This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft File: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json) Hash identifier: rWVnAXPeYPk2rAeNwea+XzTw3BGUbKugDUbaBYkF1eI= Subject key identifier: 1B:A4:67:E9:72:B2:C6:83:E8:68:8D:BD:24:C6:40:DB:DD:1B:9C:65 Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4 Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4 Certificate serial: 019AF12DCCDB5DEE868A389BBA59DEB999F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft Manifest number: 0EA9 Signing time: Sat 06 Dec 2025 01:01:41 +0000 Manifest this update: Sat 06 Dec 2025 01:01:41 +0000 Manifest next update: Sun 07 Dec 2025 01:01:41 +0000 Files and hashes: 1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: tOqlgHB6cfttOhn8KK70zsqPzn+GVIHhSo6gXkk4I0w=) 2: LSE36n14OlFyT2JPffWytn2VECM.roa (hash: aCXHANC+PKr6N/DP0npU9YHvABAfrys/iPm1LqbDFCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:cc:db:5d:ee:86:8a:38:9b:ba:59:de:b9:99:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4 Validity Not Before: Dec 6 01:01:41 2025 GMT Not After : Dec 7 01:01:41 2025 GMT Subject: CN=1ba467e972b2c683e8688dbd24c640dbdd1b9c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:f5:ca:1f:29:aa:be:50:06:42:f4:54:5a: a9:f4:71:57:0c:ee:a0:6a:e0:c5:f0:8d:42:94:bc: 96:61:fe:e9:f4:96:b7:26:ab:6e:3d:25:7c:0f:37: c3:54:56:c0:ec:b5:ce:25:ab:b9:4b:69:d2:05:0f: d3:44:a5:1e:ac:8d:c2:ea:c1:b7:28:20:52:c3:c8: 5e:8f:94:e4:4c:10:a5:51:f8:22:9c:7d:3e:ba:b0: 58:e0:45:bb:4d:95:f5:af:0a:52:20:08:dd:76:1b: 9c:91:d0:ef:92:a3:19:42:f0:68:92:49:73:eb:a0: 15:09:22:ce:3e:7c:f1:04:77:ea:27:cc:6b:02:6b: 26:9f:2c:0c:a8:88:a1:ea:d9:eb:86:87:41:82:9f: c2:77:c3:dd:e7:27:78:66:c6:35:9a:8b:ba:cf:f5: 3f:34:26:1d:60:19:02:96:b1:89:0b:8c:ab:12:a3: b8:33:38:fd:b3:07:66:68:f7:65:48:90:bf:5b:d3: 4a:d4:93:ce:6f:81:68:76:2c:19:a4:63:c9:13:e6: 99:6f:2f:93:c3:af:2e:1c:5d:12:f3:40:dd:19:c6: 9a:71:f5:c9:12:7f:9d:b2:55:3a:08:58:45:e6:65: 98:4d:cb:e3:92:ea:b1:9c:01:80:8c:60:df:43:5b: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A4:67:E9:72:B2:C6:83:E8:68:8D:BD:24:C6:40:DB:DD:1B:9C:65 X509v3 Authority Key Identifier: keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:81:67:fb:c1:f6:0d:1c:12:78:53:70:21:6d:0f:29:e5:f6: b5:81:25:89:64:49:dc:13:3c:f5:d8:0c:99:37:7d:32:68:66: d5:e3:27:3c:29:51:a5:fa:3a:fc:d6:38:09:1b:e7:66:28:65: 3b:a7:bc:24:86:d8:f9:11:9f:93:01:ab:f5:35:87:05:c1:4f: d9:98:7f:b1:98:0a:67:85:a8:47:50:4f:2c:f4:d3:db:3d:6e: 08:ea:02:48:b7:d7:6f:c6:e4:12:73:9d:e4:fe:b6:4e:e0:3c: 85:07:27:31:de:d7:c3:ed:ca:12:64:0d:28:97:10:e4:a7:40: e2:3a:57:77:7f:f8:84:7c:b4:4d:35:46:e3:18:5f:71:81:32: ba:05:1a:fd:1e:a7:76:07:29:52:b0:d2:c3:02:c0:c3:c0:89: 51:46:24:8b:27:31:c7:c4:8d:b0:85:c7:1c:e9:c1:13:7d:ad: 58:87:72:6d:b1:0d:47:0f:ea:03:be:a8:55:2a:c5:0b:de:44: e6:3f:42:8d:77:af:d5:55:14:89:9e:13:94:fa:91:e6:e2:f7: 8b:ec:6f:7f:91:69:ee:e6:0b:b6:c5:8c:27:03:89:b3:f8:35: d3:e8:bf:11:3d:3f:9c:29:78:65:c4:dc:37:8b:e7:d8:f9:3e: 3b:f6:df:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLczbXe6GijibulneuZn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZDUzNTA4M2ZiMTQwZGRhYjQ1M2FiZjgyMWY1ZGIzYTZm NDYxYTQwHhcNMjUxMjA2MDEwMTQxWhcNMjUxMjA3MDEwMTQxWjAzMTEwLwYDVQQD EygxYmE0NjdlOTcyYjJjNjgzZTg2ODhkYmQyNGM2NDBkYmRkMWI5YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXP1yh8pqr5QBkL0VFqp9HFXDO6g auDF8I1ClLyWYf7p9Ja3JqtuPSV8DzfDVFbA7LXOJau5S2nSBQ/TRKUerI3C6sG3 KCBSw8hej5TkTBClUfginH0+urBY4EW7TZX1rwpSIAjddhuckdDvkqMZQvBokklz 66AVCSLOPnzxBHfqJ8xrAmsmnywMqIih6tnrhodBgp/Cd8Pd5yd4ZsY1mou6z/U/ NCYdYBkClrGJC4yrEqO4Mzj9swdmaPdlSJC/W9NK1JPOb4FodiwZpGPJE+aZby+T w68uHF0S80DdGcaacfXJEn+dslU6CFhF5mWYTcvjkuqxnAGAjGDfQ1vW2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBukZ+lyssaD6GiNvSTGQNvdG5xlMB8GA1UdIwQY MBaAFPfVNQg/sUDdq0U6v4IfXbOm9GGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYt NWNkODg1NDg5ZjgyLzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYtNWNkODg1NDg5Zjgy LzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYFn+8H2 DRwSeFNwIW0PKeX2tYEliWRJ3BM89dgMmTd9Mmhm1eMnPClRpfo6/NY4CRvnZihl O6e8JIbY+RGfkwGr9TWHBcFP2Zh/sZgKZ4WoR1BPLPTT2z1uCOoCSLfXb8bkEnOd 5P62TuA8hQcnMd7Xw+3KEmQNKJcQ5KdA4jpXd3/4hHy0TTVG4xhfcYEyugUa/R6n dgcpUrDSwwLAw8CJUUYkiycxx8SNsIXHHOnBE32tWIdybbENRw/qA76oVSrFC95E 5j9CjXev1VUUiZ4TlPqR5uL3i+xvf5Fp7uYLtsWMJwOJs/g10+i/ET0/nCl4ZcTc N4vn2Pk+O/bf7g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:41 2025 by rpki-client