This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft File: muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json) Hash identifier: ajQ1wVBV2BpzRBp5KubEEAki6iYGyZgKPMflsiZjcS0= Subject key identifier: 37:B6:57:A8:81:B7:C6:73:7B:A6:17:E7:24:39:F5:76:8E:40:DD:F6 Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14 Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214 Certificate serial: 019B4C27E3458E6718752047BD3A3CBF89EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft Manifest number: 1796 Signing time: Tue 23 Dec 2025 17:00:40 +0000 Manifest this update: Tue 23 Dec 2025 17:00:40 +0000 Manifest next update: Wed 24 Dec 2025 17:00:40 +0000 Files and hashes: 1: hirmv4l90daqtziUonbqzbb8z94.roa (hash: 2pWfc5u+sM7C4s4+z6TKeGnl46lQEVqcp+2HcKGG7wg=) 2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: cWIscH6FwGMXQJ6B+DD4+/cgl73R5m54WkaQ1CN2SAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:27:e3:45:8e:67:18:75:20:47:bd:3a:3c:bf:89:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214 Validity Not Before: Dec 23 17:00:40 2025 GMT Not After : Dec 24 17:00:40 2025 GMT Subject: CN=37b657a881b7c6737ba617e72439f5768e40ddf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d2:8d:24:f3:e8:a7:8f:1f:c2:b2:e3:34:c8: d1:f4:4c:c5:9c:fe:22:7f:a4:30:dd:b3:cb:c2:74: 9c:80:3a:bf:24:b9:c9:46:af:60:fe:8e:77:9f:c9: b4:06:a3:91:38:80:97:12:d4:dd:54:e4:d3:fd:ea: d3:cb:25:52:09:28:16:f5:04:89:9a:7c:29:3e:04: 11:50:46:73:25:d5:4b:39:ca:60:1e:b6:ba:69:4c: 20:8d:77:fb:da:3b:e1:b6:4b:5a:08:c1:15:0b:02: 93:86:39:20:4b:c9:1e:f5:56:38:34:5c:8e:9d:e2: f8:3e:51:3a:e2:4f:16:9c:7e:89:a1:a2:d7:fb:cc: 57:e5:25:c2:3a:52:11:17:fc:27:e1:eb:06:79:5a: 0d:bb:ee:0c:4d:a2:09:21:f7:96:23:80:e5:68:78: b1:0d:85:b7:87:36:03:65:03:f2:14:77:54:bd:61: 50:29:22:96:7d:e7:2b:59:52:0c:7a:67:c5:00:90: 41:49:c7:39:43:9b:80:b9:71:4f:4a:84:89:c1:fd: 36:76:bb:ba:38:d9:0d:20:bf:fe:76:a1:39:e2:c8: 44:45:20:a3:b5:f6:99:77:9d:3e:fa:77:f3:93:07: 0b:5b:87:07:8f:36:75:36:93:4b:9b:06:fc:c9:50: f3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B6:57:A8:81:B7:C6:73:7B:A6:17:E7:24:39:F5:76:8E:40:DD:F6 X509v3 Authority Key Identifier: keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:13:9e:1a:27:3c:27:85:23:5f:94:84:d2:c6:7d:69:29:7b: 8f:75:e9:60:32:0a:98:22:c8:53:12:20:76:2a:68:f9:56:a9: f2:9a:4c:c6:33:9c:2a:f9:18:70:89:74:a8:29:5c:3a:3d:24: 56:48:18:7a:70:1f:51:14:57:4d:88:a6:e2:11:3a:7f:cf:c3: dd:7f:cf:2e:c8:ad:e7:ff:33:5a:5e:79:d4:1c:63:a7:99:53: 9b:a2:77:40:66:97:45:7c:57:e1:ee:f9:9d:ac:77:9f:14:77: 41:f5:40:0c:8b:7f:68:8a:3d:9f:49:2e:15:b5:cb:6a:26:ff: 55:66:7d:56:af:d5:48:4b:76:9a:14:f4:97:6c:87:eb:04:8f: 0d:d7:44:13:02:c2:cb:cf:a5:d9:17:85:c0:ff:60:6b:59:8e: 18:e4:a6:13:b8:f0:88:4f:98:fd:be:2c:2e:03:67:23:15:1d: 39:c3:67:9d:d0:a4:85:4e:c5:70:04:8b:26:8a:88:11:f0:c8: f6:b8:93:1e:2d:0c:48:fe:fe:ae:08:60:93:55:f9:44:57:a1: 70:87:4a:03:81:6c:da:ee:e0:7e:8d:38:af:c2:90:48:52:d3: c8:1f:f5:f9:e9:24:4c:5b:27:65:57:11:4e:af:ab:f9:8d:31: 0b:eb:3a:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMJ+NFjmcYdSBHvTo8v4nqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTA3Yzk0YThhNmFmN2E1ZDE4ZjRlYWFlYTc5ZTI2ZGY5 MzIyMTQwHhcNMjUxMjIzMTcwMDQwWhcNMjUxMjI0MTcwMDQwWjAzMTEwLwYDVQQD EygzN2I2NTdhODgxYjdjNjczN2JhNjE3ZTcyNDM5ZjU3NjhlNDBkZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dKNJPPop48fwrLjNMjR9EzFnP4i f6Qw3bPLwnScgDq/JLnJRq9g/o53n8m0BqOROICXEtTdVOTT/erTyyVSCSgW9QSJ mnwpPgQRUEZzJdVLOcpgHra6aUwgjXf72jvhtktaCMEVCwKThjkgS8ke9VY4NFyO neL4PlE64k8WnH6JoaLX+8xX5SXCOlIRF/wn4esGeVoNu+4MTaIJIfeWI4DlaHix DYW3hzYDZQPyFHdUvWFQKSKWfecrWVIMemfFAJBBScc5Q5uAuXFPSoSJwf02dru6 ONkNIL/+dqE54shERSCjtfaZd50++nfzkwcLW4cHjzZ1NpNLmwb8yVDzEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDe2V6iBt8Zze6YX5yQ59XaOQN32MB8GA1UdIwQY MBaAFJrgfJSopq96XRj06q6nnibfkyIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVCOGxLaW1yM3BkR1BUcXJxZWVKdC1USWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYThkZDAtMzg3NS00ZWIyLWI2MzMt ZTI2NjVkNDQ3ZDMyLzEvbXVCOGxLaW1yM3BkR1BUcXJxZWVKdC1USWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8zYThkZDAtMzg3NS00ZWIyLWI2MzMtZTI2NjVkNDQ3ZDMy LzEvbXVCOGxLaW1yM3BkR1BUcXJxZWVKdC1USWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBOeGic8 J4UjX5SE0sZ9aSl7j3XpYDIKmCLIUxIgdipo+Vap8ppMxjOcKvkYcIl0qClcOj0k VkgYenAfURRXTYim4hE6f8/D3X/PLsit5/8zWl551Bxjp5lTm6J3QGaXRXxX4e75 nax3nxR3QfVADIt/aIo9n0kuFbXLaib/VWZ9Vq/VSEt2mhT0l2yH6wSPDddEEwLC y8+l2ReFwP9ga1mOGOSmE7jwiE+Y/b4sLgNnIxUdOcNnndCkhU7FcASLJoqIEfDI 9riTHi0MSP7+rghgk1X5RFehcIdKA4Fs2u7gfo04r8KQSFLTyB/1+ekkTFsnZVcR Tq+r+Y0xC+s6BQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:54 2025 by rpki-client