This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json) Hash identifier: PzOZJJXeBz1ebxNIwl7Fi6EFb3rU8bLfYpVKldISUjE= Subject key identifier: FC:E6:7A:6B:71:1C:71:DF:5C:2F:CB:17:67:5D:36:33:E2:9C:6E:9B Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd Certificate serial: 019B50729780CE5FD6DA08F69F35B8698BB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft Manifest number: 05DD Signing time: Wed 24 Dec 2025 13:00:45 +0000 Manifest this update: Wed 24 Dec 2025 13:00:45 +0000 Manifest next update: Thu 25 Dec 2025 13:00:45 +0000 Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=) 2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: Ol1/juBCG/HdOTp/VtOsWNv0PVg3b4cXuBFtesjHxj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:97:80:ce:5f:d6:da:08:f6:9f:35:b8:69:8b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd Validity Not Before: Dec 24 13:00:45 2025 GMT Not After : Dec 25 13:00:45 2025 GMT Subject: CN=fce67a6b711c71df5c2fcb17675d3633e29c6e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:c4:7e:5c:63:fe:55:c2:a6:63:1f:a8:82: a7:80:12:63:82:b1:5d:2a:20:85:72:16:f5:43:1c: d0:b6:3e:0b:dd:f5:2c:59:e4:b2:cc:b3:6c:38:c1: b2:e6:e9:0e:15:ea:42:df:28:cf:71:f0:b0:f4:a3: 1d:99:29:95:64:9e:e0:af:ee:96:29:28:5e:70:74: 08:9d:93:0f:47:b3:2a:8f:ac:b9:e6:13:11:92:88: 46:8d:89:a0:8b:c0:90:c6:3f:5c:37:e3:2e:00:5d: 71:a0:40:37:c1:45:33:dd:f1:b8:04:51:c0:aa:ba: 37:85:76:af:6c:e4:26:47:f4:db:58:c2:12:6d:2d: 50:b8:12:df:0a:d1:01:9d:19:0d:ad:f4:89:27:bc: bc:1e:a9:73:80:f9:98:e8:9a:c5:d8:71:43:d6:72: f8:90:63:76:73:97:a7:59:c5:96:ed:c8:55:f6:04: 05:1b:25:d3:ad:08:82:fd:e1:e7:ae:17:3a:f3:75: 9d:80:5c:41:5d:8f:73:e2:c1:1c:1a:35:3c:86:c4: fd:d8:0a:48:16:58:a2:4d:19:18:ba:ef:c3:83:3a: 57:00:e0:08:c4:c8:c5:d0:ec:1e:62:b3:d1:4a:7f: c4:7e:45:b4:13:94:c5:99:54:7e:79:ea:3f:8b:95: 8f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E6:7A:6B:71:1C:71:DF:5C:2F:CB:17:67:5D:36:33:E2:9C:6E:9B X509v3 Authority Key Identifier: keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:52:92:f0:f4:ec:6c:5a:99:f5:57:aa:3d:ae:bc:d6:64:13: 08:8b:6d:9f:b7:41:4c:7b:74:86:50:d6:c6:06:6e:dd:36:38: f3:35:ac:77:28:68:a0:d2:77:a3:e3:0a:8b:b8:bc:e4:22:58: ed:3b:37:38:7b:db:4a:52:46:31:32:5c:99:6a:40:be:0f:39: 41:52:c8:93:ff:95:4e:0b:92:86:28:10:b8:fa:32:9b:65:26: ec:14:b1:b8:aa:12:52:bf:2b:12:86:d5:5c:55:06:70:48:ea: e9:11:52:36:56:47:28:51:14:f9:27:e9:79:4a:7f:88:ef:79: ee:29:64:c6:91:a1:4c:88:7f:ca:5f:e6:72:ee:83:cd:71:be: fb:c4:d1:8e:4d:b7:af:14:9d:16:4f:40:e4:eb:a9:39:92:1f: 2b:57:02:41:a0:38:fe:a4:91:85:bc:86:ce:e7:31:a2:f4:ba: b4:5f:51:57:2a:a9:1f:c4:fe:b8:17:bb:a7:06:09:18:35:fa: 10:ef:f9:85:c3:8f:4e:30:ae:8d:9e:c3:27:cf:fc:4e:71:68: af:83:a7:a7:b0:5f:56:b6:6e:93:8e:1f:12:d7:87:b5:01:b1: fc:a9:0a:f9:cf:69:85:38:2d:75:ab:31:fb:41:39:73:85:9e: 20:85:74:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcpeAzl/W2gj2nzW4aYu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzUwZGY2YjAxZGZmNmY1NGViODAzOWIyNDk3YWE3ZjRl ZjEyY2QwHhcNMjUxMjI0MTMwMDQ1WhcNMjUxMjI1MTMwMDQ1WjAzMTEwLwYDVQQD EyhmY2U2N2E2YjcxMWM3MWRmNWMyZmNiMTc2NzVkMzYzM2UyOWM2ZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplfEflxj/lXCpmMfqIKngBJjgrFd KiCFchb1QxzQtj4L3fUsWeSyzLNsOMGy5ukOFepC3yjPcfCw9KMdmSmVZJ7gr+6W KShecHQInZMPR7Mqj6y55hMRkohGjYmgi8CQxj9cN+MuAF1xoEA3wUUz3fG4BFHA qro3hXavbOQmR/TbWMISbS1QuBLfCtEBnRkNrfSJJ7y8HqlzgPmY6JrF2HFD1nL4 kGN2c5enWcWW7chV9gQFGyXTrQiC/eHnrhc683WdgFxBXY9z4sEcGjU8hsT92ApI FliiTRkYuu/DgzpXAOAIxMjF0OweYrPRSn/EfkW0E5TFmVR+eeo/i5WPNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzmemtxHHHfXC/LF2ddNjPinG6bMB8GA1UdIwQY MBaAFKzFDfawHf9vVOuAObJJeqf07xLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQt MzFjOTMxM2Y5ZjY2LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQtMzFjOTMxM2Y5ZjY2 LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFKS8PTs bFqZ9VeqPa681mQTCIttn7dBTHt0hlDWxgZu3TY48zWsdyhooNJ3o+MKi7i85CJY 7Ts3OHvbSlJGMTJcmWpAvg85QVLIk/+VTguShigQuPoym2Um7BSxuKoSUr8rEobV XFUGcEjq6RFSNlZHKFEU+SfpeUp/iO957ilkxpGhTIh/yl/mcu6DzXG++8TRjk23 rxSdFk9A5OupOZIfK1cCQaA4/qSRhbyGzucxovS6tF9RVyqpH8T+uBe7pwYJGDX6 EO/5hcOPTjCujZ7DJ8/8TnFor4Onp7BfVrZuk44fEteHtQGx/KkK+c9phTgtdasx +0E5c4WeIIV0uw== -----END CERTIFICATE-----Generated at Wed Dec 24 20:01:53 2025 by rpki-client