This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json) Hash identifier: tXTuZnFZGqYgaFia58Gs2OOaBzfFpsQiYTFttygWFEk= Subject key identifier: 21:BE:10:13:36:77:23:C7:3D:BD:00:7C:4A:FB:50:62:55:A3:4A:DB Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd Certificate serial: 019AF3C002702EA1B1501169AD786A3C4983 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft Manifest number: 05AD Signing time: Sat 06 Dec 2025 13:00:38 +0000 Manifest this update: Sat 06 Dec 2025 13:00:38 +0000 Manifest next update: Sun 07 Dec 2025 13:00:38 +0000 Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=) 2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: /Tew3n/3f2juVuCQiUm0vKOBV2mWnyONcWXmL68OBww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:02:70:2e:a1:b1:50:11:69:ad:78:6a:3c:49:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd Validity Not Before: Dec 6 13:00:38 2025 GMT Not After : Dec 7 13:00:38 2025 GMT Subject: CN=21be1013367723c73dbd007c4afb506255a34adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:d6:d7:7f:74:ef:90:eb:99:09:00:29:f0: 46:3e:cc:90:d7:ca:29:c0:d0:a4:07:93:53:16:b8: 00:e5:e4:5d:29:03:ed:4b:19:49:6d:93:a7:76:63: fe:bf:38:95:de:b4:cf:a4:fd:12:9a:40:e0:2d:7b: 4d:1a:da:d1:82:9d:1f:bc:20:2e:44:4b:30:e8:0d: 34:52:75:01:58:8b:d0:7a:58:59:94:02:0a:ec:bb: 9e:bf:f1:cc:85:4b:12:5e:53:01:93:80:2a:19:15: 8d:79:99:95:21:28:d4:9a:0d:88:c1:7b:aa:c7:b4: a5:84:57:1a:e3:ff:88:a6:41:8a:4b:87:e0:f7:91: c3:b8:cc:f2:df:fa:a5:77:60:b5:37:ef:5e:bc:93: 19:3e:73:c6:63:34:00:e1:c9:33:f2:fe:8c:2f:03: 4f:92:cf:5a:25:f6:b1:98:9a:e3:bf:c1:af:16:1b: ce:53:82:23:c5:b4:12:9b:b1:47:da:eb:a0:5f:5b: 20:8e:e0:b6:49:2e:f3:19:7e:4e:fc:99:99:ca:dd: f8:a6:96:1f:a5:12:43:e7:0b:80:9d:8d:0a:72:c8: d9:ae:d2:6f:09:c4:ae:36:d7:3f:6d:2e:bd:20:4e: b9:01:53:23:82:ba:0e:c6:fb:64:82:2b:b4:63:de: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BE:10:13:36:77:23:C7:3D:BD:00:7C:4A:FB:50:62:55:A3:4A:DB X509v3 Authority Key Identifier: keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:7d:73:02:20:db:9f:31:e6:3c:3c:74:0d:78:5b:97:80:07: 7b:70:26:c4:c2:e0:8b:b3:68:80:17:14:ca:04:f7:16:23:54: 91:60:a1:95:aa:69:80:56:e2:e3:52:aa:3c:f8:ab:d4:c0:1e: 2a:b0:7c:7a:d4:79:29:de:77:0e:55:a5:e4:1d:e0:6f:2c:c0: 6c:9b:d2:99:3d:0d:07:52:bf:2a:a1:75:b8:af:8a:bf:89:3e: 0f:51:b8:2b:ea:25:a9:6c:8f:77:4b:37:fc:03:c1:e3:66:b3: 51:2c:b8:df:e9:a9:7f:da:57:de:7b:8f:9e:96:86:2f:71:60: 53:9f:43:f1:22:27:aa:d5:93:6c:0d:19:0b:f9:88:a4:19:4f: e9:ab:1e:4a:36:1f:92:5a:d0:b1:68:45:54:6d:f0:d5:29:29: c6:dc:80:19:ee:2f:a4:b6:5b:d3:6c:dc:4a:a5:74:2d:c0:fd: b1:93:d2:6d:8d:0e:04:5c:ef:ec:c4:1d:e1:eb:44:31:7b:7c: c6:3c:7a:31:d4:3f:ee:c2:13:ce:c3:7a:e4:fb:28:34:8a:61: 00:e3:35:22:3b:c8:20:fd:a7:ca:02:84:51:76:ff:3c:e6:72: c3:fa:37:df:57:6f:19:69:8a:31:5c:29:16:f7:81:6e:24:d1: d2:6f:4e:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAJwLqGxUBFprXhqPEmDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzUwZGY2YjAxZGZmNmY1NGViODAzOWIyNDk3YWE3ZjRl ZjEyY2QwHhcNMjUxMjA2MTMwMDM4WhcNMjUxMjA3MTMwMDM4WjAzMTEwLwYDVQQD EygyMWJlMTAxMzM2NzcyM2M3M2RiZDAwN2M0YWZiNTA2MjU1YTM0YWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHnW139075DrmQkAKfBGPsyQ18op wNCkB5NTFrgA5eRdKQPtSxlJbZOndmP+vziV3rTPpP0SmkDgLXtNGtrRgp0fvCAu REsw6A00UnUBWIvQelhZlAIK7Luev/HMhUsSXlMBk4AqGRWNeZmVISjUmg2IwXuq x7SlhFca4/+IpkGKS4fg95HDuMzy3/qld2C1N+9evJMZPnPGYzQA4ckz8v6MLwNP ks9aJfaxmJrjv8GvFhvOU4IjxbQSm7FH2uugX1sgjuC2SS7zGX5O/JmZyt34ppYf pRJD5wuAnY0KcsjZrtJvCcSuNtc/bS69IE65AVMjgroOxvtkgiu0Y95X4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG+EBM2dyPHPb0AfEr7UGJVo0rbMB8GA1UdIwQY MBaAFKzFDfawHf9vVOuAObJJeqf07xLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQt MzFjOTMxM2Y5ZjY2LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQtMzFjOTMxM2Y5ZjY2 LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhn1zAiDb nzHmPDx0DXhbl4AHe3AmxMLgi7NogBcUygT3FiNUkWChlappgFbi41KqPPir1MAe KrB8etR5Kd53DlWl5B3gbyzAbJvSmT0NB1K/KqF1uK+Kv4k+D1G4K+olqWyPd0s3 /APB42azUSy43+mpf9pX3nuPnpaGL3FgU59D8SInqtWTbA0ZC/mIpBlP6aseSjYf klrQsWhFVG3w1SkpxtyAGe4vpLZb02zcSqV0LcD9sZPSbY0OBFzv7MQd4etEMXt8 xjx6MdQ/7sITzsN65PsoNIphAOM1IjvIIP2nygKEUXb/POZyw/o331dvGWmKMVwp FveBbiTR0m9O0g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:28 2025 by rpki-client