This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json) Hash identifier: DGIaeqW/o8DIURaXH6i8gw84P9TVncjH50mNnsDJZfo= Subject key identifier: CF:15:36:4C:D2:4B:4D:DC:20:5E:48:08:5D:2C:20:EC:2D:A1:F0:C9 Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce Certificate serial: 019B35A03943250A9EBE13C054F1732C51EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft Manifest number: 0975 Signing time: Fri 19 Dec 2025 08:00:51 +0000 Manifest this update: Fri 19 Dec 2025 08:00:51 +0000 Manifest next update: Sat 20 Dec 2025 08:00:51 +0000 Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: p9jlVNutduKiBXVADPQXpjLb4dxVj3Gl4GkLiyS12WU=) 2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:39:43:25:0a:9e:be:13:c0:54:f1:73:2c:51:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce Validity Not Before: Dec 19 08:00:51 2025 GMT Not After : Dec 20 08:00:51 2025 GMT Subject: CN=cf15364cd24b4ddc205e48085d2c20ec2da1f0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:7f:28:52:a4:cf:0d:a0:48:02:b8:46:61: 48:47:db:40:a6:67:09:cb:13:b1:bf:23:bd:a6:83: c5:28:5d:c7:5a:fb:91:0d:f2:9b:c5:14:5a:7a:1f: 80:d3:2d:95:ed:10:98:89:f6:9a:81:bf:ae:aa:9a: 48:bc:20:51:41:4e:3a:a1:2d:18:ab:ad:38:b1:5c: 99:08:91:34:7d:39:7a:c4:00:ca:52:25:79:59:6c: 94:66:7e:a7:e4:2c:d4:95:a2:6e:0c:eb:68:f0:af: 19:99:e6:24:8f:b7:ab:da:d9:ca:1f:78:0f:97:0b: 57:b7:35:83:9d:66:c6:a1:31:0e:2c:df:bb:72:fb: 48:60:b1:c7:ef:34:28:54:64:45:6a:65:99:ee:88: 73:fa:7c:d1:f5:ea:3e:2b:69:13:57:40:0d:65:59: 7a:1c:81:7c:92:d1:09:86:ed:7e:0c:4c:f0:12:00: 96:d4:d3:96:77:cd:11:75:81:1f:a2:10:cd:a8:67: c2:8c:3d:5e:c2:34:ad:3b:dc:d1:59:ce:da:30:4e: c0:39:4f:a5:29:30:e7:07:95:20:7e:ef:23:e3:6d: 7e:fe:37:12:a5:e7:27:a6:20:96:24:5a:b1:36:ae: 5f:6a:36:d7:4b:e0:a0:fc:56:83:b8:0f:3e:81:ed: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:15:36:4C:D2:4B:4D:DC:20:5E:48:08:5D:2C:20:EC:2D:A1:F0:C9 X509v3 Authority Key Identifier: keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c0:db:d7:e4:3e:f4:b3:24:e5:bf:c2:95:b9:ae:4a:fb:d7: b2:ff:b6:f8:fc:e0:8a:a7:7f:76:2e:b6:f9:17:ba:14:cf:77: a3:64:5c:4d:9c:d4:d5:1b:ac:d1:2f:14:17:77:2d:c9:d7:b0: f9:b1:b4:6c:e8:ff:36:31:a3:1d:d6:82:c5:b3:e1:f7:3b:88: 7c:c1:ab:33:f5:fd:4b:b3:18:97:fe:23:ff:1d:42:0a:c6:10: 43:20:40:08:27:94:d8:27:08:24:53:be:73:45:cb:ac:96:62: 84:1b:52:b9:c5:cc:93:a1:16:04:39:f9:c6:45:b5:ab:de:c9: 9b:b2:df:35:21:66:ec:22:4e:d6:cc:b0:07:76:34:48:ba:99: 6e:03:65:5a:08:a7:9d:98:7e:57:16:63:c1:d0:71:76:5c:9c: b8:fc:31:93:61:9e:f5:f8:31:a9:73:16:dc:06:49:13:a8:b9: 8b:48:73:26:5c:23:e9:bd:2b:f4:39:d5:5f:89:37:46:c4:e9: de:e7:cc:9e:42:06:38:95:ba:96:bf:6d:76:8c:b2:36:58:4a: 19:fd:6a:37:ff:9e:04:f1:61:94:90:af:bc:07:a4:65:16:ae: 74:df:c2:c4:90:cb:3c:82:21:66:86:f3:8d:d6:52:e8:2d:59: 83:ec:1c:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oDlDJQqevhPAVPFzLFHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZWQwMTQ1NzdhYzczZmY4N2VmMjBjYTZmNzU3OTVlNGM5 MzdmY2UwHhcNMjUxMjE5MDgwMDUxWhcNMjUxMjIwMDgwMDUxWjAzMTEwLwYDVQQD EyhjZjE1MzY0Y2QyNGI0ZGRjMjA1ZTQ4MDg1ZDJjMjBlYzJkYTFmMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr1/KFKkzw2gSAK4RmFIR9tApmcJ yxOxvyO9poPFKF3HWvuRDfKbxRRaeh+A0y2V7RCYifaagb+uqppIvCBRQU46oS0Y q604sVyZCJE0fTl6xADKUiV5WWyUZn6n5CzUlaJuDOto8K8ZmeYkj7er2tnKH3gP lwtXtzWDnWbGoTEOLN+7cvtIYLHH7zQoVGRFamWZ7ohz+nzR9eo+K2kTV0ANZVl6 HIF8ktEJhu1+DEzwEgCW1NOWd80RdYEfohDNqGfCjD1ewjStO9zRWc7aME7AOU+l KTDnB5Ugfu8j421+/jcSpecnpiCWJFqxNq5fajbXS+Cg/FaDuA8+ge124wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8VNkzSS03cIF5ICF0sIOwtofDJMB8GA1UdIwQY MBaAFDLtAUV3rHP/h+8gym91eV5Mk3/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTM5NWMtNTE4NS00MmVlLTk0OGIt OGZjMmI3MWQwMzBmLzEvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80YTM5NWMtNTE4NS00MmVlLTk0OGItOGZjMmI3MWQwMzBm LzEvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsDb1+Q+ 9LMk5b/ClbmuSvvXsv+2+Pzgiqd/di62+Re6FM93o2RcTZzU1Rus0S8UF3ctydew +bG0bOj/NjGjHdaCxbPh9zuIfMGrM/X9S7MYl/4j/x1CCsYQQyBACCeU2CcIJFO+ c0XLrJZihBtSucXMk6EWBDn5xkW1q97Jm7LfNSFm7CJO1sywB3Y0SLqZbgNlWgin nZh+VxZjwdBxdlycuPwxk2Ge9fgxqXMW3AZJE6i5i0hzJlwj6b0r9DnVX4k3RsTp 3ufMnkIGOJW6lr9tdoyyNlhKGf1qN/+eBPFhlJCvvAekZRaudN/CxJDLPIIhZobz jdZS6C1Zg+wcuw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:34:41 2025 by rpki-client