This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json) Hash identifier: W07JsjRWeRWh65G9JHTGEBy5Omik4IMzYwScvtYsZsM= Subject key identifier: B6:3E:78:09:E1:1E:48:47:B6:A6:5E:41:E0:D3:B3:06:CF:69:89:5F Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46 Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46 Certificate serial: 019AF540C560BBBB9DFF3585C575FF53033D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft Manifest number: 1051 Signing time: Sat 06 Dec 2025 20:00:53 +0000 Manifest this update: Sat 06 Dec 2025 20:00:53 +0000 Manifest next update: Sun 07 Dec 2025 20:00:53 +0000 Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: dRh1Z81KJxgCmW03+1bYWo0QWkV9TS7/1C45td4EDHs=) 2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:c5:60:bb:bb:9d:ff:35:85:c5:75:ff:53:03:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46 Validity Not Before: Dec 6 20:00:53 2025 GMT Not After : Dec 7 20:00:53 2025 GMT Subject: CN=b63e7809e11e4847b6a65e41e0d3b306cf69895f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:80:ad:5a:d2:c4:02:99:0c:5e:db:c6:89: e8:7d:f4:79:3e:c4:e2:5e:c3:f0:d8:bf:fd:53:5c: 03:95:85:75:0a:1a:a2:df:41:e7:51:50:dc:5f:52: a8:9f:90:33:19:3c:39:98:e8:95:ac:34:b4:66:16: 9a:bb:be:fe:ed:ee:29:f2:99:74:51:05:6a:47:fc: 17:a3:5b:bf:d3:03:44:df:8a:e2:31:70:19:20:90: 09:d9:b8:c6:4d:38:f7:73:39:44:09:97:83:2a:a0: 8b:e6:21:30:dc:e5:a9:03:72:b4:a5:4e:df:7a:1e: bc:b8:20:20:91:7c:12:40:7d:4d:94:f8:fc:25:34: aa:00:81:ed:41:dc:3b:a9:6d:40:2c:fa:b7:9c:c4: da:63:ca:ff:bc:b3:a9:7f:b0:5f:1b:fb:d0:d6:73: 3c:7b:e2:34:2c:af:8c:f1:47:53:f7:ac:c4:b7:69: 12:16:a2:1e:33:fc:9e:24:36:17:9d:cb:1a:87:ec: 2f:56:cf:e6:47:df:86:2e:1c:90:c0:27:95:1d:45: 17:91:40:a2:de:46:6a:07:f4:25:0a:e6:a6:19:8c: f3:ce:11:8d:27:2c:1e:d0:4d:e6:eb:38:95:c7:ca: 5d:6f:9f:b8:8c:22:67:ed:0d:7d:2f:21:bc:66:82: e7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3E:78:09:E1:1E:48:47:B6:A6:5E:41:E0:D3:B3:06:CF:69:89:5F X509v3 Authority Key Identifier: keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:37:48:28:18:d8:2a:8b:70:34:4b:38:99:20:be:53:52:7b: a1:d4:16:27:f1:58:c2:92:27:c6:45:f9:bd:df:63:da:83:0e: 34:85:fb:9f:03:a5:56:47:e9:bd:ff:b0:ff:98:07:a9:30:40: 0e:6d:f7:6e:8c:23:fe:a8:8a:3a:62:7f:3b:3f:2d:86:a7:d6: 69:9a:0c:ae:f7:21:a0:1a:60:f0:6d:1e:e6:45:c8:10:36:7c: a2:95:eb:71:1d:ab:8f:af:4f:f6:20:c8:46:74:87:2b:7c:8e: 78:6b:75:0a:55:e2:e8:32:41:7a:78:30:fc:bc:5f:85:98:33: fc:c3:5c:96:03:47:12:be:ed:c4:62:f5:75:31:b1:32:ae:11: 66:bd:a8:6b:08:e7:a5:51:5b:7c:f0:1d:19:5d:36:95:be:41: e9:a4:17:c7:65:53:b1:bc:8d:73:31:84:8a:c0:07:3e:98:2a: b2:34:e3:75:20:f4:aa:72:71:5d:98:19:6e:47:fc:2a:66:9f: ca:ed:fc:fd:a4:e1:a9:57:f4:33:21:6d:3f:6b:ae:71:6c:fc: 75:8c:fe:a2:40:93:9f:07:f8:91:e3:d5:d3:af:da:ae:53:5f: 28:f7:15:56:74:07:85:70:96:2b:20:0f:75:c2:24:f8:f1:25: d5:aa:b3:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMVgu7ud/zWFxXX/UwM9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWVjYjM1M2YxY2RjNWZkM2E5ZDU0YTg4NzM1MzFlZmQy ODVjNDYwHhcNMjUxMjA2MjAwMDUzWhcNMjUxMjA3MjAwMDUzWjAzMTEwLwYDVQQD EyhiNjNlNzgwOWUxMWU0ODQ3YjZhNjVlNDFlMGQzYjMwNmNmNjk4OTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zSArVrSxAKZDF7bxonoffR5PsTi XsPw2L/9U1wDlYV1Chqi30HnUVDcX1Kon5AzGTw5mOiVrDS0Zhaau77+7e4p8pl0 UQVqR/wXo1u/0wNE34riMXAZIJAJ2bjGTTj3czlECZeDKqCL5iEw3OWpA3K0pU7f eh68uCAgkXwSQH1NlPj8JTSqAIHtQdw7qW1ALPq3nMTaY8r/vLOpf7BfG/vQ1nM8 e+I0LK+M8UdT96zEt2kSFqIeM/yeJDYXncsah+wvVs/mR9+GLhyQwCeVHUUXkUCi 3kZqB/QlCuamGYzzzhGNJywe0E3m6ziVx8pdb5+4jCJn7Q19LyG8ZoLnaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY+eAnhHkhHtqZeQeDTswbPaYlfMB8GA1UdIwQY MBaAFJruyzU/HNxf06nVSohzUx79KFxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYt NTk0NDk2MGUzMWNmLzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYtNTk0NDk2MGUzMWNm LzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjdIKBjY KotwNEs4mSC+U1J7odQWJ/FYwpInxkX5vd9j2oMONIX7nwOlVkfpvf+w/5gHqTBA Dm33bowj/qiKOmJ/Oz8thqfWaZoMrvchoBpg8G0e5kXIEDZ8opXrcR2rj69P9iDI RnSHK3yOeGt1ClXi6DJBengw/LxfhZgz/MNclgNHEr7txGL1dTGxMq4RZr2oawjn pVFbfPAdGV02lb5B6aQXx2VTsbyNczGEisAHPpgqsjTjdSD0qnJxXZgZbkf8Kmaf yu38/aThqVf0MyFtP2uucWz8dYz+okCTnwf4kePV06/arlNfKPcVVnQHhXCWKyAP dcIk+PEl1aqzYw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:45:05 2025 by rpki-client