This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json) Hash identifier: kDmgVmXhFS3x+GBYMz6e7En3szNnTDgsWXQb6pNoZF8= Subject key identifier: 84:D7:21:BC:5F:53:C0:70:1F:82:48:40:FC:EE:96:3C:7E:A7:58:F5 Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd Certificate serial: 019B3B34559CA5FAB8AE4EC4B490DB098C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft Manifest number: 05D2 Signing time: Sat 20 Dec 2025 10:00:44 +0000 Manifest this update: Sat 20 Dec 2025 10:00:44 +0000 Manifest next update: Sun 21 Dec 2025 10:00:44 +0000 Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=) 2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: wfjsfVLwFR9hob7VYfF/NEubX5CSu3GrHho64Moburc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:55:9c:a5:fa:b8:ae:4e:c4:b4:90:db:09:8c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd Validity Not Before: Dec 20 10:00:44 2025 GMT Not After : Dec 21 10:00:44 2025 GMT Subject: CN=84d721bc5f53c0701f824840fcee963c7ea758f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:0f:4e:68:9e:ce:c7:4d:7c:82:5e:20:a0: 6e:88:9c:21:e4:99:6e:8c:aa:47:4f:ef:73:53:dc: f7:3b:10:6d:84:b5:c8:6b:5e:38:5e:17:18:45:79: 8a:13:4f:ce:bb:71:5f:ce:0c:73:e6:c9:f0:b3:e1: 0a:83:89:bc:15:4a:63:95:ba:24:15:1f:1b:3a:3f: 21:39:cc:26:73:79:6b:5e:01:60:d3:10:06:cb:c7: 24:6e:b6:b3:88:dd:f4:43:bb:9d:f0:5d:74:de:6f: 0e:79:d7:69:b0:83:59:c5:4b:64:a1:dc:c7:da:5f: 3c:3e:69:5a:55:ba:ba:84:62:48:8b:19:96:49:7e: e1:08:59:ed:45:30:b1:80:0d:d7:b5:c5:b6:23:fc: 2e:0a:52:a6:9f:6a:b8:fc:e1:ba:88:e5:ec:56:f3: 50:82:b0:16:3c:27:d5:28:45:14:70:fe:8a:e2:e2: 33:de:9f:9a:b1:f2:15:90:9d:dd:d3:5b:66:1c:40: 9d:4c:23:69:09:cb:02:9b:fe:f6:dc:d9:f2:85:75: 25:2d:42:34:f4:f2:37:4c:9e:be:58:53:eb:dc:69: 2c:e2:10:e8:7a:02:58:04:45:b6:3e:75:1e:01:04: 2e:16:9b:9a:36:0d:d9:68:6c:2c:db:5f:55:6c:b3: 38:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D7:21:BC:5F:53:C0:70:1F:82:48:40:FC:EE:96:3C:7E:A7:58:F5 X509v3 Authority Key Identifier: keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a0:1b:99:dd:67:c3:a9:cc:25:68:ed:ff:8f:c2:44:79:e8: 50:ff:c7:f6:a1:f0:8c:82:e7:b9:fa:77:f4:06:e2:26:58:57: 95:ae:04:7f:74:34:9e:fe:8a:06:a9:a6:ef:80:a2:dd:d6:93: 52:4b:07:12:a6:63:cd:d7:62:f0:11:a6:89:69:70:73:02:19: 2e:03:37:31:4c:b7:55:cd:44:5f:fa:84:1f:cb:f6:8a:36:86: c0:99:78:68:5e:99:ac:e9:10:3b:9b:0f:c4:5c:ce:47:d9:f3: 8c:ba:e5:e4:e9:df:e2:d3:df:0c:54:fc:69:31:5e:30:4b:8a: 3b:46:9e:7f:a2:af:da:90:a7:6a:e5:93:38:f5:73:47:24:db: 5a:e6:c5:e1:1c:51:8d:88:74:d3:52:1f:38:3b:c7:87:aa:b8: cf:fc:f4:ab:7b:48:af:00:59:8e:ba:89:60:29:fe:89:84:80: 0a:3e:4d:e5:9c:1e:48:64:b9:b0:83:e0:bc:bc:f5:79:d5:17: 60:9f:d9:87:1e:a3:ed:f5:46:59:07:23:ce:46:be:ba:aa:80: e8:3c:67:87:7c:3a:f5:63:0c:bf:0e:e7:a2:5f:3b:db:87:a5: e4:4c:75:3d:c1:0a:fd:d8:00:8a:03:90:6c:96:7b:a9:cd:cc: 13:e0:65:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NFWcpfq4rk7EtJDbCYyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzUwZGY2YjAxZGZmNmY1NGViODAzOWIyNDk3YWE3ZjRl ZjEyY2QwHhcNMjUxMjIwMTAwMDQ0WhcNMjUxMjIxMTAwMDQ0WjAzMTEwLwYDVQQD Eyg4NGQ3MjFiYzVmNTNjMDcwMWY4MjQ4NDBmY2VlOTYzYzdlYTc1OGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9YPTmiezsdNfIJeIKBuiJwh5Jlu jKpHT+9zU9z3OxBthLXIa144XhcYRXmKE0/Ou3Ffzgxz5snws+EKg4m8FUpjlbok FR8bOj8hOcwmc3lrXgFg0xAGy8ckbraziN30Q7ud8F103m8OeddpsINZxUtkodzH 2l88PmlaVbq6hGJIixmWSX7hCFntRTCxgA3XtcW2I/wuClKmn2q4/OG6iOXsVvNQ grAWPCfVKEUUcP6K4uIz3p+asfIVkJ3d01tmHECdTCNpCcsCm/723NnyhXUlLUI0 9PI3TJ6+WFPr3Gks4hDoegJYBEW2PnUeAQQuFpuaNg3ZaGws219VbLM4/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITXIbxfU8BwH4JIQPzuljx+p1j1MB8GA1UdIwQY MBaAFKzFDfawHf9vVOuAObJJeqf07xLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQt MzFjOTMxM2Y5ZjY2LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQtMzFjOTMxM2Y5ZjY2 LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKAbmd1n w6nMJWjt/4/CRHnoUP/H9qHwjILnufp39AbiJlhXla4Ef3Q0nv6KBqmm74Ci3daT UksHEqZjzddi8BGmiWlwcwIZLgM3MUy3Vc1EX/qEH8v2ijaGwJl4aF6ZrOkQO5sP xFzOR9nzjLrl5Onf4tPfDFT8aTFeMEuKO0aef6Kv2pCnauWTOPVzRyTbWubF4RxR jYh001IfODvHh6q4z/z0q3tIrwBZjrqJYCn+iYSACj5N5ZweSGS5sIPgvLz1edUX YJ/Zhx6j7fVGWQcjzka+uqqA6Dxnh3w69WMMvw7nol8724el5Ex1PcEK/dgAigOQ bJZ7qc3ME+Blpg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:58:56 2025 by rpki-client