This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft File: muVOVVW5meWct0g6YG1rJMv2GYw.mft (raw, json) Hash identifier: JcaEvI3GtvHdMlwl7kCddumW+/Vn2RGSge18tNrbIbQ= Subject key identifier: A6:A5:A7:BF:8A:ED:20:0C:6B:2F:52:AE:A0:1A:E4:9B:51:92:E4:86 Authority key identifier: 9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C Certificate issuer: /CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c Certificate serial: 019B51F38454F30EABD6210D4E2817308C4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft Manifest number: 0265 Signing time: Wed 24 Dec 2025 20:01:12 +0000 Manifest this update: Wed 24 Dec 2025 20:01:12 +0000 Manifest next update: Thu 25 Dec 2025 20:01:12 +0000 Files and hashes: 1: muVOVVW5meWct0g6YG1rJMv2GYw.crl (hash: faquGV7ZQ7RtfQb0Sxi9ZMFs5Lv3OiUd2i7m29alhKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:84:54:f3:0e:ab:d6:21:0d:4e:28:17:30:8c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c Validity Not Before: Dec 24 20:01:12 2025 GMT Not After : Dec 25 20:01:12 2025 GMT Subject: CN=a6a5a7bf8aed200c6b2f52aea01ae49b5192e486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:25:fa:46:f3:00:84:05:16:a4:9e:29:72: 46:c1:10:8a:66:1a:88:bb:27:ec:07:4c:fb:a3:2c: 1a:23:80:95:18:af:91:44:c6:43:59:fa:bb:6b:0f: c6:97:3a:a1:93:80:8a:43:03:11:a2:5a:91:a2:20: c3:b5:df:3b:7b:3d:b6:86:a7:4b:fe:1e:23:49:d9: 6c:d3:bf:9e:bb:a0:a7:9e:e6:ab:e4:c0:69:21:b6: 5e:c4:76:0a:8c:e8:c0:c4:0d:59:bd:8a:f7:21:40: 63:ce:ec:58:02:0a:d8:b9:b5:ba:7d:68:93:8c:3f: 32:bf:19:cc:86:63:be:f8:8f:34:58:19:b9:3d:61: 27:dc:34:57:0c:a9:ab:e3:42:c5:15:4e:fb:e0:e3: 02:92:39:e1:b8:46:e8:52:b9:0b:e5:1c:65:72:b8: 63:8a:96:a1:7d:62:f8:20:09:98:7e:c2:64:b4:b8: 7e:0e:6a:59:00:07:76:04:61:05:df:ee:26:92:2b: 82:7d:be:59:72:c3:65:b2:e8:81:3d:04:55:1f:c8: 4d:a3:5d:bf:50:85:35:b9:e6:46:28:c0:ff:a3:04: 2c:d9:07:a3:66:34:26:11:1a:c9:b9:56:7e:56:75: 52:84:96:16:34:fa:d0:dc:6c:78:c4:93:60:dc:25: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A5:A7:BF:8A:ED:20:0C:6B:2F:52:AE:A0:1A:E4:9B:51:92:E4:86 X509v3 Authority Key Identifier: keyid:9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:32:d7:b7:1e:00:68:37:dc:59:af:8b:f6:4e:9e:f4:48:f8: 52:aa:52:7d:13:05:89:68:b0:eb:3c:37:b2:76:8b:79:d3:48: ef:f1:43:e4:05:4f:0f:c6:3d:6b:9e:00:a0:35:1a:92:e0:02: 9a:01:40:dd:6e:37:61:42:2b:1e:38:32:b5:55:bd:5b:71:c7: dd:21:ee:94:68:b5:eb:59:c8:64:e6:4e:b9:a4:1b:a9:60:b6: 0d:38:e9:63:e4:d1:26:db:73:01:f5:b8:eb:f5:25:c0:6e:c4: c4:53:38:ec:3e:90:f8:2c:f4:b3:81:c1:7c:5f:92:d4:e8:52: b6:75:c4:6c:72:2d:7f:98:df:e2:34:86:e7:23:c1:c5:1b:69: fe:68:c5:57:dc:0b:0a:63:88:c0:1e:d0:92:f8:ce:13:fd:a6: 84:27:43:b2:8d:0c:b2:1e:b0:73:90:44:31:4c:22:b9:d3:30: 65:8a:d8:d8:d5:91:1b:ff:69:e6:c9:fc:e2:fe:00:68:ad:93: 43:94:15:aa:b1:98:67:37:aa:18:f6:14:8f:ea:8f:9b:8e:4e: 5a:d3:f2:cb:70:16:cf:24:04:d3:f8:0d:51:94:e5:13:76:a1: 23:3f:27:30:25:c4:48:32:c5:20:87:2c:0e:c9:32:7a:d0:2a: 0f:ee:4b:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR84RU8w6r1iENTigXMIxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTU0ZTU1NTViOTk5ZTU5Y2I3NDgzYTYwNmQ2YjI0Y2Jm NjE5OGMwHhcNMjUxMjI0MjAwMTEyWhcNMjUxMjI1MjAwMTEyWjAzMTEwLwYDVQQD EyhhNmE1YTdiZjhhZWQyMDBjNmIyZjUyYWVhMDFhZTQ5YjUxOTJlNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPcl+kbzAIQFFqSeKXJGwRCKZhqI uyfsB0z7oywaI4CVGK+RRMZDWfq7aw/Glzqhk4CKQwMRolqRoiDDtd87ez22hqdL /h4jSdls07+eu6Cnnuar5MBpIbZexHYKjOjAxA1ZvYr3IUBjzuxYAgrYubW6fWiT jD8yvxnMhmO++I80WBm5PWEn3DRXDKmr40LFFU774OMCkjnhuEboUrkL5Rxlcrhj ipahfWL4IAmYfsJktLh+DmpZAAd2BGEF3+4mkiuCfb5ZcsNlsuiBPQRVH8hNo12/ UIU1ueZGKMD/owQs2QejZjQmERrJuVZ+VnVShJYWNPrQ3Gx4xJNg3CU+3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKalp7+K7SAMay9SrqAa5JtRkuSGMB8GA1UdIwQY MBaAFJrlTlVVuZnlnLdIOmBtayTL9hmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVWT1ZWVzVtZVdjdDBnNllHMXJKTXYyR1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81ODRhNmEtZWE4Mi00ZjQzLTk3ODYt M2E0ZDQ0OTU2ZGQ0LzEvbXVWT1ZWVzVtZVdjdDBnNllHMXJKTXYyR1l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81ODRhNmEtZWE4Mi00ZjQzLTk3ODYtM2E0ZDQ0OTU2ZGQ0 LzEvbXVWT1ZWVzVtZVdjdDBnNllHMXJKTXYyR1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDLXtx4A aDfcWa+L9k6e9Ej4UqpSfRMFiWiw6zw3snaLedNI7/FD5AVPD8Y9a54AoDUakuAC mgFA3W43YUIrHjgytVW9W3HH3SHulGi161nIZOZOuaQbqWC2DTjpY+TRJttzAfW4 6/UlwG7ExFM47D6Q+Cz0s4HBfF+S1OhStnXEbHItf5jf4jSG5yPBxRtp/mjFV9wL CmOIwB7QkvjOE/2mhCdDso0Msh6wc5BEMUwiudMwZYrY2NWRG/9p5sn84v4AaK2T Q5QVqrGYZzeqGPYUj+qPm45OWtPyy3AWzyQE0/gNUZTlE3ahIz8nMCXESDLFIIcs DskyetAqD+5L1w== -----END CERTIFICATE-----Generated at Thu Dec 25 03:36:54 2025 by rpki-client