This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft File: mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json) Hash identifier: Q7Vji2mLMtWoEFVnWX4xhrRCM27rs0a7NU6xipzE3xs= Subject key identifier: FD:33:E7:75:D4:28:79:F3:05:E6:24:BB:F6:87:76:D4:27:56:BA:6F Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7 Certificate issuer: /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7 Certificate serial: 019AF31B8E38596392C59149E8C69D273BD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft Manifest number: 0936 Signing time: Sat 06 Dec 2025 10:01:00 +0000 Manifest this update: Sat 06 Dec 2025 10:01:00 +0000 Manifest next update: Sun 07 Dec 2025 10:01:00 +0000 Files and hashes: 1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: 6CqwN1C8BiskMQazEVVTK8RWMMhfDXCO9hszG0C0GwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8e:38:59:63:92:c5:91:49:e8:c6:9d:27:3b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7 Validity Not Before: Dec 6 10:01:00 2025 GMT Not After : Dec 7 10:01:00 2025 GMT Subject: CN=fd33e775d42879f305e624bbf68776d42756ba6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:dc:18:6a:0f:54:c3:83:04:e9:1c:d7:7e: 01:9e:e5:e2:f9:46:0b:f0:cf:98:1b:ba:be:87:00: 30:49:0e:9b:aa:f2:43:3d:df:77:e1:06:c4:6b:4c: 00:be:86:c2:89:83:f7:06:d8:84:76:9b:dd:30:a8: f3:22:7d:a3:b9:57:fe:45:c4:45:17:48:3b:40:66: d8:10:23:91:d7:c2:d2:47:6f:4d:ba:1f:32:44:a6: f2:d4:cc:f8:c8:28:93:40:63:a3:1a:73:c9:fd:83: 21:21:78:64:e0:0a:d4:b4:e6:fd:7e:5d:d9:7f:04: d2:46:c3:4d:de:5c:93:7f:8d:aa:c3:b8:9c:de:65: e1:ac:dd:1c:90:bc:f0:5f:d9:05:1f:65:b6:f0:93: d7:62:37:78:ec:05:82:a7:e2:e2:82:26:eb:bc:c6: 40:65:6b:c8:03:bf:5b:36:41:dd:cb:79:e0:5c:31: 05:65:09:fd:d9:35:07:90:15:80:1a:1a:0b:d5:b7: 56:04:47:3a:32:8f:22:80:61:e2:85:3b:f4:e7:a3: 86:e0:5c:fd:ad:6e:78:f9:e8:40:a8:d8:73:e2:87: 37:f5:47:24:fd:81:c1:e9:f6:63:30:54:fb:61:aa: 82:5e:52:c8:28:11:58:cc:7a:2c:78:58:a3:c3:a1: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:33:E7:75:D4:28:79:F3:05:E6:24:BB:F6:87:76:D4:27:56:BA:6F X509v3 Authority Key Identifier: keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:11:4c:95:19:c9:55:2b:d7:f1:30:99:0b:0c:08:ff:ef:dc: a8:2e:6a:b8:96:c5:44:a9:07:4a:4a:12:b1:2d:f5:2d:85:1b: 46:8f:d3:82:4e:75:7b:6f:13:8d:fe:dd:a8:7a:df:96:de:da: c4:fb:e2:64:ef:1e:81:04:6b:53:bc:e5:86:f7:1f:10:76:e3: 94:5d:8f:a5:fc:bc:e9:d8:1e:ca:61:1e:6d:ce:c7:4c:0f:a4: dd:1f:99:02:2a:fb:7e:32:23:5a:0b:1e:e8:26:c0:f1:0a:06: 1d:0f:a4:ca:42:83:8e:9a:c1:37:3d:be:c5:2c:e8:3e:81:54: 66:43:96:b0:29:8c:f4:f0:6f:e2:00:b6:2f:85:d0:1a:14:af: 43:ee:dc:ad:7f:9e:89:7d:10:f7:51:e8:31:4f:aa:59:d3:c6: b8:e5:b5:74:99:78:59:d8:36:3e:3a:15:1d:cf:fb:06:19:ff: 51:68:40:a4:b8:47:81:ea:a8:f6:df:fd:36:98:5e:08:61:fa: 5b:14:c9:ca:0d:11:43:80:f3:cd:f5:2c:75:01:ca:03:c0:7d: 54:f3:68:c9:c7:28:21:b1:2f:bb:02:ef:01:0e:2c:c0:9f:ea: 19:ec:54:7d:30:50:df:0c:72:1e:a8:31:c7:71:40:a5:55:2a: 8d:22:b0:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG444WWOSxZFJ6MadJzvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2E5OGExMmJiNmQ4ZGFiODJmMzc0Y2YwYTI3OGE1YTYx Yjc4ZTcwHhcNMjUxMjA2MTAwMTAwWhcNMjUxMjA3MTAwMTAwWjAzMTEwLwYDVQQD EyhmZDMzZTc3NWQ0Mjg3OWYzMDVlNjI0YmJmNjg3NzZkNDI3NTZiYTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIDcGGoPVMODBOkc134BnuXi+UYL 8M+YG7q+hwAwSQ6bqvJDPd934QbEa0wAvobCiYP3BtiEdpvdMKjzIn2juVf+RcRF F0g7QGbYECOR18LSR29Nuh8yRKby1Mz4yCiTQGOjGnPJ/YMhIXhk4ArUtOb9fl3Z fwTSRsNN3lyTf42qw7ic3mXhrN0ckLzwX9kFH2W28JPXYjd47AWCp+LigibrvMZA ZWvIA79bNkHdy3ngXDEFZQn92TUHkBWAGhoL1bdWBEc6Mo8igGHihTv056OG4Fz9 rW54+ehAqNhz4oc39Uck/YHB6fZjMFT7YaqCXlLIKBFYzHoseFijw6GReQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0z53XUKHnzBeYku/aHdtQnVrpvMB8GA1UdIwQY MBaAFJnKmKErttjauC83TPCieKWmG3jnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEt MjhjM2MxZTJhMzcwLzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEtMjhjM2MxZTJhMzcw LzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRFMlRnJ VSvX8TCZCwwI/+/cqC5quJbFRKkHSkoSsS31LYUbRo/Tgk51e28Tjf7dqHrflt7a xPviZO8egQRrU7zlhvcfEHbjlF2Ppfy86dgeymEebc7HTA+k3R+ZAir7fjIjWgse 6CbA8QoGHQ+kykKDjprBNz2+xSzoPoFUZkOWsCmM9PBv4gC2L4XQGhSvQ+7crX+e iX0Q91HoMU+qWdPGuOW1dJl4Wdg2PjoVHc/7Bhn/UWhApLhHgeqo9t/9NpheCGH6 WxTJyg0RQ4DzzfUsdQHKA8B9VPNoyccoIbEvuwLvAQ4swJ/qGexUfTBQ3wxyHqgx x3FApVUqjSKwsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:32 2025 by rpki-client