This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json) Hash identifier: yqFUzlVdhPkG8hpMrI0ygRgxL+18BgrR+mrxOjrqWVQ= Subject key identifier: DE:EE:06:10:B3:4E:42:44:04:28:F1:51:84:4A:45:47:01:0F:8C:63 Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29 Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29 Certificate serial: 019B48B90A781A44BDDCBF40F65CB1EE2CF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft Manifest number: 0BB0 Signing time: Tue 23 Dec 2025 01:00:44 +0000 Manifest this update: Tue 23 Dec 2025 01:00:44 +0000 Manifest next update: Wed 24 Dec 2025 01:00:44 +0000 Files and hashes: 1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=) 2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: HlNgmzp2TvyR4g3clpnmKT+QaNi4WFnneDWJiq9z5g0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:0a:78:1a:44:bd:dc:bf:40:f6:5c:b1:ee:2c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29 Validity Not Before: Dec 23 01:00:44 2025 GMT Not After : Dec 24 01:00:44 2025 GMT Subject: CN=deee0610b34e42440428f151844a4547010f8c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cd:14:8a:fd:8d:f1:c6:f1:ae:18:1e:00:d9: 43:30:d8:53:58:38:e3:8e:18:1d:f1:31:38:2a:f4: b8:c0:aa:90:4c:ed:59:d4:93:54:5f:a7:24:f2:3a: df:cd:64:39:c6:33:af:cf:79:3d:02:0e:f8:2f:43: 3d:91:ea:28:86:77:a3:40:37:7f:00:73:76:7b:c1: f3:b1:48:4d:70:9f:96:7f:7a:87:f1:61:34:e7:93: 36:0f:6e:5b:ee:eb:b4:2f:13:f5:45:51:d0:95:3f: 8b:15:3b:76:c5:05:02:19:b7:6e:67:b8:f3:23:7f: a1:f8:c6:d9:d7:c5:e7:33:25:72:4c:85:19:61:b3: 4d:35:c8:d9:74:02:b7:70:47:c2:43:76:fe:e3:b7: 4b:e1:8b:33:56:af:c2:07:f2:08:4b:0f:8c:74:7a: c7:da:1f:99:09:b1:db:f6:7b:8d:95:c9:5b:c5:ca: b4:da:c3:8b:34:2a:cf:5f:81:7e:e1:a8:1f:5f:27: ec:c8:18:ad:26:5a:8b:b9:99:a6:44:39:af:7d:e8: 6e:f7:eb:7a:d6:08:89:94:22:1b:c8:1a:4a:c0:1d: 74:04:e1:5a:1f:d4:ac:a7:32:08:8f:56:94:16:bd: bf:69:31:b0:ba:d4:87:ac:87:2c:56:cd:90:05:6a: b6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EE:06:10:B3:4E:42:44:04:28:F1:51:84:4A:45:47:01:0F:8C:63 X509v3 Authority Key Identifier: keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:cd:57:4e:be:69:f3:42:21:c3:2c:b9:4f:80:69:9a:48:97: 0d:62:92:5b:af:1c:8f:4e:1c:90:74:0d:f2:41:4a:7c:72:ee: 9f:1b:2c:b4:65:af:c1:21:09:78:70:1b:17:8e:b4:94:38:e5: 14:a9:6f:97:36:e3:e1:c6:04:c3:67:aa:ad:c5:49:ce:e9:cb: 73:6a:15:a0:39:22:bb:f5:99:65:a1:c8:ff:1b:0c:3e:29:e7: 35:99:c7:29:19:fb:53:18:97:ab:a4:61:fa:cb:62:7f:80:78: a5:5f:41:c4:f5:9f:1c:43:14:4d:ec:18:71:dc:c1:b4:ba:86: e5:0e:85:a8:eb:0a:f9:d6:9b:a1:72:3c:91:e1:25:9c:2e:e4: de:06:86:7a:97:c8:fd:53:de:1f:b6:51:74:ee:e9:ca:44:21: 60:be:51:1a:e6:28:74:52:23:93:1a:0b:a2:bf:dc:bf:a0:16: 1b:9f:2f:b8:b4:ac:74:20:a7:3a:f1:e8:76:0d:2c:1e:34:35: 7c:87:aa:27:de:88:90:b4:26:e0:e2:4d:d0:dc:25:cc:13:cd: d7:58:4b:b8:15:b7:1d:fd:98:8c:e8:b4:70:bd:30:31:87:c3: e7:9b:35:10:29:66:df:50:e9:1a:5d:46:bd:14:b9:a9:6d:85: 03:03:fc:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuQp4GkS93L9A9lyx7iz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTI1MzRkZjUwOWM5NmVjYjgxMWJjODVkNzZkNjJiYWFk ZjNkMjkwHhcNMjUxMjIzMDEwMDQ0WhcNMjUxMjI0MDEwMDQ0WjAzMTEwLwYDVQQD EyhkZWVlMDYxMGIzNGU0MjQ0MDQyOGYxNTE4NDRhNDU0NzAxMGY4YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv80Uiv2N8cbxrhgeANlDMNhTWDjj jhgd8TE4KvS4wKqQTO1Z1JNUX6ck8jrfzWQ5xjOvz3k9Ag74L0M9keoohnejQDd/ AHN2e8HzsUhNcJ+Wf3qH8WE055M2D25b7uu0LxP1RVHQlT+LFTt2xQUCGbduZ7jz I3+h+MbZ18XnMyVyTIUZYbNNNcjZdAK3cEfCQ3b+47dL4YszVq/CB/IISw+MdHrH 2h+ZCbHb9nuNlclbxcq02sOLNCrPX4F+4agfXyfsyBitJlqLuZmmRDmvfehu9+t6 1giJlCIbyBpKwB10BOFaH9SspzIIj1aUFr2/aTGwutSHrIcsVs2QBWq26wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7uBhCzTkJEBCjxUYRKRUcBD4xjMB8GA1UdIwQY MBaAFJriU031Ccluy4EbyF121iuq3z0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjIt ODIyNjUyNGU0YWNmLzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjItODIyNjUyNGU0YWNm LzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhs1XTr5p 80Ihwyy5T4BpmkiXDWKSW68cj04ckHQN8kFKfHLunxsstGWvwSEJeHAbF460lDjl FKlvlzbj4cYEw2eqrcVJzunLc2oVoDkiu/WZZaHI/xsMPinnNZnHKRn7UxiXq6Rh +stif4B4pV9BxPWfHEMUTewYcdzBtLqG5Q6FqOsK+daboXI8keElnC7k3gaGepfI /VPeH7ZRdO7pykQhYL5RGuYodFIjkxoLor/cv6AWG58vuLSsdCCnOvHodg0sHjQ1 fIeqJ96IkLQm4OJN0NwlzBPN11hLuBW3Hf2YjOi0cL0wMYfD55s1EClm31DpGl1G vRS5qW2FAwP8gw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:04:12 2025 by rpki-client