This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft File: mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json) Hash identifier: 7fjnHEkqXB5XGxJ2hgUf6twSWhO9jgMB8UrAPIq5YLE= Subject key identifier: 0A:3E:87:F7:D9:D3:C4:3C:71:2F:9D:0A:19:31:E1:99:FF:FC:86:83 Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE Certificate issuer: /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee Certificate serial: 019B22874F7E472B8EDAE7FCEBB248B867BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft Manifest number: 109C Signing time: Mon 15 Dec 2025 15:00:51 +0000 Manifest this update: Mon 15 Dec 2025 15:00:51 +0000 Manifest next update: Tue 16 Dec 2025 15:00:51 +0000 Files and hashes: 1: MiKRdbGABW7H7vIb5R-saUTi7Ps.roa (hash: IcsqNxh/vQa5gPXIyGMaar+4UAAjRSfgokvENVkA4RM=) 2: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: X/wXdLgIy8D+uYIwg5ro7E7DZVZ6/z+CV7mgRbsk7sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:4f:7e:47:2b:8e:da:e7:fc:eb:b2:48:b8:67:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee Validity Not Before: Dec 15 15:00:51 2025 GMT Not After : Dec 16 15:00:51 2025 GMT Subject: CN=0a3e87f7d9d3c43c712f9d0a1931e199fffc8683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:e8:42:70:e3:ad:14:21:6a:17:b5:72:05: 82:63:f8:12:bd:d5:61:51:de:2c:14:b8:89:78:3f: c1:3f:02:ea:66:af:85:06:06:5d:fd:df:35:d9:32: e3:d0:f5:2c:bc:4c:57:06:92:38:da:83:6c:71:0d: 1d:9d:a4:f7:b6:db:dc:e1:28:41:22:49:cc:5d:63: 34:d1:06:57:f9:b0:0a:bc:dd:33:97:80:92:cb:ad: 77:9e:e0:9b:f9:b4:81:af:f1:5a:37:3b:dc:71:b8: 66:9c:b9:ac:a8:25:2f:46:64:66:70:2a:f0:03:8f: a8:e9:f6:f7:6a:be:1c:34:7e:94:87:d6:02:a2:0e: 21:36:cf:f9:d3:2f:8c:18:cf:e3:0e:34:b3:7f:a4: 10:25:dd:71:d6:09:20:81:97:3d:99:23:5e:20:ac: c3:34:9d:83:61:86:98:a4:5f:6d:4a:35:17:85:eb: 19:99:da:00:d3:9e:66:05:7e:9f:00:c3:40:34:17: 36:c0:65:ce:b4:a8:17:db:fe:49:d7:f3:a5:28:a5: ac:61:2d:29:ec:d0:7b:1a:9e:af:5a:6c:d2:60:fa: e8:9a:e2:9c:f8:92:b9:dd:cd:70:dc:5f:0f:f7:57: a7:74:5d:91:1b:01:89:91:a6:cb:63:9f:5a:3e:80: c3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3E:87:F7:D9:D3:C4:3C:71:2F:9D:0A:19:31:E1:99:FF:FC:86:83 X509v3 Authority Key Identifier: keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:23:c7:d7:9e:81:d0:0e:f8:7d:f6:f3:fd:39:16:82:7d:68: cc:91:3f:c0:f7:01:5f:0e:18:1c:e7:24:fa:3b:7a:73:0e:cd: 83:4e:c8:04:51:b2:c2:fd:72:dd:6d:98:e2:f5:4a:e4:58:26: ec:41:da:a8:4c:f1:cb:c8:ed:d0:cb:56:2b:02:b0:b3:90:54: b3:2b:36:28:12:09:a6:83:ea:6c:26:78:53:9f:30:8d:e6:2d: 45:6d:34:9e:a5:87:b8:8c:bb:29:e3:df:87:d8:e4:84:fb:ad: b7:27:6f:ef:6d:87:3a:8c:cb:09:9f:fb:a7:f4:27:03:11:b9: 82:6e:c1:ed:bc:cc:f5:4a:57:50:b1:bb:5e:e0:73:c5:6b:ee: f2:6a:7e:f1:19:04:80:eb:0b:4e:99:17:5e:d1:19:f6:ec:e6: 88:03:20:b2:92:b4:1a:bc:3b:22:1c:63:8e:ab:fc:b5:d5:f5: 96:6f:0f:29:94:97:bc:2c:5d:bf:0f:23:95:47:1b:e1:ef:c2: ac:a4:a6:88:ae:84:e2:96:d3:ef:c0:ee:65:86:48:2f:a6:61: 6a:31:cb:4a:b3:4e:7c:3f:2e:b5:a9:e2:9a:24:3e:45:2d:12: da:79:7a:21:dc:fa:a9:22:35:4c:e9:ec:6c:ab:bd:ae:d4:61: 10:64:ea:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih09+RyuO2uf867JIuGe8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWQ5NTc2YzkyNzIwMjkxNjhjNGQxYTQxNzVkMWE3Y2Ex YzUxZWUwHhcNMjUxMjE1MTUwMDUxWhcNMjUxMjE2MTUwMDUxWjAzMTEwLwYDVQQD EygwYTNlODdmN2Q5ZDNjNDNjNzEyZjlkMGExOTMxZTE5OWZmZmM4NjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TjoQnDjrRQhahe1cgWCY/gSvdVh Ud4sFLiJeD/BPwLqZq+FBgZd/d812TLj0PUsvExXBpI42oNscQ0dnaT3ttvc4ShB IknMXWM00QZX+bAKvN0zl4CSy613nuCb+bSBr/FaNzvccbhmnLmsqCUvRmRmcCrw A4+o6fb3ar4cNH6Uh9YCog4hNs/50y+MGM/jDjSzf6QQJd1x1gkggZc9mSNeIKzD NJ2DYYaYpF9tSjUXhesZmdoA055mBX6fAMNANBc2wGXOtKgX2/5J1/OlKKWsYS0p 7NB7Gp6vWmzSYPromuKc+JK53c1w3F8P91endF2RGwGJkabLY59aPoDDpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo+h/fZ08Q8cS+dChkx4Zn//IaDMB8GA1UdIwQY MBaAFJrtlXbJJyApFoxNGkF10afKHFHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXUyVmRza25JQ2tXakUwYVFYWFJwOG9jVWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNTI1ZGYtNGM2ZS00MDk5LTgxNGQt ZjE0OGY0YzlkMzlhLzEvbXUyVmRza25JQ2tXakUwYVFYWFJwOG9jVWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lNTI1ZGYtNGM2ZS00MDk5LTgxNGQtZjE0OGY0YzlkMzlh LzEvbXUyVmRza25JQ2tXakUwYVFYWFJwOG9jVWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtiPH156B 0A74ffbz/TkWgn1ozJE/wPcBXw4YHOck+jt6cw7Ng07IBFGywv1y3W2Y4vVK5Fgm 7EHaqEzxy8jt0MtWKwKws5BUsys2KBIJpoPqbCZ4U58wjeYtRW00nqWHuIy7KePf h9jkhPuttydv722HOozLCZ/7p/QnAxG5gm7B7bzM9UpXULG7XuBzxWvu8mp+8RkE gOsLTpkXXtEZ9uzmiAMgspK0Grw7Ihxjjqv8tdX1lm8PKZSXvCxdvw8jlUcb4e/C rKSmiK6E4pbT78DuZYZIL6ZhajHLSrNOfD8utanimiQ+RS0S2nl6Idz6qSI1TOns bKu9rtRhEGTqsQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:23:25 2025 by rpki-client