This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json) Hash identifier: T9sEjADCkdwQmUmftzXmUfWz4ljS8hHJJzI7vtz+1ik= Subject key identifier: AA:4F:7E:90:E5:7B:78:9E:9E:5E:56:DF:48:5A:C1:65:86:43:72:80 Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd Certificate serial: 019B2F67BF702E6E2AA62F22FB512C932C1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft Manifest number: 125B Signing time: Thu 18 Dec 2025 03:01:26 +0000 Manifest this update: Thu 18 Dec 2025 03:01:26 +0000 Manifest next update: Fri 19 Dec 2025 03:01:26 +0000 Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=) 2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: vQx5yDvu4YJ96CG8zZtdvIWtVSFmFW98FGCHQEgWLS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:bf:70:2e:6e:2a:a6:2f:22:fb:51:2c:93:2c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd Validity Not Before: Dec 18 03:01:26 2025 GMT Not After : Dec 19 03:01:26 2025 GMT Subject: CN=aa4f7e90e57b789e9e5e56df485ac16586437280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:1b:84:2a:01:ec:7f:23:b4:a2:97:7a:fc: 76:93:3c:51:ad:6e:ed:e1:52:34:57:6b:70:ea:82: 4e:98:6d:5c:22:09:18:7a:d8:ad:f9:b2:9b:f9:6c: 28:e9:79:11:ad:91:65:06:8b:02:3b:59:e5:65:c4: 67:8d:4c:14:09:ad:2b:1c:fa:fe:15:9e:81:16:d7: bd:a3:73:6f:e1:5e:e7:c1:1f:e4:dc:8e:7e:11:4e: 29:41:bb:5b:34:fe:a1:14:59:ef:22:c2:5a:dd:72: ee:2a:e1:b6:dd:67:bc:f6:82:dd:a6:eb:b9:e9:bd: d0:48:96:d2:87:ad:d6:85:a1:96:c3:f1:1e:be:ff: fa:52:e8:7c:68:ac:b9:ce:9c:36:66:09:31:16:ac: b5:04:57:da:20:4e:27:62:bc:fc:2f:18:c4:fc:5e: aa:8c:bf:49:14:9f:ac:5f:05:c7:8e:5d:4e:6b:35: 9d:56:b5:3b:a9:1c:67:6f:8a:87:61:47:82:fa:1e: 95:6f:70:79:2c:f6:3c:07:44:70:2f:8e:66:c8:b6: c4:b5:c5:88:c4:fb:09:e3:61:17:35:58:7e:92:db: 11:71:32:0a:c8:5c:66:ab:8d:41:bf:a6:85:59:06: d7:59:bd:66:c1:2e:a0:bb:50:27:e7:90:55:f3:93: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4F:7E:90:E5:7B:78:9E:9E:5E:56:DF:48:5A:C1:65:86:43:72:80 X509v3 Authority Key Identifier: keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ba:d5:de:5a:15:ae:69:08:68:d4:6f:b6:4d:b8:9c:36:5c: a8:12:7f:dc:9d:f7:e6:b4:7a:a4:cf:1d:a5:d7:51:46:7a:5d: e9:9e:c1:ac:c4:ed:3b:02:80:4a:f8:d2:6c:4d:08:67:96:d2: a0:13:91:35:23:2f:f3:80:c2:3f:07:84:ae:ed:55:73:e5:7b: f5:fb:e3:99:1f:7a:84:66:d9:fa:9f:d1:0e:03:61:d5:74:cf: 9e:0a:c7:5a:38:35:06:ec:09:8b:cb:dc:c1:b4:49:43:23:7d: f8:59:7a:bf:0a:d7:32:39:b8:c0:03:b2:92:62:32:b1:13:d9: 30:d2:46:2e:42:d2:dd:37:f1:b6:5a:0e:3e:50:cd:e0:1f:27: 3c:bd:39:9e:2d:4d:b7:58:ec:0c:ad:1c:71:f5:3a:be:f0:65: 6d:b8:8a:9f:9a:2c:5a:12:78:d8:b5:5b:67:eb:3b:69:49:86: 21:e0:bb:28:04:dd:6c:fe:d8:36:37:8b:11:06:e7:e7:e2:83: 41:32:12:be:58:98:b2:41:ba:2f:d4:f2:84:b5:24:b6:1c:55: 96:dd:11:6b:32:a4:1e:93:f2:37:b6:91:2f:d4:81:c8:fc:5e: e1:ee:1c:ef:e3:74:58:9f:2d:78:9c:40:2e:cc:2c:0f:d0:7f: 25:83:4f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ79wLm4qpi8i+1EskywcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZTY1ODUxNWIxZTZhNzJiOTlmMzMyNjY5ZTA2OWU2MTU0 ZjcwZGQwHhcNMjUxMjE4MDMwMTI2WhcNMjUxMjE5MDMwMTI2WjAzMTEwLwYDVQQD EyhhYTRmN2U5MGU1N2I3ODllOWU1ZTU2ZGY0ODVhYzE2NTg2NDM3MjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsswbhCoB7H8jtKKXevx2kzxRrW7t 4VI0V2tw6oJOmG1cIgkYetit+bKb+Wwo6XkRrZFlBosCO1nlZcRnjUwUCa0rHPr+ FZ6BFte9o3Nv4V7nwR/k3I5+EU4pQbtbNP6hFFnvIsJa3XLuKuG23We89oLdpuu5 6b3QSJbSh63WhaGWw/Eevv/6Uuh8aKy5zpw2ZgkxFqy1BFfaIE4nYrz8LxjE/F6q jL9JFJ+sXwXHjl1OazWdVrU7qRxnb4qHYUeC+h6Vb3B5LPY8B0RwL45myLbEtcWI xPsJ42EXNVh+ktsRcTIKyFxmq41Bv6aFWQbXWb1mwS6gu1An55BV85OptwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpPfpDle3ienl5W30hawWWGQ3KAMB8GA1UdIwQY MBaAFDLmWFFbHmpyuZ8zJmngaeYVT3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzIt NjdmOGU3ZDExMzdjLzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzItNjdmOGU3ZDExMzdj LzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLrV3loV rmkIaNRvtk24nDZcqBJ/3J335rR6pM8dpddRRnpd6Z7BrMTtOwKASvjSbE0IZ5bS oBORNSMv84DCPweEru1Vc+V79fvjmR96hGbZ+p/RDgNh1XTPngrHWjg1BuwJi8vc wbRJQyN9+Fl6vwrXMjm4wAOykmIysRPZMNJGLkLS3TfxtloOPlDN4B8nPL05ni1N t1jsDK0ccfU6vvBlbbiKn5osWhJ42LVbZ+s7aUmGIeC7KATdbP7YNjeLEQbn5+KD QTISvliYskG6L9TyhLUkthxVlt0RazKkHpPyN7aRL9SByPxe4e4c7+N0WJ8teJxA LswsD9B/JYNP3A== -----END CERTIFICATE-----Generated at Thu Dec 18 11:57:58 2025 by rpki-client