This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json) Hash identifier: xWKK7mkggaIgmJrny/4YT99gxdH+6oS7m8X0pGVk70o= Subject key identifier: B9:07:6E:98:84:D8:D5:78:F2:31:5B:26:18:E0:6A:53:33:3B:43:F0 Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46 Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46 Certificate serial: 019B55D054989F11BA8CB10E2DDE36C920DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft Manifest number: 1083 Signing time: Thu 25 Dec 2025 14:01:14 +0000 Manifest this update: Thu 25 Dec 2025 14:01:14 +0000 Manifest next update: Fri 26 Dec 2025 14:01:14 +0000 Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: GWGgq/RdmAiGb5FGaLRJnz6Dh2uLwXgslUsyFWX3nn0=) 2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:d0:54:98:9f:11:ba:8c:b1:0e:2d:de:36:c9:20:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46 Validity Not Before: Dec 25 14:01:14 2025 GMT Not After : Dec 26 14:01:14 2025 GMT Subject: CN=b9076e9884d8d578f2315b2618e06a53333b43f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d3:d5:24:20:0b:aa:4f:5a:73:f8:83:20:d2: c5:65:15:10:af:97:a9:64:e9:f1:3d:a7:d7:92:b2: 18:38:ff:a4:70:af:e6:01:e1:91:d8:db:fa:61:51: 63:ad:65:f5:6d:ce:f0:64:af:97:d9:f5:2a:6c:4b: 4d:bf:6e:32:ad:3a:af:51:d3:10:ed:65:dd:1b:df: 4f:14:1b:7f:75:34:e5:e5:f4:c1:ca:3a:b1:0f:6f: c1:9b:b7:83:db:00:b2:4e:75:86:37:7e:2f:cd:28: 36:c5:90:70:c2:96:4f:b6:af:bc:06:05:32:9e:7b: fb:9f:96:7a:7c:5e:5c:17:15:c1:5e:ca:d5:7e:09: d5:3e:45:a1:0a:c1:7f:56:d9:88:24:d6:82:0b:41: 82:79:6e:a2:d2:51:36:2b:90:e3:1c:c4:01:df:e1: c6:39:da:e8:2d:ad:24:31:92:26:16:e3:32:1f:da: 4f:7b:c8:15:e2:7d:f6:ef:58:de:e2:8f:b2:37:14: f0:68:37:23:48:c9:18:f8:bc:46:f5:25:75:95:60: e6:b4:5b:5f:9b:55:2e:20:c8:03:09:64:87:2c:90: 7a:04:3c:7a:da:c5:ba:f7:e8:b0:58:dc:5c:9b:e8: e0:b0:3f:27:40:45:ab:0f:87:78:20:60:0c:64:e1: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:07:6E:98:84:D8:D5:78:F2:31:5B:26:18:E0:6A:53:33:3B:43:F0 X509v3 Authority Key Identifier: keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6e:eb:e7:7e:02:dd:7e:b4:77:26:d3:fa:fb:53:ca:50:a2: 05:dd:5f:97:b5:37:5c:cf:df:e3:5c:1f:11:1b:55:db:ee:53: db:0a:68:26:1f:2e:ec:7a:0a:5f:8f:07:ee:11:9d:82:41:63: 68:b4:85:a8:21:9f:64:d6:cb:cb:16:df:6f:81:02:52:92:7c: ad:f9:2a:c2:66:b2:4f:71:db:d8:5c:35:0a:c3:dc:d6:c9:9a: cf:55:b9:69:ed:5e:77:3d:f4:bc:cf:9a:5c:02:37:3e:fa:ef: 2f:ee:47:65:a3:13:86:fb:bd:a2:e6:5e:14:91:8b:21:92:fd: f4:58:cc:f1:b4:74:23:45:45:9a:85:93:27:fc:91:6e:a7:42: 1b:2e:a2:19:b9:d0:52:d2:97:a5:31:0a:11:40:19:33:c8:92: 2c:bc:c7:a1:ce:85:39:de:ca:93:d6:c4:ad:36:e8:14:39:ae: ab:7c:f8:22:8b:e8:db:f7:cd:a3:5c:fb:79:93:35:96:93:1d: c0:eb:f0:b6:6b:57:72:0d:7a:c5:da:1c:ae:b2:3a:52:b4:0b: b1:97:8b:50:ce:0e:60:b2:86:ba:a4:fc:30:8c:02:f5:0f:07: 3d:24:e7:4e:e7:55:eb:b3:d5:3b:5a:42:18:43:15:df:b0:6c: cc:f9:06:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtV0FSYnxG6jLEOLd42ySDaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWVjYjM1M2YxY2RjNWZkM2E5ZDU0YTg4NzM1MzFlZmQy ODVjNDYwHhcNMjUxMjI1MTQwMTE0WhcNMjUxMjI2MTQwMTE0WjAzMTEwLwYDVQQD EyhiOTA3NmU5ODg0ZDhkNTc4ZjIzMTViMjYxOGUwNmE1MzMzM2I0M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NPVJCALqk9ac/iDINLFZRUQr5ep ZOnxPafXkrIYOP+kcK/mAeGR2Nv6YVFjrWX1bc7wZK+X2fUqbEtNv24yrTqvUdMQ 7WXdG99PFBt/dTTl5fTByjqxD2/Bm7eD2wCyTnWGN34vzSg2xZBwwpZPtq+8BgUy nnv7n5Z6fF5cFxXBXsrVfgnVPkWhCsF/VtmIJNaCC0GCeW6i0lE2K5DjHMQB3+HG OdroLa0kMZImFuMyH9pPe8gV4n3271je4o+yNxTwaDcjSMkY+LxG9SV1lWDmtFtf m1UuIMgDCWSHLJB6BDx62sW69+iwWNxcm+jgsD8nQEWrD4d4IGAMZOEGEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkHbpiE2NV48jFbJhjgalMzO0PwMB8GA1UdIwQY MBaAFJruyzU/HNxf06nVSohzUx79KFxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYt NTk0NDk2MGUzMWNmLzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYtNTk0NDk2MGUzMWNm LzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALW7r534C 3X60dybT+vtTylCiBd1fl7U3XM/f41wfERtV2+5T2wpoJh8u7HoKX48H7hGdgkFj aLSFqCGfZNbLyxbfb4ECUpJ8rfkqwmayT3Hb2Fw1CsPc1smaz1W5ae1edz30vM+a XAI3PvrvL+5HZaMThvu9ouZeFJGLIZL99FjM8bR0I0VFmoWTJ/yRbqdCGy6iGbnQ UtKXpTEKEUAZM8iSLLzHoc6FOd7Kk9bErTboFDmuq3z4Iovo2/fNo1z7eZM1lpMd wOvwtmtXcg16xdocrrI6UrQLsZeLUM4OYLKGuqT8MIwC9Q8HPSTnTudV67PVO1pC GEMV37BszPkG4Q== -----END CERTIFICATE-----Generated at Thu Dec 25 20:52:26 2025 by rpki-client