This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json) Hash identifier: b6+x81XBGhNovSPXlz0Qa5Iq1F1uucfc/Ai3YCBlSCw= Subject key identifier: E5:FD:8F:65:E6:C8:09:75:B8:B1:11:3D:78:6F:0D:B1:C8:E9:F2:22 Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd Certificate serial: 019B0E93A295F89047EF32FCCED039B5D8A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft Manifest number: 124A Signing time: Thu 11 Dec 2025 18:01:54 +0000 Manifest this update: Thu 11 Dec 2025 18:01:54 +0000 Manifest next update: Fri 12 Dec 2025 18:01:54 +0000 Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=) 2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: ZQd0h3apBoEb8MKD1azSejN2Vh2ADD0wYWLtIFXUopM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:a2:95:f8:90:47:ef:32:fc:ce:d0:39:b5:d8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd Validity Not Before: Dec 11 18:01:54 2025 GMT Not After : Dec 12 18:01:54 2025 GMT Subject: CN=e5fd8f65e6c80975b8b1113d786f0db1c8e9f222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:0e:ff:3b:fb:bd:ef:0c:a5:20:cc:3d:05: cb:5a:ee:d0:c9:fe:4b:e5:81:f5:4c:b4:63:39:26: 63:3e:e5:56:af:6e:67:67:97:68:c3:38:5c:80:e7: a6:7f:df:59:28:cc:a4:9c:e6:55:e6:d8:79:99:18: a6:20:f0:cb:b5:33:59:9f:da:4f:35:5e:91:86:31: c2:6f:ad:10:77:e1:98:b4:22:51:78:19:29:ad:30: 9a:22:59:2c:c4:3a:ec:e2:b6:e6:07:ec:4d:2d:b1: 2e:5e:c6:64:e3:09:c0:44:b0:95:5d:de:12:c0:29: b8:71:a4:c4:a2:c4:5c:69:e9:8b:ea:c1:1a:08:f7: 2f:63:9d:3c:5d:fc:41:5c:b5:d6:78:81:37:d1:44: b7:31:81:c7:97:0b:9a:79:81:1b:26:0f:03:53:eb: 86:08:1a:24:23:de:47:16:c0:ec:39:3b:1a:28:ac: ce:3f:7f:ac:65:55:f1:d0:f8:0d:b2:0b:07:84:76: f9:1b:3d:c0:e9:b9:3e:f4:86:2b:55:85:cb:45:48: 02:dd:62:38:75:7d:fd:6a:55:e4:6c:f0:4d:bc:fc: 61:15:c0:44:ed:e3:c2:db:ff:27:f2:2a:1f:29:77: 4e:2e:9b:f3:49:f4:f5:58:1e:31:c3:12:a5:f0:ed: 92:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FD:8F:65:E6:C8:09:75:B8:B1:11:3D:78:6F:0D:B1:C8:E9:F2:22 X509v3 Authority Key Identifier: keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ae:b9:33:04:f7:db:85:9c:cc:6a:e2:cc:94:15:d5:49:b1: 07:79:95:d1:16:c7:42:79:55:b6:46:69:de:ae:0e:35:ba:83: 86:76:a4:63:0a:67:11:af:7a:ed:f1:b1:b0:2c:ac:ab:39:ab: 21:df:54:27:24:7b:dd:11:4a:a7:ec:9d:77:74:16:c1:b2:44: 12:51:dd:49:82:ea:bf:28:27:1a:7c:e3:80:65:57:67:f0:59: f6:6e:93:dd:73:51:08:87:0b:ea:92:1c:ed:a2:fa:45:2e:3c: 36:1a:3e:d6:c7:ce:28:22:a5:bb:c2:af:41:38:10:9a:34:80: bb:12:6f:a5:fa:ac:97:98:d1:e5:b2:de:3c:c5:71:88:00:52: a1:3d:de:1e:9d:98:3e:97:a1:45:ef:60:5d:cd:76:5b:d2:1d: 8e:67:3f:92:ba:8e:7b:69:28:24:83:47:e8:30:e0:aa:08:94: a6:5e:50:ed:23:9d:51:53:9f:03:71:57:d0:6e:3b:0a:4e:26: 15:11:34:5f:0c:3f:17:59:50:61:64:df:b5:d1:59:85:f4:c7: 11:cf:5d:9c:15:75:d9:2e:58:00:33:09:e4:bb:1f:a4:11:5f: e1:56:57:72:42:d7:ab:3a:0a:82:97:37:4e:7a:cb:2d:8f:d0: a4:df:a8:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk6KV+JBH7zL8ztA5tdikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZTY1ODUxNWIxZTZhNzJiOTlmMzMyNjY5ZTA2OWU2MTU0 ZjcwZGQwHhcNMjUxMjExMTgwMTU0WhcNMjUxMjEyMTgwMTU0WjAzMTEwLwYDVQQD EyhlNWZkOGY2NWU2YzgwOTc1YjhiMTExM2Q3ODZmMGRiMWM4ZTlmMjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjwO/zv7ve8MpSDMPQXLWu7Qyf5L 5YH1TLRjOSZjPuVWr25nZ5dowzhcgOemf99ZKMyknOZV5th5mRimIPDLtTNZn9pP NV6RhjHCb60Qd+GYtCJReBkprTCaIlksxDrs4rbmB+xNLbEuXsZk4wnARLCVXd4S wCm4caTEosRcaemL6sEaCPcvY508XfxBXLXWeIE30US3MYHHlwuaeYEbJg8DU+uG CBokI95HFsDsOTsaKKzOP3+sZVXx0PgNsgsHhHb5Gz3A6bk+9IYrVYXLRUgC3WI4 dX39alXkbPBNvPxhFcBE7ePC2/8n8iofKXdOLpvzSfT1WB4xwxKl8O2SaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOX9j2XmyAl1uLERPXhvDbHI6fIiMB8GA1UdIwQY MBaAFDLmWFFbHmpyuZ8zJmngaeYVT3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzIt NjdmOGU3ZDExMzdjLzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzItNjdmOGU3ZDExMzdj LzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABK65MwT3 24WczGrizJQV1UmxB3mV0RbHQnlVtkZp3q4ONbqDhnakYwpnEa967fGxsCysqzmr Id9UJyR73RFKp+ydd3QWwbJEElHdSYLqvygnGnzjgGVXZ/BZ9m6T3XNRCIcL6pIc 7aL6RS48Nho+1sfOKCKlu8KvQTgQmjSAuxJvpfqsl5jR5bLePMVxiABSoT3eHp2Y PpehRe9gXc12W9Idjmc/krqOe2koJINH6DDgqgiUpl5Q7SOdUVOfA3FX0G47Ck4m FRE0Xww/F1lQYWTftdFZhfTHEc9dnBV12S5YADMJ5LsfpBFf4VZXckLXqzoKgpc3 TnrLLY/QpN+oPg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:44:22 2025 by rpki-client