This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json) Hash identifier: d2IrPM1ej6Aybb18M8+Mk5L94WwcFFw112AbRRaiQlY= Subject key identifier: 97:E0:7F:9A:EB:2D:6C:F1:55:23:14:87:BC:E6:E8:4A:EA:D2:39:55 Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58 Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058 Certificate serial: 019B1F8783637CF17A94B038DAE856378D7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 01:02:13 +0000 Manifest this update: Mon 15 Dec 2025 01:02:13 +0000 Manifest next update: Tue 16 Dec 2025 01:02:13 +0000 Files and hashes: 1: KhlRzejfpvDxwhcPEcTkW8z6UJk.roa (hash: OH1bpS6azjDuSrz2eDsCxiLR1IWtc/vamDUbBv4QJmc=) 2: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: j0nAEZWCPuInxPTvp1yhUEYc8SiLi9RM0e3fuQd7tpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:83:63:7c:f1:7a:94:b0:38:da:e8:56:37:8d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058 Validity Not Before: Dec 15 01:02:13 2025 GMT Not After : Dec 16 01:02:13 2025 GMT Subject: CN=97e07f9aeb2d6cf155231487bce6e84aead23955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b7:ff:a7:a2:fe:60:e4:54:32:50:60:56:ab: 11:2a:66:4c:a5:19:11:1a:be:59:98:60:04:7b:2e: 00:94:30:81:62:7f:38:0b:23:74:ec:3a:2f:10:f6: da:33:26:9e:3e:1d:2b:2a:18:49:34:87:61:3e:c3: 09:9c:c5:84:10:5b:2f:ed:63:b4:9c:4d:f3:49:40: 53:d0:a7:3f:45:19:ea:e2:88:3f:5b:23:35:a6:2c: 02:74:37:73:3f:bb:c6:42:2c:ba:b0:fd:c9:59:dc: 99:63:79:9d:32:4e:b0:3c:d3:ae:77:0c:e7:bb:ae: 8e:66:eb:9a:f5:c2:a4:ee:95:c3:10:aa:2a:cc:f7: 14:64:29:28:10:c9:c9:88:04:a7:2e:08:2b:cf:e7: 59:95:62:39:b5:5c:88:3b:cd:57:fe:56:be:90:af: 4b:62:f7:3a:95:d5:c3:0b:3c:df:75:c2:2b:a7:ed: 32:72:6f:6f:40:12:5e:ad:02:d9:ec:99:26:24:0b: f4:da:c3:5e:de:64:f6:c9:bd:c1:88:a0:3a:43:c7: b8:66:93:47:10:ad:d7:57:cf:b4:b9:fc:11:98:41: 23:b6:02:73:8e:d5:53:68:f5:2c:a4:de:51:96:1f: 5e:9e:18:a7:b6:ce:1f:87:df:59:6d:dc:0f:0f:e4: b2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E0:7F:9A:EB:2D:6C:F1:55:23:14:87:BC:E6:E8:4A:EA:D2:39:55 X509v3 Authority Key Identifier: keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:26:40:2e:20:00:7d:15:2f:48:9b:81:30:ef:61:7f:47:f9: 3a:43:33:e8:c7:84:16:f1:7f:c6:7a:4c:0b:13:70:5b:04:36: 67:75:0e:c2:6d:64:75:d4:3d:05:c8:10:17:53:7a:9a:95:0e: 87:a2:d5:75:37:3b:6d:c1:0c:d9:2f:a5:da:a0:e7:4c:9e:fa: e9:e6:73:bd:3a:c3:cf:83:ce:eb:83:dd:0a:ad:aa:92:3b:6b: 64:4e:cf:32:e5:c8:b9:38:a6:79:d5:ed:36:dd:2a:aa:b9:32: 66:29:b5:97:a1:0f:d0:7c:cd:c8:14:85:24:b2:15:0b:cf:db: a7:87:1a:6b:55:ce:ab:67:72:ad:28:63:b7:25:65:28:1d:4e: d5:3b:c6:63:8e:ac:82:b5:14:84:24:36:31:6f:fe:dd:b4:74: 83:b1:e3:c8:06:e8:8c:97:d8:b7:f3:3b:f8:39:c1:13:14:2e: e0:e5:9e:25:8a:b8:c5:f8:fa:89:4c:ab:52:17:ef:ea:6e:28: da:47:6e:04:36:bd:6b:0a:eb:d3:4a:a7:e3:7d:c2:c8:ee:73: 51:7c:c7:3d:a3:c9:a4:ae:c7:0f:be:5d:46:af:3d:d0:3e:9e: c0:6b:32:48:28:b0:d0:90:63:c9:59:2f:16:7b:13:ec:a3:66: 33:cb:0e:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh4NjfPF6lLA42uhWN416MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZWIyYjUxZTM3NDhjMjUyNzQwMmU2ODYwMWE4ODkxMjg4 M2EwNTgwHhcNMjUxMjE1MDEwMjEzWhcNMjUxMjE2MDEwMjEzWjAzMTEwLwYDVQQD Eyg5N2UwN2Y5YWViMmQ2Y2YxNTUyMzE0ODdiY2U2ZTg0YWVhZDIzOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lf/p6L+YORUMlBgVqsRKmZMpRkR Gr5ZmGAEey4AlDCBYn84CyN07DovEPbaMyaePh0rKhhJNIdhPsMJnMWEEFsv7WO0 nE3zSUBT0Kc/RRnq4og/WyM1piwCdDdzP7vGQiy6sP3JWdyZY3mdMk6wPNOudwzn u66OZuua9cKk7pXDEKoqzPcUZCkoEMnJiASnLggrz+dZlWI5tVyIO81X/la+kK9L Yvc6ldXDCzzfdcIrp+0ycm9vQBJerQLZ7JkmJAv02sNe3mT2yb3BiKA6Q8e4ZpNH EK3XV8+0ufwRmEEjtgJzjtVTaPUspN5Rlh9enhints4fh99ZbdwPD+SyhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfgf5rrLWzxVSMUh7zm6Erq0jlVMB8GA1UdIwQY MBaAFDLrK1HjdIwlJ0AuaGAaiJEog6BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDkt NmFjMWFmZjM2YzA3LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDktNmFjMWFmZjM2YzA3 LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiZALiAA fRUvSJuBMO9hf0f5OkMz6MeEFvF/xnpMCxNwWwQ2Z3UOwm1kddQ9BcgQF1N6mpUO h6LVdTc7bcEM2S+l2qDnTJ766eZzvTrDz4PO64PdCq2qkjtrZE7PMuXIuTimedXt Nt0qqrkyZim1l6EP0HzNyBSFJLIVC8/bp4caa1XOq2dyrShjtyVlKB1O1TvGY46s grUUhCQ2MW/+3bR0g7HjyAbojJfYt/M7+DnBExQu4OWeJYq4xfj6iUyrUhfv6m4o 2kduBDa9awrr00qn433CyO5zUXzHPaPJpK7HD75dRq890D6ewGsySCiw0JBjyVkv FnsT7KNmM8sOkQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:51 2025 by rpki-client