This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft File: muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json) Hash identifier: VEw6F9DanVg+zRFtUkFp7WkxQ72th5juCN2QJfeXo80= Subject key identifier: B7:1D:05:E0:7D:45:19:98:A9:57:F8:8F:2B:1F:9B:D6:C8:0E:72:79 Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14 Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214 Certificate serial: 019AF163FF8FF8F10386C671C0152597CC91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: hirmv4l90daqtziUonbqzbb8z94.roa (hash: 2pWfc5u+sM7C4s4+z6TKeGnl46lQEVqcp+2HcKGG7wg=) 2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: Uz2nL84p5IpNyJuPuBRPqPkHQ/rgJH7umSXDHOs4ScQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ff:8f:f8:f1:03:86:c6:71:c0:15:25:97:cc:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214 Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=b71d05e07d451998a957f88f2b1f9bd6c80e7279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:78:b4:12:3b:11:1f:72:a5:c2:fb:a4:be: 9d:a2:52:fd:6d:e7:98:58:a1:8f:cb:2b:3e:40:9a: 4b:bc:45:65:38:de:17:0f:af:47:e2:ff:7f:6e:b9: f2:7c:6c:af:a7:fd:bb:69:46:ff:2c:d3:a9:1d:05: 69:9a:d9:3e:31:24:11:fd:ec:e7:d0:13:d9:9a:a4: bb:3e:ab:e2:04:3e:70:17:ad:e4:25:ad:f6:2b:1f: 22:70:1d:be:b1:b8:45:51:cf:45:d6:b7:47:ae:70: 44:09:7c:4f:ea:3d:51:a5:09:44:72:96:67:20:ec: 04:ff:db:71:62:e5:f4:04:78:6b:a8:76:e5:79:d7: 50:3f:47:df:b3:93:7a:a3:9a:bd:fa:7d:5a:a9:de: 9a:92:52:c7:4b:19:bd:da:f4:65:e3:86:cb:36:3e: 83:e5:df:77:34:23:a7:5e:4b:c4:41:b5:aa:0c:96: 3b:5a:d5:f8:7a:30:bf:b2:6d:92:e0:bd:73:e3:73: 16:a1:2a:5d:d7:d5:c1:e1:54:40:c7:94:ec:7c:df: 85:7a:c7:d1:e0:1e:8f:e3:b2:96:82:48:80:2e:6a: 36:b7:b0:10:87:01:ca:59:21:d7:7f:ca:76:2c:f2: c8:68:34:07:aa:1f:f3:3e:ee:60:fa:02:7a:a7:48: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1D:05:E0:7D:45:19:98:A9:57:F8:8F:2B:1F:9B:D6:C8:0E:72:79 X509v3 Authority Key Identifier: keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7f:77:7a:7c:7b:eb:02:40:2f:86:fc:4d:5e:d9:13:b3:c0: 08:3b:46:7b:34:09:6b:b4:71:fc:a8:3b:49:34:34:fd:4a:bc: 30:12:7a:13:28:f4:bb:a3:f6:e8:82:b2:50:4a:51:f5:91:ca: 14:ac:25:c0:43:d4:99:87:a5:e9:65:66:96:c2:06:bb:1b:3c: 78:5a:a2:3c:48:b5:2e:f3:63:2f:1d:5d:4e:db:fe:5d:c6:a7: 39:15:64:96:f2:c3:21:9b:30:3e:90:94:5e:9c:dc:6a:b2:13: cd:da:b9:bf:21:3d:39:12:50:72:19:e7:1b:4f:00:43:36:1e: ad:ab:6d:50:71:65:50:cb:43:7b:2a:7c:7b:a6:51:86:e0:9a: 4b:df:00:dd:03:b9:26:7a:25:9f:e3:a8:02:02:00:9e:70:58: 2c:49:49:40:1d:9a:92:b9:19:19:0a:5b:18:45:47:22:9d:0c: 71:1b:c9:cb:bb:92:41:1c:6a:59:3a:5f:87:08:49:a0:39:77: 3d:94:0e:11:a1:09:64:9e:f6:ba:40:df:21:77:34:88:a2:f0: 8d:cb:92:07:18:bf:ff:69:5d:bb:39:0c:2f:3c:1f:11:7c:72: 76:ce:2d:e5:d9:89:2c:fb:be:71:88:01:e9:99:ab:9e:ad:ed: 6f:fd:02:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/+P+PEDhsZxwBUll8yRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTA3Yzk0YThhNmFmN2E1ZDE4ZjRlYWFlYTc5ZTI2ZGY5 MzIyMTQwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD EyhiNzFkMDVlMDdkNDUxOTk4YTk1N2Y4OGYyYjFmOWJkNmM4MGU3Mjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYp4tBI7ER9ypcL7pL6dolL9beeY WKGPyys+QJpLvEVlON4XD69H4v9/brnyfGyvp/27aUb/LNOpHQVpmtk+MSQR/ezn 0BPZmqS7PqviBD5wF63kJa32Kx8icB2+sbhFUc9F1rdHrnBECXxP6j1RpQlEcpZn IOwE/9txYuX0BHhrqHbleddQP0ffs5N6o5q9+n1aqd6aklLHSxm92vRl44bLNj6D 5d93NCOnXkvEQbWqDJY7WtX4ejC/sm2S4L1z43MWoSpd19XB4VRAx5TsfN+FesfR 4B6P47KWgkiALmo2t7AQhwHKWSHXf8p2LPLIaDQHqh/zPu5g+gJ6p0jx2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcdBeB9RRmYqVf4jysfm9bIDnJ5MB8GA1UdIwQY MBaAFJrgfJSopq96XRj06q6nnibfkyIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVCOGxLaW1yM3BkR1BUcXJxZWVKdC1USWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYThkZDAtMzg3NS00ZWIyLWI2MzMt ZTI2NjVkNDQ3ZDMyLzEvbXVCOGxLaW1yM3BkR1BUcXJxZWVKdC1USWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8zYThkZDAtMzg3NS00ZWIyLWI2MzMtZTI2NjVkNDQ3ZDMy LzEvbXVCOGxLaW1yM3BkR1BUcXJxZWVKdC1USWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYH93enx7 6wJAL4b8TV7ZE7PACDtGezQJa7Rx/Kg7STQ0/Uq8MBJ6Eyj0u6P26IKyUEpR9ZHK FKwlwEPUmYel6WVmlsIGuxs8eFqiPEi1LvNjLx1dTtv+XcanORVklvLDIZswPpCU XpzcarITzdq5vyE9ORJQchnnG08AQzYerattUHFlUMtDeyp8e6ZRhuCaS98A3QO5 Jnoln+OoAgIAnnBYLElJQB2akrkZGQpbGEVHIp0McRvJy7uSQRxqWTpfhwhJoDl3 PZQOEaEJZJ72ukDfIXc0iKLwjcuSBxi//2lduzkMLzwfEXxyds4t5dmJLPu+cYgB 6Zmrnq3tb/0CUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:29 2025 by rpki-client