This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft File: mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft (raw, json) Hash identifier: sle4Gzh94xlhyRc0rZdcvmiBsDjGtpMrATcfc1lRRK4= Subject key identifier: A4:6E:5D:7B:21:33:BB:F4:D5:59:38:EA:ED:FF:1C:72:F8:61:70:13 Authority key identifier: 99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4 Certificate issuer: /CN=99c13cb58d2fd31e12c5e146cc6b4f2c747816f4 Certificate serial: 019AF12EE924F5BCDE25BF9211243728B9D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft Manifest number: 0A8C Signing time: Sat 06 Dec 2025 01:02:54 +0000 Manifest this update: Sat 06 Dec 2025 01:02:54 +0000 Manifest next update: Sun 07 Dec 2025 01:02:54 +0000 Files and hashes: 1: mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl (hash: D6aoizBDlI3SpeOeZhF8M2KbFCYfglFOSqgyVe5GoI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e9:24:f5:bc:de:25:bf:92:11:24:37:28:b9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99c13cb58d2fd31e12c5e146cc6b4f2c747816f4 Validity Not Before: Dec 6 01:02:54 2025 GMT Not After : Dec 7 01:02:54 2025 GMT Subject: CN=a46e5d7b2133bbf4d55938eaedff1c72f8617013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:24:ea:60:c5:cb:9e:63:6e:23:91:e0:0c: 53:d3:ba:2b:a2:f4:26:30:ab:53:11:86:eb:5d:0e: f1:99:4d:3f:4a:96:e6:81:28:5a:e0:d1:c6:95:bb: ce:cc:97:5d:c3:fc:cd:cc:49:e0:84:f2:88:59:6f: 28:40:7b:40:59:b8:5a:b0:11:25:54:53:25:f6:93: de:ba:36:03:81:73:52:35:5d:6e:c6:e4:67:96:3d: 4f:68:04:cc:13:65:3b:e9:1a:80:36:00:1c:2f:20: 40:da:e9:c3:7c:a3:6a:47:76:7c:7b:73:16:40:2d: 40:36:66:e7:6d:b0:a3:04:03:65:c8:08:91:1c:73: 5f:2e:4d:3e:93:c7:23:44:1b:dc:2c:4f:0a:2e:83: 04:7e:8a:4a:d9:ff:b1:6d:64:8e:e9:38:41:3e:20: 4f:7a:c3:e5:02:bc:b6:02:3b:f0:67:5f:3e:b5:e4: 0c:59:06:4a:f6:d9:1d:eb:ea:61:e6:c0:c3:39:8b: 0c:34:19:f5:24:56:23:4e:f8:ab:27:a0:68:d2:c7: c2:f3:d5:5e:b6:76:9c:18:d2:07:1f:b1:61:26:8c: 53:88:94:e6:ec:7b:fe:ac:07:1a:20:cd:38:34:7d: 4e:0f:cd:6f:1d:f0:2b:7c:0f:89:6d:06:45:d8:26: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6E:5D:7B:21:33:BB:F4:D5:59:38:EA:ED:FF:1C:72:F8:61:70:13 X509v3 Authority Key Identifier: keyid:99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b9:fe:5f:7d:41:37:cd:36:a9:e7:f6:f8:61:40:f0:70:20: 7d:88:bf:92:58:05:fa:0a:40:97:46:61:97:b3:d8:50:43:06: 59:b7:a6:e0:27:2a:07:90:e6:cc:5c:6d:d9:75:73:1b:70:c1: eb:47:59:4f:66:9f:2c:23:9c:3b:cd:c9:31:15:16:3c:7a:08: 0c:15:16:03:c7:cb:89:47:f1:5c:c3:4f:36:b5:52:5a:72:3b: 97:0b:d0:96:c8:da:a2:b7:39:df:1d:24:bd:a2:f6:c2:d6:50: 5c:66:25:a7:ba:2e:5c:a5:69:90:2f:b8:c9:cc:f4:82:ae:b9: 84:be:28:ae:84:7d:c6:0c:dc:08:7d:c7:ff:4c:58:54:21:41: 1e:75:4a:ec:d8:61:6c:8a:8d:de:1e:2b:e2:1c:92:55:78:ac: a9:75:26:d6:cb:7d:52:67:3c:2f:50:88:5b:e8:a3:42:f4:34: 69:e3:9f:e4:1f:8f:06:eb:5e:13:7a:4f:2e:d9:96:34:a8:48: 6d:2f:74:41:d7:c6:83:40:c5:e7:3f:4c:5b:85:dd:2e:bb:45: 25:cf:b6:c3:f9:60:77:4c:4d:9c:21:1a:97:28:83:5a:0b:44: 13:2e:b0:f6:3f:42:c3:96:f4:ab:ef:23:7b:c8:94:c3:90:8d: 0d:03:f1:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLukk9bzeJb+SESQ3KLnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YzEzY2I1OGQyZmQzMWUxMmM1ZTE0NmNjNmI0ZjJjNzQ3 ODE2ZjQwHhcNMjUxMjA2MDEwMjU0WhcNMjUxMjA3MDEwMjU0WjAzMTEwLwYDVQQD EyhhNDZlNWQ3YjIxMzNiYmY0ZDU1OTM4ZWFlZGZmMWM3MmY4NjE3MDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe8k6mDFy55jbiOR4AxT07orovQm MKtTEYbrXQ7xmU0/SpbmgSha4NHGlbvOzJddw/zNzEnghPKIWW8oQHtAWbhasBEl VFMl9pPeujYDgXNSNV1uxuRnlj1PaATME2U76RqANgAcLyBA2unDfKNqR3Z8e3MW QC1ANmbnbbCjBANlyAiRHHNfLk0+k8cjRBvcLE8KLoMEfopK2f+xbWSO6ThBPiBP esPlAry2AjvwZ18+teQMWQZK9tkd6+ph5sDDOYsMNBn1JFYjTvirJ6Bo0sfC89Ve tnacGNIHH7FhJoxTiJTm7Hv+rAcaIM04NH1OD81vHfArfA+JbQZF2CbKdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRuXXshM7v01Vk46u3/HHL4YXATMB8GA1UdIwQY MBaAFJnBPLWNL9MeEsXhRsxrTyx0eBb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWNFOHRZMHYweDRTeGVGR3pHdFBMSFI0RnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOTJiMzAtOGFkYS00NzVjLWFhMmEt NTY3ZGM5YTc5ZmRkLzEvbWNFOHRZMHYweDRTeGVGR3pHdFBMSFI0RnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iOTJiMzAtOGFkYS00NzVjLWFhMmEtNTY3ZGM5YTc5ZmRk LzEvbWNFOHRZMHYweDRTeGVGR3pHdFBMSFI0RnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbn+X31B N802qef2+GFA8HAgfYi/klgF+gpAl0Zhl7PYUEMGWbem4CcqB5DmzFxt2XVzG3DB 60dZT2afLCOcO83JMRUWPHoIDBUWA8fLiUfxXMNPNrVSWnI7lwvQlsjaorc53x0k vaL2wtZQXGYlp7ouXKVpkC+4ycz0gq65hL4oroR9xgzcCH3H/0xYVCFBHnVK7Nhh bIqN3h4r4hySVXisqXUm1st9Umc8L1CIW+ijQvQ0aeOf5B+PButeE3pPLtmWNKhI bS90QdfGg0DF5z9MW4XdLrtFJc+2w/lgd0xNnCEalyiDWgtEEy6w9j9Cw5b0q+8j e8iUw5CNDQPxQg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:33 2025 by rpki-client