This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json) Hash identifier: 8vvgawfceYoaZAvEcZ46cmuQMeI38EIjmFvqyt20MrU= Subject key identifier: 26:01:F8:CC:A4:A0:AD:55:5D:25:81:8A:C0:2C:D1:E1:D2:EE:1D:AF Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd Certificate serial: 019B25F607EDA57BE3E4B9348C0BC4852D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft Manifest number: 05C7 Signing time: Tue 16 Dec 2025 07:00:39 +0000 Manifest this update: Tue 16 Dec 2025 07:00:39 +0000 Manifest next update: Wed 17 Dec 2025 07:00:39 +0000 Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=) 2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: CBXFPEG32BHEYeEyQ4qQmx6nyc+FDKSvmgd7pIKjNJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:07:ed:a5:7b:e3:e4:b9:34:8c:0b:c4:85:2d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd Validity Not Before: Dec 16 07:00:39 2025 GMT Not After : Dec 17 07:00:39 2025 GMT Subject: CN=2601f8cca4a0ad555d25818ac02cd1e1d2ee1daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d4:03:b2:fd:37:d1:10:69:2f:13:16:e6:a0: 23:bb:ac:10:fd:3e:6d:99:75:e3:ff:ed:7d:d8:25: 2b:fa:06:cc:ee:ba:92:7d:6b:42:8f:1a:03:7c:d2: 50:4e:e4:77:c9:69:8c:8c:d6:8d:16:93:fc:50:6b: f2:7d:f9:b5:2a:33:fa:38:71:2b:58:18:51:b6:8b: ab:08:a0:50:c9:e9:cd:08:86:6e:85:ac:ff:dd:3c: e1:4c:92:ad:0b:45:28:37:c4:ca:ad:2a:23:1f:7d: c7:1e:8a:69:a8:63:a4:48:77:50:c9:a6:32:a7:65: 3f:75:08:35:ec:5c:f1:8d:f2:db:9f:0f:40:8e:58: 8b:69:71:c8:df:47:18:47:fc:3b:46:d8:7f:77:dd: e0:53:77:3b:d7:99:8f:65:4b:5b:f6:11:7f:d7:f4: 1e:bd:ac:2b:5d:fe:fe:cc:bb:3a:73:c5:1b:a0:27: 29:7b:9b:ed:c5:f3:8d:c7:ec:49:2d:22:da:57:9c: be:29:2e:de:91:56:99:6c:a3:a2:48:4f:68:0d:be: 73:e2:f1:24:d3:15:0f:af:35:3e:5d:b4:e3:fe:ca: c8:a1:dc:36:c3:be:c7:36:44:fe:7b:fa:b5:e6:d4: 89:b7:32:5d:bc:9c:97:40:47:dc:5d:63:25:de:a7: c3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:01:F8:CC:A4:A0:AD:55:5D:25:81:8A:C0:2C:D1:E1:D2:EE:1D:AF X509v3 Authority Key Identifier: keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d3:f4:d5:15:74:24:76:d0:96:10:c4:65:65:bc:e7:f3:97: af:b9:9c:46:b5:f3:a6:1d:bb:8e:8b:c3:ec:6b:df:2e:84:fb: 62:9f:10:45:ad:7e:72:52:6b:f1:6a:6f:63:ac:ee:88:26:49: c0:f9:5a:80:d1:46:a7:c0:64:a6:c2:de:08:6a:04:2c:d9:c7: f5:49:81:87:1c:b5:da:5a:68:bb:56:60:ff:25:94:5e:05:59: 1d:37:c0:82:03:6a:9f:fb:56:3c:cf:bf:6c:bb:ab:eb:bf:f1: 8e:a4:98:29:3d:f6:6b:1b:10:2b:0a:cd:c9:0c:16:26:3d:48: 60:4c:a9:33:df:2c:67:84:9d:62:4a:9a:06:a3:15:bc:af:41: a6:2a:ae:ca:1e:cf:1e:d7:0e:d3:64:97:3e:a7:1d:1c:79:aa: 6a:83:63:68:78:34:87:c4:ef:ca:72:af:dc:14:d8:38:3a:b0: 46:fc:14:28:a3:db:38:86:89:22:40:5e:5d:62:8c:73:b1:99: 0f:66:44:9c:e5:61:70:13:3f:4b:f5:18:83:1d:3d:ae:ed:2a: 15:74:a2:c0:ec:2c:89:06:ba:88:d9:25:ce:b7:99:f3:57:f0: 9d:fc:3b:d6:37:a2:c6:53:6d:a1:c8:d6:22:23:c0:fe:fd:2a: 84:90:6f:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9gftpXvj5Lk0jAvEhS0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzUwZGY2YjAxZGZmNmY1NGViODAzOWIyNDk3YWE3ZjRl ZjEyY2QwHhcNMjUxMjE2MDcwMDM5WhcNMjUxMjE3MDcwMDM5WjAzMTEwLwYDVQQD EygyNjAxZjhjY2E0YTBhZDU1NWQyNTgxOGFjMDJjZDFlMWQyZWUxZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49QDsv030RBpLxMW5qAju6wQ/T5t mXXj/+192CUr+gbM7rqSfWtCjxoDfNJQTuR3yWmMjNaNFpP8UGvyffm1KjP6OHEr WBhRtourCKBQyenNCIZuhaz/3TzhTJKtC0UoN8TKrSojH33HHoppqGOkSHdQyaYy p2U/dQg17FzxjfLbnw9AjliLaXHI30cYR/w7Rth/d93gU3c715mPZUtb9hF/1/Qe vawrXf7+zLs6c8UboCcpe5vtxfONx+xJLSLaV5y+KS7ekVaZbKOiSE9oDb5z4vEk 0xUPrzU+XbTj/srIodw2w77HNkT+e/q15tSJtzJdvJyXQEfcXWMl3qfD6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYB+MykoK1VXSWBisAs0eHS7h2vMB8GA1UdIwQY MBaAFKzFDfawHf9vVOuAObJJeqf07xLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQt MzFjOTMxM2Y5ZjY2LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQtMzFjOTMxM2Y5ZjY2 LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtP01RV0 JHbQlhDEZWW85/OXr7mcRrXzph27jovD7GvfLoT7Yp8QRa1+clJr8WpvY6zuiCZJ wPlagNFGp8BkpsLeCGoELNnH9UmBhxy12lpou1Zg/yWUXgVZHTfAggNqn/tWPM+/ bLur67/xjqSYKT32axsQKwrNyQwWJj1IYEypM98sZ4SdYkqaBqMVvK9Bpiquyh7P HtcO02SXPqcdHHmqaoNjaHg0h8TvynKv3BTYODqwRvwUKKPbOIaJIkBeXWKMc7GZ D2ZEnOVhcBM/S/UYgx09ru0qFXSiwOwsiQa6iNklzreZ81fwnfw71jeixlNtocjW IiPA/v0qhJBvJQ== -----END CERTIFICATE-----Generated at Tue Dec 16 13:46:25 2025 by rpki-client