This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft File: mufWYa_KPTNwuOY0SU1SRrg9WF8.mft (raw, json) Hash identifier: r3y1fbBg5Kq0yaBT2/KHvRLbQch84FdlYzeo0SYoxGU= Subject key identifier: 9A:54:CB:91:38:15:49:20:94:C3:60:5D:9E:BF:DB:59:E6:01:A7:D8 Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F Certificate issuer: /CN=9ae7d661afca3d3370b8e634494d5246b83d585f Certificate serial: 019B32D60D4CA6732E0890C8A9D13DAAA5A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 19:00:47 +0000 Manifest this update: Thu 18 Dec 2025 19:00:47 +0000 Manifest next update: Fri 19 Dec 2025 19:00:47 +0000 Files and hashes: 1: Lm17pgMk2BDV2OeIcb6BBLpoQWU.roa (hash: VGsuyNfzfr/GzDDdXYimTSNFocuLHOKMiHb8B0Qh1O4=) 2: M8tcAEtobc_HjXn0aPPPoIVg2j0.roa (hash: jvlpLwOiPWCn9YztYqEXIDpMuvLmxqIvyCBv7RToVIs=) 3: mufWYa_KPTNwuOY0SU1SRrg9WF8.crl (hash: psz/jGCvIb164e493FXiJKBvfes92MPL/znV1H4Bq9c=) 4: urzNFgi_gE8fSu_5YoQ_GQRDVw0.roa (hash: T8tIXkvw/aUJVTl8RyXo5fkRTTwdXnzNgefZluAgHWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:0d:4c:a6:73:2e:08:90:c8:a9:d1:3d:aa:a5:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f Validity Not Before: Dec 18 19:00:47 2025 GMT Not After : Dec 19 19:00:47 2025 GMT Subject: CN=9a54cb913815492094c3605d9ebfdb59e601a7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5a:6b:5e:91:22:9d:7c:4e:15:1b:89:01:54: 16:df:f6:a9:a9:81:52:54:78:5e:f6:ce:60:a0:0e: 5a:09:f5:2d:c4:70:cc:c4:72:bf:7d:61:c4:fb:dc: 93:f4:ba:6d:2e:b0:a7:8f:7e:74:3c:ad:01:b9:d0: 63:60:cb:90:4c:fe:8a:f3:48:34:9d:62:b4:5a:6a: ae:4b:94:fd:88:a3:6c:84:77:b0:67:18:5c:a8:a9: ee:bc:fe:e0:85:b1:db:96:9f:8f:be:15:99:85:e8: ad:42:08:bb:92:cd:2c:16:fa:fa:dc:1e:49:7d:94: 2e:a2:b9:cb:80:54:ea:59:99:b6:dd:20:88:52:f4: 87:c7:d2:e8:6c:89:d9:1a:ea:da:5f:15:4f:86:44: 6f:7f:f0:28:ef:46:83:30:4d:08:e1:91:6e:20:74: 0a:9c:12:76:6e:3e:f9:68:1c:a0:bb:30:35:a7:05: 7d:0a:e0:b0:7f:74:bf:27:12:e6:77:25:5d:f3:7b: 0e:47:2b:ab:34:aa:1d:5c:15:7e:ec:7d:f0:b0:d4: f2:7f:e7:8f:98:ae:fa:bc:cf:54:2c:66:96:7a:7f: 46:7f:93:e3:9d:0e:54:bb:6a:50:1a:18:fd:4b:97: cd:0e:a8:88:85:b5:c3:50:31:2f:30:b6:6e:f8:90: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:54:CB:91:38:15:49:20:94:C3:60:5D:9E:BF:DB:59:E6:01:A7:D8 X509v3 Authority Key Identifier: keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cd:4c:cc:5b:90:b7:44:c3:45:8c:8a:89:eb:f2:d7:a8:c6: 33:53:fc:3d:66:1d:13:c0:89:67:cc:23:89:ad:3a:61:2e:2e: 7c:cf:30:b8:90:de:3a:0d:61:db:ab:b8:47:da:d5:53:41:ac: 74:0d:20:84:b4:90:a2:04:92:e5:a3:57:26:19:f3:b9:d3:64: 10:04:9b:fb:b3:4b:af:b0:f3:b1:e0:07:7f:ba:ff:fb:d8:23: 86:d9:f2:db:e3:c7:ad:9f:27:e7:be:b9:24:1e:27:65:94:4c: 9a:06:df:5c:03:ed:a1:9f:c7:c2:e4:29:97:67:c4:0b:d7:ed: 4f:92:25:c1:a7:a4:e8:e7:22:fd:68:ce:05:f7:8d:d0:f9:ea: 43:69:6f:8c:53:f1:05:dd:6b:f7:4a:a3:e9:21:07:9c:2f:b6: 3a:6e:bc:72:d3:b8:31:b0:6f:58:fc:22:f4:b2:9d:e5:cf:7a: 80:d6:04:5f:92:33:ad:fb:41:80:7a:4c:49:de:86:73:ff:d4: 25:85:2c:f2:ba:8b:f7:63:10:b9:8d:65:a4:60:64:ac:16:3d: 06:f6:2d:cc:6d:cb:aa:30:d4:0b:a4:93:05:a1:74:e0:df:14: fa:0e:db:c9:df:38:9e:14:86:1b:3f:5d:26:4b:d7:2f:c0:43: ca:f6:90:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1g1MpnMuCJDIqdE9qqWlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTdkNjYxYWZjYTNkMzM3MGI4ZTYzNDQ5NGQ1MjQ2Yjgz ZDU4NWYwHhcNMjUxMjE4MTkwMDQ3WhcNMjUxMjE5MTkwMDQ3WjAzMTEwLwYDVQQD Eyg5YTU0Y2I5MTM4MTU0OTIwOTRjMzYwNWQ5ZWJmZGI1OWU2MDFhN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVprXpEinXxOFRuJAVQW3/apqYFS VHhe9s5goA5aCfUtxHDMxHK/fWHE+9yT9LptLrCnj350PK0BudBjYMuQTP6K80g0 nWK0WmquS5T9iKNshHewZxhcqKnuvP7ghbHblp+PvhWZheitQgi7ks0sFvr63B5J fZQuornLgFTqWZm23SCIUvSHx9LobInZGuraXxVPhkRvf/Ao70aDME0I4ZFuIHQK nBJ2bj75aByguzA1pwV9CuCwf3S/JxLmdyVd83sORyurNKodXBV+7H3wsNTyf+eP mK76vM9ULGaWen9Gf5PjnQ5Uu2pQGhj9S5fNDqiIhbXDUDEvMLZu+JDakQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpUy5E4FUkglMNgXZ6/21nmAafYMB8GA1UdIwQY MBaAFJrn1mGvyj0zcLjmNElNUka4PVhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMt M2I2OGE0OWRjMDQyLzEvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMtM2I2OGE0OWRjMDQy LzEvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf81MzFuQ t0TDRYyKievy16jGM1P8PWYdE8CJZ8wjia06YS4ufM8wuJDeOg1h26u4R9rVU0Gs dA0ghLSQogSS5aNXJhnzudNkEASb+7NLr7DzseAHf7r/+9gjhtny2+PHrZ8n5765 JB4nZZRMmgbfXAPtoZ/HwuQpl2fEC9ftT5Ilwaek6Oci/WjOBfeN0PnqQ2lvjFPx Bd1r90qj6SEHnC+2Om68ctO4MbBvWPwi9LKd5c96gNYEX5IzrftBgHpMSd6Gc//U JYUs8rqL92MQuY1lpGBkrBY9BvYtzG3LqjDUC6STBaF04N8U+g7byd84nhSGGz9d JkvXL8BDyvaQGg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:17:21 2025 by rpki-client