This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft File: muVOVVW5meWct0g6YG1rJMv2GYw.mft (raw, json) Hash identifier: cxB06lTA9YI/3KVfnruikwDq4Ieyr1+B0feLQULnrMs= Subject key identifier: 3E:C4:F7:87:BD:35:44:48:64:94:E8:AA:18:E9:78:52:2D:9E:34:0A Authority key identifier: 9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C Certificate issuer: /CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c Certificate serial: 019B34FB5CD92AED448044E1F67698B8F942 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft Manifest number: 0256 Signing time: Fri 19 Dec 2025 05:00:47 +0000 Manifest this update: Fri 19 Dec 2025 05:00:47 +0000 Manifest next update: Sat 20 Dec 2025 05:00:47 +0000 Files and hashes: 1: muVOVVW5meWct0g6YG1rJMv2GYw.crl (hash: YdoLSZOkJ06havaOwt1dAGpi4GRbpuE98hO6fIIwe4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:5c:d9:2a:ed:44:80:44:e1:f6:76:98:b8:f9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c Validity Not Before: Dec 19 05:00:47 2025 GMT Not After : Dec 20 05:00:47 2025 GMT Subject: CN=3ec4f787bd3544486494e8aa18e978522d9e340a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ae:a1:1d:41:c7:f2:02:2a:e4:04:f2:63:02: 7c:9e:ab:3b:dd:0a:06:00:08:0e:9e:dc:32:a5:2c: 02:0f:5e:97:cd:36:6a:01:6f:33:16:71:c8:d6:0c: 0a:5c:a4:92:3f:5f:66:5c:cc:ca:cc:af:ab:6a:44: 56:36:74:d5:9c:2c:59:90:a9:20:42:bf:66:84:b6: 6b:6f:59:55:78:4c:93:f7:d2:31:18:d1:78:cd:7a: 24:02:5e:4c:64:e8:56:63:91:b3:56:76:9d:d1:3c: 29:95:21:43:d9:d2:90:6b:30:be:97:17:34:74:67: ba:39:1c:ea:97:d5:9e:53:88:79:b6:85:c6:03:34: 14:67:5c:c6:2b:1a:c1:59:57:a6:1c:99:da:8f:4d: 13:f2:51:07:e5:b4:1b:74:56:4d:57:f9:69:62:36: da:a4:fa:d3:57:2a:5c:08:08:07:8e:0d:c4:d1:c1: a8:0c:b5:6d:47:d9:da:ec:00:ae:9c:1f:f8:e8:02: 0a:2b:af:1d:44:0a:ad:f7:33:56:23:3b:c0:f7:ca: 92:94:a7:9b:fb:b3:9b:29:f9:90:40:6f:50:66:3f: 09:96:74:b1:aa:51:41:6e:74:19:42:be:77:18:66: d9:80:b4:59:e7:a0:ad:d4:21:b3:ce:f3:99:9d:19: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C4:F7:87:BD:35:44:48:64:94:E8:AA:18:E9:78:52:2D:9E:34:0A X509v3 Authority Key Identifier: keyid:9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:3d:72:1c:02:8d:e7:b7:5a:9e:a2:75:0b:b7:b4:33:34:e9: 96:d2:58:42:04:0f:16:b9:89:9d:9e:5a:79:6a:a6:00:53:51: 2f:45:41:4a:d6:95:81:e9:f5:18:c6:b2:ec:53:83:53:ef:ba: 11:e1:0c:b9:8f:4c:0b:ca:1e:31:02:14:4f:e9:09:39:11:7f: d0:75:36:92:d3:b2:51:94:ee:b3:c6:69:bd:dd:52:3e:24:55: db:83:f8:df:4e:82:c9:a6:1f:7a:dd:6c:9f:a4:d4:3d:b0:93: ba:3d:1e:82:de:88:16:74:58:43:0a:98:8b:08:93:3e:e5:67: 77:5e:06:60:5d:f2:9c:05:17:b0:03:4a:c7:38:2c:b1:30:58: 12:1b:7c:f8:b4:eb:2f:a0:8c:1c:3e:56:12:8f:06:d2:af:b8: f6:3d:d9:e8:74:e7:98:93:43:fe:e9:c1:5e:4b:78:95:c8:ca: 5b:f0:10:73:8d:1e:20:5e:a2:05:38:53:bd:60:bf:6e:2f:ee: a3:1e:e4:d9:23:de:7e:ac:2d:94:a0:13:aa:78:81:55:34:dd: 5d:a6:7f:35:4e:cf:64:4a:2f:17:e0:ed:73:6c:d2:e0:9d:e7: 1c:50:88:d0:9e:22:53:1d:94:72:ae:c5:0f:da:4d:5d:bd:4f: 2e:38:9d:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+1zZKu1EgETh9naYuPlCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTU0ZTU1NTViOTk5ZTU5Y2I3NDgzYTYwNmQ2YjI0Y2Jm NjE5OGMwHhcNMjUxMjE5MDUwMDQ3WhcNMjUxMjIwMDUwMDQ3WjAzMTEwLwYDVQQD EygzZWM0Zjc4N2JkMzU0NDQ4NjQ5NGU4YWExOGU5Nzg1MjJkOWUzNDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq6hHUHH8gIq5ATyYwJ8nqs73QoG AAgOntwypSwCD16XzTZqAW8zFnHI1gwKXKSSP19mXMzKzK+rakRWNnTVnCxZkKkg Qr9mhLZrb1lVeEyT99IxGNF4zXokAl5MZOhWY5GzVnad0TwplSFD2dKQazC+lxc0 dGe6ORzql9WeU4h5toXGAzQUZ1zGKxrBWVemHJnaj00T8lEH5bQbdFZNV/lpYjba pPrTVypcCAgHjg3E0cGoDLVtR9na7ACunB/46AIKK68dRAqt9zNWIzvA98qSlKeb +7ObKfmQQG9QZj8JlnSxqlFBbnQZQr53GGbZgLRZ56Ct1CGzzvOZnRkIEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7E94e9NURIZJToqhjpeFItnjQKMB8GA1UdIwQY MBaAFJrlTlVVuZnlnLdIOmBtayTL9hmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVWT1ZWVzVtZVdjdDBnNllHMXJKTXYyR1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81ODRhNmEtZWE4Mi00ZjQzLTk3ODYt M2E0ZDQ0OTU2ZGQ0LzEvbXVWT1ZWVzVtZVdjdDBnNllHMXJKTXYyR1l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81ODRhNmEtZWE4Mi00ZjQzLTk3ODYtM2E0ZDQ0OTU2ZGQ0 LzEvbXVWT1ZWVzVtZVdjdDBnNllHMXJKTXYyR1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcj1yHAKN 57danqJ1C7e0MzTpltJYQgQPFrmJnZ5aeWqmAFNRL0VBStaVgen1GMay7FODU++6 EeEMuY9MC8oeMQIUT+kJORF/0HU2ktOyUZTus8Zpvd1SPiRV24P4306CyaYfet1s n6TUPbCTuj0egt6IFnRYQwqYiwiTPuVnd14GYF3ynAUXsANKxzgssTBYEht8+LTr L6CMHD5WEo8G0q+49j3Z6HTnmJND/unBXkt4lcjKW/AQc40eIF6iBThTvWC/bi/u ox7k2SPefqwtlKATqniBVTTdXaZ/NU7PZEovF+Dtc2zS4J3nHFCI0J4iUx2Ucq7F D9pNXb1PLjid8A== -----END CERTIFICATE-----Generated at Fri Dec 19 07:51:58 2025 by rpki-client