This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json) Hash identifier: OItRWYxJ1P6ake275cozCXPYKD3XVySkVMUNPUCyrCs= Subject key identifier: A4:07:A3:66:90:DF:44:DF:FD:A2:A4:25:4D:86:A7:F5:E1:73:C3:EA Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda Certificate serial: 019B4249504A3403FD30918AE634CAE18112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft Manifest number: 1488 Signing time: Sun 21 Dec 2025 19:00:59 +0000 Manifest this update: Sun 21 Dec 2025 19:00:59 +0000 Manifest next update: Mon 22 Dec 2025 19:00:59 +0000 Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=) 2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=) 3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=) 4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=) 5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: HCNHLhZ7X8XRyVY63qeP4ElYDGR/vo6TfLS7nzd03zU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:50:4a:34:03:fd:30:91:8a:e6:34:ca:e1:81:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda Validity Not Before: Dec 21 19:00:59 2025 GMT Not After : Dec 22 19:00:59 2025 GMT Subject: CN=a407a36690df44dffda2a4254d86a7f5e173c3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:9a:a5:e8:0a:b0:56:91:d5:e8:4a:ea:f4: de:6c:ef:57:d4:61:68:e4:4d:47:ba:6f:85:ab:c7: 89:e2:72:2d:34:13:22:b7:97:f5:0e:c5:39:77:6e: 0f:03:7d:e1:b2:41:88:49:7b:60:aa:04:31:86:4d: 7a:56:5c:d9:48:3f:1c:64:a6:a1:f7:46:15:f0:19: d6:f1:7b:2f:2f:bd:c4:75:0c:3a:0e:c4:d6:9b:11: 6e:25:8d:4d:ec:5d:ea:1f:cb:e2:28:07:85:e2:29: c0:4a:72:81:61:50:9a:05:0b:4f:d3:73:be:0e:01: 26:93:8b:ce:2b:cc:a7:82:1e:0f:03:1d:95:8e:d1: 87:57:fe:27:65:62:3b:67:7b:f6:57:92:c1:6c:ca: 76:3d:3a:76:c3:70:9f:11:db:1e:3b:02:83:6f:bb: fd:13:8d:8d:ba:01:6a:3c:7d:8d:22:18:9d:c6:bb: 6f:d8:23:0b:06:43:c1:b1:e2:8c:67:94:9a:24:77: 1a:52:79:76:df:25:bb:08:c0:5f:4b:10:45:86:90: cf:b7:ff:26:3a:ad:29:9b:f3:50:bb:e0:8f:14:6a: ce:36:7a:55:1c:3b:ca:3f:82:d2:53:ba:88:3a:4f: 6d:da:ec:a6:3f:cf:4d:fd:2c:96:1d:8b:10:d9:c8: 2e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:07:A3:66:90:DF:44:DF:FD:A2:A4:25:4D:86:A7:F5:E1:73:C3:EA X509v3 Authority Key Identifier: keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:08:1e:6d:06:18:ef:dd:99:8f:30:12:5d:6a:6b:e6:8b:cc: e5:0b:33:cc:fc:d3:38:55:18:55:e7:01:0e:ee:04:d2:46:90: 7b:d4:39:94:b1:ce:a8:79:e3:1a:eb:41:4a:a4:11:7a:4b:bf: 51:8a:f7:28:45:e4:0a:a6:a0:0e:c7:67:b6:c6:a4:04:c6:5e: 22:bb:fd:d5:86:d4:14:b0:79:d6:52:43:32:a1:62:de:b9:07: cb:b8:2c:4d:87:15:2c:8c:41:9d:cc:6d:ab:40:3e:40:83:44: 72:91:94:9c:a7:67:b3:23:08:b7:74:79:6a:2b:0c:57:9c:70: 7d:c6:8e:81:15:4d:28:aa:c1:24:b0:82:b3:80:a8:3a:1c:cd: 74:bb:e7:3c:b7:a3:bc:7b:8a:73:a0:04:79:3d:05:5c:3a:a9: 55:89:d5:9d:c2:89:b8:33:19:da:4b:93:04:6a:f8:17:c8:4a: d9:12:a5:3e:a8:d5:c3:87:66:d4:3f:84:49:3c:c0:b7:81:4f: 63:af:ea:cd:81:f8:a7:a2:9c:b8:43:e8:3c:a3:13:d5:a5:a5: 00:a1:69:2d:17:2c:39:b2:a9:a3:af:4c:ba:7d:53:8c:1a:d7: 6d:43:d9:8e:0e:ee:49:b1:8b:bf:29:ae:0f:ae:66:19:13:b8: 45:e4:6c:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSVBKNAP9MJGK5jTK4YESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2 OTRmZGEwHhcNMjUxMjIxMTkwMDU5WhcNMjUxMjIyMTkwMDU5WjAzMTEwLwYDVQQD EyhhNDA3YTM2NjkwZGY0NGRmZmRhMmE0MjU0ZDg2YTdmNWUxNzNjM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qSapegKsFaR1ehK6vTebO9X1GFo 5E1Hum+Fq8eJ4nItNBMit5f1DsU5d24PA33hskGISXtgqgQxhk16VlzZSD8cZKah 90YV8BnW8XsvL73EdQw6DsTWmxFuJY1N7F3qH8viKAeF4inASnKBYVCaBQtP03O+ DgEmk4vOK8yngh4PAx2VjtGHV/4nZWI7Z3v2V5LBbMp2PTp2w3CfEdseOwKDb7v9 E42NugFqPH2NIhidxrtv2CMLBkPBseKMZ5SaJHcaUnl23yW7CMBfSxBFhpDPt/8m Oq0pm/NQu+CPFGrONnpVHDvKP4LSU7qIOk9t2uymP89N/SyWHYsQ2cgu9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQHo2aQ30Tf/aKkJU2Gp/Xhc8PqMB8GA1UdIwQY MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt ZjM1MzczZGE3ZGViLzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAgebQYY 792ZjzASXWpr5ovM5QszzPzTOFUYVecBDu4E0kaQe9Q5lLHOqHnjGutBSqQReku/ UYr3KEXkCqagDsdntsakBMZeIrv91YbUFLB51lJDMqFi3rkHy7gsTYcVLIxBncxt q0A+QINEcpGUnKdnsyMIt3R5aisMV5xwfcaOgRVNKKrBJLCCs4CoOhzNdLvnPLej vHuKc6AEeT0FXDqpVYnVncKJuDMZ2kuTBGr4F8hK2RKlPqjVw4dm1D+ESTzAt4FP Y6/qzYH4p6KcuEPoPKMT1aWlAKFpLRcsObKpo69Mun1TjBrXbUPZjg7uSbGLvymu D65mGRO4ReRstg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:13:19 2025 by rpki-client