This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier: mwzyJUodvJJlCwyQZfT5j9x2Qd3ag99QY3ecCKRGfmM=
Subject key identifier: D3:F3:75:96:F3:CD:67:42:B0:AD:72:5A:50:A4:1F:73:2F:1D:C8:79
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 019B15DF42965887F382FEF802843DD1F4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number: 13AF
Signing time: Sat 13 Dec 2025 04:01:51 +0000
Manifest this update: Sat 13 Dec 2025 04:01:51 +0000
Manifest next update: Sun 14 Dec 2025 04:01:51 +0000
Files and hashes: 1: 1UnYoe8trzW_GgSpfZGfv_JmHSs.roa (hash: GL46oY9ft0jCbwWPIAjk8KgYcddvUrm4Q8zoPC/vajY=)
2: F7P27joXZG2fOKvUgJ2c9GRp2Fc.roa (hash: cui3T69juyxfuuKRDXOJBwPcUU7RywnAUmPOHsvMScE=)
3: LHjpAYfuBzZ_RF5-cYOqcdg5XWY.roa (hash: clT3oz7MTlFepMOgAgzqz4bDDX9luSGN1e4LPGs/Uas=)
4: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: qKpvLf3OZVYEPXeqicBHqt76NMEFf6S60x+fTZZx/iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:15:df:42:96:58:87:f3:82:fe:f8:02:84:3d:d1:f4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Dec 13 04:01:51 2025 GMT
Not After : Dec 14 04:01:51 2025 GMT
Subject: CN=d3f37596f3cd6742b0ad725a50a41f732f1dc879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:d7:c1:a8:47:d0:e7:0c:2e:48:e1:ed:9b:
1a:63:30:0f:7d:35:16:d3:ae:9a:b2:99:67:d5:a7:
c6:0e:90:95:78:26:f3:14:be:9d:7f:e2:90:d5:e6:
70:18:28:b7:8a:cc:13:3c:e7:a9:0b:c2:a3:00:d8:
aa:c0:44:ba:5b:00:b4:1a:71:7e:5f:04:6b:46:24:
43:2e:19:8a:54:73:02:13:2c:b8:1b:74:3d:58:6f:
ff:97:76:4e:a6:92:e4:fc:00:09:fc:a7:01:9a:c1:
1e:f2:55:65:55:a8:15:44:31:3f:bc:f6:7e:41:1a:
ca:27:55:ee:dd:a8:2d:d1:7e:a0:3a:b3:8e:fa:6e:
01:9c:68:4a:17:3c:7a:84:00:31:70:64:45:be:59:
76:aa:5b:55:df:50:ec:30:90:80:c7:96:2e:0f:68:
92:07:73:3a:3a:dd:17:e0:ea:b4:06:47:a2:01:f8:
dc:16:1d:a9:16:85:5f:2b:97:d2:94:9f:21:58:ef:
46:f2:8f:12:b7:e9:72:19:85:a8:50:a6:04:7e:70:
ad:a6:a3:7c:f0:59:82:96:bd:50:fc:c1:38:68:3c:
70:ce:34:d9:97:10:e9:93:c2:09:11:a6:cc:d9:51:
51:25:cf:c0:c4:3b:77:24:c1:f6:3c:7b:dc:1d:87:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:75:96:F3:CD:67:42:B0:AD:72:5A:50:A4:1F:73:2F:1D:C8:79
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b7:a0:e0:f0:3a:8e:aa:aa:41:74:2a:1c:45:3b:fb:f1:54:
3b:98:7b:b3:2e:1f:71:47:70:7d:3b:6a:0d:9a:07:9a:f2:cd:
e5:1d:18:97:86:9f:c4:36:db:5b:21:9f:51:26:8b:a2:ea:3d:
8a:e6:a4:ca:f1:b5:9b:6e:40:d8:ba:f3:be:f8:6b:f8:1f:2d:
68:5d:67:30:52:b9:5f:11:92:38:bb:df:27:ec:49:fb:10:7f:
18:fc:6f:8b:1f:ba:21:90:60:0c:76:cc:6c:c5:98:da:16:08:
f7:7e:24:bc:06:c2:a9:f0:c6:dd:30:85:9c:df:11:16:c1:58:
4c:18:ad:8d:cb:01:9f:2b:2e:dd:ee:5e:cf:9d:ee:bd:19:68:
be:94:c6:7e:0c:34:72:d6:5d:bc:f2:c0:03:71:3d:f4:90:2b:
de:6f:84:18:57:b1:61:dc:10:98:9c:a8:2e:45:8b:9c:9a:8d:
d5:dd:83:d6:52:7c:3e:75:77:f2:d5:5a:d5:05:5f:94:02:df:
68:e1:14:37:92:bf:17:30:0c:1b:c5:ab:73:1f:99:c8:87:56:
c8:ab:3a:4a:64:ca:a2:a2:9b:c1:de:eb:ce:e5:da:ed:3d:c6:
70:63:fc:71:9f:0d:bd:ac:2d:c2:84:59:35:56:44:96:50:82:
6d:9b:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 14:09:38 2025 by rpki-client