This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft File: MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json) Hash identifier: 9D8NC/WemJcyPQY4GkZA7h2yezx43ooS5wXU//u7XEk= Subject key identifier: 0B:2B:50:75:7E:23:7C:31:2C:73:15:52:62:D1:E7:2C:8B:F2:63:88 Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6 Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6 Certificate serial: 019B5A5158483FD02B5CF467F566E9BC5433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft Manifest number: 0EA9 Signing time: Fri 26 Dec 2025 11:00:38 +0000 Manifest this update: Fri 26 Dec 2025 11:00:38 +0000 Manifest next update: Sat 27 Dec 2025 11:00:38 +0000 Files and hashes: 1: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: TkzJ98rCfZ3VknvDpAId09u8CCRpoWPAd7XLoA3/A6Q=) 2: nLlnLzhBW0q3Q45Kky0hHNKYV40.roa (hash: RNNKG+Zuzj9PpdwsoSPFqXxYXZoCjXiQJtMmCaWRm20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:58:48:3f:d0:2b:5c:f4:67:f5:66:e9:bc:54:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6 Validity Not Before: Dec 26 11:00:38 2025 GMT Not After : Dec 27 11:00:38 2025 GMT Subject: CN=0b2b50757e237c312c73155262d1e72c8bf26388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:ac:35:51:7f:e9:f7:a8:39:61:8c:ff:67: bb:dd:7a:e3:81:a5:13:09:9b:43:29:16:d2:b4:c2: 64:35:65:0c:6d:2c:81:f0:bd:f2:1f:a2:4f:ad:c6: 4f:47:24:38:ea:7b:32:51:d5:97:cd:bc:e5:31:c1: 46:f1:bc:bd:bf:6c:7d:1c:c0:78:f3:65:d2:c0:aa: 16:d8:fa:61:06:ea:78:2f:1b:7a:69:0a:7e:68:24: d7:58:d3:41:59:c5:52:3f:bb:f7:8c:66:e9:d9:9c: 82:b4:a0:f2:52:5f:e8:28:46:b5:79:ad:d1:11:5d: 23:72:24:0c:9f:83:c4:8f:bd:05:0d:48:1a:95:3c: 4b:f8:88:cb:9e:52:6c:0e:a6:0c:c4:f9:d2:94:78: bb:8a:09:fc:55:09:6f:94:26:96:3d:80:3e:d9:93: 6d:4b:d8:0e:e4:b4:b1:af:c9:b6:bd:9a:8c:7c:49: 27:61:43:81:a0:86:1e:a6:91:7c:1e:95:94:b6:dd: 75:4a:c6:28:a6:2a:a5:eb:a1:91:11:d0:bf:13:e5: b6:b4:0e:67:10:2a:76:5a:65:89:e0:7b:6a:2f:2c: 9f:10:c8:b9:24:92:d5:14:4a:ed:17:bd:3c:88:8a: a8:cf:44:98:8e:94:b8:c9:fe:1b:07:3d:2c:2a:26: 90:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2B:50:75:7E:23:7C:31:2C:73:15:52:62:D1:E7:2C:8B:F2:63:88 X509v3 Authority Key Identifier: keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e0:28:e8:c5:cd:6c:fa:cc:97:a8:db:19:c8:86:7e:4c:c5: 5a:6a:9b:6c:ee:f3:24:f4:87:49:62:ec:3b:d2:4f:53:4b:41: bd:5f:7f:1e:6d:16:ac:1f:9d:f6:6a:fe:7f:2b:86:93:fe:3d: 36:70:da:ee:e9:32:d6:13:28:0f:b6:f6:c8:2c:74:65:b9:88: 60:33:86:1a:28:d9:5a:46:a7:49:1c:c4:b9:82:70:09:b4:96: 68:3c:a5:63:05:b2:72:95:3c:3e:78:f2:42:4b:d7:f6:de:64: ce:58:f5:2a:1e:1b:46:eb:3d:2c:2b:5c:c0:cd:49:56:77:78: 54:83:56:5b:7b:e1:03:7a:28:06:0d:0c:2d:a2:20:67:a9:e4: 6e:a3:f2:86:bc:e7:50:da:d4:76:62:a5:20:af:c5:c1:08:7c: b5:47:fb:61:92:12:1f:7f:f7:b3:aa:06:f1:4d:a6:ab:4f:ba: 4d:a2:8f:07:44:ee:94:8e:6c:17:f0:f1:a4:7a:ad:b8:de:f0: dd:47:d4:ae:42:cb:90:2a:88:c2:c6:9f:8b:8e:4c:22:22:00: 45:0b:84:99:da:8b:40:e7:ff:fb:e0:86:00:cc:03:a4:70:26: b0:2f:b1:64:1b:c6:0b:35:16:9c:57:08:a9:10:c9:c5:a5:db: 50:d3:39:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVhIP9ArXPRn9WbpvFQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZTE1ZDM4NGMzOGY0ODcyYjBmZjkzNTJmZjE5YzRkNmRm YjY0YzYwHhcNMjUxMjI2MTEwMDM4WhcNMjUxMjI3MTEwMDM4WjAzMTEwLwYDVQQD EygwYjJiNTA3NTdlMjM3YzMxMmM3MzE1NTI2MmQxZTcyYzhiZjI2Mzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk+sNVF/6feoOWGM/2e73XrjgaUT CZtDKRbStMJkNWUMbSyB8L3yH6JPrcZPRyQ46nsyUdWXzbzlMcFG8by9v2x9HMB4 82XSwKoW2PphBup4Lxt6aQp+aCTXWNNBWcVSP7v3jGbp2ZyCtKDyUl/oKEa1ea3R EV0jciQMn4PEj70FDUgalTxL+IjLnlJsDqYMxPnSlHi7ign8VQlvlCaWPYA+2ZNt S9gO5LSxr8m2vZqMfEknYUOBoIYeppF8HpWUtt11SsYopiql66GREdC/E+W2tA5n ECp2WmWJ4HtqLyyfEMi5JJLVFErtF708iIqoz0SYjpS4yf4bBz0sKiaQmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsrUHV+I3wxLHMVUmLR5yyL8mOIMB8GA1UdIwQY MBaAFDLhXThMOPSHKw/5NS/xnE1t+2TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVGZE9FdzQ5SWNyRF9rMUxfR2NUVzM3Wk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81NWQzY2MtYmNmMC00MjVlLTk4M2Qt NGYzYzQ2ZjE3NzM3LzEvTXVGZE9FdzQ5SWNyRF9rMUxfR2NUVzM3Wk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81NWQzY2MtYmNmMC00MjVlLTk4M2QtNGYzYzQ2ZjE3NzM3 LzEvTXVGZE9FdzQ5SWNyRF9rMUxfR2NUVzM3Wk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeAo6MXN bPrMl6jbGciGfkzFWmqbbO7zJPSHSWLsO9JPU0tBvV9/Hm0WrB+d9mr+fyuGk/49 NnDa7uky1hMoD7b2yCx0ZbmIYDOGGijZWkanSRzEuYJwCbSWaDylYwWycpU8Pnjy QkvX9t5kzlj1Kh4bRus9LCtcwM1JVnd4VINWW3vhA3ooBg0MLaIgZ6nkbqPyhrzn UNrUdmKlIK/FwQh8tUf7YZISH3/3s6oG8U2mq0+6TaKPB0TulI5sF/DxpHqtuN7w 3UfUrkLLkCqIwsafi45MIiIARQuEmdqLQOf/++CGAMwDpHAmsC+xZBvGCzUWnFcI qRDJxaXbUNM5mg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:39 2025 by rpki-client