This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json) Hash identifier: 99vsjUtObafriHtVtC1ADbJWTzIU8zYz3Lx0wULWbJ4= Subject key identifier: A8:62:B2:4C:F5:AA:EA:5D:CD:66:49:BF:18:05:86:DE:8D:01:4C:83 Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46 Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46 Certificate serial: 019B6CFC690A475A8723718EE64F14F88644 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft Manifest number: 108F Signing time: Tue 30 Dec 2025 02:00:39 +0000 Manifest this update: Tue 30 Dec 2025 02:00:39 +0000 Manifest next update: Wed 31 Dec 2025 02:00:39 +0000 Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: 3oIGZIAfOjdPOFcexYp1CTLQVSB0G8WmhqGRYwYOBJ8=) 2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:69:0a:47:5a:87:23:71:8e:e6:4f:14:f8:86:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46 Validity Not Before: Dec 30 02:00:39 2025 GMT Not After : Dec 31 02:00:39 2025 GMT Subject: CN=a862b24cf5aaea5dcd6649bf180586de8d014c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cb:e8:11:99:e6:3f:b6:54:60:b8:dc:da:f6: 93:b7:df:5a:09:fe:b7:fe:f3:1e:dc:b1:d4:ba:bf: af:10:32:5d:a4:64:54:4c:24:05:46:24:e5:e2:ee: b3:66:15:7e:c2:4a:90:3e:6f:4d:ba:b5:b6:52:5d: e0:2b:1e:f7:6c:fd:d4:9b:32:ca:6f:25:55:48:3b: 90:57:35:a6:b4:e3:36:cd:e5:f8:84:23:07:62:91: 47:3e:4d:31:08:c8:fe:a1:92:75:fc:ed:02:c3:69: 19:fc:86:a2:2a:d3:f6:ae:32:87:21:53:a6:af:a8: 65:33:cd:71:e1:a8:fc:d5:ea:74:6c:a7:6b:9b:24: 7a:a9:1b:d5:c3:4c:b5:32:af:e2:32:15:fd:d7:6c: cb:fa:c9:e8:21:5d:4f:88:59:14:4c:b4:19:b4:85: 19:1c:d3:c2:6d:d1:a3:ee:c5:cc:28:fb:33:18:d9: 06:b9:a8:d3:7f:60:65:d2:9a:8d:f3:10:15:39:ce: 2a:3a:7d:71:ce:b7:13:0a:07:0a:14:cc:dd:e0:0f: 56:0f:26:be:46:23:ae:ca:7d:c8:c3:a5:3f:28:0d: 89:7f:a5:8c:e0:59:56:17:c9:9d:09:ac:21:7b:c5: a9:94:95:b9:35:09:60:0b:80:24:1a:50:b2:e4:da: 30:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:62:B2:4C:F5:AA:EA:5D:CD:66:49:BF:18:05:86:DE:8D:01:4C:83 X509v3 Authority Key Identifier: keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a0:a3:77:32:3c:30:60:44:a6:cb:83:1e:b7:07:11:12:18: a1:d8:1d:c8:1f:f1:a2:93:94:9d:15:2f:fe:a3:d4:dc:ed:67: 00:b7:45:93:d3:c8:a8:28:ed:3f:de:d9:10:88:b4:4d:f2:a5: 8d:c6:3e:7d:db:55:9b:d8:ff:71:c0:96:50:24:3f:af:3c:95: 69:0c:7f:4c:82:78:42:6e:59:60:4d:32:b4:52:1e:07:c2:1a: a7:36:64:c8:4a:bb:72:ad:8a:d2:57:b6:dd:4b:55:0a:9a:b2: 0b:29:ec:70:95:48:21:85:3d:b4:b7:e6:4e:1e:05:ff:f0:f1: 22:95:e5:86:da:48:38:eb:88:b9:93:38:96:47:e4:29:98:f6: 12:ba:bd:a5:02:2e:83:f9:89:b8:0d:2a:26:79:36:4f:6b:b0: 42:e8:4f:b1:54:1a:e2:07:68:1f:dd:ab:3f:a1:fc:20:70:b4: 10:05:9b:2a:35:6c:1f:bf:40:76:d5:93:a9:79:7d:10:7d:75: c7:22:ef:06:29:99:03:41:54:c6:a7:0f:bf:40:6d:7f:f4:8d: 9d:81:a5:07:47:99:8f:85:d2:64:9d:29:92:70:a7:0e:5c:f3: d2:08:3a:fc:24:12:00:af:39:2d:1f:7b:6a:58:36:15:eb:c1: f4:fb:33:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/GkKR1qHI3GO5k8U+IZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWVjYjM1M2YxY2RjNWZkM2E5ZDU0YTg4NzM1MzFlZmQy ODVjNDYwHhcNMjUxMjMwMDIwMDM5WhcNMjUxMjMxMDIwMDM5WjAzMTEwLwYDVQQD EyhhODYyYjI0Y2Y1YWFlYTVkY2Q2NjQ5YmYxODA1ODZkZThkMDE0YzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48voEZnmP7ZUYLjc2vaTt99aCf63 /vMe3LHUur+vEDJdpGRUTCQFRiTl4u6zZhV+wkqQPm9NurW2Ul3gKx73bP3UmzLK byVVSDuQVzWmtOM2zeX4hCMHYpFHPk0xCMj+oZJ1/O0Cw2kZ/IaiKtP2rjKHIVOm r6hlM81x4aj81ep0bKdrmyR6qRvVw0y1Mq/iMhX912zL+snoIV1PiFkUTLQZtIUZ HNPCbdGj7sXMKPszGNkGuajTf2Bl0pqN8xAVOc4qOn1xzrcTCgcKFMzd4A9WDya+ RiOuyn3Iw6U/KA2Jf6WM4FlWF8mdCawhe8WplJW5NQlgC4AkGlCy5NowgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhiskz1qupdzWZJvxgFht6NAUyDMB8GA1UdIwQY MBaAFJruyzU/HNxf06nVSohzUx79KFxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYt NTk0NDk2MGUzMWNmLzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYtNTk0NDk2MGUzMWNm LzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaCjdzI8 MGBEpsuDHrcHERIYodgdyB/xopOUnRUv/qPU3O1nALdFk9PIqCjtP97ZEIi0TfKl jcY+fdtVm9j/ccCWUCQ/rzyVaQx/TIJ4Qm5ZYE0ytFIeB8IapzZkyEq7cq2K0le2 3UtVCpqyCynscJVIIYU9tLfmTh4F//DxIpXlhtpIOOuIuZM4lkfkKZj2Erq9pQIu g/mJuA0qJnk2T2uwQuhPsVQa4gdoH92rP6H8IHC0EAWbKjVsH79AdtWTqXl9EH11 xyLvBimZA0FUxqcPv0Btf/SNnYGlB0eZj4XSZJ0pknCnDlzz0gg6/CQSAK85LR97 alg2FevB9Psz1A== -----END CERTIFICATE-----Generated at Tue Dec 30 07:17:12 2025 by rpki-client