This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json) Hash identifier: mP/9CLgw3Mtd8F9PQWCIv9V+EoHAatO/eB8wO9BMxP8= Subject key identifier: E2:8B:B5:83:90:35:AF:6F:DA:FF:15:D0:91:3F:71:3A:0C:7E:B6:AF Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce Certificate serial: 019B3D5A0AC63641F24E3A61225E52B8CDE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft Manifest number: 0979 Signing time: Sat 20 Dec 2025 20:01:09 +0000 Manifest this update: Sat 20 Dec 2025 20:01:09 +0000 Manifest next update: Sun 21 Dec 2025 20:01:09 +0000 Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: PfMUTPXCqSA8GrE7b2q0CmLVBx2GhLx960evuFMrpVQ=) 2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:0a:c6:36:41:f2:4e:3a:61:22:5e:52:b8:cd:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce Validity Not Before: Dec 20 20:01:09 2025 GMT Not After : Dec 21 20:01:09 2025 GMT Subject: CN=e28bb5839035af6fdaff15d0913f713a0c7eb6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:c1:54:c5:fd:86:29:61:83:4d:9b:f7:5f: d0:63:d4:72:5b:3e:ab:9d:e4:e6:39:a2:10:dd:1a: c1:96:62:6f:b5:29:27:4c:24:5c:2a:77:6f:58:1c: 52:7b:a8:dc:a3:72:4f:0e:ce:39:f7:da:40:ec:d6: 5b:97:26:03:e3:45:1d:fd:15:de:2f:dd:33:06:c4: 51:a9:76:54:01:91:96:d6:af:de:a1:86:8d:9c:8c: 3d:27:1f:31:0a:b9:73:36:ac:b9:06:34:e4:78:7a: 0b:0d:77:06:93:f8:92:45:ec:ff:7d:0a:2c:7d:84: 9c:6d:c4:cd:86:18:af:44:df:ad:34:de:28:d1:62: 5f:66:f5:c1:08:36:c0:d2:dd:ee:35:a3:b4:68:e3: c3:ef:4d:85:af:f5:98:bd:d6:1e:33:04:6f:60:89: 84:e8:1c:c0:0c:7a:c8:26:52:da:bc:af:ee:d4:df: 0d:da:7c:80:ba:9e:73:25:54:e5:ad:f6:9a:00:e7: 51:a9:c7:f8:94:54:81:43:38:6c:79:e5:b1:71:f9: 72:a9:5f:ba:39:8b:49:4a:19:42:47:18:47:05:31: 72:03:fc:fa:d7:37:36:cb:01:a3:66:2d:04:7e:b2: 00:a2:d6:15:28:33:70:0c:eb:f3:b8:d5:bf:42:72: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8B:B5:83:90:35:AF:6F:DA:FF:15:D0:91:3F:71:3A:0C:7E:B6:AF X509v3 Authority Key Identifier: keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:cf:7f:c1:12:73:c4:8c:b3:86:fe:d2:1a:50:f7:7a:ec:d9: 2c:79:81:93:14:f3:6e:65:aa:e0:64:a6:55:92:c1:a9:c4:c9: b9:cf:06:5e:e0:3d:38:96:4b:1c:ed:79:c3:c6:09:07:df:06: 41:1f:d8:79:e3:07:60:84:16:b6:38:46:3c:ef:92:09:cb:64: db:ad:64:ac:b2:d6:2e:88:34:dd:db:98:93:73:36:b1:2b:83: 9a:dc:57:80:0f:43:d2:36:65:0c:5c:d4:4d:d6:73:4f:5e:7f: 47:26:c2:32:c1:9b:47:00:0a:08:0c:ce:24:8c:c5:fc:d4:97: 67:73:39:30:ee:9a:ce:85:ed:a0:c3:be:93:cf:b7:ca:df:70: 87:29:c7:b8:83:38:db:ed:a3:38:66:79:d6:65:74:a8:31:33: 44:0c:e1:6f:f1:68:6c:e3:49:62:19:98:d1:8e:a0:65:39:6e: 67:ed:15:fd:4c:ee:de:70:d3:69:8f:a0:67:df:9f:30:ed:22: fa:80:f5:75:e8:e6:48:d2:81:66:44:8a:78:53:7d:2e:92:01: 43:6b:61:9a:e5:0f:ae:02:b1:ed:40:01:99:34:f6:76:e2:e3: 57:9e:77:4c:9a:a9:64:ac:1d:10:97:db:3c:be:1c:24:12:1d: 27:89:13:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WgrGNkHyTjphIl5SuM3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZWQwMTQ1NzdhYzczZmY4N2VmMjBjYTZmNzU3OTVlNGM5 MzdmY2UwHhcNMjUxMjIwMjAwMTA5WhcNMjUxMjIxMjAwMTA5WjAzMTEwLwYDVQQD EyhlMjhiYjU4MzkwMzVhZjZmZGFmZjE1ZDA5MTNmNzEzYTBjN2ViNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7jBVMX9hilhg02b91/QY9RyWz6r neTmOaIQ3RrBlmJvtSknTCRcKndvWBxSe6jco3JPDs4599pA7NZblyYD40Ud/RXe L90zBsRRqXZUAZGW1q/eoYaNnIw9Jx8xCrlzNqy5BjTkeHoLDXcGk/iSRez/fQos fYScbcTNhhivRN+tNN4o0WJfZvXBCDbA0t3uNaO0aOPD702Fr/WYvdYeMwRvYImE 6BzADHrIJlLavK/u1N8N2nyAup5zJVTlrfaaAOdRqcf4lFSBQzhseeWxcflyqV+6 OYtJShlCRxhHBTFyA/z61zc2ywGjZi0EfrIAotYVKDNwDOvzuNW/QnK+pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKLtYOQNa9v2v8V0JE/cToMfravMB8GA1UdIwQY MBaAFDLtAUV3rHP/h+8gym91eV5Mk3/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTM5NWMtNTE4NS00MmVlLTk0OGIt OGZjMmI3MWQwMzBmLzEvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80YTM5NWMtNTE4NS00MmVlLTk0OGItOGZjMmI3MWQwMzBm LzEvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKM9/wRJz xIyzhv7SGlD3euzZLHmBkxTzbmWq4GSmVZLBqcTJuc8GXuA9OJZLHO15w8YJB98G QR/YeeMHYIQWtjhGPO+SCctk261krLLWLog03duYk3M2sSuDmtxXgA9D0jZlDFzU TdZzT15/RybCMsGbRwAKCAzOJIzF/NSXZ3M5MO6azoXtoMO+k8+3yt9whynHuIM4 2+2jOGZ51mV0qDEzRAzhb/FobONJYhmY0Y6gZTluZ+0V/Uzu3nDTaY+gZ9+fMO0i +oD1dejmSNKBZkSKeFN9LpIBQ2thmuUPrgKx7UABmTT2duLjV553TJqpZKwdEJfb PL4cJBIdJ4kTWw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:59:16 2025 by rpki-client