This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json) Hash identifier: 56Py8oFF9j0ao1WzXwyXT52B23yTrQnkxC8qYKU58FU= Subject key identifier: F8:15:64:DC:69:EF:74:21:C4:95:7A:87:6A:10:98:29:08:24:A3:AC Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29 Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29 Certificate serial: 019AF1D1B9181C9310B0C15109E3E155B1A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft Manifest number: 0B83 Signing time: Sat 06 Dec 2025 04:00:44 +0000 Manifest this update: Sat 06 Dec 2025 04:00:44 +0000 Manifest next update: Sun 07 Dec 2025 04:00:44 +0000 Files and hashes: 1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=) 2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: QFeJuDzrKhgVjovpDOoNzNyI/rdUJw8XHK9ST6W1FJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b9:18:1c:93:10:b0:c1:51:09:e3:e1:55:b1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29 Validity Not Before: Dec 6 04:00:44 2025 GMT Not After : Dec 7 04:00:44 2025 GMT Subject: CN=f81564dc69ef7421c4957a876a1098290824a3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:0b:6f:ce:fa:3d:b8:58:60:ad:1e:b1:d3: c5:28:e8:d9:54:c5:4f:c4:ee:9f:21:1a:89:5a:88: 79:b9:2f:f6:fd:0e:a6:fa:60:6b:3b:86:ae:0c:8e: 14:62:31:39:61:3d:54:40:f5:59:56:be:52:72:a0: f2:ec:c4:4a:a8:ab:d8:81:80:74:c3:74:b3:99:0e: d0:ad:c8:26:7a:9c:de:ce:fb:bf:b7:2c:64:0e:a1: 42:ee:61:92:a7:05:d3:0e:3e:0e:97:c8:a2:af:9a: 82:4d:19:02:39:76:e8:07:d2:1b:23:ae:2f:1c:80: fa:2d:b0:50:86:89:16:9b:ae:30:fe:21:a6:74:d2: af:4a:67:6f:ee:41:f2:fb:a2:37:39:06:0e:de:37: 61:6c:42:73:95:76:cf:f1:24:3f:d3:86:24:08:c2: 99:48:08:05:f1:ed:2e:57:82:47:87:3e:78:dc:f1: fa:2c:b2:3d:4f:86:88:f9:97:4b:f0:a7:c3:80:96: 1f:ad:70:5a:fb:89:eb:94:66:80:8d:10:76:1a:58: 07:6e:85:ad:f0:8b:db:ab:2f:8a:28:80:de:ad:22: 58:f3:5f:e5:20:98:77:53:57:21:34:81:96:60:1a: ba:6a:d2:e0:48:c0:c0:a8:35:07:4b:d6:16:db:f2: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:15:64:DC:69:EF:74:21:C4:95:7A:87:6A:10:98:29:08:24:A3:AC X509v3 Authority Key Identifier: keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ea:a8:44:4a:dc:ff:1d:0d:d9:00:ad:71:82:01:da:31:24: 0b:85:71:1d:f3:a2:08:5d:ce:80:9f:8a:e5:89:38:49:1a:25: e4:26:32:2e:79:9f:84:e8:d9:bf:1f:a1:9d:52:f6:9f:1d:50: 28:1c:6b:05:bf:2b:fa:f9:ab:e4:64:81:1e:8d:61:c0:e5:2b: c9:29:fb:f3:46:90:32:05:5f:4e:91:6c:a4:eb:c3:8a:77:a8: 7f:e4:08:79:75:a4:92:da:0f:f0:2c:82:70:d5:a5:33:57:7f: 3b:b2:18:d3:a9:c5:11:f9:eb:35:87:d7:e8:03:17:3c:db:36: cb:86:64:97:4b:48:83:48:80:9b:d1:3c:bc:40:d2:90:b8:e9: 67:a3:0d:ea:ae:ce:92:a9:cf:3c:53:3e:de:9c:2e:d6:38:94: 0d:43:44:67:67:10:16:7f:4d:41:ad:00:61:4c:84:d6:c4:1e: 59:e1:79:7f:c2:ca:07:43:52:0b:52:7c:bb:96:d3:83:62:6f: 1d:73:c2:38:ba:e5:4a:a8:1d:c0:62:4c:86:ce:fa:fa:44:b7: 6b:b5:d2:f8:c5:cf:f3:b6:41:f0:20:af:3c:af:26:aa:06:31: 87:da:49:0d:22:4f:bc:d0:8c:e4:d5:31:a6:99:69:3f:dc:00: 5b:aa:a3:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bkYHJMQsMFRCePhVbGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTI1MzRkZjUwOWM5NmVjYjgxMWJjODVkNzZkNjJiYWFk ZjNkMjkwHhcNMjUxMjA2MDQwMDQ0WhcNMjUxMjA3MDQwMDQ0WjAzMTEwLwYDVQQD EyhmODE1NjRkYzY5ZWY3NDIxYzQ5NTdhODc2YTEwOTgyOTA4MjRhM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZELb876PbhYYK0esdPFKOjZVMVP xO6fIRqJWoh5uS/2/Q6m+mBrO4auDI4UYjE5YT1UQPVZVr5ScqDy7MRKqKvYgYB0 w3SzmQ7Qrcgmepzezvu/tyxkDqFC7mGSpwXTDj4Ol8iir5qCTRkCOXboB9IbI64v HID6LbBQhokWm64w/iGmdNKvSmdv7kHy+6I3OQYO3jdhbEJzlXbP8SQ/04YkCMKZ SAgF8e0uV4JHhz543PH6LLI9T4aI+ZdL8KfDgJYfrXBa+4nrlGaAjRB2GlgHboWt 8Ivbqy+KKIDerSJY81/lIJh3U1chNIGWYBq6atLgSMDAqDUHS9YW2/J2QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgVZNxp73QhxJV6h2oQmCkIJKOsMB8GA1UdIwQY MBaAFJriU031Ccluy4EbyF121iuq3z0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjIt ODIyNjUyNGU0YWNmLzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjItODIyNjUyNGU0YWNm LzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruqoRErc /x0N2QCtcYIB2jEkC4VxHfOiCF3OgJ+K5Yk4SRol5CYyLnmfhOjZvx+hnVL2nx1Q KBxrBb8r+vmr5GSBHo1hwOUrySn780aQMgVfTpFspOvDineof+QIeXWkktoP8CyC cNWlM1d/O7IY06nFEfnrNYfX6AMXPNs2y4Zkl0tIg0iAm9E8vEDSkLjpZ6MN6q7O kqnPPFM+3pwu1jiUDUNEZ2cQFn9NQa0AYUyE1sQeWeF5f8LKB0NSC1J8u5bTg2Jv HXPCOLrlSqgdwGJMhs76+kS3a7XS+MXP87ZB8CCvPK8mqgYxh9pJDSJPvNCM5NUx pplpP9wAW6qjIg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:26 2025 by rpki-client