This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft File: MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json) Hash identifier: FSeVbyR0leM3w8hnmHtdxL4cZBmsMJP3/r/47ru/Zho= Subject key identifier: 56:0E:EC:BF:84:EE:31:42:A3:90:95:6E:21:52:01:D3:E2:19:90:95 Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD Certificate issuer: /CN=314d088578ec0e29b04b43e901493586726364fd Certificate serial: 019AF12D641FB0ECDD2FFBA48C4C6572D642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft Manifest number: 1499 Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: cN1IrcmOPz5fgLg1BBDpvTiV33ha1ROVwgW/xR+18XU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:64:1f:b0:ec:dd:2f:fb:a4:8c:4c:65:72:d6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314d088578ec0e29b04b43e901493586726364fd Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=560eecbf84ee3142a390956e215201d3e2199095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:dd:1e:c1:5e:44:d3:16:9a:1d:67:a2:1b: 16:21:e0:36:3c:3b:fe:a9:87:4e:c2:52:6b:c8:8b: d3:b1:66:2b:36:a1:8d:ab:9c:59:c8:1e:66:2a:cb: 0a:eb:1b:fa:f2:5e:91:72:54:ea:b2:98:7a:4f:e7: 1d:92:e1:e8:ed:3a:3e:85:8b:d1:95:e7:b9:49:7c: b5:7c:06:15:b2:a3:e7:35:47:2e:af:f6:d9:81:79: 5b:4a:51:da:08:fd:cb:3e:b8:08:ee:b7:42:27:c1: 02:5f:9a:54:b8:9e:3f:63:a2:e6:c6:a7:5a:a8:55: d1:bd:09:8e:ca:b3:62:97:da:3c:21:24:a3:87:b9: 7e:7e:a8:6f:cc:77:e6:76:1f:fb:8e:d6:31:a8:21: 04:ee:9e:8f:21:a7:eb:1b:5e:2f:5e:36:60:ea:15: 25:5c:ec:cb:f3:d5:fa:4d:af:68:87:08:f7:87:ed: cd:54:3c:60:8f:8b:a8:c7:0f:4c:00:38:cf:f3:02: e6:04:0a:fc:c2:aa:91:3b:ae:24:ec:31:38:d3:75: 2e:a3:a5:e0:7c:7b:57:b7:f0:99:21:0d:72:18:51: 41:39:45:3a:a7:8a:d7:d5:df:f8:c2:e1:52:dd:71: 21:d7:a1:a3:5b:fa:dd:fa:d2:b3:2e:d8:b3:7d:96: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0E:EC:BF:84:EE:31:42:A3:90:95:6E:21:52:01:D3:E2:19:90:95 X509v3 Authority Key Identifier: keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f4:e5:88:a1:91:dc:b9:9a:90:74:9d:5d:a0:7d:c2:ad:cb: 71:c5:3f:fc:fa:94:83:42:61:d0:2f:28:29:2e:1c:67:f8:0e: c3:3a:f8:12:d6:b9:e8:a0:c1:41:c7:3c:26:13:1b:52:62:d8: 39:02:cc:2c:c7:26:8d:62:5f:f3:51:d0:ee:54:12:33:40:f2: 50:ff:ba:ca:1c:65:98:2f:20:e3:1b:36:f0:45:a6:f7:8c:81: 61:8e:63:73:3e:d6:ce:85:7e:37:cc:cc:70:15:b4:c1:34:16: 88:82:16:9c:f3:cb:d9:97:22:cb:af:e7:f8:f0:91:f8:7e:13: 81:bf:19:3d:30:13:00:ec:e3:03:ad:01:71:10:39:bf:c7:20: 22:46:ee:2a:12:1e:16:65:77:bb:f8:30:94:24:a5:c5:c9:a7: 85:ed:7e:ab:27:97:65:9b:5b:14:bf:d2:9d:86:2c:f1:3b:44: 7a:08:3b:5b:48:14:c5:3e:f7:36:08:1e:65:26:e5:33:2e:07: 56:e8:ca:b0:52:41:3f:52:a2:1e:40:d2:0f:3e:89:a9:a6:2d: 55:1d:cd:a3:2d:92:93:2f:32:8a:7c:d5:a9:ce:db:7f:4e:25: 83:11:e2:3e:f8:b2:d8:ce:73:37:e0:2b:93:dc:bd:7a:dc:4a: fd:95:55:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWQfsOzdL/ukjExlctZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNGQwODg1NzhlYzBlMjliMDRiNDNlOTAxNDkzNTg2NzI2 MzY0ZmQwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD Eyg1NjBlZWNiZjg0ZWUzMTQyYTM5MDk1NmUyMTUyMDFkM2UyMTk5MDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/jdHsFeRNMWmh1nohsWIeA2PDv+ qYdOwlJryIvTsWYrNqGNq5xZyB5mKssK6xv68l6RclTqsph6T+cdkuHo7To+hYvR lee5SXy1fAYVsqPnNUcur/bZgXlbSlHaCP3LPrgI7rdCJ8ECX5pUuJ4/Y6Lmxqda qFXRvQmOyrNil9o8ISSjh7l+fqhvzHfmdh/7jtYxqCEE7p6PIafrG14vXjZg6hUl XOzL89X6Ta9ohwj3h+3NVDxgj4uoxw9MADjP8wLmBAr8wqqRO64k7DE403Uuo6Xg fHtXt/CZIQ1yGFFBOUU6p4rX1d/4wuFS3XEh16GjW/rd+tKzLtizfZYFRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYO7L+E7jFCo5CVbiFSAdPiGZCVMB8GA1UdIwQY MBaAFDFNCIV47A4psEtD6QFJNYZyY2T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVUwSWhYanNEaW13UzBQcEFVazFobkpqWlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zNzM4NzQtMzRmZC00ZTY0LWI2YTkt MTgwMDZiNjY0M2FmLzEvTVUwSWhYanNEaW13UzBQcEFVazFobkpqWlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zNzM4NzQtMzRmZC00ZTY0LWI2YTktMTgwMDZiNjY0M2Fm LzEvTVUwSWhYanNEaW13UzBQcEFVazFobkpqWlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvTliKGR 3LmakHSdXaB9wq3LccU//PqUg0Jh0C8oKS4cZ/gOwzr4Eta56KDBQcc8JhMbUmLY OQLMLMcmjWJf81HQ7lQSM0DyUP+6yhxlmC8g4xs28EWm94yBYY5jcz7WzoV+N8zM cBW0wTQWiIIWnPPL2Zciy6/n+PCR+H4Tgb8ZPTATAOzjA60BcRA5v8cgIkbuKhIe FmV3u/gwlCSlxcmnhe1+qyeXZZtbFL/SnYYs8TtEegg7W0gUxT73NggeZSblMy4H VujKsFJBP1KiHkDSDz6JqaYtVR3Noy2Sky8yinzVqc7bf04lgxHiPviy2M5zN+Ar k9y9etxK/ZVV5g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:08 2025 by rpki-client