This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft File: mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json) Hash identifier: cdfCQ+cByJOWhmislnYOx6SnwmT40ddhEKqi04Eo2IY= Subject key identifier: 48:85:6C:C0:6E:91:5D:45:5C:F6:25:CA:04:37:C5:52:15:73:39:11 Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7 Certificate issuer: /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7 Certificate serial: 019B3A9154E6B225D9837C7657F6124684EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft Manifest number: 095B Signing time: Sat 20 Dec 2025 07:02:41 +0000 Manifest this update: Sat 20 Dec 2025 07:02:41 +0000 Manifest next update: Sun 21 Dec 2025 07:02:41 +0000 Files and hashes: 1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: t56CXIl4pVGjfx/WVCkCVCCr2b34KpFsPvzShFThYWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:54:e6:b2:25:d9:83:7c:76:57:f6:12:46:84:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7 Validity Not Before: Dec 20 07:02:41 2025 GMT Not After : Dec 21 07:02:41 2025 GMT Subject: CN=48856cc06e915d455cf625ca0437c55215733911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:8a:e6:47:af:d9:6c:3b:99:f8:5e:fd:c3: 8b:58:38:7b:0e:15:96:23:61:94:a9:15:36:1b:ed: 52:6a:ec:81:9d:f1:22:0a:70:bf:27:27:b0:88:0d: 19:1e:ef:c5:88:1b:b2:a6:05:61:79:2f:7b:00:29: 7b:40:d8:80:5e:a3:71:2e:fd:9b:93:e5:e6:b2:c4: 0f:96:11:22:d2:95:b7:3b:7a:c0:0c:78:f5:08:8e: be:a3:1d:da:2f:51:0a:61:93:ea:ed:bf:51:a2:13: 0e:a3:7f:f8:cd:04:6b:b1:55:4e:ab:69:20:8f:46: 17:a5:71:48:c5:25:de:3b:42:51:a7:c0:7f:a1:97: cc:71:82:30:7f:37:9a:88:bb:6b:1e:e8:47:5f:6e: 57:7e:4a:d8:25:86:2b:dc:db:95:0e:1c:cb:8c:a7: 40:4c:57:c6:ed:9f:65:7d:c4:1f:39:cb:a5:c6:d4: 4c:c5:a2:3f:6a:4d:97:59:55:8f:8c:e6:b2:2e:f5: 5c:0b:c6:0a:6f:ca:c7:e0:ba:83:b6:5f:b6:44:97: e5:33:81:c2:5f:e2:a6:d8:cd:25:5f:72:de:f8:b7: 7b:12:ee:66:0e:dd:f1:18:43:1a:4b:2b:c5:01:56: ef:fa:13:25:fd:20:cb:18:81:4b:ea:89:a8:81:98: 6d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:85:6C:C0:6E:91:5D:45:5C:F6:25:CA:04:37:C5:52:15:73:39:11 X509v3 Authority Key Identifier: keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:95:c0:77:45:e5:27:df:65:92:15:b5:c6:41:61:a7:4a:cf: ee:ab:7c:4a:39:bc:0d:fb:f5:81:5b:cf:31:c9:f9:4d:f3:6d: 82:f5:2b:7d:a6:19:4c:d9:d4:f1:1f:0d:0f:3b:57:a2:95:0e: a0:66:bb:ce:bd:b8:12:b1:5f:a5:06:99:9d:22:94:a9:b4:63: 0a:9d:3c:f6:09:d8:42:8d:07:74:8f:53:1a:80:c3:84:9e:73: 77:30:37:a0:8f:7b:7a:bc:af:49:76:76:b2:51:c8:46:6a:78: ae:6f:b5:7c:0f:58:d8:c5:66:dc:1d:42:f5:f5:e0:44:25:be: 0b:73:03:76:dc:76:8b:a2:fe:4d:98:ec:25:44:7b:42:e9:a1: 94:31:75:e9:8b:c3:5a:93:07:de:bd:fa:19:e2:ef:73:93:22: a8:0a:dc:60:16:92:10:64:98:bb:9f:65:bd:a9:1b:2b:49:a3: 98:1c:1b:c6:64:3e:74:10:99:c4:2a:d3:e6:1f:5e:04:18:cf: 09:28:a0:a9:e8:6a:00:a2:ce:9f:10:c7:77:fe:69:fb:c5:8c: 3b:68:fc:ad:ec:30:7b:26:83:b7:96:b7:3a:20:e5:c7:4b:25: 00:bd:7b:07:da:cc:36:dc:65:77:dc:7a:42:12:ca:72:73:c7: 24:18:a6:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kVTmsiXZg3x2V/YSRoTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2E5OGExMmJiNmQ4ZGFiODJmMzc0Y2YwYTI3OGE1YTYx Yjc4ZTcwHhcNMjUxMjIwMDcwMjQxWhcNMjUxMjIxMDcwMjQxWjAzMTEwLwYDVQQD Eyg0ODg1NmNjMDZlOTE1ZDQ1NWNmNjI1Y2EwNDM3YzU1MjE1NzMzOTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbiK5kev2Ww7mfhe/cOLWDh7DhWW I2GUqRU2G+1SauyBnfEiCnC/JyewiA0ZHu/FiBuypgVheS97ACl7QNiAXqNxLv2b k+XmssQPlhEi0pW3O3rADHj1CI6+ox3aL1EKYZPq7b9RohMOo3/4zQRrsVVOq2kg j0YXpXFIxSXeO0JRp8B/oZfMcYIwfzeaiLtrHuhHX25XfkrYJYYr3NuVDhzLjKdA TFfG7Z9lfcQfOculxtRMxaI/ak2XWVWPjOayLvVcC8YKb8rH4LqDtl+2RJflM4HC X+Km2M0lX3Le+Ld7Eu5mDt3xGEMaSyvFAVbv+hMl/SDLGIFL6omogZhtewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiFbMBukV1FXPYlygQ3xVIVczkRMB8GA1UdIwQY MBaAFJnKmKErttjauC83TPCieKWmG3jnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEt MjhjM2MxZTJhMzcwLzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEtMjhjM2MxZTJhMzcw LzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpXAd0Xl J99lkhW1xkFhp0rP7qt8Sjm8Dfv1gVvPMcn5TfNtgvUrfaYZTNnU8R8NDztXopUO oGa7zr24ErFfpQaZnSKUqbRjCp089gnYQo0HdI9TGoDDhJ5zdzA3oI97eryvSXZ2 slHIRmp4rm+1fA9Y2MVm3B1C9fXgRCW+C3MDdtx2i6L+TZjsJUR7QumhlDF16YvD WpMH3r36GeLvc5MiqArcYBaSEGSYu59lvakbK0mjmBwbxmQ+dBCZxCrT5h9eBBjP CSigqehqAKLOnxDHd/5p+8WMO2j8rewweyaDt5a3OiDlx0slAL17B9rMNtxld9x6 QhLKcnPHJBim9w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:02:47 2025 by rpki-client