This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft File: mupW9uHBw1kAHsImfvD-4bRW3f0.mft (raw, json) Hash identifier: r7qYo15AAOG6ci0CCh1yZcH1oJlCZuzMB9L8aXLyVM4= Subject key identifier: 0D:40:26:2E:BB:70:D8:5D:B4:FB:72:38:CD:63:A9:7F:71:BF:E5:69 Authority key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD Certificate issuer: /CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd Certificate serial: 019B32D72C23B6D17CAF10E824393BD53BFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 19:02:00 +0000 Manifest this update: Thu 18 Dec 2025 19:02:00 +0000 Manifest next update: Fri 19 Dec 2025 19:02:00 +0000 Files and hashes: 1: mupW9uHBw1kAHsImfvD-4bRW3f0.crl (hash: GXselnZG8rjdMTTxyQCDzQgVYtUz0HE6KOoGKpMzlF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:2c:23:b6:d1:7c:af:10:e8:24:39:3b:d5:3b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd Validity Not Before: Dec 18 19:02:00 2025 GMT Not After : Dec 19 19:02:00 2025 GMT Subject: CN=0d40262ebb70d85db4fb7238cd63a97f71bfe569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:ec:0b:24:77:6e:3a:d0:1f:92:3c:62:80: ff:04:6f:15:2d:e9:93:81:83:51:59:e4:95:bd:9f: c2:72:d9:f1:9d:64:f0:19:c4:4d:36:91:3a:ab:3a: b5:20:a4:87:02:59:05:0b:a0:0c:58:05:07:a0:e6: cd:c9:19:6e:84:ec:92:02:05:e4:0c:aa:e2:cb:16: 84:2d:3e:4f:97:e3:e5:5a:3a:be:c8:4f:0e:24:a9: 9d:bf:ea:0b:c8:41:fe:6c:1d:27:8c:b3:20:bf:20: 2e:65:5c:90:d0:ce:06:bd:55:5f:98:46:49:b1:98: 22:84:52:de:9e:0a:fe:ee:3b:16:28:95:d4:38:76: 4a:f7:76:bd:4d:fe:82:de:be:5c:1a:78:f6:3e:e0: 3b:7e:10:b5:a5:6d:14:6d:7c:39:51:36:97:df:f0: db:e2:a9:6b:6c:e2:4c:b5:36:8a:9d:8a:7f:e8:a4: 83:6b:05:d5:4d:81:ff:44:cb:86:15:26:3d:f4:b7: 2a:06:c9:ea:cd:d1:1b:df:26:45:a2:03:ea:bf:15: 3a:d4:ed:00:cd:76:29:d0:66:5e:58:f3:5c:2a:53: 40:72:b7:89:23:aa:53:7d:61:df:37:33:63:1a:2e: f3:fd:97:95:57:13:d4:98:ac:85:78:1f:3a:89:84: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:40:26:2E:BB:70:D8:5D:B4:FB:72:38:CD:63:A9:7F:71:BF:E5:69 X509v3 Authority Key Identifier: keyid:9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:59:0f:1d:cc:49:7a:8b:a4:db:f3:92:04:e9:48:ef:0c:61: 81:36:f3:89:ce:3e:94:ad:81:4c:3d:03:1c:53:0d:ef:ac:2d: ee:13:a7:f8:31:21:08:22:b6:fe:15:85:c3:8d:6f:4f:2a:5f: ce:5e:4c:bf:f3:de:8e:e0:0a:83:8f:92:3f:79:80:29:04:d4: 48:37:8e:10:fa:2d:c3:dc:5e:f5:4b:50:68:5d:cd:59:cb:b7: db:ca:fa:d0:e5:17:a8:21:87:ab:f3:7e:4b:67:8b:7c:de:fa: ee:16:08:81:a5:4f:b1:31:db:78:99:3b:1f:c9:f0:f6:d3:4b: ac:1f:a7:48:ab:06:a0:3c:18:b2:c6:98:0e:e3:1f:9a:95:a4: 68:4d:52:f2:fd:3a:1d:e0:56:d4:31:b8:4e:74:2c:aa:94:fb: 9a:f1:44:8b:da:02:70:93:93:f4:85:9e:70:8d:cb:a2:5d:85: 7d:a3:f7:c6:27:1b:71:a6:1d:65:f5:dd:5c:8e:c5:f7:ef:be: 23:02:45:bb:28:78:f4:15:af:c3:5a:60:64:91:d9:14:97:78: ae:2a:b2:4d:86:49:ae:69:37:e2:69:3a:d6:c2:4f:a4:f1:4d: ea:22:8f:fb:a9:35:13:30:09:1a:32:41:7e:9b:14:bd:45:0f: 8e:e2:ce:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1ywjttF8rxDoJDk71Tv+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWE1NmY2ZTFjMWMzNTkwMDFlYzIyNjdlZjBmZWUxYjQ1 NmRkZmQwHhcNMjUxMjE4MTkwMjAwWhcNMjUxMjE5MTkwMjAwWjAzMTEwLwYDVQQD EygwZDQwMjYyZWJiNzBkODVkYjRmYjcyMzhjZDYzYTk3ZjcxYmZlNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaHsCyR3bjrQH5I8YoD/BG8VLemT gYNRWeSVvZ/CctnxnWTwGcRNNpE6qzq1IKSHAlkFC6AMWAUHoObNyRluhOySAgXk DKriyxaELT5Pl+PlWjq+yE8OJKmdv+oLyEH+bB0njLMgvyAuZVyQ0M4GvVVfmEZJ sZgihFLengr+7jsWKJXUOHZK93a9Tf6C3r5cGnj2PuA7fhC1pW0UbXw5UTaX3/Db 4qlrbOJMtTaKnYp/6KSDawXVTYH/RMuGFSY99LcqBsnqzdEb3yZFogPqvxU61O0A zXYp0GZeWPNcKlNAcreJI6pTfWHfNzNjGi7z/ZeVVxPUmKyFeB86iYRqyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1AJi67cNhdtPtyOM1jqX9xv+VpMB8GA1UdIwQY MBaAFJrqVvbhwcNZAB7CJn7w/uG0Vt39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVwVzl1SEJ3MWtBSHNJbWZ2RC00YlJXM2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80ZjRmNGMtNWNiYy00MDNmLWFlYTMt ZWI1NTFhN2ZhMDYxLzEvbXVwVzl1SEJ3MWtBSHNJbWZ2RC00YlJXM2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80ZjRmNGMtNWNiYy00MDNmLWFlYTMtZWI1NTFhN2ZhMDYx LzEvbXVwVzl1SEJ3MWtBSHNJbWZ2RC00YlJXM2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1kPHcxJ eouk2/OSBOlI7wxhgTbzic4+lK2BTD0DHFMN76wt7hOn+DEhCCK2/hWFw41vTypf zl5Mv/PejuAKg4+SP3mAKQTUSDeOEPotw9xe9UtQaF3NWcu328r60OUXqCGHq/N+ S2eLfN767hYIgaVPsTHbeJk7H8nw9tNLrB+nSKsGoDwYssaYDuMfmpWkaE1S8v06 HeBW1DG4TnQsqpT7mvFEi9oCcJOT9IWecI3Lol2FfaP3xicbcaYdZfXdXI7F9+++ IwJFuyh49BWvw1pgZJHZFJd4riqyTYZJrmk34mk61sJPpPFN6iKP+6k1EzAJGjJB fpsUvUUPjuLO/g== -----END CERTIFICATE-----Generated at Thu Dec 18 22:03:56 2025 by rpki-client