This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json) Hash identifier: oIrzduyjnGBJa+BF2kcP+7J3mm8JP69k0tgus2Bukus= Subject key identifier: EB:FB:FF:D1:92:72:3A:7D:C1:5A:BF:3B:90:FD:3C:D3:D0:C1:48:37 Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21 Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921 Certificate serial: 019B35A049B592FBC4672C265EFE8FA2D4BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft Manifest number: 0E7B Signing time: Fri 19 Dec 2025 08:00:55 +0000 Manifest this update: Fri 19 Dec 2025 08:00:55 +0000 Manifest next update: Sat 20 Dec 2025 08:00:55 +0000 Files and hashes: 1: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: xI7T44PLq2cxWDAdn6t7e7iqpHT6mqXTAL4GSq9YX68=) 2: XFj03ZPCOj3qqoe8oMNPGmud9a4.roa (hash: m6E7RZQpvmKbh+R69KgZ6bmoskHz5Bb8/AlaawR8U/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:49:b5:92:fb:c4:67:2c:26:5e:fe:8f:a2:d4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921 Validity Not Before: Dec 19 08:00:55 2025 GMT Not After : Dec 20 08:00:55 2025 GMT Subject: CN=ebfbffd192723a7dc15abf3b90fd3cd3d0c14837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:ef:8e:1e:54:c3:44:e9:53:56:f1:43:25: 53:62:ab:0a:15:65:a9:ce:41:b7:35:7e:91:d7:9c: f7:8e:f1:a9:f4:f2:b3:cd:c8:0b:30:09:e6:32:1a: cf:4c:f0:47:b2:40:0a:c6:86:c3:11:e2:f8:e5:65: cb:4f:8a:51:13:a0:21:b5:78:3d:66:c0:e5:c2:2e: ff:09:10:f5:9b:4f:c2:c9:67:dd:1d:e4:fc:ce:89: 9c:73:7b:f8:e1:5e:eb:0d:57:15:33:8b:72:32:37: 74:c7:c1:17:60:f4:47:b0:1b:36:98:17:aa:18:65: 80:20:fd:50:89:c9:18:60:b8:0a:4c:ea:68:24:c8: 9b:35:42:8b:65:6a:90:93:b7:0a:48:eb:d2:9e:35: 87:66:77:3c:7b:ea:9d:80:87:b9:16:39:0c:75:07: 64:17:b3:63:5c:cc:c6:f9:28:75:b4:6d:a2:81:1a: d3:7d:07:cb:d4:21:49:ed:fa:c3:81:3f:38:9b:bc: f6:86:42:a5:ea:09:44:d5:e1:bd:03:bc:06:e7:aa: 10:34:28:55:da:db:6b:44:74:7b:a8:22:9a:c6:4b: 39:49:55:e2:e6:cc:59:f1:83:ec:ad:5b:d2:dc:9d: 26:3a:d3:7f:2f:94:db:63:c1:37:09:0d:6c:ee:61: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FB:FF:D1:92:72:3A:7D:C1:5A:BF:3B:90:FD:3C:D3:D0:C1:48:37 X509v3 Authority Key Identifier: keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:64:0b:69:b7:2a:b4:3c:53:d1:6b:4f:b4:91:e5:ab:be:12: d6:c2:02:95:91:03:b4:32:23:c8:1b:99:44:8c:65:67:32:0f: e5:b8:54:1c:c7:26:9e:2c:37:e5:31:c5:5a:ac:a9:66:8f:25: ac:c4:52:6e:c2:7b:cf:ed:fb:43:4d:10:fe:a6:e5:2f:18:d4: 36:d3:0a:d7:5f:dd:38:bd:e2:89:cb:76:a3:6b:a2:0d:19:6e: 70:9e:0c:45:07:2c:06:27:b3:55:e6:9c:23:79:32:85:ba:24: e5:5d:a4:56:cd:92:5f:57:71:a4:e6:0a:e8:3e:0c:13:0f:c1: 7a:71:61:5c:2f:52:13:17:2e:5c:09:72:36:b6:e6:01:61:8e: 94:62:f9:53:24:38:e2:22:f5:5d:33:28:48:4e:d8:9a:9b:5f: 36:58:e0:43:fb:26:ac:78:33:65:ff:35:b2:25:fb:65:86:23: f0:55:56:05:b1:d1:e4:c0:8d:e4:db:a1:af:1d:4f:36:27:33: 73:57:f6:b4:62:5c:20:6f:67:b2:17:1a:e8:03:4d:fa:10:6d: 26:98:4e:01:b1:bd:7b:2d:15:7f:c1:76:3f:f7:f2:10:5a:a1: a5:f2:29:a3:07:ad:7f:f6:1a:68:bc:de:fe:65:f3:ce:29:04: 64:7f:19:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oEm1kvvEZywmXv6PotS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYWFkY2NhOTZmNDRhNDU3MzkyZDg5MDdjNmI5NjRiZTBm Y2Y5MjEwHhcNMjUxMjE5MDgwMDU1WhcNMjUxMjIwMDgwMDU1WjAzMTEwLwYDVQQD EyhlYmZiZmZkMTkyNzIzYTdkYzE1YWJmM2I5MGZkM2NkM2QwYzE0ODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCzvjh5Uw0TpU1bxQyVTYqsKFWWp zkG3NX6R15z3jvGp9PKzzcgLMAnmMhrPTPBHskAKxobDEeL45WXLT4pRE6AhtXg9 ZsDlwi7/CRD1m0/CyWfdHeT8zomcc3v44V7rDVcVM4tyMjd0x8EXYPRHsBs2mBeq GGWAIP1QickYYLgKTOpoJMibNUKLZWqQk7cKSOvSnjWHZnc8e+qdgIe5FjkMdQdk F7NjXMzG+Sh1tG2igRrTfQfL1CFJ7frDgT84m7z2hkKl6glE1eG9A7wG56oQNChV 2ttrRHR7qCKaxks5SVXi5sxZ8YPsrVvS3J0mOtN/L5TbY8E3CQ1s7mHF3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOv7/9GScjp9wVq/O5D9PNPQwUg3MB8GA1UdIwQY MBaAFDGq3MqW9EpFc5LYkHxrlkvg/PkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAt OGY3ZmQzZGMxNWZlLzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAtOGY3ZmQzZGMxNWZl LzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmQLabcq tDxT0WtPtJHlq74S1sIClZEDtDIjyBuZRIxlZzIP5bhUHMcmniw35THFWqypZo8l rMRSbsJ7z+37Q00Q/qblLxjUNtMK11/dOL3iict2o2uiDRlucJ4MRQcsBiezVeac I3kyhbok5V2kVs2SX1dxpOYK6D4MEw/BenFhXC9SExcuXAlyNrbmAWGOlGL5UyQ4 4iL1XTMoSE7YmptfNljgQ/smrHgzZf81siX7ZYYj8FVWBbHR5MCN5Nuhrx1PNicz c1f2tGJcIG9nshca6ANN+hBtJphOAbG9ey0Vf8F2P/fyEFqhpfIpowetf/YaaLze /mXzzikEZH8Ztg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:38:17 2025 by rpki-client