This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json) Hash identifier: zHy4UODGMKs4mumBOYLz0+1SouY8HBh+CXNfu00TtFQ= Subject key identifier: C5:F2:28:92:CE:AD:CC:D8:85:85:0F:3D:4B:26:99:97:1A:3E:B9:DF Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21 Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921 Certificate serial: 019B6BB2DEADD082989091E881C80EDB64A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft Manifest number: 0E97 Signing time: Mon 29 Dec 2025 20:00:43 +0000 Manifest this update: Mon 29 Dec 2025 20:00:43 +0000 Manifest next update: Tue 30 Dec 2025 20:00:43 +0000 Files and hashes: 1: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: 5ChmGFERG3y4E0jVb0FH3oaoDzMaDdTAb2fQFc2mcqg=) 2: XFj03ZPCOj3qqoe8oMNPGmud9a4.roa (hash: m6E7RZQpvmKbh+R69KgZ6bmoskHz5Bb8/AlaawR8U/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b2:de:ad:d0:82:98:90:91:e8:81:c8:0e:db:64:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921 Validity Not Before: Dec 29 20:00:43 2025 GMT Not After : Dec 30 20:00:43 2025 GMT Subject: CN=c5f22892ceadccd885850f3d4b2699971a3eb9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:7e:e5:f2:1d:db:ed:9c:14:92:7d:98:bf: 21:bc:0d:99:ce:a9:bf:23:89:ed:10:b1:d9:af:12: e2:66:ba:10:4b:25:2c:81:bc:e7:10:47:80:ef:b9: 2c:91:af:24:85:b9:d9:8a:cd:aa:48:69:09:e7:d9: 21:97:a0:4f:95:ce:9f:f5:79:01:c9:9e:33:5a:48: f6:ce:bb:43:61:c6:57:51:23:ef:38:08:71:f1:f8: 93:52:47:9f:ad:13:ac:e6:6b:d1:7e:b8:08:53:db: 1a:ce:ec:bd:cb:27:13:29:5f:a3:c6:66:2d:45:68: d9:35:62:9f:0d:f8:45:a2:79:b2:e9:1e:b8:e4:18: ef:e0:9d:d5:d5:ad:c8:2b:87:0f:d9:e7:36:5e:5e: 67:44:8f:f5:bb:d1:f5:a3:0e:4e:dd:f1:49:4d:1d: 93:d1:b6:3b:3e:b3:ea:d8:76:85:30:d4:2a:cb:79: 11:fe:73:66:74:a4:fb:e1:e8:9c:09:c9:a8:4f:f8: 9a:88:db:06:c0:73:92:fe:96:32:48:9d:12:18:55: 16:1a:10:16:da:83:70:84:ce:7b:f0:52:62:ef:8a: a0:1d:76:cc:1b:6d:8c:45:c6:6b:9a:0a:6c:67:89: e0:1e:a8:35:b6:61:55:05:c3:f6:b9:67:3b:8e:fd: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F2:28:92:CE:AD:CC:D8:85:85:0F:3D:4B:26:99:97:1A:3E:B9:DF X509v3 Authority Key Identifier: keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a5:f5:d9:15:ae:ad:6e:5d:f2:d3:5a:75:90:2c:59:ff:a7: 16:41:26:2e:a1:d5:04:21:cf:c7:ac:3e:4b:8d:76:c9:30:b4: cf:c4:69:cd:ab:b4:85:c5:11:53:55:47:6b:b3:fe:31:b9:24: 6a:3d:f8:f1:53:82:58:3b:77:e6:c4:db:32:07:98:53:a3:17: 96:bf:db:96:29:0d:3b:7f:fc:d2:0a:dc:79:93:f0:d4:3b:00: 5d:d9:39:82:c8:7a:0c:a1:9b:a8:89:3f:37:6c:fb:cc:dd:25: 61:4b:13:f8:fd:c8:ac:59:65:e8:6b:ef:7a:6f:b3:6d:48:17: 4c:f6:63:b5:bc:92:97:24:6b:bb:f8:1a:0c:61:d2:9a:16:fd: 89:2b:19:ec:0e:aa:84:ec:05:f2:26:f6:52:da:43:4b:ef:c1: 1f:8f:01:f1:20:a4:f0:86:6c:4e:2d:1f:d4:20:fa:20:11:00: 0d:a1:ff:18:c1:f2:33:78:e7:97:69:f7:8f:12:a7:68:c7:5a: 68:1b:cb:97:6b:ab:c7:77:00:95:9b:01:0c:11:6d:53:f0:d5: 87:b0:27:ca:e3:78:06:00:34:e1:0d:ad:7f:b5:e1:84:76:fd: 3d:7d:b6:b5:dc:91:31:aa:9e:17:a8:7a:44:6e:1b:cf:df:cf: f4:5b:dd:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrst6t0IKYkJHogcgO22SkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYWFkY2NhOTZmNDRhNDU3MzkyZDg5MDdjNmI5NjRiZTBm Y2Y5MjEwHhcNMjUxMjI5MjAwMDQzWhcNMjUxMjMwMjAwMDQzWjAzMTEwLwYDVQQD EyhjNWYyMjg5MmNlYWRjY2Q4ODU4NTBmM2Q0YjI2OTk5NzFhM2ViOWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxR+5fId2+2cFJJ9mL8hvA2Zzqm/ I4ntELHZrxLiZroQSyUsgbznEEeA77kska8khbnZis2qSGkJ59khl6BPlc6f9XkB yZ4zWkj2zrtDYcZXUSPvOAhx8fiTUkefrROs5mvRfrgIU9sazuy9yycTKV+jxmYt RWjZNWKfDfhFonmy6R645Bjv4J3V1a3IK4cP2ec2Xl5nRI/1u9H1ow5O3fFJTR2T 0bY7PrPq2HaFMNQqy3kR/nNmdKT74eicCcmoT/iaiNsGwHOS/pYySJ0SGFUWGhAW 2oNwhM578FJi74qgHXbMG22MRcZrmgpsZ4ngHqg1tmFVBcP2uWc7jv2VzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXyKJLOrczYhYUPPUsmmZcaPrnfMB8GA1UdIwQY MBaAFDGq3MqW9EpFc5LYkHxrlkvg/PkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAt OGY3ZmQzZGMxNWZlLzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAtOGY3ZmQzZGMxNWZl LzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKX12RWu rW5d8tNadZAsWf+nFkEmLqHVBCHPx6w+S412yTC0z8Rpzau0hcURU1VHa7P+Mbkk aj348VOCWDt35sTbMgeYU6MXlr/blikNO3/80grceZPw1DsAXdk5gsh6DKGbqIk/ N2z7zN0lYUsT+P3IrFll6Gvvem+zbUgXTPZjtbySlyRru/gaDGHSmhb9iSsZ7A6q hOwF8ib2UtpDS+/BH48B8SCk8IZsTi0f1CD6IBEADaH/GMHyM3jnl2n3jxKnaMda aBvLl2urx3cAlZsBDBFtU/DVh7AnyuN4BgA04Q2tf7XhhHb9PX22tdyRMaqeF6h6 RG4bz9/P9Fvd5A== -----END CERTIFICATE-----Generated at Mon Dec 29 23:46:03 2025 by rpki-client