This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft File: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json) Hash identifier: GPrUjDhBXrgXO5MzYVIZfiGxY6iuuYDGE1N1A87j9BA= Subject key identifier: 5A:35:22:3C:F0:D2:68:8D:80:25:C2:24:66:0C:63:68:67:68:EC:6B Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e Certificate serial: 019B51BCB7D628139CCC9E983CDD4324E788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft Manifest number: 13CE Signing time: Wed 24 Dec 2025 19:01:20 +0000 Manifest this update: Wed 24 Dec 2025 19:01:20 +0000 Manifest next update: Thu 25 Dec 2025 19:01:20 +0000 Files and hashes: 1: 1UnYoe8trzW_GgSpfZGfv_JmHSs.roa (hash: GL46oY9ft0jCbwWPIAjk8KgYcddvUrm4Q8zoPC/vajY=) 2: F7P27joXZG2fOKvUgJ2c9GRp2Fc.roa (hash: cui3T69juyxfuuKRDXOJBwPcUU7RywnAUmPOHsvMScE=) 3: LHjpAYfuBzZ_RF5-cYOqcdg5XWY.roa (hash: clT3oz7MTlFepMOgAgzqz4bDDX9luSGN1e4LPGs/Uas=) 4: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: rgYj1y85L2BAWtFglF97DRZBIuq26cEOHBBgaWDjcM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:b7:d6:28:13:9c:cc:9e:98:3c:dd:43:24:e7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e Validity Not Before: Dec 24 19:01:20 2025 GMT Not After : Dec 25 19:01:20 2025 GMT Subject: CN=5a35223cf0d2688d8025c224660c63686768ec6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:48:70:07:69:80:cc:f6:88:bf:59:54:d2: 2c:98:cd:64:13:3e:0d:6d:91:7c:3e:d1:a4:c3:13: 1a:df:70:33:db:4d:34:ee:69:ba:d2:15:08:dc:62: 04:89:ce:79:72:62:4e:ec:ee:2e:97:33:3e:e0:15: 6d:43:8a:18:96:cc:bc:73:0b:9f:b5:6f:5d:9c:03: ec:0e:7b:67:4d:37:48:10:c3:63:71:ff:62:25:23: 23:f4:42:a8:e2:45:ba:0d:b0:02:8a:2d:e5:30:63: 4a:72:8b:72:80:bc:f7:16:01:2e:53:f3:03:e5:d3: b3:2d:ae:9c:07:0a:fb:98:5f:ad:ea:70:ab:fd:04: 86:27:f3:df:6e:7b:b3:bc:63:a9:4e:df:68:71:45: 9b:46:84:bb:a9:1a:7b:4c:6e:c7:dc:84:ac:7c:1e: a1:0b:e9:3a:55:48:c6:29:ae:4e:46:90:d7:38:8f: 3d:c9:78:2e:6d:30:48:f8:71:b6:7f:b7:21:71:08: 3d:91:80:8c:79:03:69:87:d9:8e:8d:71:44:98:9b: ff:21:bd:89:74:4b:1c:c5:3d:cf:b5:a7:17:30:a1: 75:5b:b9:e3:8e:81:1a:ee:2f:2d:0a:cd:84:87:f9: de:e1:f4:da:47:18:11:85:a2:d2:35:8b:74:54:4d: 6b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:35:22:3C:F0:D2:68:8D:80:25:C2:24:66:0C:63:68:67:68:EC:6B X509v3 Authority Key Identifier: keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:62:9d:c6:34:b6:bb:8c:0a:ff:60:bc:46:77:03:48:0b:a6: aa:25:62:ca:00:d1:6f:a4:c6:ea:d1:e3:35:79:6d:55:3c:06: ae:a9:d2:e5:70:22:dd:dd:82:7f:2a:7f:0e:1c:25:e0:21:9b: 5e:dd:41:da:4e:8f:be:e8:50:b8:c0:c3:b9:66:a6:3d:f7:b6: 66:90:91:49:84:47:7e:b1:01:ad:af:4d:d7:31:f1:03:d0:0d: c2:00:ad:65:eb:26:31:75:35:a4:b8:9f:b7:2f:e7:72:af:12: 0b:3d:2f:16:2c:2c:22:74:c8:94:83:1c:b0:3d:b7:02:88:ed: 6b:72:64:fe:d2:b8:4a:e4:3c:ae:5b:db:0a:ab:0a:ab:bc:11: 9d:8f:c2:e7:bf:71:25:88:7a:e4:dc:99:58:3c:eb:00:0f:1c: 79:3f:0e:fe:d9:04:92:f9:13:22:62:db:44:e6:60:11:7a:72: 2c:cc:59:3c:2e:f9:e8:8c:80:73:d3:af:f3:79:f3:89:99:f4: f0:b0:a1:32:44:9f:78:20:12:f1:f2:22:3a:2c:70:1a:94:1a: 93:cf:26:26:96:e8:71:8f:81:4c:5b:be:dc:c6:49:77:50:e4: 0f:24:74:c2:73:bf:e8:86:56:42:0e:16:aa:3d:47:85:dd:cc: 51:b4:25:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvLfWKBOczJ6YPN1DJOeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZWQ2NzAwMmRjNzMwN2U4NTYzYjZlNDkzNGNjZDU3MjNh NDRmM2UwHhcNMjUxMjI0MTkwMTIwWhcNMjUxMjI1MTkwMTIwWjAzMTEwLwYDVQQD Eyg1YTM1MjIzY2YwZDI2ODhkODAyNWMyMjQ2NjBjNjM2ODY3NjhlYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxRIcAdpgMz2iL9ZVNIsmM1kEz4N bZF8PtGkwxMa33Az20007mm60hUI3GIEic55cmJO7O4ulzM+4BVtQ4oYlsy8cwuf tW9dnAPsDntnTTdIEMNjcf9iJSMj9EKo4kW6DbACii3lMGNKcotygLz3FgEuU/MD 5dOzLa6cBwr7mF+t6nCr/QSGJ/PfbnuzvGOpTt9ocUWbRoS7qRp7TG7H3ISsfB6h C+k6VUjGKa5ORpDXOI89yXgubTBI+HG2f7chcQg9kYCMeQNph9mOjXFEmJv/Ib2J dEscxT3PtacXMKF1W7njjoEa7i8tCs2Eh/ne4fTaRxgRhaLSNYt0VE1rXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFo1Ijzw0miNgCXCJGYMY2hnaOxrMB8GA1UdIwQY MBaAFDLtZwAtxzB+hWO25JNMzVcjpE8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83OTE2Y2QtNGQyZi00ZjUyLWFlYWMt ZjFlOWJjNDFkOTJmLzEvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83OTE2Y2QtNGQyZi00ZjUyLWFlYWMtZjFlOWJjNDFkOTJm LzEvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2KdxjS2 u4wK/2C8RncDSAumqiViygDRb6TG6tHjNXltVTwGrqnS5XAi3d2Cfyp/Dhwl4CGb Xt1B2k6PvuhQuMDDuWamPfe2ZpCRSYRHfrEBra9N1zHxA9ANwgCtZesmMXU1pLif ty/ncq8SCz0vFiwsInTIlIMcsD23Aojta3Jk/tK4SuQ8rlvbCqsKq7wRnY/C579x JYh65NyZWDzrAA8ceT8O/tkEkvkTImLbROZgEXpyLMxZPC756IyAc9Ov83nziZn0 8LChMkSfeCAS8fIiOixwGpQak88mJpbocY+BTFu+3MZJd1DkDyR0wnO/6IZWQg4W qj1Hhd3MUbQlXg== -----END CERTIFICATE-----Generated at Wed Dec 24 23:19:22 2025 by rpki-client