This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft File: muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft (raw, json) Hash identifier: u3bcr1dPkiSF2TIWRI+bkK1VeypMIBxUPi12uuYZ2TM= Subject key identifier: 4A:33:3F:80:0F:E1:C6:9C:65:E6:9E:BD:DA:F1:69:3B:4E:3B:03:8E Authority key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62 Certificate issuer: /CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62 Certificate serial: 019B53ABB3986D74A0F825E38D7304E82B19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft Manifest number: 0248 Signing time: Thu 25 Dec 2025 04:01:59 +0000 Manifest this update: Thu 25 Dec 2025 04:01:59 +0000 Manifest next update: Fri 26 Dec 2025 04:01:59 +0000 Files and hashes: 1: muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl (hash: HbwyEGE/ecUM4WUurYz0dmT/VPupHrrC5KsyVqmcSTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:b3:98:6d:74:a0:f8:25:e3:8d:73:04:e8:2b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62 Validity Not Before: Dec 25 04:01:59 2025 GMT Not After : Dec 26 04:01:59 2025 GMT Subject: CN=4a333f800fe1c69c65e69ebddaf1693b4e3b038e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:ff:18:90:39:bc:87:13:57:e0:1a:59:d4: 3e:74:d2:ce:61:f0:14:c3:54:dd:4b:ba:b7:4e:bc: 94:18:c1:a9:19:4b:e2:6f:4a:18:91:e0:0d:15:c2: cd:c8:85:d2:a2:41:18:fa:ee:a9:41:59:d6:b4:a8: ac:bc:e8:a2:0d:5d:ce:12:dd:c4:e6:56:75:ae:c0: a2:f0:76:1e:40:d1:17:2b:fc:5d:c0:80:96:97:db: 1f:25:6e:27:b6:2c:28:db:2b:29:12:97:a8:ba:dd: 09:61:b1:4b:df:95:af:48:62:46:d9:91:25:95:9b: ec:87:fa:7f:b0:97:8e:34:29:1f:11:94:73:04:d4: ee:06:77:f9:0a:b4:06:b7:25:60:5a:06:d5:7a:50: b8:1d:41:b1:db:09:a3:ca:65:92:71:38:9a:ba:3b: 4f:48:5c:eb:e8:7e:98:95:18:01:0c:55:d2:d0:e7: 44:e1:ae:49:76:30:b0:49:d6:e8:77:22:5b:6d:77: a4:ac:6e:40:be:ab:76:02:bc:d8:8b:4e:87:99:64: dd:86:48:6b:44:f9:8c:85:48:27:4a:ab:fe:01:5e: 71:f6:1b:64:00:5c:04:5a:d1:99:09:f6:e8:4b:92: f2:2c:4c:ff:5d:cc:cf:2c:fa:25:cb:95:41:2a:0b: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:33:3F:80:0F:E1:C6:9C:65:E6:9E:BD:DA:F1:69:3B:4E:3B:03:8E X509v3 Authority Key Identifier: keyid:9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e3:a0:a0:0e:b9:cb:ca:42:cd:c3:45:32:be:7a:9a:13:ac: ed:7a:16:31:c0:98:7e:6e:1e:64:bb:39:ab:a7:72:8c:20:48: 80:4f:69:f8:56:ef:90:72:72:d8:1a:8f:cf:82:b4:0c:67:2e: 5a:ad:65:e7:b0:87:77:74:16:3c:86:db:d8:29:da:c2:29:9f: 16:07:92:65:4f:73:95:2c:c8:22:02:b8:27:16:9e:b5:8c:de: b6:57:4d:00:b6:93:c2:e1:41:fe:bf:3b:da:2f:9c:5f:3d:06: 0b:b6:79:e8:21:ea:74:0c:86:a0:55:6a:f5:bf:e2:f2:fe:18: f1:2f:6b:d6:40:ee:01:4d:16:18:26:cd:c5:af:be:6b:0e:99: b8:4e:4c:87:69:fa:15:50:23:dd:20:a9:e9:4a:4b:8e:c6:5b: bb:4e:28:a8:cf:54:fe:6d:f8:0b:dc:25:e6:8f:1f:8e:fb:12: 68:db:41:0a:3f:33:96:27:8d:3a:9d:ed:be:79:a2:2c:0d:0d: f2:13:87:4d:27:97:9d:ad:97:b4:ed:8d:b1:d0:9d:c0:2f:f9: 4a:04:8e:be:97:04:c0:2d:e6:d2:a3:39:f0:02:39:c4:e9:bb: cb:e4:3c:83:21:63:c1:91:b2:c7:f8:0d:14:a9:01:27:0f:a1: 29:bb:45:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq7OYbXSg+CXjjXME6CsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTAwODE1ZDJiZDA0MWRjYzBlY2UwNjc2NTZiZTVlNmVi MTJiNjIwHhcNMjUxMjI1MDQwMTU5WhcNMjUxMjI2MDQwMTU5WjAzMTEwLwYDVQQD Eyg0YTMzM2Y4MDBmZTFjNjljNjVlNjllYmRkYWYxNjkzYjRlM2IwMzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9P/GJA5vIcTV+AaWdQ+dNLOYfAU w1TdS7q3TryUGMGpGUvib0oYkeANFcLNyIXSokEY+u6pQVnWtKisvOiiDV3OEt3E 5lZ1rsCi8HYeQNEXK/xdwICWl9sfJW4ntiwo2yspEpeout0JYbFL35WvSGJG2ZEl lZvsh/p/sJeONCkfEZRzBNTuBnf5CrQGtyVgWgbVelC4HUGx2wmjymWScTiaujtP SFzr6H6YlRgBDFXS0OdE4a5JdjCwSdbodyJbbXekrG5Avqt2ArzYi06HmWTdhkhr RPmMhUgnSqv+AV5x9htkAFwEWtGZCfboS5LyLEz/XczPLPoly5VBKguSeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEozP4AP4cacZeaevdrxaTtOOwOOMB8GA1UdIwQY MBaAFJrgCBXSvQQdzA7OBnZWvl5usStiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MDQxNWItNTk2Yy00ODBkLThiZTIt ZjQ4NTFkYTg3NjNkLzEvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80MDQxNWItNTk2Yy00ODBkLThiZTItZjQ4NTFkYTg3NjNk LzEvbXVBSUZkSzlCQjNNRHM0R2RsYS1YbTZ4SzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceOgoA65 y8pCzcNFMr56mhOs7XoWMcCYfm4eZLs5q6dyjCBIgE9p+FbvkHJy2BqPz4K0DGcu Wq1l57CHd3QWPIbb2CnawimfFgeSZU9zlSzIIgK4JxaetYzetldNALaTwuFB/r87 2i+cXz0GC7Z56CHqdAyGoFVq9b/i8v4Y8S9r1kDuAU0WGCbNxa++aw6ZuE5Mh2n6 FVAj3SCp6UpLjsZbu04oqM9U/m34C9wl5o8fjvsSaNtBCj8zlieNOp3tvnmiLA0N 8hOHTSeXna2XtO2NsdCdwC/5SgSOvpcEwC3m0qM58AI5xOm7y+Q8gyFjwZGyx/gN FKkBJw+hKbtFGQ== -----END CERTIFICATE-----Generated at Thu Dec 25 13:06:22 2025 by rpki-client