This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json) Hash identifier: ASay7ezwcPnd90mVb2Huq7Dix0429gC2Gz7XvUm4PKs= Subject key identifier: 2D:66:9F:92:C7:4E:17:AB:84:78:C5:49:C4:AA:C8:DB:92:CB:D3:C9 Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd Certificate serial: 019B390F66092CA54358D3F65A61BABF1A39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft Manifest number: 1260 Signing time: Sat 20 Dec 2025 00:01:09 +0000 Manifest this update: Sat 20 Dec 2025 00:01:09 +0000 Manifest next update: Sun 21 Dec 2025 00:01:09 +0000 Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=) 2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: nC7vVPtIKtEOzm8ACWaZkHPPEL/1joDD2xdmTFkf67s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:66:09:2c:a5:43:58:d3:f6:5a:61:ba:bf:1a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd Validity Not Before: Dec 20 00:01:09 2025 GMT Not After : Dec 21 00:01:09 2025 GMT Subject: CN=2d669f92c74e17ab8478c549c4aac8db92cbd3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:51:21:f8:e8:e7:9a:33:22:20:2e:08:3c: 31:a2:d2:e1:ab:25:15:88:ee:e7:bf:10:ab:4f:50: 1e:61:df:8b:13:a4:c9:44:f7:9d:61:cf:40:6a:ce: b7:a6:8a:e1:2b:3d:c9:c2:6a:73:15:f8:28:31:8d: 1f:ab:fa:98:db:f0:39:3f:3f:ef:86:46:03:10:d1: b6:97:7f:2e:c6:65:4d:1f:00:e5:c6:8b:70:07:02: e9:10:9c:cf:7c:8d:16:39:3c:d9:f8:4b:13:ee:84: a5:3e:4f:36:05:64:e7:c2:43:8f:2f:72:7a:3d:ad: 06:53:4d:e4:46:0b:cb:be:14:48:7f:c9:43:b2:87: 31:32:4c:83:e9:8d:be:31:ca:19:fe:3f:35:a7:e1: 00:0d:09:b0:52:28:8b:3c:2d:21:b2:6b:8c:e0:89: 5d:5f:d9:59:f8:31:d1:13:5c:db:ed:cb:27:9f:ac: 3f:eb:35:52:fb:bc:65:c4:2b:7b:09:32:92:91:d2: fa:64:95:35:ac:25:9e:3e:dd:16:3f:a5:f8:d2:da: 45:24:c8:a9:0b:91:94:86:d5:2d:a4:c3:22:d3:25: e3:e0:6f:8f:83:2b:60:e8:50:13:ec:ec:a9:4e:d1: 02:d7:5c:90:37:ac:59:45:a2:ad:fa:30:a2:b3:42: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:66:9F:92:C7:4E:17:AB:84:78:C5:49:C4:AA:C8:DB:92:CB:D3:C9 X509v3 Authority Key Identifier: keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bd:a0:16:07:37:de:a8:c8:e0:77:9c:d4:9c:ef:2b:d2:f9: 47:a8:22:e3:dc:26:b9:19:a6:ad:bf:82:74:8a:7c:7f:cf:2f: 06:f3:f3:34:ee:b7:68:9b:11:36:9b:c6:13:b6:f8:e2:f5:63: 37:f2:8a:83:dd:1a:37:b4:06:b6:36:b2:00:2d:c4:21:57:97: 22:41:ea:83:d6:54:74:23:00:0a:bd:f0:b1:e4:ea:d5:7e:ed: 55:16:64:92:5b:7d:66:f7:d8:a9:63:b9:92:67:89:9d:53:a4: eb:be:79:79:f5:ce:82:9e:fb:2b:e7:34:19:11:4b:2d:7a:be: 2f:7d:c2:4c:29:6a:63:72:7c:bd:3c:29:2f:5b:22:1a:ed:27: e2:57:e8:10:e6:90:55:aa:f4:e8:a4:35:2b:6f:fd:81:ba:82: aa:40:ed:18:b6:23:57:6d:66:38:31:66:c3:c9:cc:bf:4d:c1: 15:ef:24:1a:dc:13:2d:1a:18:92:37:35:69:e9:e3:09:2c:ed: a1:8b:82:62:3a:eb:60:ac:c9:27:f0:ca:34:ec:e0:3c:1a:9f: a8:f3:99:da:25:3d:6a:55:7c:b7:2d:60:6a:56:09:72:a8:5a: f5:c0:68:0a:39:f4:7c:71:cc:2a:c4:1d:20:7a:f7:26:77:5f: dc:73:ca:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D2YJLKVDWNP2WmG6vxo5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZTY1ODUxNWIxZTZhNzJiOTlmMzMyNjY5ZTA2OWU2MTU0 ZjcwZGQwHhcNMjUxMjIwMDAwMTA5WhcNMjUxMjIxMDAwMTA5WjAzMTEwLwYDVQQD EygyZDY2OWY5MmM3NGUxN2FiODQ3OGM1NDljNGFhYzhkYjkyY2JkM2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYZRIfjo55ozIiAuCDwxotLhqyUV iO7nvxCrT1AeYd+LE6TJRPedYc9Aas63porhKz3JwmpzFfgoMY0fq/qY2/A5Pz/v hkYDENG2l38uxmVNHwDlxotwBwLpEJzPfI0WOTzZ+EsT7oSlPk82BWTnwkOPL3J6 Pa0GU03kRgvLvhRIf8lDsocxMkyD6Y2+McoZ/j81p+EADQmwUiiLPC0hsmuM4Ild X9lZ+DHRE1zb7csnn6w/6zVS+7xlxCt7CTKSkdL6ZJU1rCWePt0WP6X40tpFJMip C5GUhtUtpMMi0yXj4G+Pgytg6FAT7OypTtEC11yQN6xZRaKt+jCis0JkHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1mn5LHTherhHjFScSqyNuSy9PJMB8GA1UdIwQY MBaAFDLmWFFbHmpyuZ8zJmngaeYVT3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzIt NjdmOGU3ZDExMzdjLzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzItNjdmOGU3ZDExMzdj LzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJL2gFgc3 3qjI4Hec1JzvK9L5R6gi49wmuRmmrb+CdIp8f88vBvPzNO63aJsRNpvGE7b44vVj N/KKg90aN7QGtjayAC3EIVeXIkHqg9ZUdCMACr3wseTq1X7tVRZkklt9ZvfYqWO5 kmeJnVOk6755efXOgp77K+c0GRFLLXq+L33CTClqY3J8vTwpL1siGu0n4lfoEOaQ Var06KQ1K2/9gbqCqkDtGLYjV21mODFmw8nMv03BFe8kGtwTLRoYkjc1aenjCSzt oYuCYjrrYKzJJ/DKNOzgPBqfqPOZ2iU9alV8ty1galYJcqha9cBoCjn0fHHMKsQd IHr3Jndf3HPKqA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:39:18 2025 by rpki-client