This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json) Hash identifier: 2Cnky2VIUOo4+Ek+0cDdUhNkWyvtcB5S9s0kqENpsjg= Subject key identifier: DF:C3:98:A4:39:E0:8C:A0:75:2C:F2:DA:BB:6C:DC:E0:08:6B:6E:55 Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21 Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21 Certificate serial: 019B3BD9D8F63FBD72AE0F41D74C602D1A32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft Manifest number: 136C Signing time: Sat 20 Dec 2025 13:01:31 +0000 Manifest this update: Sat 20 Dec 2025 13:01:31 +0000 Manifest next update: Sun 21 Dec 2025 13:01:31 +0000 Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: 0yx1w2GUbmjZMukHilsTNmYF9BFIvBYa4msHfGmXfDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:d8:f6:3f:bd:72:ae:0f:41:d7:4c:60:2d:1a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21 Validity Not Before: Dec 20 13:01:31 2025 GMT Not After : Dec 21 13:01:31 2025 GMT Subject: CN=dfc398a439e08ca0752cf2dabb6cdce0086b6e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:79:15:2e:b3:a0:f5:39:93:ef:e5:4c:4c:ce: ef:51:85:df:62:1a:03:c9:e2:31:f5:22:d9:2a:ae: bd:a7:3f:6d:7e:e7:1c:57:d6:5d:30:f4:cb:b7:10: 9e:d4:3b:56:f2:46:b7:8d:84:09:c5:69:de:6d:70: 5e:89:6a:73:81:97:6b:91:11:32:56:b5:cb:2d:84: eb:c9:b4:56:1d:37:38:0b:81:4b:7c:a4:43:57:c7: 33:4a:48:ce:f0:30:ad:ff:7a:28:c0:52:af:e1:ef: 53:96:78:e0:f8:44:41:6b:dc:a1:29:18:9d:ef:ee: 02:d4:43:f9:85:cc:1c:a7:4f:76:9d:0a:ff:97:c4: c2:b7:1a:0c:ef:bb:65:30:fc:28:8c:9f:67:db:e1: 57:25:8b:e7:5b:11:85:f9:55:9a:7c:45:42:72:14: dc:9c:2f:a2:c1:21:56:14:38:c7:fa:1f:4d:99:42: 9d:5f:7b:f1:e1:e2:04:b4:bb:fc:4e:5d:bf:32:d8: f0:81:68:79:63:8d:e5:cb:79:49:43:86:53:46:27: fc:15:80:d1:67:17:93:18:0a:51:00:fa:ba:8f:6a: 8b:bb:8d:a0:dd:25:2b:8e:9c:69:6f:af:b9:23:cc: 4e:9e:fd:9b:ff:6f:c8:b6:75:9f:94:cf:fc:ab:39: 73:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C3:98:A4:39:E0:8C:A0:75:2C:F2:DA:BB:6C:DC:E0:08:6B:6E:55 X509v3 Authority Key Identifier: keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:58:89:27:61:a9:a4:4e:84:73:fb:d0:be:77:ab:f4:72:c2: e1:bf:9a:15:6a:28:da:12:db:1e:3c:46:0a:92:f2:4a:79:f5: 07:13:5a:d4:35:c2:1c:66:64:87:6c:2a:0c:08:92:f2:27:90: 33:5f:58:5d:70:c0:de:a0:e4:b2:2b:e8:2d:36:b6:7e:81:46: 78:0d:e3:56:84:8f:34:c3:b2:0a:16:ae:32:9f:c8:24:5d:59: f6:0e:6c:63:75:f5:02:f6:a6:ee:33:f6:ce:28:ae:cc:fa:d9: ef:3a:76:ad:f8:cf:f1:6d:dc:a1:e6:b7:4f:a3:26:3e:7b:76: ae:a7:e5:20:20:55:9c:c0:01:a3:d0:25:03:1f:d0:d5:8e:47: 2a:e9:fe:56:e6:d3:da:20:33:e1:dc:b6:9e:31:b9:ae:cc:eb: 5a:de:62:ee:56:93:b5:2e:3a:8b:8f:30:b3:ce:08:55:45:02: 23:6c:af:11:9e:5f:bd:fb:5a:b4:a6:55:83:6c:f0:31:42:02: 2f:e9:e2:9a:02:97:9c:e4:ec:ac:c8:1f:f8:c2:ac:f4:36:66: 02:b5:06:21:b8:2d:c9:26:0a:e3:bb:ec:c4:41:b2:25:a2:e6: af:34:02:f8:a8:25:38:69:a9:5e:b7:9f:3a:25:1f:0d:cf:46: 97:11:7a:46 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs72dj2P71yrg9B10xgLRoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YzUwMWYzYmZhZDQ5YWQ0ZTU2ZTZlNGMxOGY3NDBlZGVh MDVkMjEwHhcNMjUxMjIwMTMwMTMxWhcNMjUxMjIxMTMwMTMxWjAzMTEwLwYDVQQD EyhkZmMzOThhNDM5ZTA4Y2EwNzUyY2YyZGFiYjZjZGNlMDA4NmI2ZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XkVLrOg9TmT7+VMTM7vUYXfYhoD yeIx9SLZKq69pz9tfuccV9ZdMPTLtxCe1DtW8ka3jYQJxWnebXBeiWpzgZdrkREy VrXLLYTrybRWHTc4C4FLfKRDV8czSkjO8DCt/3oowFKv4e9Tlnjg+ERBa9yhKRid 7+4C1EP5hcwcp092nQr/l8TCtxoM77tlMPwojJ9n2+FXJYvnWxGF+VWafEVCchTc nC+iwSFWFDjH+h9NmUKdX3vx4eIEtLv8Tl2/MtjwgWh5Y43ly3lJQ4ZTRif8FYDR ZxeTGApRAPq6j2qLu42g3SUrjpxpb6+5I8xOnv2b/2/ItnWflM/8qzlzXQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN/DmKQ54IygdSzy2rts3OAIa25VMB8GA1UdIwQY MBaAFPjFAfO/rUmtTlbm5MGPdA7eoF0hMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1NVUI4Ny10U2ExT1Z1Ymt3WTkwRHQ2Z1hTRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMzVkNTJjLTZjYzAtNGYwMS05Mzc2 LTY0ZjQ5MmUzMjZlZC8xLzEtTVVCODctdFNhMU9WdWJrd1k5MER0NmdYU0UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U3LzM1ZDUyYy02Y2MwLTRmMDEtOTM3Ni02NGY0OTJlMzI2 ZWQvMS8xLU1VQjg3LXRTYTFPVnVia3dZOTBEdDZnWFNFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlliJ J2GppE6Ec/vQvner9HLC4b+aFWoo2hLbHjxGCpLySnn1BxNa1DXCHGZkh2wqDAiS 8ieQM19YXXDA3qDksivoLTa2foFGeA3jVoSPNMOyChauMp/IJF1Z9g5sY3X1Avam 7jP2ziiuzPrZ7zp2rfjP8W3coea3T6MmPnt2rqflICBVnMABo9AlAx/Q1Y5HKun+ VubT2iAz4dy2njG5rszrWt5i7laTtS46i48ws84IVUUCI2yvEZ5fvftatKZVg2zw MUICL+nimgKXnOTsrMgf+MKs9DZmArUGIbgtySYK47vsxEGyJaLmrzQC+KglOGmp XrefOiUfDc9GlxF6Rg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:02:49 2025 by rpki-client