This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json) Hash identifier: zmM4MpOOFpUea/7/8kV206qjy+2yuqDd/dR+WNI5tkk= Subject key identifier: 52:D8:D4:C6:FB:DD:CA:92:2D:3C:24:B8:65:50:BD:E2:F0:23:63:FB Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21 Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21 Certificate serial: 019AF276A4392498F2EEB609D7A020A0E9A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft Manifest number: 1346 Signing time: Sat 06 Dec 2025 07:00:52 +0000 Manifest this update: Sat 06 Dec 2025 07:00:52 +0000 Manifest next update: Sun 07 Dec 2025 07:00:52 +0000 Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: elJmJdAGiv6iSut5FPBmmjWnbXsMr2w9+WbEwI83iDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a4:39:24:98:f2:ee:b6:09:d7:a0:20:a0:e9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21 Validity Not Before: Dec 6 07:00:52 2025 GMT Not After : Dec 7 07:00:52 2025 GMT Subject: CN=52d8d4c6fbddca922d3c24b86550bde2f02363fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:64:7a:63:d4:62:ba:1c:5a:0b:33:ec:29: bd:a8:d6:91:2e:a9:c9:0d:1b:a8:8f:7e:84:ec:87: 03:af:49:e6:22:16:dc:9d:37:d5:e8:f6:f0:a0:56: 6c:9a:a2:9f:92:f7:ee:a2:da:bf:e5:e7:5b:a8:0d: 8d:7c:ac:a5:cd:42:ae:e7:f8:40:cf:2c:14:ba:0d: ef:44:6a:dd:2d:c5:1a:54:48:f9:f7:d1:a8:e1:3f: cc:81:6c:1d:78:24:5e:ae:18:bd:47:db:b0:b8:86: 22:c9:68:74:34:34:7d:d6:1a:c2:27:76:c4:19:61: 38:96:51:c1:b2:12:07:2c:14:d3:1c:c5:5a:e6:4a: fe:02:b1:66:fc:19:67:6f:6e:75:d2:c5:55:99:d2: 9d:8e:65:f2:fd:9e:1b:e1:d6:70:b6:8b:81:ce:fb: df:6d:97:b7:1b:c4:ed:90:2f:2d:5b:6e:9e:8f:2d: 39:4c:71:3f:1f:d1:01:ad:eb:60:61:f0:57:d2:dd: 29:0f:b4:6a:ad:14:db:de:91:2f:b1:1f:fa:af:76: d4:2c:9a:86:0c:3a:0b:9e:e2:81:fd:b1:97:af:b9: 8c:db:73:3e:83:b0:40:68:f4:fa:04:f7:26:54:56: ab:39:ca:3a:04:75:56:c6:d7:09:f6:f5:4d:42:0a: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:D4:C6:FB:DD:CA:92:2D:3C:24:B8:65:50:BD:E2:F0:23:63:FB X509v3 Authority Key Identifier: keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:46:32:1b:b8:29:af:e2:2a:e2:ab:50:e9:5f:d5:e2:43:76: 59:d3:06:41:63:7f:91:f8:34:50:fa:4c:2c:e3:be:ea:f4:81: 03:9d:df:9b:cc:4c:3b:bf:af:b9:c2:e9:d2:01:c3:4a:7d:04: 8d:da:2e:fb:62:c5:6d:8a:82:26:39:33:49:c6:4e:53:be:cd: 59:3a:aa:4c:9a:85:40:93:94:a8:61:a6:06:77:6f:a6:6b:d2: 5d:04:af:c8:13:a4:49:56:f8:e3:ad:b4:11:ed:4f:ae:35:c4: 53:cd:f4:ba:84:88:88:67:fc:af:a3:aa:5a:d6:60:62:0b:56: 98:eb:3a:c1:89:21:b4:4d:34:cc:40:b8:19:47:5b:47:1f:a4: 25:a9:16:46:04:9a:04:8c:e2:ca:55:26:77:c3:c7:4e:7f:e9: c8:13:36:fe:3c:7a:75:f3:74:49:ba:e9:4a:97:21:e4:0c:27: c0:d8:42:51:69:0c:72:dd:79:8f:85:57:69:a7:0e:4e:0b:ce: e6:11:6c:90:36:cf:4e:5d:85:da:95:b7:00:9b:15:94:ba:fb: dc:73:91:0e:a4:b7:6b:30:3f:64:78:aa:a6:fb:36:69:cf:88: 41:e2:3d:0c:80:0a:80:91:ed:81:0a:1e:5d:5b:2b:3b:fd:25: b0:66:16:ad -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydqQ5JJjy7rYJ16AgoOmpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YzUwMWYzYmZhZDQ5YWQ0ZTU2ZTZlNGMxOGY3NDBlZGVh MDVkMjEwHhcNMjUxMjA2MDcwMDUyWhcNMjUxMjA3MDcwMDUyWjAzMTEwLwYDVQQD Eyg1MmQ4ZDRjNmZiZGRjYTkyMmQzYzI0Yjg2NTUwYmRlMmYwMjM2M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+VkemPUYrocWgsz7Cm9qNaRLqnJ DRuoj36E7IcDr0nmIhbcnTfV6PbwoFZsmqKfkvfuotq/5edbqA2NfKylzUKu5/hA zywUug3vRGrdLcUaVEj599Go4T/MgWwdeCRerhi9R9uwuIYiyWh0NDR91hrCJ3bE GWE4llHBshIHLBTTHMVa5kr+ArFm/Blnb2510sVVmdKdjmXy/Z4b4dZwtouBzvvf bZe3G8TtkC8tW26ejy05THE/H9EBretgYfBX0t0pD7RqrRTb3pEvsR/6r3bULJqG DDoLnuKB/bGXr7mM23M+g7BAaPT6BPcmVFarOco6BHVWxtcJ9vVNQgpOMQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFLY1Mb73cqSLTwkuGVQveLwI2P7MB8GA1UdIwQY MBaAFPjFAfO/rUmtTlbm5MGPdA7eoF0hMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1NVUI4Ny10U2ExT1Z1Ymt3WTkwRHQ2Z1hTRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMzVkNTJjLTZjYzAtNGYwMS05Mzc2 LTY0ZjQ5MmUzMjZlZC8xLzEtTVVCODctdFNhMU9WdWJrd1k5MER0NmdYU0UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U3LzM1ZDUyYy02Y2MwLTRmMDEtOTM3Ni02NGY0OTJlMzI2 ZWQvMS8xLU1VQjg3LXRTYTFPVnVia3dZOTBEdDZnWFNFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEYy G7gpr+Iq4qtQ6V/V4kN2WdMGQWN/kfg0UPpMLOO+6vSBA53fm8xMO7+vucLp0gHD Sn0Ejdou+2LFbYqCJjkzScZOU77NWTqqTJqFQJOUqGGmBndvpmvSXQSvyBOkSVb4 4620Ee1PrjXEU830uoSIiGf8r6OqWtZgYgtWmOs6wYkhtE00zEC4GUdbRx+kJakW RgSaBIziylUmd8PHTn/pyBM2/jx6dfN0SbrpSpch5AwnwNhCUWkMct15j4VXaacO TgvO5hFskDbPTl2F2pW3AJsVlLr73HORDqS3azA/ZHiqpvs2ac+IQeI9DIAKgJHt gQoeXVsrO/0lsGYWrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:40 2025 by rpki-client