This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json) Hash identifier: h5GAQBueGBSjWzJsImnvFpGtunBjkr5WlvePRLRfpG4= Subject key identifier: 43:24:39:5F:DA:9D:1D:62:A4:2E:7B:71:38:B8:22:1A:DB:E7:E8:6B Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46 Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46 Certificate serial: 019B38D83528CB333DDF992C226C0757D2F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft Manifest number: 1074 Signing time: Fri 19 Dec 2025 23:00:51 +0000 Manifest this update: Fri 19 Dec 2025 23:00:51 +0000 Manifest next update: Sat 20 Dec 2025 23:00:51 +0000 Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: pBoBMNSvkBPYPeO7O3HtXDMg6WJsohzCOkc4jU6uxx0=) 2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:35:28:cb:33:3d:df:99:2c:22:6c:07:57:d2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46 Validity Not Before: Dec 19 23:00:51 2025 GMT Not After : Dec 20 23:00:51 2025 GMT Subject: CN=4324395fda9d1d62a42e7b7138b8221adbe7e86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:01:2f:d2:10:6a:b2:9f:62:c0:29:c9:ba:ac: 86:14:9c:65:42:3e:e4:dc:79:f7:90:87:63:f1:3f: 23:91:7b:11:0c:33:b5:04:76:d6:6b:6c:14:08:cb: 6c:b0:70:a2:f9:17:ba:64:60:26:03:91:cd:fb:44: 56:8d:e2:b2:36:ec:ee:f8:78:58:3c:9e:37:59:bc: cd:df:59:71:1b:c9:94:21:42:e8:b0:25:9b:d5:a5: e8:b8:e2:bf:d9:17:f2:9f:c1:82:65:55:14:6b:50: cf:14:a8:2a:d6:72:fd:ea:74:52:3e:46:4d:2d:75: 24:92:a6:a7:7b:28:cc:b8:bd:d3:06:ab:5d:20:19: 41:82:56:0a:35:53:71:5a:60:d1:b1:f2:33:ae:f9: 46:a1:bf:73:02:ef:4e:e2:82:ce:2b:9c:81:da:40: 43:de:83:16:1e:da:cc:af:15:ee:0e:8b:19:a7:c1: 34:c9:dd:89:65:1c:99:14:dd:ed:e6:e0:d1:af:bc: 9a:a1:ae:eb:78:a7:a7:c9:a0:4b:8d:90:c9:59:af: 67:16:b0:5d:18:b8:c0:2b:c1:b6:8d:fc:be:73:87: 4f:13:70:f4:22:34:c5:28:c3:d9:27:3a:0a:36:50: aa:99:6e:e5:37:31:5a:64:6e:59:e2:bb:8d:60:67: f6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:24:39:5F:DA:9D:1D:62:A4:2E:7B:71:38:B8:22:1A:DB:E7:E8:6B X509v3 Authority Key Identifier: keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:97:bd:a8:e7:4e:a5:a9:2a:8d:d9:75:29:b1:d7:19:70:ac: 25:54:00:7c:c6:9e:74:dc:1b:a6:c3:2e:0b:cc:5d:35:af:64: 34:de:85:33:fb:c1:e3:8b:81:75:b6:94:ed:64:ce:b2:f4:5c: 3f:1d:f1:75:27:6f:5d:bf:f0:2e:79:d7:ef:7d:65:8f:af:65: d9:b5:97:58:66:ac:99:ed:ba:64:ae:f6:04:fe:28:af:cb:f1: c4:98:70:5b:7c:a9:3f:72:08:04:cf:fa:b5:72:34:f7:d6:43: c5:84:36:98:50:79:81:82:e1:5d:bc:15:8c:a6:53:99:7d:40: 79:0f:b3:89:b6:23:15:4d:97:cf:bb:33:a0:0e:b7:96:41:f6: f7:5a:8b:f5:f9:56:c3:0f:30:df:5e:ef:21:a5:a0:e3:8d:2a: cf:67:8a:05:ac:76:70:3d:c7:58:3a:8d:c0:0a:aa:09:3c:3c: 35:26:16:98:c0:59:62:6c:28:6e:48:8e:ad:25:0d:db:c6:bf: 38:16:d0:11:6f:d9:5e:0a:ee:df:5c:fd:5e:55:15:c6:16:aa: f9:6f:1c:27:e7:6b:de:d0:3f:7d:0c:f0:72:cb:39:62:13:00: f0:06:57:dd:e0:66:b5:84:6f:71:6f:aa:a6:b9:f2:a6:ad:dc: d1:92:0c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42DUoyzM935ksImwHV9L4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWVjYjM1M2YxY2RjNWZkM2E5ZDU0YTg4NzM1MzFlZmQy ODVjNDYwHhcNMjUxMjE5MjMwMDUxWhcNMjUxMjIwMjMwMDUxWjAzMTEwLwYDVQQD Eyg0MzI0Mzk1ZmRhOWQxZDYyYTQyZTdiNzEzOGI4MjIxYWRiZTdlODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wEv0hBqsp9iwCnJuqyGFJxlQj7k 3Hn3kIdj8T8jkXsRDDO1BHbWa2wUCMtssHCi+Re6ZGAmA5HN+0RWjeKyNuzu+HhY PJ43WbzN31lxG8mUIULosCWb1aXouOK/2Rfyn8GCZVUUa1DPFKgq1nL96nRSPkZN LXUkkqaneyjMuL3TBqtdIBlBglYKNVNxWmDRsfIzrvlGob9zAu9O4oLOK5yB2kBD 3oMWHtrMrxXuDosZp8E0yd2JZRyZFN3t5uDRr7yaoa7reKenyaBLjZDJWa9nFrBd GLjAK8G2jfy+c4dPE3D0IjTFKMPZJzoKNlCqmW7lNzFaZG5Z4ruNYGf2twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMkOV/anR1ipC57cTi4Ihrb5+hrMB8GA1UdIwQY MBaAFJruyzU/HNxf06nVSohzUx79KFxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYt NTk0NDk2MGUzMWNmLzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYtNTk0NDk2MGUzMWNm LzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJe9qOdO pakqjdl1KbHXGXCsJVQAfMaedNwbpsMuC8xdNa9kNN6FM/vB44uBdbaU7WTOsvRc Px3xdSdvXb/wLnnX731lj69l2bWXWGasme26ZK72BP4or8vxxJhwW3ypP3IIBM/6 tXI099ZDxYQ2mFB5gYLhXbwVjKZTmX1AeQ+zibYjFU2Xz7szoA63lkH291qL9flW ww8w317vIaWg440qz2eKBax2cD3HWDqNwAqqCTw8NSYWmMBZYmwobkiOrSUN28a/ OBbQEW/ZXgru31z9XlUVxhaq+W8cJ+dr3tA/fQzwcss5YhMA8AZX3eBmtYRvcW+q prnypq3c0ZIMxw== -----END CERTIFICATE-----Generated at Sat Dec 20 01:37:48 2025 by rpki-client