This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json) Hash identifier: 19HY/ctWxj5eHZeec1SBGVTr+LVGtW/CCzoAp0Vj7Ek= Subject key identifier: 81:73:18:47:70:3A:E4:D9:33:BC:37:D1:70:B9:0D:9D:E1:CD:6F:6D Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39 Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139 Certificate serial: 019B307A27B10D1A274B53E61B93EC5A822E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft Manifest number: 1757 Signing time: Thu 18 Dec 2025 08:01:10 +0000 Manifest this update: Thu 18 Dec 2025 08:01:10 +0000 Manifest next update: Fri 19 Dec 2025 08:01:10 +0000 Files and hashes: 1: Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa (hash: yodxfHzeCCrONRmxjgNBHi9TEwJB+PIep9C2GIrnRgo=) 2: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: fGBhNDm/1UK/focRIgFxT90Nj5hE8aKzEJGuqjezQLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7a:27:b1:0d:1a:27:4b:53:e6:1b:93:ec:5a:82:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9944078b40772b172c7046e7446204980ceae139 Validity Not Before: Dec 18 08:01:10 2025 GMT Not After : Dec 19 08:01:10 2025 GMT Subject: CN=81731847703ae4d933bc37d170b90d9de1cd6f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f4:67:12:ac:0a:1c:aa:8c:55:e6:e0:df:d5: 43:d0:cc:87:d2:6a:71:32:50:2c:ba:3e:4e:b4:2c: 70:81:20:1a:21:f0:1f:03:75:b4:b2:7c:0c:57:a7: 02:a0:84:af:ab:8a:66:63:b5:e7:b5:5f:10:cf:bb: 50:ac:9e:44:7a:37:51:8e:c2:b0:36:f1:ae:9a:f3: 34:38:c5:e0:d7:2b:e2:d6:2f:b6:b5:0f:ef:28:59: 29:b9:2e:1b:68:b1:71:aa:74:5a:31:db:30:9e:3d: 9e:20:ab:35:95:c2:4d:ce:f9:c9:93:29:32:72:6a: 2c:b0:9a:55:da:e6:af:7d:55:c1:f9:e2:63:3d:fd: 22:2b:8d:08:6b:e1:a4:da:8b:1e:6e:2a:19:5f:7c: 7b:36:b9:37:79:bf:93:9c:90:12:da:a6:f8:cf:22: d3:41:f9:20:fc:6a:c9:e8:16:52:cc:69:03:71:e2: c6:06:7d:11:6f:c5:87:fa:03:e2:d4:44:e2:7d:d9: dc:f8:a7:8d:96:cf:a1:38:6f:4f:04:a3:bc:5a:e2: 66:63:f1:08:78:67:75:88:c6:74:72:0e:e5:97:db: 68:9d:cb:55:06:1b:92:26:93:e9:4e:9b:79:2f:92: e1:8e:d7:06:33:47:53:52:25:c2:81:16:ae:0b:c0: 0b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:73:18:47:70:3A:E4:D9:33:BC:37:D1:70:B9:0D:9D:E1:CD:6F:6D X509v3 Authority Key Identifier: keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ce:75:64:81:c5:34:be:0e:91:da:db:ed:96:db:3b:27:cb: ba:77:42:f6:14:63:94:95:af:25:7e:d0:6c:c6:44:8e:3d:ad: 0c:90:f5:b4:99:b9:f3:99:71:8f:ae:18:70:d1:cd:d2:1e:16: ec:6b:4c:e5:2a:ee:91:05:fa:5c:46:14:8d:1c:91:ac:30:6d: 62:e2:86:09:4f:57:07:1e:de:50:d4:5a:e4:ef:f4:2a:e7:27: f1:67:8d:fd:97:b3:79:23:ef:ac:4b:83:42:ef:b6:74:0f:37: c9:30:3a:b3:5f:57:d4:9b:d9:21:d6:ea:0f:31:ac:88:c2:4c: a1:39:f7:bc:fb:86:59:f0:6d:ff:32:b0:66:13:fc:f1:cf:47: 01:9f:34:80:95:1b:4e:23:a5:ac:83:87:76:7f:70:31:0f:c1: 1d:67:e9:ba:3a:5e:62:e7:d9:18:8b:07:4d:46:a9:e4:a4:ed: 00:97:c8:d5:be:62:91:4e:25:01:c5:8a:6d:a3:45:71:c0:51: 11:6d:53:fa:17:04:13:18:aa:2d:0f:06:27:9a:3f:e0:21:22: 07:3d:b9:18:41:6d:22:eb:3b:c7:10:8b:28:2c:4d:6c:3c:2f: 56:12:2c:81:ef:6e:5c:d5:de:ca:e5:93:f6:09:6d:43:a4:e9: f9:c8:56:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweiexDRonS1PmG5PsWoIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NDQwNzhiNDA3NzJiMTcyYzcwNDZlNzQ0NjIwNDk4MGNl YWUxMzkwHhcNMjUxMjE4MDgwMTEwWhcNMjUxMjE5MDgwMTEwWjAzMTEwLwYDVQQD Eyg4MTczMTg0NzcwM2FlNGQ5MzNiYzM3ZDE3MGI5MGQ5ZGUxY2Q2ZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fRnEqwKHKqMVebg39VD0MyH0mpx MlAsuj5OtCxwgSAaIfAfA3W0snwMV6cCoISvq4pmY7XntV8Qz7tQrJ5EejdRjsKw NvGumvM0OMXg1yvi1i+2tQ/vKFkpuS4baLFxqnRaMdswnj2eIKs1lcJNzvnJkyky cmossJpV2uavfVXB+eJjPf0iK40Ia+Gk2osebioZX3x7Nrk3eb+TnJAS2qb4zyLT Qfkg/GrJ6BZSzGkDceLGBn0Rb8WH+gPi1ETifdnc+KeNls+hOG9PBKO8WuJmY/EI eGd1iMZ0cg7ll9tonctVBhuSJpPpTpt5L5LhjtcGM0dTUiXCgRauC8ALVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFzGEdwOuTZM7w30XC5DZ3hzW9tMB8GA1UdIwQY MBaAFJlEB4tAdysXLHBG50RiBJgM6uE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wNDhkZjYtYmNjZC00ODg1LThmNDMt NGRjMjA3MWE1YmYxLzEvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wNDhkZjYtYmNjZC00ODg1LThmNDMtNGRjMjA3MWE1YmYx LzEvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAos51ZIHF NL4Okdrb7ZbbOyfLundC9hRjlJWvJX7QbMZEjj2tDJD1tJm585lxj64YcNHN0h4W 7GtM5SrukQX6XEYUjRyRrDBtYuKGCU9XBx7eUNRa5O/0Kucn8WeN/ZezeSPvrEuD Qu+2dA83yTA6s19X1JvZIdbqDzGsiMJMoTn3vPuGWfBt/zKwZhP88c9HAZ80gJUb TiOlrIOHdn9wMQ/BHWfpujpeYufZGIsHTUap5KTtAJfI1b5ikU4lAcWKbaNFccBR EW1T+hcEExiqLQ8GJ5o/4CEiBz25GEFtIus7xxCLKCxNbDwvVhIsge9uXNXeyuWT 9gltQ6Tp+chW0g== -----END CERTIFICATE-----Generated at Thu Dec 18 10:25:29 2025 by rpki-client