This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json) Hash identifier: udt1elixpbOuvF3lXwU/b2P39oEIiqKM9dz4Mv7zDSc= Subject key identifier: 33:10:72:C7:0F:A0:2F:C1:69:60:A0:2D:F7:53:43:F7:73:F1:84:89 Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd Certificate serial: 019B1E06491A2F8B57E9779C9C4860C82EAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft Manifest number: 1252 Signing time: Sun 14 Dec 2025 18:01:26 +0000 Manifest this update: Sun 14 Dec 2025 18:01:26 +0000 Manifest next update: Mon 15 Dec 2025 18:01:26 +0000 Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=) 2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: mwhnmQw4lyg3kIYyI9GXyA/VLeAuqLiHpc6VCJ6cqkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:06:49:1a:2f:8b:57:e9:77:9c:9c:48:60:c8:2e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd Validity Not Before: Dec 14 18:01:26 2025 GMT Not After : Dec 15 18:01:26 2025 GMT Subject: CN=331072c70fa02fc16960a02df75343f773f18489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c1:b6:65:34:7b:03:ae:82:65:5e:16:92:95: 5a:82:c3:9a:99:89:d0:2b:45:cf:51:a4:d4:4e:2a: 09:77:cb:d7:8e:97:ec:47:68:14:38:9f:4f:f4:5c: 0e:08:1d:f5:9d:7c:ba:d4:d3:de:ae:8f:44:9f:d1: 38:c5:74:a5:ef:2b:7b:e3:92:3a:79:f5:a8:c4:32: d9:0c:87:ef:fd:4b:79:d8:2d:c7:a7:c4:9c:7b:9e: c4:e7:3d:0e:d6:d7:c9:22:a8:5c:d7:32:de:c8:e8: 20:77:36:5d:2f:1d:08:48:45:83:34:62:12:98:b5: 9d:22:8a:93:76:9f:5b:c9:42:7a:6e:5e:0f:06:5e: 26:9b:e4:aa:3c:5d:92:9e:a3:ae:f3:a2:41:b6:45: 68:ca:97:70:6c:89:15:6b:fb:36:e8:02:73:25:25: 35:d3:12:43:97:e6:a5:07:1a:e9:ec:e7:e8:aa:a7: fd:22:b4:80:0c:9d:34:db:5b:d3:f1:7b:54:ac:d0: ac:f8:f1:54:11:fb:92:88:8f:69:90:9c:13:3a:92: 10:0b:98:15:4e:5e:ad:cf:34:16:e8:dd:18:34:44: 54:7d:70:e2:7d:d3:97:96:25:74:9c:77:b0:48:65: 84:1e:4b:06:6c:c2:8b:e0:a5:9b:df:0a:13:10:d9: 7e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:10:72:C7:0F:A0:2F:C1:69:60:A0:2D:F7:53:43:F7:73:F1:84:89 X509v3 Authority Key Identifier: keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:07:73:9d:13:01:44:2f:fa:f5:66:eb:39:9d:a6:ca:6e:f0: e8:b9:ba:c7:3e:ea:c1:de:3c:ca:7a:b8:d2:d9:1a:bb:2e:6d: 4c:e7:f2:b5:ab:b5:9c:1e:bd:ae:cd:aa:b5:4b:86:7a:cc:b7: ec:7f:3e:38:50:ab:82:e0:53:52:f0:2a:45:c9:69:c3:94:42: 40:c2:77:f6:c8:43:30:30:d2:a4:be:0f:c0:be:da:35:df:29: d9:83:cd:64:ed:9d:49:48:01:e1:9d:47:36:a3:66:bc:d8:ba: 57:d3:c8:0a:e3:fb:2d:a0:60:8c:71:cf:52:cd:17:5a:ba:f1: f8:31:7e:f2:19:a5:4f:5a:10:fa:87:cc:f0:f4:e5:2d:8b:7e: 08:77:6a:2e:46:1c:ae:75:66:9e:ac:3b:4c:01:5c:f1:92:e0: 81:75:61:c0:f5:71:a7:d5:44:d9:54:a2:2c:a0:49:15:46:0e: ef:66:94:cb:b0:b1:81:8b:3a:e5:91:0f:52:57:7d:1a:7d:51: d6:66:84:b8:45:23:9b:46:20:55:61:2c:ba:8d:a4:55:63:60: bf:ae:e9:a4:96:7a:65:49:dd:fc:4b:32:aa:64:20:87:45:7f: 67:d2:dd:66:da:e9:3f:a0:96:fd:4e:f7:6c:d3:1a:2d:fd:ee: 59:e0:2e:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBkkaL4tX6XecnEhgyC6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZTY1ODUxNWIxZTZhNzJiOTlmMzMyNjY5ZTA2OWU2MTU0 ZjcwZGQwHhcNMjUxMjE0MTgwMTI2WhcNMjUxMjE1MTgwMTI2WjAzMTEwLwYDVQQD EygzMzEwNzJjNzBmYTAyZmMxNjk2MGEwMmRmNzUzNDNmNzczZjE4NDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMG2ZTR7A66CZV4WkpVagsOamYnQ K0XPUaTUTioJd8vXjpfsR2gUOJ9P9FwOCB31nXy61NPero9En9E4xXSl7yt745I6 efWoxDLZDIfv/Ut52C3Hp8Sce57E5z0O1tfJIqhc1zLeyOggdzZdLx0ISEWDNGIS mLWdIoqTdp9byUJ6bl4PBl4mm+SqPF2SnqOu86JBtkVoypdwbIkVa/s26AJzJSU1 0xJDl+alBxrp7Ofoqqf9IrSADJ0021vT8XtUrNCs+PFUEfuSiI9pkJwTOpIQC5gV Tl6tzzQW6N0YNERUfXDifdOXliV0nHewSGWEHksGbMKL4KWb3woTENl+eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMQcscPoC/BaWCgLfdTQ/dz8YSJMB8GA1UdIwQY MBaAFDLmWFFbHmpyuZ8zJmngaeYVT3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzIt NjdmOGU3ZDExMzdjLzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzItNjdmOGU3ZDExMzdj LzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQdznRMB RC/69WbrOZ2mym7w6Lm6xz7qwd48ynq40tkauy5tTOfytau1nB69rs2qtUuGesy3 7H8+OFCrguBTUvAqRclpw5RCQMJ39shDMDDSpL4PwL7aNd8p2YPNZO2dSUgB4Z1H NqNmvNi6V9PICuP7LaBgjHHPUs0XWrrx+DF+8hmlT1oQ+ofM8PTlLYt+CHdqLkYc rnVmnqw7TAFc8ZLggXVhwPVxp9VE2VSiLKBJFUYO72aUy7CxgYs65ZEPUld9Gn1R 1maEuEUjm0YgVWEsuo2kVWNgv67ppJZ6ZUnd/EsyqmQgh0V/Z9LdZtrpP6CW/U73 bNMaLf3uWeAuEg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:56:04 2025 by rpki-client