This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft File: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json) Hash identifier: 79pDD9o1y+1tDPYhtaCTi62qGCgrJUv+Q42LGegduMQ= Subject key identifier: 68:26:5A:ED:22:6C:BA:6C:11:84:87:3C:0E:CA:6F:C8:77:60:F8:31 Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4 Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4 Certificate serial: 019B53AAFDF9486D642489F42B69D66D1686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft Manifest number: 0EDC Signing time: Thu 25 Dec 2025 04:01:13 +0000 Manifest this update: Thu 25 Dec 2025 04:01:13 +0000 Manifest next update: Fri 26 Dec 2025 04:01:13 +0000 Files and hashes: 1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: 3wzLupg/1N3VSO93WRSvPdLffl3Xq2rb8EKM4iIRc+Y=) 2: LSE36n14OlFyT2JPffWytn2VECM.roa (hash: aCXHANC+PKr6N/DP0npU9YHvABAfrys/iPm1LqbDFCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:fd:f9:48:6d:64:24:89:f4:2b:69:d6:6d:16:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4 Validity Not Before: Dec 25 04:01:13 2025 GMT Not After : Dec 26 04:01:13 2025 GMT Subject: CN=68265aed226cba6c1184873c0eca6fc87760f831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6c:04:34:9c:8c:76:ce:1a:f7:67:00:1a:39: a0:87:cb:f2:d2:74:5f:b1:b4:24:42:5a:d6:cd:24: f8:7f:24:8d:ad:49:91:b5:97:b9:8b:3d:ac:31:c8: 79:64:09:d3:d5:b9:fe:a1:48:13:f6:dc:96:9b:38: 35:29:68:f1:c2:ee:24:76:a9:fb:f8:b1:b2:61:46: 0c:dd:97:07:f3:73:47:2a:e5:5c:76:fb:5c:62:aa: 61:59:fb:b4:83:cc:d1:f6:81:b8:cd:ff:2a:a6:ab: 8c:31:e6:74:7a:a3:b2:a0:2c:0f:47:69:d2:cc:99: 98:58:96:e0:36:43:a1:da:b2:24:a1:70:74:c1:7a: dc:04:9c:36:b9:3c:ba:79:6f:7d:26:cb:28:ee:1e: 14:f0:ea:97:97:55:be:8a:65:d8:db:cc:2d:8f:48: c3:26:a5:ac:b6:64:3e:5d:c3:6e:eb:c3:23:31:f5: b5:53:92:6d:92:be:97:44:f8:eb:ae:ca:9d:58:60: 00:fd:d2:a8:59:5c:99:6c:0b:a8:e1:d1:6c:cd:33: 2d:16:52:a2:96:18:f4:73:02:51:cd:b4:17:46:23: 3a:e4:da:84:b3:7b:70:23:26:1f:b0:1c:f5:82:b6: 14:a8:ef:e6:bb:ab:ba:85:1d:b0:55:6a:63:ac:21: 15:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:26:5A:ED:22:6C:BA:6C:11:84:87:3C:0E:CA:6F:C8:77:60:F8:31 X509v3 Authority Key Identifier: keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:69:c8:4d:ad:da:a3:a1:5c:76:9a:d5:be:3c:42:d2:de:a0: e7:38:17:81:1c:ef:2d:1b:f3:34:6f:d0:29:9b:70:9d:69:ba: 05:7d:f0:85:32:20:1d:ff:22:c8:8c:08:50:45:ca:c9:63:6b: 40:5b:c3:65:2e:8f:a6:ae:34:d4:2c:91:4f:96:2c:01:f2:22: b9:5b:cb:c6:1c:e6:1d:3a:64:2e:78:e5:98:76:9e:a4:a2:a8: 6b:6a:d4:b0:4b:83:aa:d1:39:44:21:4a:6a:a9:11:c3:b7:72: f2:72:a4:37:98:cc:74:6f:7b:17:81:2f:d0:cc:c2:96:22:4b: 85:5b:f1:dd:05:f9:fc:92:46:62:cd:94:0c:01:da:b9:6e:ce: 64:ff:e2:a6:de:46:30:60:1c:91:6c:20:11:c4:0b:b8:16:cf: d7:3a:cf:c8:4d:56:d4:53:dd:80:5a:f6:3a:7d:61:a1:31:0d: c8:09:81:88:39:5d:27:0a:45:00:bb:4a:8d:b5:b7:5c:3b:11: e5:50:1d:08:cb:fc:32:ab:36:d4:90:65:79:04:9c:d0:2f:a6: f2:45:0f:57:e4:b5:56:80:a2:36:e6:ac:55:8f:bf:8c:16:97: eb:18:74:7f:b7:ad:89:83:d3:c1:be:7f:f6:a0:46:29:03:72: 04:61:c0:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqv35SG1kJIn0K2nWbRaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZDUzNTA4M2ZiMTQwZGRhYjQ1M2FiZjgyMWY1ZGIzYTZm NDYxYTQwHhcNMjUxMjI1MDQwMTEzWhcNMjUxMjI2MDQwMTEzWjAzMTEwLwYDVQQD Eyg2ODI2NWFlZDIyNmNiYTZjMTE4NDg3M2MwZWNhNmZjODc3NjBmODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2wENJyMds4a92cAGjmgh8vy0nRf sbQkQlrWzST4fySNrUmRtZe5iz2sMch5ZAnT1bn+oUgT9tyWmzg1KWjxwu4kdqn7 +LGyYUYM3ZcH83NHKuVcdvtcYqphWfu0g8zR9oG4zf8qpquMMeZ0eqOyoCwPR2nS zJmYWJbgNkOh2rIkoXB0wXrcBJw2uTy6eW99Jsso7h4U8OqXl1W+imXY28wtj0jD JqWstmQ+XcNu68MjMfW1U5Jtkr6XRPjrrsqdWGAA/dKoWVyZbAuo4dFszTMtFlKi lhj0cwJRzbQXRiM65NqEs3twIyYfsBz1grYUqO/mu6u6hR2wVWpjrCEVJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgmWu0ibLpsEYSHPA7Kb8h3YPgxMB8GA1UdIwQY MBaAFPfVNQg/sUDdq0U6v4IfXbOm9GGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYt NWNkODg1NDg5ZjgyLzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYtNWNkODg1NDg5Zjgy LzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2nITa3a o6FcdprVvjxC0t6g5zgXgRzvLRvzNG/QKZtwnWm6BX3whTIgHf8iyIwIUEXKyWNr QFvDZS6Ppq401CyRT5YsAfIiuVvLxhzmHTpkLnjlmHaepKKoa2rUsEuDqtE5RCFK aqkRw7dy8nKkN5jMdG97F4Ev0MzCliJLhVvx3QX5/JJGYs2UDAHauW7OZP/ipt5G MGAckWwgEcQLuBbP1zrPyE1W1FPdgFr2On1hoTENyAmBiDldJwpFALtKjbW3XDsR 5VAdCMv8Mqs21JBleQSc0C+m8kUPV+S1VoCiNuasVY+/jBaX6xh0f7etiYPTwb5/ 9qBGKQNyBGHAIA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:10:34 2025 by rpki-client