This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json) Hash identifier: 3rt5Zc76YrEbKxsXTeWo6q4JpWQ4OLtpTn8NitNC66s= Subject key identifier: 46:13:1E:3B:8E:FA:25:11:AB:54:E5:7F:E3:F6:21:2C:72:3C:45:BB Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21 Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921 Certificate serial: 019B5A5171CE5089C6A2753AFAA94CE0E6DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft Manifest number: 0E8E Signing time: Fri 26 Dec 2025 11:00:45 +0000 Manifest this update: Fri 26 Dec 2025 11:00:45 +0000 Manifest next update: Sat 27 Dec 2025 11:00:45 +0000 Files and hashes: 1: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: fjrJ0HLditC57AeJ/960aTq4b4CmKB0+Y1a+aQO9hBM=) 2: XFj03ZPCOj3qqoe8oMNPGmud9a4.roa (hash: m6E7RZQpvmKbh+R69KgZ6bmoskHz5Bb8/AlaawR8U/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:71:ce:50:89:c6:a2:75:3a:fa:a9:4c:e0:e6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921 Validity Not Before: Dec 26 11:00:45 2025 GMT Not After : Dec 27 11:00:45 2025 GMT Subject: CN=46131e3b8efa2511ab54e57fe3f6212c723c45bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:54:db:e5:33:18:09:99:76:17:fa:b7:09:52: f4:bf:b1:92:2c:c9:c6:7f:bb:70:b8:c2:7d:6d:ab: fd:0a:d7:76:11:c5:6e:b0:9c:e2:41:c8:6e:10:c4: ae:26:ec:d4:bc:ce:f8:f4:c6:e4:ae:db:df:42:d9: c4:84:85:17:ce:2b:b8:6c:4b:49:04:50:0f:6c:47: 4d:3f:88:99:40:b4:65:9a:fb:7f:9d:bd:82:12:a2: c9:67:12:f2:aa:1d:09:8a:96:e8:14:7c:eb:9c:36: 8e:9e:14:42:8c:90:fe:80:2b:60:02:81:1d:cd:af: eb:84:a2:93:0c:35:a0:68:3d:0d:04:66:2b:ce:dc: 7b:f5:11:a5:54:f2:f2:c5:c7:7f:6d:15:44:45:0f: 83:2a:67:b5:26:18:c7:60:99:87:5d:6b:86:16:64: f6:08:dd:b8:e4:87:a8:76:9c:6a:7e:9e:b5:b5:c7: 61:39:71:aa:89:ea:1b:26:f7:ce:c7:6b:20:b3:ae: 82:6d:2d:42:47:ed:e9:36:93:d3:b7:ab:05:a6:14: c1:50:fa:bc:50:94:59:68:f3:10:d9:9a:6e:14:1b: a2:03:e3:4a:52:7d:5c:57:40:04:af:39:f3:01:2c: 28:82:76:7a:54:23:43:7e:4b:c3:e4:83:e9:52:a7: d0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:13:1E:3B:8E:FA:25:11:AB:54:E5:7F:E3:F6:21:2C:72:3C:45:BB X509v3 Authority Key Identifier: keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:7b:bb:29:af:1c:d9:80:4e:bc:b0:af:a1:29:f9:15:a3:00: 70:0a:89:c1:3f:45:4f:f6:0a:86:15:45:19:94:63:14:2a:d2: c6:b9:e3:3a:f0:84:3f:d9:2c:93:b4:58:fc:cb:f9:a7:04:61: c2:c9:33:e7:38:19:f8:33:79:f5:3d:7a:9b:df:bf:3b:cb:55: 4f:e9:d1:df:f7:c1:c1:73:d7:7f:cc:4f:af:4a:6c:fc:37:d0: 3f:66:7e:b8:f8:10:f7:15:97:36:5e:34:0c:66:bb:63:27:f0: 86:e9:38:0d:4f:ca:8c:a0:72:b5:c4:96:82:55:93:61:37:0b: 30:37:c9:03:73:7d:2d:9a:fa:5f:9e:de:bd:a6:e4:78:ae:a1: 65:5e:fb:af:f1:1d:e8:23:f9:54:d4:a4:10:9c:72:55:61:e8: 8b:cf:00:2c:12:3e:40:36:19:8a:7b:13:a7:50:65:b0:6b:5e: f2:07:2c:57:07:13:4b:99:96:e6:61:97:2e:b8:8e:8a:03:02: c3:de:de:05:ad:a0:77:c1:cb:63:68:5a:4e:6b:96:57:d0:73: ae:72:34:2d:dd:99:0b:59:c8:2d:7c:82:73:d1:25:fb:ac:c5: fc:22:c0:d2:f6:6b:dd:c4:6d:3b:67:7e:81:61:be:bc:9f:ed: bc:9d:bc:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUXHOUInGonU6+qlM4ObdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYWFkY2NhOTZmNDRhNDU3MzkyZDg5MDdjNmI5NjRiZTBm Y2Y5MjEwHhcNMjUxMjI2MTEwMDQ1WhcNMjUxMjI3MTEwMDQ1WjAzMTEwLwYDVQQD Eyg0NjEzMWUzYjhlZmEyNTExYWI1NGU1N2ZlM2Y2MjEyYzcyM2M0NWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1Tb5TMYCZl2F/q3CVL0v7GSLMnG f7twuMJ9bav9Ctd2EcVusJziQchuEMSuJuzUvM749MbkrtvfQtnEhIUXziu4bEtJ BFAPbEdNP4iZQLRlmvt/nb2CEqLJZxLyqh0JipboFHzrnDaOnhRCjJD+gCtgAoEd za/rhKKTDDWgaD0NBGYrztx79RGlVPLyxcd/bRVERQ+DKme1JhjHYJmHXWuGFmT2 CN245Ieodpxqfp61tcdhOXGqieobJvfOx2sgs66CbS1CR+3pNpPTt6sFphTBUPq8 UJRZaPMQ2ZpuFBuiA+NKUn1cV0AErznzASwognZ6VCNDfkvD5IPpUqfQCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYTHjuO+iURq1Tlf+P2ISxyPEW7MB8GA1UdIwQY MBaAFDGq3MqW9EpFc5LYkHxrlkvg/PkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAt OGY3ZmQzZGMxNWZlLzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAtOGY3ZmQzZGMxNWZl LzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnu7Ka8c 2YBOvLCvoSn5FaMAcAqJwT9FT/YKhhVFGZRjFCrSxrnjOvCEP9ksk7RY/Mv5pwRh wskz5zgZ+DN59T16m9+/O8tVT+nR3/fBwXPXf8xPr0ps/DfQP2Z+uPgQ9xWXNl40 DGa7Yyfwhuk4DU/KjKBytcSWglWTYTcLMDfJA3N9LZr6X57evabkeK6hZV77r/Ed 6CP5VNSkEJxyVWHoi88ALBI+QDYZinsTp1BlsGte8gcsVwcTS5mW5mGXLriOigMC w97eBa2gd8HLY2haTmuWV9BzrnI0Ld2ZC1nILXyCc9El+6zF/CLA0vZr3cRtO2d+ gWG+vJ/tvJ28OQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:16 2025 by rpki-client