This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json) Hash identifier: msYlNmovODERcOflvgt7zpxj9wRJTwP4/QXORhg8zHo= Subject key identifier: D6:93:B8:0B:E6:DC:F9:D6:F1:C9:FE:E5:19:87:FE:42:15:59:AB:81 Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd Certificate serial: 019B3D22B2F51816A8FA2D10BFCB89F4D026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft Manifest number: 05D3 Signing time: Sat 20 Dec 2025 19:00:42 +0000 Manifest this update: Sat 20 Dec 2025 19:00:42 +0000 Manifest next update: Sun 21 Dec 2025 19:00:42 +0000 Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=) 2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: 9HfQkPCrdVwDS/rMOtGJEUzvGWq4Bdv4DbhCzf/Wpts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:b2:f5:18:16:a8:fa:2d:10:bf:cb:89:f4:d0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd Validity Not Before: Dec 20 19:00:42 2025 GMT Not After : Dec 21 19:00:42 2025 GMT Subject: CN=d693b80be6dcf9d6f1c9fee51987fe421559ab81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:a6:ac:ab:28:41:bd:09:5b:3c:ef:1c:01: 46:f9:31:a4:e2:67:a8:3d:6d:18:cd:42:f1:6f:3b: f3:9f:a1:04:88:0f:f3:1f:59:01:42:7d:aa:a6:06: 22:d9:fa:12:17:00:bd:b1:bd:f4:dc:3a:3b:f1:b9: b3:5f:50:e8:79:3d:bd:f4:1d:76:cc:a0:02:b2:98: 43:62:88:e3:f0:0a:bc:29:83:8f:04:2c:12:77:bc: d1:bc:16:ca:b0:f1:db:d2:cb:b8:4f:b5:31:aa:a3: 5a:a7:fa:d6:a5:a9:7c:dc:ad:45:f5:f5:18:88:ce: a5:96:85:c2:9e:b3:a1:75:c4:6d:6b:27:b6:6f:ba: 90:fc:38:9b:1b:a7:5e:03:b9:56:4c:49:4f:37:00: 64:a5:cc:37:a4:3f:c3:ef:30:d4:b4:89:ee:ce:de: e8:e8:78:a8:b2:b0:55:7d:b3:ea:c2:e4:42:a5:fa: cf:8b:43:e4:93:5f:d8:51:34:59:26:15:62:0c:c0: 60:45:3a:ab:e9:72:f8:db:f3:16:de:4b:76:a8:a2: 11:d1:29:14:dc:d4:64:17:82:2a:86:9d:16:95:1e: 68:bc:55:a2:fe:8b:4b:c3:54:21:e9:a4:70:f1:dc: 65:94:73:80:38:dd:84:28:c2:0b:29:e9:8d:2b:25: cf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:93:B8:0B:E6:DC:F9:D6:F1:C9:FE:E5:19:87:FE:42:15:59:AB:81 X509v3 Authority Key Identifier: keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:34:63:b2:3d:b1:56:08:39:22:2e:8c:cb:f9:e7:54:d2:0d: ed:06:10:07:b9:ef:09:2c:ca:07:81:4f:d0:60:62:a8:49:a9: 78:b1:01:1f:f6:59:7b:9f:1d:5f:ff:23:03:1a:1e:d3:58:56: 8f:bc:75:e7:79:15:1e:b5:b6:87:1d:19:10:a4:79:04:5e:c9: db:49:e6:8a:9d:fe:e4:7c:e0:4d:03:a6:74:87:f9:ef:18:bd: 5f:eb:61:72:cb:5b:30:fc:94:f2:d8:53:6b:d8:3e:72:e0:df: d1:f8:d1:ad:c1:57:d5:2a:c2:0d:12:fe:d8:8f:18:9e:2c:7a: 2d:d0:ce:80:2e:b5:ec:c7:f1:7d:2c:51:5e:fa:e1:b6:29:f0: 2e:09:1f:5f:1c:18:24:1a:f1:9c:8a:a6:1f:46:9d:fe:55:bb: 00:03:18:ba:3c:5e:3d:af:0a:16:75:59:10:e5:21:f9:7e:9b: 2b:26:e9:28:1b:5d:e9:e9:cc:d9:fe:d4:f2:b8:d5:cd:0f:9d: 9c:af:f7:8c:46:ef:db:30:36:c4:61:a7:87:ce:af:3b:dc:57: 04:dd:88:3e:1d:db:0a:04:92:64:52:cc:84:93:06:88:97:f1: 21:35:be:4c:af:55:eb:29:c5:d1:07:27:f9:32:48:c1:fc:19: 50:73:a8:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IrL1GBao+i0Qv8uJ9NAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzUwZGY2YjAxZGZmNmY1NGViODAzOWIyNDk3YWE3ZjRl ZjEyY2QwHhcNMjUxMjIwMTkwMDQyWhcNMjUxMjIxMTkwMDQyWjAzMTEwLwYDVQQD EyhkNjkzYjgwYmU2ZGNmOWQ2ZjFjOWZlZTUxOTg3ZmU0MjE1NTlhYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw2mrKsoQb0JWzzvHAFG+TGk4meo PW0YzULxbzvzn6EEiA/zH1kBQn2qpgYi2foSFwC9sb303Do78bmzX1DoeT299B12 zKACsphDYojj8Aq8KYOPBCwSd7zRvBbKsPHb0su4T7UxqqNap/rWpal83K1F9fUY iM6lloXCnrOhdcRtaye2b7qQ/DibG6deA7lWTElPNwBkpcw3pD/D7zDUtInuzt7o 6HiosrBVfbPqwuRCpfrPi0Pkk1/YUTRZJhViDMBgRTqr6XL42/MW3kt2qKIR0SkU 3NRkF4Iqhp0WlR5ovFWi/otLw1Qh6aRw8dxllHOAON2EKMILKemNKyXPkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaTuAvm3PnW8cn+5RmH/kIVWauBMB8GA1UdIwQY MBaAFKzFDfawHf9vVOuAObJJeqf07xLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQt MzFjOTMxM2Y5ZjY2LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQtMzFjOTMxM2Y5ZjY2 LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITRjsj2x Vgg5Ii6My/nnVNIN7QYQB7nvCSzKB4FP0GBiqEmpeLEBH/ZZe58dX/8jAxoe01hW j7x153kVHrW2hx0ZEKR5BF7J20nmip3+5HzgTQOmdIf57xi9X+thcstbMPyU8thT a9g+cuDf0fjRrcFX1SrCDRL+2I8Ynix6LdDOgC617MfxfSxRXvrhtinwLgkfXxwY JBrxnIqmH0ad/lW7AAMYujxePa8KFnVZEOUh+X6bKybpKBtd6enM2f7U8rjVzQ+d nK/3jEbv2zA2xGGnh86vO9xXBN2IPh3bCgSSZFLMhJMGiJfxITW+TK9V6ynF0Qcn +TJIwfwZUHOouw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:48:35 2025 by rpki-client