This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json) Hash identifier: tR8hFcQtQCCn6DkKgdOAx3E9HelRNi4DX3IjQx+lyEk= Subject key identifier: BB:5E:05:8D:3D:3B:82:8D:75:9D:72:3B:4F:6F:41:11:4C:86:2B:21 Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd Certificate serial: 019B2B8AB42D02CFD422C0CA3156E35F60E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft Manifest number: 1259 Signing time: Wed 17 Dec 2025 09:01:08 +0000 Manifest this update: Wed 17 Dec 2025 09:01:08 +0000 Manifest next update: Thu 18 Dec 2025 09:01:08 +0000 Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=) 2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: 1Dq54oxBL8oIPPvGstG9JxAFgS85qg3cKhfX01T6bUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:b4:2d:02:cf:d4:22:c0:ca:31:56:e3:5f:60:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd Validity Not Before: Dec 17 09:01:08 2025 GMT Not After : Dec 18 09:01:08 2025 GMT Subject: CN=bb5e058d3d3b828d759d723b4f6f41114c862b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:5e:41:fc:0d:1f:b9:b0:4c:5f:3c:7a:d7: 40:33:f5:eb:11:b6:2f:ec:a3:95:18:1b:3c:73:1d: 5f:4a:27:26:2d:80:78:62:8b:c1:fd:97:ba:c2:75: 84:a0:90:20:5c:40:95:2e:0d:72:6c:1a:82:2a:fc: f5:6e:04:94:0d:0a:f3:39:cf:4a:ff:bb:af:4d:74: ef:16:26:45:0a:be:82:49:b6:9c:03:e0:36:be:42: 15:50:bc:e2:be:cb:6f:6c:c0:37:15:e7:a9:2f:0e: 59:3e:35:9f:6c:ee:59:37:a9:39:56:e8:83:02:58: c3:46:b9:97:de:30:93:1e:5c:c1:18:c4:2b:ba:d1: 89:6f:9a:68:39:44:10:18:d7:7a:f1:20:d6:9f:b2: 41:df:89:62:e7:36:39:2b:92:3b:e6:96:6e:4c:39: d8:82:50:3b:8e:23:0e:ff:03:3a:bd:5e:d9:9e:26: 04:3c:7d:95:91:3c:30:01:aa:aa:12:ab:7f:dd:62: 72:b2:7a:0d:15:58:18:f8:11:09:9e:d8:a6:84:c8: 99:6b:3f:d0:09:f2:66:d8:e6:f3:7e:8f:1c:bc:8f: 89:f8:f9:f4:15:85:98:0e:02:99:76:87:16:9d:b2: e9:c0:9f:f1:0c:56:ba:52:63:e7:ba:91:1c:ca:b6: f6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5E:05:8D:3D:3B:82:8D:75:9D:72:3B:4F:6F:41:11:4C:86:2B:21 X509v3 Authority Key Identifier: keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:76:a8:cc:1e:27:8b:1e:7c:c1:3f:77:d6:22:41:94:fa:7c: 8c:76:bb:dc:49:5a:8a:ba:3c:e4:51:53:87:0b:21:21:ba:6f: 84:77:52:ef:bb:b6:5a:10:32:0c:0c:66:60:a0:7f:ee:6f:8f: 61:1f:53:d2:bf:b4:08:56:bc:fa:c8:f7:9f:ec:f4:57:ea:b5: 0e:f9:d3:3c:29:01:ba:d5:61:6a:28:e1:02:a4:85:cd:8f:b4: 91:b4:f0:3f:e1:75:fd:0a:5b:7f:a8:cb:c7:b1:8b:71:c9:f1: cd:eb:cb:de:44:77:96:0f:6b:5d:4d:2f:ab:b1:25:84:50:60: 05:d0:6e:2a:71:0a:f3:9b:d7:40:2f:3d:a1:e6:04:84:b0:71: 73:d3:5d:74:fe:59:02:8f:5b:8b:8e:1d:86:f6:9b:f6:db:4f: 3b:ea:2f:ef:91:89:91:5b:dc:45:03:ba:bb:13:82:5a:f2:09: 66:e0:a9:b9:26:3f:a1:be:30:f5:22:66:b5:9e:82:51:62:ca: be:06:db:7e:0d:bf:a2:cf:38:7d:89:1d:e2:ab:99:fa:68:1f: ab:5c:48:41:bb:b3:dd:c6:93:2c:d9:7a:26:f6:3e:54:fd:e4: df:49:85:4c:7b:e8:ca:0f:2a:24:06:5c:70:c0:5c:58:07:d0: d8:f2:94:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrirQtAs/UIsDKMVbjX2DpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZTY1ODUxNWIxZTZhNzJiOTlmMzMyNjY5ZTA2OWU2MTU0 ZjcwZGQwHhcNMjUxMjE3MDkwMTA4WhcNMjUxMjE4MDkwMTA4WjAzMTEwLwYDVQQD EyhiYjVlMDU4ZDNkM2I4MjhkNzU5ZDcyM2I0ZjZmNDExMTRjODYyYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb5eQfwNH7mwTF88etdAM/XrEbYv 7KOVGBs8cx1fSicmLYB4YovB/Ze6wnWEoJAgXECVLg1ybBqCKvz1bgSUDQrzOc9K /7uvTXTvFiZFCr6CSbacA+A2vkIVULzivstvbMA3FeepLw5ZPjWfbO5ZN6k5VuiD AljDRrmX3jCTHlzBGMQrutGJb5poOUQQGNd68SDWn7JB34li5zY5K5I75pZuTDnY glA7jiMO/wM6vV7ZniYEPH2VkTwwAaqqEqt/3WJysnoNFVgY+BEJntimhMiZaz/Q CfJm2Obzfo8cvI+J+Pn0FYWYDgKZdocWnbLpwJ/xDFa6UmPnupEcyrb2qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLteBY09O4KNdZ1yO09vQRFMhishMB8GA1UdIwQY MBaAFDLmWFFbHmpyuZ8zJmngaeYVT3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzIt NjdmOGU3ZDExMzdjLzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzItNjdmOGU3ZDExMzdj LzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXaozB4n ix58wT931iJBlPp8jHa73Elairo85FFThwshIbpvhHdS77u2WhAyDAxmYKB/7m+P YR9T0r+0CFa8+sj3n+z0V+q1DvnTPCkButVhaijhAqSFzY+0kbTwP+F1/Qpbf6jL x7GLccnxzevL3kR3lg9rXU0vq7ElhFBgBdBuKnEK85vXQC89oeYEhLBxc9NddP5Z Ao9bi44dhvab9ttPO+ov75GJkVvcRQO6uxOCWvIJZuCpuSY/ob4w9SJmtZ6CUWLK vgbbfg2/os84fYkd4quZ+mgfq1xIQbuz3caTLNl6JvY+VP3k30mFTHvoyg8qJAZc cMBcWAfQ2PKUjw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:38:59 2025 by rpki-client