This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json) Hash identifier: X7dh9eaI9j2mT4qKhhY8I4C9S9J2Q2yNJzWM/8LEhPM= Subject key identifier: 95:4C:78:4B:DB:DF:D7:78:72:D6:ED:96:38:D9:AC:A3:FC:49:D9:70 Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39 Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839 Certificate serial: 019B6E4665590A164064F54C2AAFFC445CDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 08:01:05 +0000 Manifest this update: Tue 30 Dec 2025 08:01:05 +0000 Manifest next update: Wed 31 Dec 2025 08:01:05 +0000 Files and hashes: 1: muOJscw5niFvztjTnsPuifwguDk.crl (hash: laRqBnilnuUal7jjQZwfnuHq3tAaAUyRnnn2Em0UkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:46:65:59:0a:16:40:64:f5:4c:2a:af:fc:44:5c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839 Validity Not Before: Dec 30 08:01:05 2025 GMT Not After : Dec 31 08:01:05 2025 GMT Subject: CN=954c784bdbdfd77872d6ed9638d9aca3fc49d970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:17:02:f2:c6:61:56:46:0a:aa:32:18:ac: 49:96:c4:4f:b1:bc:7c:8b:95:c4:8a:66:ce:e0:70: 1f:9c:b2:51:06:30:4f:8c:42:a6:46:18:17:68:9d: ab:6c:22:98:78:8e:1f:36:a9:62:93:4f:cd:a5:66: ee:46:be:80:8e:8f:56:6f:4a:31:1a:1b:cd:40:b7: d2:ba:42:c9:86:39:c5:4e:47:fb:30:1e:ca:50:84: 50:83:2e:53:49:a1:34:cd:d4:71:ae:54:33:21:c1: 2c:e6:7c:29:42:38:f3:46:ea:92:ac:47:c8:b5:60: 15:21:83:fa:1c:67:e4:32:d7:a7:a1:19:61:ea:eb: d4:8b:e5:83:e2:ad:cd:db:5b:1f:6b:00:4f:a7:7b: 68:74:12:54:4a:a3:a9:e5:2f:3a:0a:57:3d:7c:6e: e9:dd:10:41:af:9f:83:ed:3e:9b:c0:91:bb:27:6d: ab:f6:98:2b:b3:63:72:26:f4:e1:2b:c2:f0:48:8c: af:ed:b1:76:ef:fb:c9:64:b3:d0:2b:fb:9a:3a:2b: e5:70:df:0f:b7:29:fe:95:e9:90:47:23:56:4f:26: d1:7a:62:5d:c0:4c:98:1a:b0:63:80:91:0f:b0:f4: 16:42:cd:0a:31:cd:8e:85:fe:ea:6a:4e:2a:c8:4b: 05:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4C:78:4B:DB:DF:D7:78:72:D6:ED:96:38:D9:AC:A3:FC:49:D9:70 X509v3 Authority Key Identifier: keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:af:d3:11:10:b4:55:60:36:e6:20:c1:1e:11:32:30:bb:54: 35:bb:e1:30:6c:2c:c7:f7:ff:62:b8:e6:f8:fd:00:0f:1b:b9: 6c:1a:98:6c:70:69:7c:f1:f9:d6:92:71:03:a2:73:ec:65:ed: 75:b4:05:48:6d:f7:fb:04:19:1c:53:c7:41:96:81:3a:af:cc: 1f:b4:2d:0d:3a:20:bd:53:3b:1a:ec:1b:db:77:8a:d5:06:bf: 7e:f4:c6:8b:9e:ab:d2:3e:23:a8:21:7f:04:bf:a7:17:04:f6: 21:be:5d:f5:bf:de:db:e2:4d:f8:bf:5a:b5:e0:5c:67:dd:05: 66:42:18:55:cc:5d:93:53:24:1f:17:37:50:e3:23:fb:1a:5a: a1:72:29:77:ea:d1:c2:73:25:16:d9:81:fd:4c:8c:f4:f1:21: be:03:58:78:d1:c6:98:f9:5d:54:7e:8f:18:33:e5:b2:ca:65: 3b:c8:6c:e4:9b:ca:3f:df:ee:f4:60:51:a3:ef:c9:72:ef:9d: 9d:0a:7e:9c:3a:89:4b:a6:8f:fc:c1:d2:86:f8:23:64:ca:8f: b7:a6:3e:62:16:45:58:53:b0:93:e7:e2:23:6f:61:cf:f6:78: 29:3c:4b:9d:ce:79:a9:6d:87:fc:b3:81:05:7e:0d:4b:f1:40: f9:7f:f1:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuRmVZChZAZPVMKq/8RFzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTM4OWIxY2MzOTllMjE2ZmNlZDhkMzllYzNlZTg5ZmMy MGI4MzkwHhcNMjUxMjMwMDgwMTA1WhcNMjUxMjMxMDgwMTA1WjAzMTEwLwYDVQQD Eyg5NTRjNzg0YmRiZGZkNzc4NzJkNmVkOTYzOGQ5YWNhM2ZjNDlkOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+IXAvLGYVZGCqoyGKxJlsRPsbx8 i5XEimbO4HAfnLJRBjBPjEKmRhgXaJ2rbCKYeI4fNqlik0/NpWbuRr6Ajo9Wb0ox GhvNQLfSukLJhjnFTkf7MB7KUIRQgy5TSaE0zdRxrlQzIcEs5nwpQjjzRuqSrEfI tWAVIYP6HGfkMtenoRlh6uvUi+WD4q3N21sfawBPp3todBJUSqOp5S86Clc9fG7p 3RBBr5+D7T6bwJG7J22r9pgrs2NyJvThK8LwSIyv7bF27/vJZLPQK/uaOivlcN8P tyn+lemQRyNWTybRemJdwEyYGrBjgJEPsPQWQs0KMc2Ohf7qak4qyEsFLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVMeEvb39d4ctbtljjZrKP8SdlwMB8GA1UdIwQY MBaAFJrjibHMOZ4hb87Y057D7on8ILg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgt Mzg5ZjkyMTk1YmViLzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDVhOWItYjIxZS00MjFlLWJjZTgtMzg5ZjkyMTk1YmVi LzEvbXVPSnNjdzVuaUZ2enRqVG5zUHVpZndndURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa/TERC0 VWA25iDBHhEyMLtUNbvhMGwsx/f/Yrjm+P0ADxu5bBqYbHBpfPH51pJxA6Jz7GXt dbQFSG33+wQZHFPHQZaBOq/MH7QtDTogvVM7Guwb23eK1Qa/fvTGi56r0j4jqCF/ BL+nFwT2Ib5d9b/e2+JN+L9ateBcZ90FZkIYVcxdk1MkHxc3UOMj+xpaoXIpd+rR wnMlFtmB/UyM9PEhvgNYeNHGmPldVH6PGDPlssplO8hs5JvKP9/u9GBRo+/Jcu+d nQp+nDqJS6aP/MHShvgjZMqPt6Y+YhZFWFOwk+fiI29hz/Z4KTxLnc55qW2H/LOB BX4NS/FA+X/x5A== -----END CERTIFICATE-----Generated at Tue Dec 30 10:34:31 2025 by rpki-client