This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft File: mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json) Hash identifier: ehb7QiMsUX+KiZY9JbDBKPb40xpARBwvUww6Nmtc/gU= Subject key identifier: 57:8F:8D:A9:2A:0D:36:0C:71:97:FB:A4:4C:67:44:A7:F1:10:BD:D0 Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7 Certificate issuer: /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7 Certificate serial: 019B5976756470045F25A42C84434F4E58CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft Manifest number: 096B Signing time: Fri 26 Dec 2025 07:01:33 +0000 Manifest this update: Fri 26 Dec 2025 07:01:33 +0000 Manifest next update: Sat 27 Dec 2025 07:01:33 +0000 Files and hashes: 1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: ce71UVpaVWIExAkmD6Nih2+DmPH2PwMLfL4fB3XL4hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:75:64:70:04:5f:25:a4:2c:84:43:4f:4e:58:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7 Validity Not Before: Dec 26 07:01:33 2025 GMT Not After : Dec 27 07:01:33 2025 GMT Subject: CN=578f8da92a0d360c7197fba44c6744a7f110bdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:79:54:92:7b:1e:1e:56:99:28:a0:cd:a1:b2: cf:4d:e3:f3:ff:fa:1c:bc:81:59:34:39:bb:c4:d9: 71:fa:ab:56:cb:9a:db:05:f7:f0:cf:d7:e5:dd:68: 1b:4c:70:7d:70:74:0c:d3:86:ca:c2:39:33:db:83: 17:2f:33:e1:75:af:a0:64:45:03:11:c5:d3:63:ec: d1:9e:4a:bb:81:ec:b5:b5:74:ff:36:45:7a:68:57: d3:d9:49:98:86:3e:0c:7d:f5:e0:48:c3:11:69:07: 84:06:a3:91:db:b2:d5:67:11:c4:a0:7b:42:43:08: 3a:86:21:85:21:8a:8e:64:fe:2f:f5:60:a8:e8:ef: 20:d4:03:43:6b:30:93:9a:03:58:56:f8:ab:62:17: 1a:30:c8:05:82:57:03:c9:94:3c:4c:2c:65:df:13: 01:8b:48:19:cc:8d:83:cf:11:c8:07:42:16:52:26: 83:82:1d:1c:39:01:a1:f2:d4:59:e1:a1:71:a4:72: a8:5c:8a:28:3d:a0:0f:19:7e:09:d9:5f:d9:84:9b: 3e:dc:69:e0:c8:67:f4:e3:19:d2:e4:22:0d:fc:ba: 0e:19:5c:a2:d5:bd:d7:28:f8:3e:80:4f:26:ee:02: 4b:fa:f9:33:ce:e0:25:62:e5:d2:d0:35:08:8a:e2: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8F:8D:A9:2A:0D:36:0C:71:97:FB:A4:4C:67:44:A7:F1:10:BD:D0 X509v3 Authority Key Identifier: keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c8:58:a4:f9:6f:ef:4f:a0:aa:65:7a:4c:b7:3d:40:11:1c: 2c:a5:90:fc:2e:ea:0d:ad:92:ff:27:46:3a:e9:cb:ec:d4:1b: 63:c8:66:eb:81:8a:30:40:60:91:a3:1f:9d:8d:8f:ae:b1:db: df:d5:64:7d:90:55:36:79:98:9e:53:61:de:62:f4:6f:f1:ac: 8a:a3:25:f7:85:79:9d:58:ea:0b:fe:e6:bc:bb:f5:55:de:fd: 40:38:a7:fa:e0:a5:4c:25:31:b1:e5:de:5c:9c:89:3c:4f:ea: 06:47:45:58:bf:c1:21:67:04:0e:a3:85:75:72:2c:3c:e9:5d: a3:26:93:93:7f:19:5b:1d:61:70:93:e3:58:5b:52:98:b6:e7: 9a:93:44:ae:19:e2:44:e5:72:6f:f9:73:fe:00:44:9a:11:f4: 02:2d:ee:a2:87:78:00:87:22:1d:32:65:77:8e:05:18:7f:53: 88:7f:79:df:47:47:90:44:a4:b8:0d:ca:95:1f:18:bf:6b:9a: fc:10:14:11:38:46:85:78:b8:5a:54:9d:f0:34:4c:c9:86:7f: 6f:17:89:59:54:61:65:4b:44:81:c4:0c:78:00:14:b9:f7:ef: 0b:8d:ec:57:f0:b5:90:e9:56:7e:eb:85:b1:20:95:3c:ad:2d: 0a:a0:ce:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdnVkcARfJaQshENPTljPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2E5OGExMmJiNmQ4ZGFiODJmMzc0Y2YwYTI3OGE1YTYx Yjc4ZTcwHhcNMjUxMjI2MDcwMTMzWhcNMjUxMjI3MDcwMTMzWjAzMTEwLwYDVQQD Eyg1NzhmOGRhOTJhMGQzNjBjNzE5N2ZiYTQ0YzY3NDRhN2YxMTBiZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03lUknseHlaZKKDNobLPTePz//oc vIFZNDm7xNlx+qtWy5rbBffwz9fl3WgbTHB9cHQM04bKwjkz24MXLzPhda+gZEUD EcXTY+zRnkq7gey1tXT/NkV6aFfT2UmYhj4MffXgSMMRaQeEBqOR27LVZxHEoHtC Qwg6hiGFIYqOZP4v9WCo6O8g1ANDazCTmgNYVvirYhcaMMgFglcDyZQ8TCxl3xMB i0gZzI2DzxHIB0IWUiaDgh0cOQGh8tRZ4aFxpHKoXIooPaAPGX4J2V/ZhJs+3Gng yGf04xnS5CIN/LoOGVyi1b3XKPg+gE8m7gJL+vkzzuAlYuXS0DUIiuK0NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFePjakqDTYMcZf7pExnRKfxEL3QMB8GA1UdIwQY MBaAFJnKmKErttjauC83TPCieKWmG3jnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEt MjhjM2MxZTJhMzcwLzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEtMjhjM2MxZTJhMzcw LzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHchYpPlv 70+gqmV6TLc9QBEcLKWQ/C7qDa2S/ydGOunL7NQbY8hm64GKMEBgkaMfnY2PrrHb 39VkfZBVNnmYnlNh3mL0b/GsiqMl94V5nVjqC/7mvLv1Vd79QDin+uClTCUxseXe XJyJPE/qBkdFWL/BIWcEDqOFdXIsPOldoyaTk38ZWx1hcJPjWFtSmLbnmpNErhni ROVyb/lz/gBEmhH0Ai3uood4AIciHTJld44FGH9TiH9530dHkESkuA3KlR8Yv2ua /BAUEThGhXi4WlSd8DRMyYZ/bxeJWVRhZUtEgcQMeAAUuffvC43sV/C1kOlWfuuF sSCVPK0tCqDOdQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:52 2025 by rpki-client