This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft File: MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json) Hash identifier: 9z7JHdg92RnVsJPxaHMCFM4aLduV0q+JZAhmnUS4G30= Subject key identifier: E8:C4:28:63:07:12:59:77:8F:5B:0A:30:71:DE:0E:72:EE:C3:0A:C7 Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC Certificate issuer: /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc Certificate serial: 019B5D529D98FD55CC3A2A5F8DC347C6B22C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 01:00:53 +0000 Manifest this update: Sat 27 Dec 2025 01:00:53 +0000 Manifest next update: Sun 28 Dec 2025 01:00:53 +0000 Files and hashes: 1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: dms6wefJZEijdY2qQF/1B1/0ryGXFCnpCCT321Cklz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:9d:98:fd:55:cc:3a:2a:5f:8d:c3:47:c6:b2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc Validity Not Before: Dec 27 01:00:53 2025 GMT Not After : Dec 28 01:00:53 2025 GMT Subject: CN=e8c42863071259778f5b0a3071de0e72eec30ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:85:a7:83:be:87:92:d1:15:0e:4d:a4:b9: 4f:d5:da:9e:16:29:da:3a:e9:8b:ab:c6:37:f0:7f: 3a:06:b5:2d:b1:51:f5:40:7e:6c:c0:1e:25:24:95: 80:17:1a:27:e3:6f:b2:59:cf:09:aa:24:e8:96:da: c9:9c:88:39:84:90:a6:f1:8a:37:9d:71:e9:84:7c: c3:94:61:f3:94:97:6e:55:33:c4:46:d4:3e:18:6e: fc:53:2c:63:48:01:53:95:a7:c0:fc:67:ef:55:8c: 0e:e2:be:c6:f1:4b:a0:37:ec:b9:35:7b:7b:5c:66: cc:27:c3:6c:c8:8d:e3:23:86:15:9a:6b:0c:91:90: 59:4b:ab:7d:45:e7:0c:1f:72:6d:67:ea:3a:80:87: a9:fc:c6:01:74:7a:72:10:3f:17:3c:f9:51:19:ae: cd:63:27:eb:18:34:10:74:6d:40:1c:29:3d:87:0f: 63:ed:87:62:86:06:b8:7c:c9:78:2a:8b:23:41:5c: 88:0e:4f:da:56:90:87:c9:bd:03:15:38:43:81:9c: 73:86:44:f4:17:35:11:92:0c:6b:9c:d5:91:52:4b: 34:71:15:4f:fc:50:a3:ca:2d:36:dc:ee:92:3a:4c: 68:19:75:36:61:5d:ed:b2:89:40:da:90:ed:95:69: 03:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C4:28:63:07:12:59:77:8F:5B:0A:30:71:DE:0E:72:EE:C3:0A:C7 X509v3 Authority Key Identifier: keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:cf:16:a3:8e:70:82:db:06:cd:b5:bc:4f:b0:d3:ae:f4:6f: 76:96:66:3e:ff:d3:72:ec:b0:9d:fe:e7:a8:e6:db:d0:b3:2b: 92:f3:ed:28:38:b5:46:5d:19:08:2b:cb:27:08:49:01:85:76: 0a:c5:b9:41:8d:13:2e:64:7d:43:26:3e:87:63:94:cb:f3:cf: 06:30:5c:f7:83:65:ee:4d:4c:8f:ca:4d:f5:12:c7:f8:fb:e1: 14:15:c7:63:0f:08:24:62:81:d8:51:3e:71:64:fe:72:28:4f: 47:fb:49:af:c2:13:84:ed:8f:f7:91:83:1c:68:e0:ed:59:7f: d1:16:08:36:98:b5:74:d0:85:51:c3:ee:49:18:6d:59:7d:3e: 43:3e:e8:85:66:57:83:e8:2b:9c:c7:8a:c6:1b:03:b4:3f:41: d2:d6:73:39:0e:9f:af:e5:c5:e0:01:ce:e0:a9:e9:4f:08:5b: 19:b0:65:7e:3d:38:88:1c:f4:b8:d9:e0:ee:2a:e1:29:a7:f0: cb:c2:31:db:28:58:59:41:59:c8:82:b2:ed:7d:7d:a4:7d:9b: 93:40:b4:b6:8a:16:0b:24:62:54:d4:ab:2e:fd:19:38:97:07: b4:81:75:af:80:04:6a:53:4f:0b:e8:aa:f4:21:39:49:c6:40: 67:23:16:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUp2Y/VXMOipfjcNHxrIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwY2JiNGVhODU3ZjdiMmEyNTkwMmVlMDdhYWUyZTcxMjJk Y2Q1Y2MwHhcNMjUxMjI3MDEwMDUzWhcNMjUxMjI4MDEwMDUzWjAzMTEwLwYDVQQD EyhlOGM0Mjg2MzA3MTI1OTc3OGY1YjBhMzA3MWRlMGU3MmVlYzMwYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApViFp4O+h5LRFQ5NpLlP1dqeFina OumLq8Y38H86BrUtsVH1QH5swB4lJJWAFxon42+yWc8JqiToltrJnIg5hJCm8Yo3 nXHphHzDlGHzlJduVTPERtQ+GG78UyxjSAFTlafA/GfvVYwO4r7G8UugN+y5NXt7 XGbMJ8NsyI3jI4YVmmsMkZBZS6t9RecMH3JtZ+o6gIep/MYBdHpyED8XPPlRGa7N YyfrGDQQdG1AHCk9hw9j7Ydihga4fMl4KosjQVyIDk/aVpCHyb0DFThDgZxzhkT0 FzURkgxrnNWRUks0cRVP/FCjyi023O6SOkxoGXU2YV3tsolA2pDtlWkDcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjEKGMHEll3j1sKMHHeDnLuwwrHMB8GA1UdIwQY MBaAFDDLtOqFf3sqJZAu4HquLnEi3NXMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU11MDZvVl9leW9sa0M3Z2VxNHVjU0xjMWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMGFiNjctMzJjNC00NzJkLTkyNjgt Y2ZjZDc2NjI4M2E3LzEvTU11MDZvVl9leW9sa0M3Z2VxNHVjU0xjMWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8wMGFiNjctMzJjNC00NzJkLTkyNjgtY2ZjZDc2NjI4M2E3 LzEvTU11MDZvVl9leW9sa0M3Z2VxNHVjU0xjMWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPc8Wo45w gtsGzbW8T7DTrvRvdpZmPv/Tcuywnf7nqObb0LMrkvPtKDi1Rl0ZCCvLJwhJAYV2 CsW5QY0TLmR9QyY+h2OUy/PPBjBc94Nl7k1Mj8pN9RLH+PvhFBXHYw8IJGKB2FE+ cWT+cihPR/tJr8IThO2P95GDHGjg7Vl/0RYINpi1dNCFUcPuSRhtWX0+Qz7ohWZX g+grnMeKxhsDtD9B0tZzOQ6fr+XF4AHO4KnpTwhbGbBlfj04iBz0uNng7irhKafw y8Ix2yhYWUFZyIKy7X19pH2bk0C0tooWCyRiVNSrLv0ZOJcHtIF1r4AEalNPC+iq 9CE5ScZAZyMWKg== -----END CERTIFICATE-----Generated at Sat Dec 27 02:49:13 2025 by rpki-client