:80:69:d8:9d:b5:d6:49:96:f3:1b: af:57:38:aa:6d:2e:c2:a5:b4:98:03:ad:da:e2:f4: f3:1f:94:41:8b:c4:78:14:a9:f2:f8:e5:7a:ac:5f: 4c:78:c0:7e:98:6a:47:ad:20:c1:47:77:33:a2:ba: 7d:80:97:99:9c:03:d4:61:d7:20:ca:d6:40:e5:c6: 15:69:5f:6f:43:2c:12:a2:d8:69:90:28:29:e9:58: d5:35:0d:b2:68:07:34:b6:34:70:d0:e7:ed:94:2d: e6:72:4a:5f:0c:3b:6c:24:b3:4f:b1:c1:48:59:64: dd:b3:6e:a1:e4:39:a0:2a:60:49:61:91:89:26:b4: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:61:1D:09:D1:7E:6B:14:AD:3B:B1:CC:B4:CB:B2:88:38:FC:E7:DA X509v3 Authority Key Identifier: keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:fd:43:4f:57:b9:ca:8e:8b:d6:c9:7c:b0:47:95:b5:b8:d4: b1:80:8f:62:3c:37:6d:21:4c:df:7b:fa:d8:e8:3a:f6:91:5b: fc:90:81:03:67:4a:27:2e:ce:c7:cf:96:73:ba:b1:c2:f1:17: d5:31:e2:b5:fe:63:7c:90:49:0a:32:83:75:b0:28:42:70:f4: 9d:56:fa:57:a3:0b:39:9a:84:0b:c6:8f:30:e4:2c:d8:2b:71: 8f:d5:6f:71:e1:76:29:32:47:26:ec:83:0b:f4:bc:4e:81:da: ef:3f:cc:7d:1d:58:2a:52:c7:0d:24:0a:fb:d9:87:1d:e7:cf: ed:ed:bd:a7:6b:6d:aa:f9:02:11:06:3a:f3:fa:4a:dc:09:ef: cf:97:b5:27:6b:b0:aa:f9:93:c7:ef:79:66:13:b0:16:1c:cf: 14:ef:62:d1:7e:51:d4:d3:80:d2:0b:9e:e9:51:0e:36:3b:3b: e4:7d:33:51:b6:5e:88:26:29:89:b4:4a:04:e9:6b:72:cd:7a: f7:31:c9:eb:b2:6d:05:12:d6:3a:09:c7:62:a0:93:a4:65:7c: ed:e5:84:a5:e1:2d:af:6c:b0:81:aa:c2:88:28:be:e4:27:4a: 54:46:14:0b:54:0a:07:d0:4b:d9:cd:00:68:4f:a1:06:7d:b1: fe:6f:84:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyf1w1zT9GAtp5MKgod0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTM4OWIxY2MzOTllMjE2ZmNlZDhkMzllYzNlZTg5ZmMy MGI4MzkwHhcNMjUxMjIyMDIwMTA5WhcNMjUxMjIzMDIwMTA5WjAzMTEwLwYDVQQD Eyg4NjYxMWQwOWQxN2U2YjE0YWQzYmIxY2NiNGNiYjI4ODM4ZmNlN2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxgti0/r+S6BPg71A2F4Z0gg+26V uXpCxsN+yGpOkU8UJvOuAsDAYV3lGqGK9B33eb4SLLSz92LE4tc/19QzZkUk/fw/ zSaLdydS+YYcB4RSqmcmpv4DnrroVANMzGUNueywQOgLqlntvtio/IjsXsM78EPM wr2iT3PvWoBp2J211kmW8xuvVziqbS7CpbSYA63a4vTzH5RBi8R4FKny+OV6rF9M eMB+mGpHrSDBR3czorp9gJeZnAPUYdcgytZA5cYVaV9vQywSothpkCgp6VjVNQ2y aAc0tjRw0OftlC3mckpfDDtsJLNPscFIWWTds26h5DmgKmBJYZGJJrRz8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZhHQnRfmsUrTuxzLTLsog4/OfaMB8GA1UdIwQY MBaAFJrjibHMOZ4hb87Y057D7on8ILg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgt Mzg5ZjkyMTk1YmViLzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgtMzg5ZjkyMTk1YmVi LzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZP1DT1e5 yo6L1sl8sEeVtbjUsYCPYjw3bSFM33v62Og69pFb/JCBA2dKJy7Ox8+Wc7qxwvEX 1THitf5jfJBJCjKDdbAoQnD0nVb6V6MLOZqEC8aPMOQs2Ctxj9VvceF2KTJHJuyD C/S8ToHa7z/MfR1YKlLHDSQK+9mHHefP7e29p2ttqvkCEQY68/pK3Anvz5e1J2uw qvmTx+95ZhOwFhzPFO9i0X5R1NOA0gue6VEONjs75H0zUbZeiCYpibRKBOlrcs16 9zHJ67JtBRLWOgnHYqCTpGV87eWEpeEtr2ywgarCiCi+5CdKVEYUC1QKB9BL2c0A aE+hBn2x/m+EZA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:00:25 2025 by rpki-client