This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft File: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json) Hash identifier: bDmL1bIn6cK3O+ug4D+Bnok+zwyGc3y/UPGuQ3xw0bU= Subject key identifier: E7:91:43:B4:58:0D:E4:D6:13:52:7B:80:14:09:A7:9B:61:64:4C:A3 Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64 Certificate issuer: /CN=dcc50a2b974349948b04ee389b2a99d1754fb464 Certificate serial: 019AF276B022FADB9F9C8DF8976C968EC728 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft Manifest number: 133E Signing time: Sat 06 Dec 2025 07:00:55 +0000 Manifest this update: Sat 06 Dec 2025 07:00:55 +0000 Manifest next update: Sun 07 Dec 2025 07:00:55 +0000 Files and hashes: 1: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: HEmwYODfetv7cE2+NRGPq1Z2ih1EHZThF8XirCFPa2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b0:22:fa:db:9f:9c:8d:f8:97:6c:96:8e:c7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464 Validity Not Before: Dec 6 07:00:55 2025 GMT Not After : Dec 7 07:00:55 2025 GMT Subject: CN=e79143b4580de4d613527b801409a79b61644ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:67:08:01:4b:59:6c:08:bf:1b:45:ef:be:6f: 7d:13:dd:71:ee:74:22:e9:7d:1d:b7:f0:a7:40:07: 92:15:e3:60:98:b7:70:0d:26:f1:5d:aa:18:4a:3e: 88:3d:2f:86:b6:96:ff:5f:2c:0f:d5:ad:04:cd:c9: 8c:e3:ae:f3:31:41:cc:e3:43:dc:e0:30:2d:74:5a: 1f:a7:24:a0:f4:7a:69:c9:94:b3:70:04:ea:fa:54: e6:c4:08:f7:51:c6:cd:71:77:fc:45:e8:b3:75:41: 5d:00:e9:3b:8b:d8:ea:3e:7c:92:a7:ba:70:9b:a9: 5e:ac:33:db:3b:f4:f2:d1:a6:6d:c6:be:f1:69:b9: 8f:d0:f3:8a:7c:bb:9a:c4:82:7b:09:10:d4:1d:b7: 9f:04:11:12:5a:dd:80:57:b1:c0:74:8f:6f:45:60: 0c:e7:7b:f4:b7:16:3e:97:4c:ba:bc:15:ab:ef:19: 85:9c:de:7b:f6:fa:d7:5e:9b:f4:5e:91:61:4f:18: 41:e5:fe:58:dc:16:cc:4c:f4:2d:57:65:9c:a0:86: f9:f8:0e:f5:a6:02:63:3a:64:8f:6b:75:7a:da:99: 64:9c:bb:84:a1:e5:7b:6a:30:37:83:ff:7a:5a:7a: a0:b7:34:44:d0:9f:2a:73:9e:34:46:51:b8:7a:ce: be:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:91:43:B4:58:0D:E4:D6:13:52:7B:80:14:09:A7:9B:61:64:4C:A3 X509v3 Authority Key Identifier: keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b9:f1:0c:4c:1e:7d:dd:65:20:2a:d0:7f:ac:c1:ac:1c:93: 83:ed:46:11:6a:89:20:92:2b:b3:c0:a3:12:e6:eb:1d:6d:e8: f9:82:a3:1f:8d:64:9b:c0:15:e3:ee:0e:73:16:41:74:e1:07: f5:d7:f1:a7:01:35:31:c2:eb:bb:eb:d5:4b:50:f4:52:fc:7c: 40:67:a3:f2:d9:83:1a:e6:76:87:b1:4b:e9:47:d0:8a:a6:41: a4:a1:0a:52:b0:ac:8b:cd:1e:2f:33:42:6a:dc:d3:73:3f:ca: d4:28:82:0a:c8:a5:ed:ea:54:13:7d:df:ee:33:3b:a6:26:8e: 73:08:77:3b:14:68:cd:6e:18:08:01:be:ce:6e:53:89:7d:d5: 84:42:2d:d9:2e:ef:d6:0a:47:e3:78:f9:71:41:ef:4d:62:b5: 82:9c:51:4b:0c:97:7b:6a:7b:8c:45:68:de:4d:ff:c4:b6:8e: a7:76:bc:a2:46:0b:d4:1f:3d:65:bb:f4:d2:be:5c:9f:ee:ca: dc:51:42:c9:73:51:e7:03:8e:df:e6:ca:70:55:fb:92:63:f8: fb:96:ad:1b:40:92:7b:6c:3f:fe:7a:54:ef:fc:0e:f4:a1:a5: 59:f2:b0:08:05:3d:76:d8:d8:01:36:61:02:cb:83:2d:90:14: 60:1f:f1:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrAi+tufnI34l2yWjscoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYzUwYTJiOTc0MzQ5OTQ4YjA0ZWUzODliMmE5OWQxNzU0 ZmI0NjQwHhcNMjUxMjA2MDcwMDU1WhcNMjUxMjA3MDcwMDU1WjAzMTEwLwYDVQQD EyhlNzkxNDNiNDU4MGRlNGQ2MTM1MjdiODAxNDA5YTc5YjYxNjQ0Y2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GcIAUtZbAi/G0Xvvm99E91x7nQi 6X0dt/CnQAeSFeNgmLdwDSbxXaoYSj6IPS+Gtpb/XywP1a0EzcmM467zMUHM40Pc 4DAtdFofpySg9HppyZSzcATq+lTmxAj3UcbNcXf8ReizdUFdAOk7i9jqPnySp7pw m6lerDPbO/Ty0aZtxr7xabmP0POKfLuaxIJ7CRDUHbefBBESWt2AV7HAdI9vRWAM 53v0txY+l0y6vBWr7xmFnN579vrXXpv0XpFhTxhB5f5Y3BbMTPQtV2WcoIb5+A71 pgJjOmSPa3V62plknLuEoeV7ajA3g/96WnqgtzRE0J8qc540RlG4es6+9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeRQ7RYDeTWE1J7gBQJp5thZEyjMB8GA1UdIwQY MBaAFNzFCiuXQ0mUiwTuOJsqmdF1T7RkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83MDcxNTgtZDFlMi00ZmNiLTgxY2It NTk3OWQwMDQ4NmZlLzEvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi83MDcxNTgtZDFlMi00ZmNiLTgxY2ItNTk3OWQwMDQ4NmZl LzEvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7nxDEwe fd1lICrQf6zBrByTg+1GEWqJIJIrs8CjEubrHW3o+YKjH41km8AV4+4OcxZBdOEH 9dfxpwE1McLru+vVS1D0Uvx8QGej8tmDGuZ2h7FL6UfQiqZBpKEKUrCsi80eLzNC atzTcz/K1CiCCsil7epUE33f7jM7piaOcwh3OxRozW4YCAG+zm5TiX3VhEIt2S7v 1gpH43j5cUHvTWK1gpxRSwyXe2p7jEVo3k3/xLaOp3a8okYL1B89Zbv00r5cn+7K 3FFCyXNR5wOO3+bKcFX7kmP4+5atG0CSe2w//npU7/wO9KGlWfKwCAU9dtjYATZh AsuDLZAUYB/xig== -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:43 2025 by rpki-client