This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft File: mufWYa_KPTNwuOY0SU1SRrg9WF8.mft (raw, json) Hash identifier: mc0cLGRtBbs5e6VHAwCMLQKtCuLHx1KecJxd7ailb6w= Subject key identifier: 0E:A0:C7:87:8A:B5:81:BB:39:B3:11:DA:CB:06:DD:A3:5B:CB:60:C4 Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F Certificate issuer: /CN=9ae7d661afca3d3370b8e634494d5246b83d585f Certificate serial: 019B4A029039AFEBD942B1CD73DFD902CF3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 07:00:40 +0000 Manifest this update: Tue 23 Dec 2025 07:00:40 +0000 Manifest next update: Wed 24 Dec 2025 07:00:40 +0000 Files and hashes: 1: Lm17pgMk2BDV2OeIcb6BBLpoQWU.roa (hash: VGsuyNfzfr/GzDDdXYimTSNFocuLHOKMiHb8B0Qh1O4=) 2: M8tcAEtobc_HjXn0aPPPoIVg2j0.roa (hash: jvlpLwOiPWCn9YztYqEXIDpMuvLmxqIvyCBv7RToVIs=) 3: mufWYa_KPTNwuOY0SU1SRrg9WF8.crl (hash: 1OAP8CvieTsA0EN84dLRwo6n3zLsmFKGtQk8kVQTwn8=) 4: urzNFgi_gE8fSu_5YoQ_GQRDVw0.roa (hash: T8tIXkvw/aUJVTl8RyXo5fkRTTwdXnzNgefZluAgHWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:90:39:af:eb:d9:42:b1:cd:73:df:d9:02:cf:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f Validity Not Before: Dec 23 07:00:40 2025 GMT Not After : Dec 24 07:00:40 2025 GMT Subject: CN=0ea0c7878ab581bb39b311dacb06dda35bcb60c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:83:f3:c2:44:67:56:82:d4:3d:ab:35:a6: 14:93:8b:ed:2f:6a:f5:a5:fb:16:8e:f0:ea:f8:1d: cf:78:14:81:6c:05:af:86:9a:5f:71:f0:a5:41:41: 22:ec:96:f2:e9:c4:be:f4:20:98:43:3a:76:bf:4d: 25:76:e9:68:30:a8:64:04:78:46:aa:75:0b:c6:bf: be:3c:de:ad:65:92:ae:04:4e:f7:93:6d:74:4a:27: c1:63:63:6c:09:88:ff:39:61:b1:54:f7:91:c8:f8: 6b:0e:37:f3:f2:91:4f:8b:c1:84:5e:7c:1c:6e:65: 24:6f:ca:bc:ab:6f:f8:a6:dc:f4:b5:c5:71:77:b0: 43:ab:30:c5:7e:3c:26:00:d2:75:06:57:6b:b2:8f: cd:fe:bb:d4:04:24:ec:bf:74:91:9d:36:c5:ce:fa: 24:74:fd:d9:b7:0c:71:da:09:04:d1:bb:30:f5:da: 78:4b:a6:51:ef:02:d9:c4:bb:96:57:22:b0:6a:23: bb:b1:e1:7f:36:fc:6e:93:39:37:72:eb:b8:b0:89: 08:4e:3f:d6:04:26:32:3e:1d:34:00:ee:97:49:8d: 7c:99:41:59:85:79:8a:57:57:68:57:ab:21:b6:c6: a6:d3:18:a0:49:f8:4b:39:ca:ad:da:7f:0e:05:58: f6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A0:C7:87:8A:B5:81:BB:39:B3:11:DA:CB:06:DD:A3:5B:CB:60:C4 X509v3 Authority Key Identifier: keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:75:7d:65:3c:05:50:50:97:f4:be:c0:8c:98:a4:fe:e9:69: ac:57:c0:55:d0:f7:38:22:fa:7b:ec:29:93:b0:24:f5:07:87: 61:3e:ae:3a:6b:d3:6c:23:01:65:9a:8d:ee:ec:08:8b:ab:2f: 67:d5:df:7c:2a:86:cf:e3:0a:1f:e4:5e:49:32:55:25:fa:75: 42:d3:bb:f8:d5:3c:d9:17:e1:f4:9b:ad:a9:ac:a1:39:b7:f4: d6:8c:83:76:a2:75:2a:4b:51:7a:e3:12:90:a6:7c:64:a4:4d: a9:2c:c9:b0:81:38:e6:ef:24:b1:4a:46:50:27:c3:ff:2a:a0: 20:53:2b:57:5f:fc:e3:c9:fe:e7:a8:63:40:f1:6a:c7:be:9c: e6:af:c8:a1:cf:b3:65:72:f3:64:e8:8b:e1:99:00:82:ea:36: 1a:b2:56:d4:ae:33:5d:be:ee:fc:43:96:d0:fe:1f:eb:0d:04: bf:6f:f8:cf:af:4f:62:25:23:05:fd:23:58:e5:7e:34:72:4e: 3f:1f:df:c0:5e:72:5b:aa:7f:14:2a:c0:78:29:e4:e7:8d:56: 1a:d0:96:62:ec:d3:64:cc:c9:7d:53:0e:e9:23:f9:a5:14:d8: ab:55:d7:26:f2:a6:2d:71:c6:37:f1:08:90:b4:5d:14:9b:6e: 93:36:89:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKApA5r+vZQrHNc9/ZAs87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTdkNjYxYWZjYTNkMzM3MGI4ZTYzNDQ5NGQ1MjQ2Yjgz ZDU4NWYwHhcNMjUxMjIzMDcwMDQwWhcNMjUxMjI0MDcwMDQwWjAzMTEwLwYDVQQD EygwZWEwYzc4NzhhYjU4MWJiMzliMzExZGFjYjA2ZGRhMzViY2I2MGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMOD88JEZ1aC1D2rNaYUk4vtL2r1 pfsWjvDq+B3PeBSBbAWvhppfcfClQUEi7Jby6cS+9CCYQzp2v00lduloMKhkBHhG qnULxr++PN6tZZKuBE73k210SifBY2NsCYj/OWGxVPeRyPhrDjfz8pFPi8GEXnwc bmUkb8q8q2/4ptz0tcVxd7BDqzDFfjwmANJ1Bldrso/N/rvUBCTsv3SRnTbFzvok dP3Ztwxx2gkE0bsw9dp4S6ZR7wLZxLuWVyKwaiO7seF/Nvxukzk3cuu4sIkITj/W BCYyPh00AO6XSY18mUFZhXmKV1doV6shtsam0xigSfhLOcqt2n8OBVj2CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6gx4eKtYG7ObMR2ssG3aNby2DEMB8GA1UdIwQY MBaAFJrn1mGvyj0zcLjmNElNUka4PVhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMt M2I2OGE0OWRjMDQyLzEvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMtM2I2OGE0OWRjMDQy LzEvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3V9ZTwF UFCX9L7AjJik/ulprFfAVdD3OCL6e+wpk7Ak9QeHYT6uOmvTbCMBZZqN7uwIi6sv Z9XffCqGz+MKH+ReSTJVJfp1QtO7+NU82Rfh9JutqayhObf01oyDdqJ1KktReuMS kKZ8ZKRNqSzJsIE45u8ksUpGUCfD/yqgIFMrV1/848n+56hjQPFqx76c5q/Ioc+z ZXLzZOiL4ZkAguo2GrJW1K4zXb7u/EOW0P4f6w0Ev2/4z69PYiUjBf0jWOV+NHJO Px/fwF5yW6p/FCrAeCnk541WGtCWYuzTZMzJfVMO6SP5pRTYq1XXJvKmLXHGN/EI kLRdFJtukzaJkw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:19:48 2025 by rpki-client