This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft File: MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json) Hash identifier: qldzxBluzpPCHuckr/nKmeZon4bRvSiSZlaYQbr4kP8= Subject key identifier: 67:51:14:2B:62:22:FE:42:DE:0F:E5:57:01:27:07:76:8A:5D:15:44 Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6 Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6 Certificate serial: 019B33B1E034A830BCDBE32CACABA3390CA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft Manifest number: 0E95 Signing time: Thu 18 Dec 2025 23:00:53 +0000 Manifest this update: Thu 18 Dec 2025 23:00:53 +0000 Manifest next update: Fri 19 Dec 2025 23:00:53 +0000 Files and hashes: 1: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: n5oK8chxFvToDZc6JoB5L17QzkBq7Y00OU01fyqjmXk=) 2: nLlnLzhBW0q3Q45Kky0hHNKYV40.roa (hash: RNNKG+Zuzj9PpdwsoSPFqXxYXZoCjXiQJtMmCaWRm20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:e0:34:a8:30:bc:db:e3:2c:ac:ab:a3:39:0c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6 Validity Not Before: Dec 18 23:00:53 2025 GMT Not After : Dec 19 23:00:53 2025 GMT Subject: CN=6751142b6222fe42de0fe557012707768a5d1544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:95:0e:87:1e:60:82:61:5c:09:5f:4f:8e: 47:32:fe:6a:25:e3:b6:5f:85:e5:bf:84:4b:a6:0d: 30:b9:f5:24:85:ea:6e:c5:b3:bd:e5:7b:d6:6f:cc: c5:d7:5f:5a:c5:4d:ad:a8:e0:5e:7c:f6:db:02:df: 29:7c:ce:36:16:58:10:08:41:f0:40:a7:5d:b5:8b: 37:d8:e8:fd:04:83:7a:26:a2:e5:b9:98:b3:2f:58: 53:a9:92:c9:e7:10:4b:d1:78:99:7a:07:79:7a:da: 07:6b:22:33:08:b7:27:57:37:65:64:a8:c3:60:87: c0:50:a3:b0:2f:cc:11:cf:48:dd:04:ff:6c:e0:0d: 53:c4:54:4a:f0:10:9a:31:49:96:e1:e2:8d:09:08: 86:5a:4a:28:9a:28:63:fc:92:9f:76:92:2f:83:17: 7e:be:af:53:3d:9c:d6:c4:80:92:2a:d3:77:2e:e5: a2:57:ed:77:1c:38:a6:09:f4:9b:f3:5c:22:f6:a2: 19:2b:0f:02:8b:1b:7c:1e:d3:04:15:d1:be:5b:33: 8d:8d:2c:09:58:45:e9:6d:4e:b4:ec:bb:ad:ca:b7: 51:79:86:54:3f:be:28:51:5b:ea:eb:9b:cc:74:9d: 12:a2:8c:54:2f:5a:49:ec:b6:1c:7d:fa:f7:a3:6a: e4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:51:14:2B:62:22:FE:42:DE:0F:E5:57:01:27:07:76:8A:5D:15:44 X509v3 Authority Key Identifier: keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:05:43:71:e7:aa:12:71:82:54:a7:7d:4a:5e:ce:43:1c:b9: 36:ae:0e:cd:91:0e:59:d0:69:6e:f4:25:3b:cc:70:9c:d2:a1: 1d:fc:2b:a3:fd:95:ac:47:f0:88:f4:17:3c:ab:33:4b:e0:e0: 60:8a:e3:44:36:1c:73:e0:52:63:92:44:9e:6e:a7:0e:95:7d: 2f:61:a9:3b:5f:c3:ac:80:bb:bd:26:59:17:7c:e5:8d:6a:15: 6b:aa:a9:be:ca:de:b2:5f:18:e0:6a:81:66:54:03:b3:ae:67: ee:d8:5a:0c:fc:71:4b:c5:ea:10:54:de:21:7d:7e:79:4b:65: 57:95:12:f9:26:2e:0f:b8:ce:5d:ab:90:de:7c:ed:5e:60:3f: f3:9f:a6:87:88:69:be:66:ff:24:a1:ed:a0:bc:66:1c:9b:f6: 8e:a1:9c:7a:26:2f:45:85:66:1b:5c:bc:fa:9c:f6:48:25:46: c6:8e:94:6c:b1:2a:85:e8:31:14:78:da:78:86:16:86:8c:56: 42:e2:52:9f:32:7b:0f:6e:f0:13:de:d2:f4:c3:a1:ef:94:af: f6:a2:79:3e:32:20:51:40:b7:14:db:c1:7c:81:d4:34:24:0e: bb:12:99:ee:c3:46:5a:d3:d7:24:a6:d8:57:34:3d:99:a4:5f: b4:c2:18:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszseA0qDC82+MsrKujOQyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZTE1ZDM4NGMzOGY0ODcyYjBmZjkzNTJmZjE5YzRkNmRm YjY0YzYwHhcNMjUxMjE4MjMwMDUzWhcNMjUxMjE5MjMwMDUzWjAzMTEwLwYDVQQD Eyg2NzUxMTQyYjYyMjJmZTQyZGUwZmU1NTcwMTI3MDc3NjhhNWQxNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiKVDoceYIJhXAlfT45HMv5qJeO2 X4Xlv4RLpg0wufUkhepuxbO95XvWb8zF119axU2tqOBefPbbAt8pfM42FlgQCEHw QKddtYs32Oj9BIN6JqLluZizL1hTqZLJ5xBL0XiZegd5etoHayIzCLcnVzdlZKjD YIfAUKOwL8wRz0jdBP9s4A1TxFRK8BCaMUmW4eKNCQiGWkoomihj/JKfdpIvgxd+ vq9TPZzWxICSKtN3LuWiV+13HDimCfSb81wi9qIZKw8Cixt8HtMEFdG+WzONjSwJ WEXpbU607LutyrdReYZUP74oUVvq65vMdJ0SooxUL1pJ7LYcffr3o2rk8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdRFCtiIv5C3g/lVwEnB3aKXRVEMB8GA1UdIwQY MBaAFDLhXThMOPSHKw/5NS/xnE1t+2TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVGZE9FdzQ5SWNyRF9rMUxfR2NUVzM3Wk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81NWQzY2MtYmNmMC00MjVlLTk4M2Qt NGYzYzQ2ZjE3NzM3LzEvTXVGZE9FdzQ5SWNyRF9rMUxfR2NUVzM3Wk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81NWQzY2MtYmNmMC00MjVlLTk4M2QtNGYzYzQ2ZjE3NzM3 LzEvTXVGZE9FdzQ5SWNyRF9rMUxfR2NUVzM3Wk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAVDceeq EnGCVKd9Sl7OQxy5Nq4OzZEOWdBpbvQlO8xwnNKhHfwro/2VrEfwiPQXPKszS+Dg YIrjRDYcc+BSY5JEnm6nDpV9L2GpO1/DrIC7vSZZF3zljWoVa6qpvsresl8Y4GqB ZlQDs65n7thaDPxxS8XqEFTeIX1+eUtlV5US+SYuD7jOXauQ3nztXmA/85+mh4hp vmb/JKHtoLxmHJv2jqGceiYvRYVmG1y8+pz2SCVGxo6UbLEqhegxFHjaeIYWhoxW QuJSnzJ7D27wE97S9MOh75Sv9qJ5PjIgUUC3FNvBfIHUNCQOuxKZ7sNGWtPXJKbY VzQ9maRftMIYng== -----END CERTIFICATE-----Generated at Fri Dec 19 02:45:43 2025 by rpki-client