This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft File: mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json) Hash identifier: YgCgSryd+2kMTjo3M/x75Iig2RFMLPPTnexGMBsXmuo= Subject key identifier: 61:A9:25:AD:07:5C:E0:95:7C:BB:FA:7E:87:51:54:1F:A2:CA:DF:35 Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE Certificate issuer: /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee Certificate serial: 019B3D907CE63A1789879BDC2AF612A3EF11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft Manifest number: 10AA Signing time: Sat 20 Dec 2025 21:00:37 +0000 Manifest this update: Sat 20 Dec 2025 21:00:37 +0000 Manifest next update: Sun 21 Dec 2025 21:00:37 +0000 Files and hashes: 1: MiKRdbGABW7H7vIb5R-saUTi7Ps.roa (hash: IcsqNxh/vQa5gPXIyGMaar+4UAAjRSfgokvENVkA4RM=) 2: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: xjq+ouP2nrznIGMFX6kRXChvTo68llG3ejA1D/kHBwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:7c:e6:3a:17:89:87:9b:dc:2a:f6:12:a3:ef:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee Validity Not Before: Dec 20 21:00:37 2025 GMT Not After : Dec 21 21:00:37 2025 GMT Subject: CN=61a925ad075ce0957cbbfa7e8751541fa2cadf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:e7:dc:99:0b:b7:22:10:55:9e:69:7e:e5: 40:d6:bf:f0:db:c0:e9:49:6b:d1:0b:b6:1c:00:62: 92:be:d9:36:c3:9b:6c:84:ea:8b:18:c7:4a:f8:fc: 01:75:77:22:6e:77:10:21:e5:10:22:c0:69:66:a8: dc:b0:10:28:d0:ff:f7:12:ef:6a:40:ac:8e:6e:5f: a5:f4:99:4f:d5:49:e0:b6:fd:fd:d4:79:d5:5b:87: f1:a0:aa:e0:df:15:d8:88:c7:cc:d1:7e:b2:4f:d4: b2:54:3e:ba:3e:f9:49:3a:7c:23:dc:8b:3d:92:3f: 4e:12:48:85:9c:83:3b:77:b8:30:fe:36:bd:32:80: 0b:5e:b3:93:a0:b0:d2:9e:62:db:cb:f8:a7:16:df: ef:6a:be:ff:4d:c5:5b:3e:6c:c4:4a:5f:1b:a9:73: 55:9f:90:2d:c1:65:65:03:d1:29:e6:a7:bf:f6:d4: 7c:ef:66:38:2f:ba:d4:a6:df:d9:6e:66:27:22:90: f2:43:b3:52:1c:25:06:22:54:7d:a9:d7:83:70:da: 60:92:ae:0f:35:2a:bb:e1:a1:57:32:e1:84:fd:f7: f0:19:53:36:31:5b:07:41:21:77:cf:54:b3:8b:7f: 1c:4d:73:8d:7d:78:14:30:91:f1:c7:11:64:3e:d1: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A9:25:AD:07:5C:E0:95:7C:BB:FA:7E:87:51:54:1F:A2:CA:DF:35 X509v3 Authority Key Identifier: keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1b:d5:23:4a:da:06:97:a8:18:36:75:ae:36:89:c9:b5:03: 1a:b7:ae:1a:b8:d4:5c:70:c2:c0:d0:ca:98:86:bd:1a:0b:4f: 7e:77:3e:4c:b6:c6:2a:bb:bd:98:e7:4b:94:86:ed:71:b3:04: 39:6d:5e:6e:8d:99:9c:17:4b:f0:98:6b:f9:ef:69:e4:e0:51: d6:62:61:33:a4:c3:62:83:06:88:43:74:26:02:4f:a9:5c:cf: 3a:86:18:7e:d1:fe:fb:4b:52:4e:05:c8:6a:db:08:d9:24:63: 2e:93:ff:98:a8:79:06:6d:60:72:a4:d4:76:79:e3:bf:ee:4d: 25:69:1a:a1:26:5b:e3:76:85:dc:27:3b:23:4c:90:2d:f3:85: ed:63:24:26:96:eb:d2:d9:64:f8:cd:da:f6:d7:3b:75:4f:8b: 0d:69:c8:b4:84:3f:29:52:61:37:4d:09:c7:61:3f:97:70:51: 7b:f8:87:fc:cf:34:84:1f:e0:22:8c:32:31:7e:8c:78:33:fc: e0:58:78:2a:6c:66:b1:41:5e:77:89:11:ab:5c:00:52:c2:9f: 5e:d2:31:91:90:df:c8:f3:29:32:ac:23:e1:58:51:4a:7f:6e: a4:48:3d:d8:cc:c4:58:c6:89:02:66:f2:75:99:7c:78:a8:2c: da:18:f5:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kHzmOheJh5vcKvYSo+8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWQ5NTc2YzkyNzIwMjkxNjhjNGQxYTQxNzVkMWE3Y2Ex YzUxZWUwHhcNMjUxMjIwMjEwMDM3WhcNMjUxMjIxMjEwMDM3WjAzMTEwLwYDVQQD Eyg2MWE5MjVhZDA3NWNlMDk1N2NiYmZhN2U4NzUxNTQxZmEyY2FkZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol/n3JkLtyIQVZ5pfuVA1r/w28Dp SWvRC7YcAGKSvtk2w5tshOqLGMdK+PwBdXcibncQIeUQIsBpZqjcsBAo0P/3Eu9q QKyObl+l9JlP1Ungtv391HnVW4fxoKrg3xXYiMfM0X6yT9SyVD66PvlJOnwj3Is9 kj9OEkiFnIM7d7gw/ja9MoALXrOToLDSnmLby/inFt/var7/TcVbPmzESl8bqXNV n5AtwWVlA9Ep5qe/9tR872Y4L7rUpt/ZbmYnIpDyQ7NSHCUGIlR9qdeDcNpgkq4P NSq74aFXMuGE/ffwGVM2MVsHQSF3z1Szi38cTXONfXgUMJHxxxFkPtGyzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGpJa0HXOCVfLv6fodRVB+iyt81MB8GA1UdIwQY MBaAFJrtlXbJJyApFoxNGkF10afKHFHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXUyVmRza25JQ2tXakUwYVFYWFJwOG9jVWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNTI1ZGYtNGM2ZS00MDk5LTgxNGQt ZjE0OGY0YzlkMzlhLzEvbXUyVmRza25JQ2tXakUwYVFYWFJwOG9jVWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lNTI1ZGYtNGM2ZS00MDk5LTgxNGQtZjE0OGY0YzlkMzlh LzEvbXUyVmRza25JQ2tXakUwYVFYWFJwOG9jVWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhvVI0ra BpeoGDZ1rjaJybUDGreuGrjUXHDCwNDKmIa9GgtPfnc+TLbGKru9mOdLlIbtcbME OW1ebo2ZnBdL8Jhr+e9p5OBR1mJhM6TDYoMGiEN0JgJPqVzPOoYYftH++0tSTgXI atsI2SRjLpP/mKh5Bm1gcqTUdnnjv+5NJWkaoSZb43aF3Cc7I0yQLfOF7WMkJpbr 0tlk+M3a9tc7dU+LDWnItIQ/KVJhN00Jx2E/l3BRe/iH/M80hB/gIowyMX6MeDP8 4Fh4KmxmsUFed4kRq1wAUsKfXtIxkZDfyPMpMqwj4VhRSn9upEg92MzEWMaJAmby dZl8eKgs2hj1vQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:36:41 2025 by rpki-client