This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft File: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json) Hash identifier: 2H+w4xGeUK4IOz07lNdgwWUmCTFCSw07kbNcoxwUA38= Subject key identifier: CA:64:C1:48:43:79:BD:BA:CC:BB:74:36:DC:F1:BC:88:17:FC:B8:A0 Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4 Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4 Certificate serial: 019B66FBEA024DABEB95082BA8E4720DC239 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft Manifest number: 0EE6 Signing time: Sun 28 Dec 2025 22:02:24 +0000 Manifest this update: Sun 28 Dec 2025 22:02:24 +0000 Manifest next update: Mon 29 Dec 2025 22:02:24 +0000 Files and hashes: 1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: /GKfEeCgwpXsbtRWYzoUYCrLbpnd74WmK/qyoB7qQEg=) 2: LSE36n14OlFyT2JPffWytn2VECM.roa (hash: aCXHANC+PKr6N/DP0npU9YHvABAfrys/iPm1LqbDFCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:ea:02:4d:ab:eb:95:08:2b:a8:e4:72:0d:c2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4 Validity Not Before: Dec 28 22:02:24 2025 GMT Not After : Dec 29 22:02:24 2025 GMT Subject: CN=ca64c1484379bdbaccbb7436dcf1bc8817fcb8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:70:1d:6b:1f:74:bf:c9:ba:a8:d1:4a:7b:e2: be:f5:1b:82:cb:46:a4:20:b0:e5:71:75:97:f1:8e: d3:b7:ac:e4:8d:28:5f:70:05:a1:7c:13:e1:f5:fb: 46:02:0c:6a:2b:3a:80:a1:fe:ca:7e:ce:07:7a:03: 39:8d:39:27:09:f2:aa:37:11:58:ca:20:9e:d1:3f: 66:e5:fc:5b:ad:b1:35:3b:4f:c3:33:dd:28:72:8d: 63:d5:90:14:89:30:d7:15:f5:be:b9:f7:c8:c8:81: 25:6f:d8:96:0a:9c:86:dd:4d:4c:fa:e2:2d:db:5e: 43:73:91:a4:b4:6d:1d:d4:2b:e3:5d:c2:65:24:a2: 28:eb:08:51:ae:6e:0e:33:cf:e9:df:f9:87:6e:fe: 8d:24:62:fe:cc:05:ce:6c:d0:45:83:3b:27:07:1e: 6c:6c:a9:8d:c2:aa:4d:89:6f:f4:60:0a:67:82:7d: 33:2e:06:74:d4:84:d2:b2:22:9d:3f:d2:4e:df:71: bc:8d:8f:99:4a:a1:b3:b8:5b:40:44:16:bd:2f:02: 2a:01:08:5d:1c:80:81:aa:f5:0c:2c:a2:23:6e:7b: d6:7a:73:9a:68:6c:d1:e6:fb:03:83:91:ac:16:28: ce:f9:2c:f5:2c:8d:b1:ce:29:e9:b3:9e:b9:6d:e0: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:64:C1:48:43:79:BD:BA:CC:BB:74:36:DC:F1:BC:88:17:FC:B8:A0 X509v3 Authority Key Identifier: keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:bc:21:bb:4a:2f:72:0b:89:41:7b:4b:89:58:07:62:53:7a: 47:22:57:cc:4c:75:1a:3c:7c:25:52:ad:19:40:c9:77:90:f1: af:c1:ff:b4:e5:4a:ec:6b:a4:6c:f2:61:a7:23:fa:e2:53:b9: 9a:4d:82:e6:93:c3:ad:91:94:ab:d8:6b:5b:77:c1:1d:84:f9: bd:81:b4:a1:ca:02:fe:00:9a:ab:49:d6:df:27:12:ea:47:3f: 01:9e:91:ed:27:31:33:f8:5e:59:9b:22:b5:76:ef:52:ff:c9: b4:8e:b6:ff:87:51:3a:fe:ea:bd:79:70:3b:29:e8:09:3e:c9: 57:5c:ec:b6:6e:c6:d3:d2:ca:6a:82:a7:e7:40:55:d8:98:c1: 58:4e:c0:75:11:43:91:c1:89:b8:96:10:ad:0a:db:55:d9:f7: f0:bd:42:07:a4:c8:d5:80:d4:22:2e:d2:27:59:6c:cf:de:01: ea:c8:dc:fa:db:d7:e8:cc:14:5e:24:62:40:8d:59:d5:c1:6b: 03:e2:ac:60:02:b8:91:a1:7e:23:ea:aa:6e:aa:b1:6a:6e:10: 8c:41:e9:ee:84:1b:85:03:e4:33:47:2d:5f:ca:eb:bf:52:65: 64:64:4e:1e:fb:97:16:8e:93:23:be:5e:27:65:53:15:d3:f7: 2c:7f:c3:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm++oCTavrlQgrqORyDcI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZDUzNTA4M2ZiMTQwZGRhYjQ1M2FiZjgyMWY1ZGIzYTZm NDYxYTQwHhcNMjUxMjI4MjIwMjI0WhcNMjUxMjI5MjIwMjI0WjAzMTEwLwYDVQQD EyhjYTY0YzE0ODQzNzliZGJhY2NiYjc0MzZkY2YxYmM4ODE3ZmNiOGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03Adax90v8m6qNFKe+K+9RuCy0ak ILDlcXWX8Y7Tt6zkjShfcAWhfBPh9ftGAgxqKzqAof7Kfs4HegM5jTknCfKqNxFY yiCe0T9m5fxbrbE1O0/DM90oco1j1ZAUiTDXFfW+uffIyIElb9iWCpyG3U1M+uIt 215Dc5GktG0d1CvjXcJlJKIo6whRrm4OM8/p3/mHbv6NJGL+zAXObNBFgzsnBx5s bKmNwqpNiW/0YApngn0zLgZ01ITSsiKdP9JO33G8jY+ZSqGzuFtARBa9LwIqAQhd HICBqvUMLKIjbnvWenOaaGzR5vsDg5GsFijO+Sz1LI2xzinps565beAgTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpkwUhDeb26zLt0NtzxvIgX/LigMB8GA1UdIwQY MBaAFPfVNQg/sUDdq0U6v4IfXbOm9GGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYt NWNkODg1NDg5ZjgyLzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYtNWNkODg1NDg5Zjgy LzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7whu0ov cguJQXtLiVgHYlN6RyJXzEx1Gjx8JVKtGUDJd5Dxr8H/tOVK7GukbPJhpyP64lO5 mk2C5pPDrZGUq9hrW3fBHYT5vYG0ocoC/gCaq0nW3ycS6kc/AZ6R7ScxM/heWZsi tXbvUv/JtI62/4dROv7qvXlwOynoCT7JV1zstm7G09LKaoKn50BV2JjBWE7AdRFD kcGJuJYQrQrbVdn38L1CB6TI1YDUIi7SJ1lsz94B6sjc+tvX6MwUXiRiQI1Z1cFr A+KsYAK4kaF+I+qqbqqxam4QjEHp7oQbhQPkM0ctX8rrv1JlZGROHvuXFo6TI75e J2VTFdP3LH/DTw== -----END CERTIFICATE-----Generated at Mon Dec 29 06:49:14 2025 by rpki-client