This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json) Hash identifier: yEywsYsnhOSPIhfol2vuPh/tkZAk/0FJKcuu+Vbn+Po= Subject key identifier: 7D:E9:26:4A:D9:86:4E:DC:21:31:4F:98:2B:55:8A:B9:E0:7A:A9:74 Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58 Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058 Certificate serial: 019AF12D12933D80847582EDD827386D7830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: KhlRzejfpvDxwhcPEcTkW8z6UJk.roa (hash: OH1bpS6azjDuSrz2eDsCxiLR1IWtc/vamDUbBv4QJmc=) 2: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: 7IdSMQ9SxXusA7+YbwA/se/Ov2/3mHc9K8RcorBj+eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:12:93:3d:80:84:75:82:ed:d8:27:38:6d:78:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058 Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=7de9264ad9864edc21314f982b558ab9e07aa974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:6e:08:cc:f5:52:c6:49:ac:7d:d3:43:7c: d4:02:f4:6d:ed:69:f8:38:ab:ad:ee:31:44:d6:d4: 18:54:2e:b6:f0:ec:7f:69:01:4e:88:b6:86:32:f2: 5d:e6:6e:ea:98:97:5e:c1:e8:7e:50:3b:8e:7e:f3: 70:3d:61:12:0b:66:64:b3:4f:99:ac:c7:4e:d7:c8: 7e:3e:01:33:e8:17:4d:cf:a8:9e:30:04:f5:cc:d4: 55:0c:f9:23:3c:19:4d:b5:89:e7:4f:26:ca:a8:9f: 7f:7b:e0:cd:e7:b6:8b:8a:09:02:4c:00:8e:6b:14: 86:e8:82:0a:d8:10:11:54:d5:29:b3:d8:06:06:a7: 89:75:8b:b9:44:34:37:72:8c:96:8e:ea:1b:8a:ad: e0:46:a3:6b:51:cf:2f:8c:b5:36:5f:d1:49:7d:11: 54:59:cc:80:99:95:26:64:28:4a:58:c3:c7:11:07: 44:29:b5:3f:ae:90:8d:f5:24:c4:78:6b:09:35:b1: 7c:16:80:59:9f:c1:ff:ae:d6:ee:98:89:0a:70:81: ad:b4:8d:61:6c:88:6d:ec:0c:0d:58:d7:a1:a2:37: c6:b1:15:2d:0f:30:c2:d1:fd:e8:a2:ac:6e:1c:7b: 41:58:c3:40:d2:31:23:85:ee:82:66:b3:b1:95:89: d2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:26:4A:D9:86:4E:DC:21:31:4F:98:2B:55:8A:B9:E0:7A:A9:74 X509v3 Authority Key Identifier: keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:be:e9:ee:20:a1:c7:52:38:4e:8f:e5:ef:23:06:f4:03:a5: 08:03:31:be:71:33:b7:50:10:28:cf:b6:1a:0a:de:86:a6:49: a3:86:79:0c:4c:d8:2a:8b:4e:8e:b1:01:2f:51:6c:dc:e0:e5: e5:dd:f7:04:49:41:78:d0:c0:87:dd:5e:e1:5e:c4:d8:70:1d: eb:65:d7:8c:46:1a:9d:05:8e:7d:a0:1a:f5:01:c1:78:50:08: 22:cf:c4:f1:a1:92:f4:e6:2f:fb:e1:13:63:10:7b:d9:16:92: 04:05:fe:2e:ac:39:cf:4f:6b:2b:ae:d0:cb:8a:71:6f:74:96: c5:4d:62:fc:0d:db:8a:e9:39:15:6b:ca:e6:e4:87:fe:a4:ca: 7d:21:05:5f:41:e9:a1:ce:9a:c9:5d:f5:18:f5:21:90:60:de: 88:ee:94:0c:73:cd:74:fe:0d:6d:97:45:08:fc:f6:80:fc:7a: e9:47:50:6d:ef:6d:6a:77:0c:2e:a4:d2:61:14:78:03:47:5a: e4:9a:27:eb:95:da:c8:01:45:f2:d6:f2:20:26:00:c2:ef:de: 31:43:89:fe:6c:e4:a4:66:c7:53:71:56:23:e7:9a:08:5b:39: 87:96:6f:23:21:4b:5e:a7:4c:57:7c:18:0b:b4:6a:36:9f:6d: b7:59:55:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRKTPYCEdYLt2Cc4bXgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZWIyYjUxZTM3NDhjMjUyNzQwMmU2ODYwMWE4ODkxMjg4 M2EwNTgwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD Eyg3ZGU5MjY0YWQ5ODY0ZWRjMjEzMTRmOTgyYjU1OGFiOWUwN2FhOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3VuCMz1UsZJrH3TQ3zUAvRt7Wn4 OKut7jFE1tQYVC628Ox/aQFOiLaGMvJd5m7qmJdeweh+UDuOfvNwPWESC2Zks0+Z rMdO18h+PgEz6BdNz6ieMAT1zNRVDPkjPBlNtYnnTybKqJ9/e+DN57aLigkCTACO axSG6IIK2BARVNUps9gGBqeJdYu5RDQ3coyWjuobiq3gRqNrUc8vjLU2X9FJfRFU WcyAmZUmZChKWMPHEQdEKbU/rpCN9STEeGsJNbF8FoBZn8H/rtbumIkKcIGttI1h bIht7AwNWNehojfGsRUtDzDC0f3ooqxuHHtBWMNA0jEjhe6CZrOxlYnSlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3pJkrZhk7cITFPmCtVirngeql0MB8GA1UdIwQY MBaAFDLrK1HjdIwlJ0AuaGAaiJEog6BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDkt NmFjMWFmZjM2YzA3LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDktNmFjMWFmZjM2YzA3 LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd77p7iCh x1I4To/l7yMG9AOlCAMxvnEzt1AQKM+2GgrehqZJo4Z5DEzYKotOjrEBL1Fs3ODl 5d33BElBeNDAh91e4V7E2HAd62XXjEYanQWOfaAa9QHBeFAIIs/E8aGS9OYv++ET YxB72RaSBAX+Lqw5z09rK67Qy4pxb3SWxU1i/A3biuk5FWvK5uSH/qTKfSEFX0Hp oc6ayV31GPUhkGDeiO6UDHPNdP4NbZdFCPz2gPx66UdQbe9tancMLqTSYRR4A0da 5Jon65XayAFF8tbyICYAwu/eMUOJ/mzkpGbHU3FWI+eaCFs5h5ZvIyFLXqdMV3wY C7RqNp9tt1lVow== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:11 2025 by rpki-client