This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft File: MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft (raw, json) Hash identifier: 8em+JuXX0g2YBgnACR3wrQeRc4rMX483Ti+C39ZUxl4= Subject key identifier: 95:12:7E:30:2B:D5:21:7D:D1:68:F1:9B:0A:C5:63:81:E5:FE:3A:E5 Authority key identifier: 32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6 Certificate issuer: /CN=32e88a8c3f2f24d693316d1f211edeeb232342a6 Certificate serial: 019AF31D37F66C9F36A05B4F22A09BFB0F54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft Manifest number: 08F5 Signing time: Sat 06 Dec 2025 10:02:49 +0000 Manifest this update: Sat 06 Dec 2025 10:02:49 +0000 Manifest next update: Sun 07 Dec 2025 10:02:49 +0000 Files and hashes: 1: MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl (hash: DzgmLozNJcibCqTIm1yiF81Kbp1hAWt7q4tZXRnIcLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:37:f6:6c:9f:36:a0:5b:4f:22:a0:9b:fb:0f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e88a8c3f2f24d693316d1f211edeeb232342a6 Validity Not Before: Dec 6 10:02:49 2025 GMT Not After : Dec 7 10:02:49 2025 GMT Subject: CN=95127e302bd5217dd168f19b0ac56381e5fe3ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:cf:87:ad:fd:14:52:52:62:c3:a2:26:01: 73:be:15:18:64:b6:8b:21:66:5e:32:07:46:3e:bd: af:6e:ef:0d:6c:e2:be:be:78:b8:fc:c2:c4:fc:25: 80:89:31:3d:f2:70:f0:cb:bd:04:da:2e:9e:a9:c2: 70:a1:40:06:b5:28:31:54:64:ea:fd:bb:6c:78:85: e7:9d:98:c8:16:d2:8c:55:42:3c:a8:25:0f:2c:ae: fc:de:f7:be:c4:c8:eb:1f:c4:71:bd:6c:90:c5:a2: fb:1f:99:e0:4f:97:87:ea:b7:e7:ae:9b:7b:f7:67: dd:ec:9f:5b:fd:93:f9:0e:d8:a5:f6:e6:46:1d:4f: 7e:7c:01:e5:31:fb:e0:e7:51:17:37:a6:43:d6:64: f5:dc:81:c1:b3:37:41:de:f2:52:c8:9d:e2:1f:80: 88:a1:49:9f:5d:ef:c8:c7:57:27:54:c1:60:69:b6: 8e:c8:4e:ec:14:ce:ab:2c:f3:54:e5:f3:5c:29:29: 1c:37:86:14:f1:de:16:ee:89:6f:39:b9:74:53:fd: a5:a0:3d:03:eb:b6:1d:1b:65:93:2e:8d:91:65:83: 44:8d:a7:96:fa:7a:91:e7:c7:e7:88:5b:4f:71:a1: 88:61:52:64:32:9d:7d:11:1e:80:e8:34:a2:2b:cf: f0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:12:7E:30:2B:D5:21:7D:D1:68:F1:9B:0A:C5:63:81:E5:FE:3A:E5 X509v3 Authority Key Identifier: keyid:32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:02:33:de:09:e8:8d:f5:c9:53:3f:e3:3d:88:75:f6:02:a5: 47:e5:82:07:1b:2c:e2:1f:cb:a8:93:f3:62:68:3a:95:51:0f: e1:2c:e7:78:7a:32:9c:b1:be:77:6e:cf:d7:ad:de:f4:22:33: 26:5d:cc:b9:84:22:26:71:63:8a:1e:72:26:99:69:34:f7:1c: 88:b2:a1:d8:cb:ce:90:39:bc:5c:17:29:00:00:f6:83:4d:fd: ab:e7:1d:b0:56:69:f0:27:31:13:16:5a:9c:df:8a:ec:88:19: e2:7c:da:8e:ed:39:e3:28:9f:4f:62:38:aa:88:ab:d1:b5:5e: 4f:85:22:74:ca:ba:6d:ff:24:9a:28:61:63:be:bb:f1:77:f1: 64:38:22:d6:16:64:98:41:93:df:50:df:0e:ef:65:71:6d:c5: 4f:5e:07:b3:39:f1:c3:3a:ab:40:52:47:20:4e:3e:cc:26:7f: 43:03:d5:56:0c:94:6f:35:07:29:53:d0:00:f4:7e:b0:b2:70: 67:4f:d4:2f:8d:51:b4:1b:83:8f:65:4f:2b:9e:65:32:11:40: 94:ff:4e:1b:d2:ed:55:4d:67:c4:1d:e0:41:11:71:75:de:fa: 14:0c:9f:92:c1:91:38:c1:63:f0:0c:ea:a8:5a:7b:7b:b7:ae: e8:29:78:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTf2bJ82oFtPIqCb+w9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZTg4YThjM2YyZjI0ZDY5MzMxNmQxZjIxMWVkZWViMjMy MzQyYTYwHhcNMjUxMjA2MTAwMjQ5WhcNMjUxMjA3MTAwMjQ5WjAzMTEwLwYDVQQD Eyg5NTEyN2UzMDJiZDUyMTdkZDE2OGYxOWIwYWM1NjM4MWU1ZmUzYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9bPh639FFJSYsOiJgFzvhUYZLaL IWZeMgdGPr2vbu8NbOK+vni4/MLE/CWAiTE98nDwy70E2i6eqcJwoUAGtSgxVGTq /btseIXnnZjIFtKMVUI8qCUPLK783ve+xMjrH8RxvWyQxaL7H5ngT5eH6rfnrpt7 92fd7J9b/ZP5Dtil9uZGHU9+fAHlMfvg51EXN6ZD1mT13IHBszdB3vJSyJ3iH4CI oUmfXe/Ix1cnVMFgabaOyE7sFM6rLPNU5fNcKSkcN4YU8d4W7olvObl0U/2loD0D 67YdG2WTLo2RZYNEjaeW+nqR58fniFtPcaGIYVJkMp19ER6A6DSiK8/wMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUSfjAr1SF90WjxmwrFY4Hl/jrlMB8GA1UdIwQY MBaAFDLoiow/LyTWkzFtHyEe3usjI0KmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVpS2pEOHZKTmFUTVcwZklSN2U2eU1qUXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wNmQzYmUtMDI1Yi00ZDEwLWE3OTkt NzkxNjE1ODczZDk0LzEvTXVpS2pEOHZKTmFUTVcwZklSN2U2eU1qUXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wNmQzYmUtMDI1Yi00ZDEwLWE3OTktNzkxNjE1ODczZDk0 LzEvTXVpS2pEOHZKTmFUTVcwZklSN2U2eU1qUXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgIz3gno jfXJUz/jPYh19gKlR+WCBxss4h/LqJPzYmg6lVEP4SzneHoynLG+d27P163e9CIz Jl3MuYQiJnFjih5yJplpNPcciLKh2MvOkDm8XBcpAAD2g039q+cdsFZp8CcxExZa nN+K7IgZ4nzaju054yifT2I4qoir0bVeT4UidMq6bf8kmihhY7678XfxZDgi1hZk mEGT31DfDu9lcW3FT14HsznxwzqrQFJHIE4+zCZ/QwPVVgyUbzUHKVPQAPR+sLJw Z0/UL41RtBuDj2VPK55lMhFAlP9OG9LtVU1nxB3gQRFxdd76FAyfksGROMFj8Azq qFp7e7eu6Cl4tw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:34 2025 by rpki-client