This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json) Hash identifier: xZ3Fb9u9dIkRD0VPNMCE0nuLGCxu6o024p4Jd+21B8c= Subject key identifier: 08:45:60:FA:76:53:DD:CD:02:A4:8D:10:1B:E0:C8:E6:AA:27:B3:D5 Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39 Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839 Certificate serial: 019AF49C26C122ABA469D10E00CCCB8229D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 17:01:05 +0000 Manifest this update: Sat 06 Dec 2025 17:01:05 +0000 Manifest next update: Sun 07 Dec 2025 17:01:05 +0000 Files and hashes: 1: muOJscw5niFvztjTnsPuifwguDk.crl (hash: ZsqieZ23/OB3f+8hcJIgdTrcujrooW50A0ofO9h2IFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:26:c1:22:ab:a4:69:d1:0e:00:cc:cb:82:29:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839 Validity Not Before: Dec 6 17:01:05 2025 GMT Not After : Dec 7 17:01:05 2025 GMT Subject: CN=084560fa7653ddcd02a48d101be0c8e6aa27b3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:ae:20:30:a3:a0:c4:da:cb:5d:76:0f:15: 3e:db:ba:9f:02:34:7a:b8:cf:43:4f:83:20:10:06: b6:7f:82:b9:07:1d:08:4b:03:02:10:58:36:8a:da: 51:09:bd:a2:db:a3:b4:87:c6:56:36:a9:80:36:f1: f0:9c:0b:2c:28:78:d4:4b:07:31:79:81:4d:59:7a: a5:bb:ad:13:ce:46:8e:61:ec:b5:bb:ac:54:62:19: 02:aa:84:56:95:6f:22:f2:c7:d1:9b:65:a5:b5:3a: 01:c4:58:9e:bb:80:d6:0e:ca:ec:44:5c:2b:57:f1: c4:5c:a4:50:9d:39:88:df:64:29:bd:22:e3:bc:99: e2:6f:11:84:09:64:34:3b:01:78:85:d7:ce:f5:b3: b3:51:25:98:b8:c4:22:93:3d:cb:83:7d:b4:f6:8d: 94:d6:c7:10:0f:f2:96:c3:1a:dd:a9:34:d5:17:e3: 3a:35:21:d4:04:90:14:0c:1c:05:5a:34:be:49:78: 3c:49:3e:f3:77:55:5b:de:9c:27:44:26:df:d0:8c: 4c:ca:9f:34:b8:8a:0d:19:0f:af:1c:aa:1d:be:ff: 82:05:1c:19:6d:1d:2f:f0:6b:4a:d9:6a:45:e4:3d: 62:12:4c:dc:5e:f4:9f:cc:2b:fd:99:ea:08:5b:ed: 2d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:45:60:FA:76:53:DD:CD:02:A4:8D:10:1B:E0:C8:E6:AA:27:B3:D5 X509v3 Authority Key Identifier: keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b5:59:39:00:0b:aa:b2:5a:0b:f4:52:7c:f1:12:14:14:fd: 52:76:66:f6:0b:b3:e7:28:9a:ae:7f:e6:67:6a:f8:44:85:c2: a9:b8:c2:6e:4d:dd:d7:9c:8a:5a:bf:32:c8:84:31:8c:41:1a: 49:68:b7:9b:6a:5f:44:ba:30:f3:41:f3:64:82:8f:d0:89:1d: 66:99:0b:ad:1b:43:b4:09:31:1b:66:a7:4a:04:20:92:58:53: fe:1b:2e:60:e4:6f:af:82:4b:a3:b0:5c:7f:30:60:b4:4a:95: 55:16:08:8a:e5:dd:ca:67:89:d1:d8:34:a1:3c:b2:59:05:c1: 24:b6:44:13:17:7a:84:35:aa:48:82:ac:fb:20:bc:91:93:f3: 7e:7e:bc:38:d5:12:78:8c:a0:92:1b:d6:ac:5b:77:e2:3f:c3: c2:a8:a0:e5:2c:c2:2e:63:5d:16:12:3e:dd:c2:48:af:0a:9f: 35:4e:b0:2e:29:78:f7:04:9b:94:d0:4a:90:d9:e4:e1:73:0d: 6a:96:d7:d7:c9:73:d0:f4:dc:24:bf:cd:f1:70:91:46:41:12: a3:95:7c:00:d1:f0:4c:b7:ae:ce:af:78:76:14:f4:50:8e:ab: 71:b2:f3:0c:2c:59:db:e5:c5:25:69:00:03:ac:c7:78:b1:45: 18:ed:65:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nCbBIqukadEOAMzLginQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTM4OWIxY2MzOTllMjE2ZmNlZDhkMzllYzNlZTg5ZmMy MGI4MzkwHhcNMjUxMjA2MTcwMTA1WhcNMjUxMjA3MTcwMTA1WjAzMTEwLwYDVQQD EygwODQ1NjBmYTc2NTNkZGNkMDJhNDhkMTAxYmUwYzhlNmFhMjdiM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGSuIDCjoMTay112DxU+27qfAjR6 uM9DT4MgEAa2f4K5Bx0ISwMCEFg2itpRCb2i26O0h8ZWNqmANvHwnAssKHjUSwcx eYFNWXqlu60TzkaOYey1u6xUYhkCqoRWlW8i8sfRm2WltToBxFieu4DWDsrsRFwr V/HEXKRQnTmI32QpvSLjvJnibxGECWQ0OwF4hdfO9bOzUSWYuMQikz3Lg3209o2U 1scQD/KWwxrdqTTVF+M6NSHUBJAUDBwFWjS+SXg8ST7zd1Vb3pwnRCbf0IxMyp80 uIoNGQ+vHKodvv+CBRwZbR0v8GtK2WpF5D1iEkzcXvSfzCv9meoIW+0tlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhFYPp2U93NAqSNEBvgyOaqJ7PVMB8GA1UdIwQY MBaAFJrjibHMOZ4hb87Y057D7on8ILg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgt Mzg5ZjkyMTk1YmViLzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgtMzg5ZjkyMTk1YmVi LzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabVZOQAL qrJaC/RSfPESFBT9UnZm9guz5yiarn/mZ2r4RIXCqbjCbk3d15yKWr8yyIQxjEEa SWi3m2pfRLow80HzZIKP0IkdZpkLrRtDtAkxG2anSgQgklhT/hsuYORvr4JLo7Bc fzBgtEqVVRYIiuXdymeJ0dg0oTyyWQXBJLZEExd6hDWqSIKs+yC8kZPzfn68ONUS eIygkhvWrFt34j/Dwqig5SzCLmNdFhI+3cJIrwqfNU6wLil49wSblNBKkNnk4XMN apbX18lz0PTcJL/N8XCRRkESo5V8ANHwTLeuzq94dhT0UI6rcbLzDCxZ2+XFJWkA A6zHeLFFGO1lyA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:42 2025 by rpki-client