This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft File: maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json) Hash identifier: tBRiScGTr18o95mBF1ZvJ1Sh2k/7cAE+9kIp0IikEsM= Subject key identifier: 2F:14:41:B4:B8:36:B2:88:22:59:2C:08:E7:BC:F7:2F:EA:E5:7D:54 Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Certificate serial: 019B3F7F64B0CB86984A93E356B13E7C5E36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 06:01:12 +0000 Manifest this update: Sun 21 Dec 2025 06:01:12 +0000 Manifest next update: Mon 22 Dec 2025 06:01:12 +0000 Files and hashes: 1: 7SHUyFna48Gf23nUCUcnIJUN0XE.roa (hash: Ec+uLYhIFx++PbARlrI21OedFGiTD/IgiH7xQ2ltHrQ=) 2: kbF58umfOAdBtIYcGYzLP1M0THQ.roa (hash: yOTBG23MZMkfBQCZJEYn1qCc0xRSjBYNZHJvnVk7GVU=) 3: l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa (hash: nBkBluTNUREBdIijySnHRU5IOfDXkAtF0rCyhddkb6A=) 4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: AM2Svr0O94LwNGJkQPhTXe/JafWwqUynvrUDhCDiFgU=) 5: vgIq0oA7dsz4YveZyNyrfiJkguc.roa (hash: Sy+M0tdHwOYb8xMH8vV2+d4iB36APQaABzmr+xlZblA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:64:b0:cb:86:98:4a:93:e3:56:b1:3e:7c:5e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Validity Not Before: Dec 21 06:01:12 2025 GMT Not After : Dec 22 06:01:12 2025 GMT Subject: CN=2f1441b4b836b28822592c08e7bcf72feae57d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:52:a9:2d:02:b5:22:ba:d3:3e:1b:f8:61: f0:81:a8:f8:fa:65:32:69:18:8d:4c:00:13:73:33: bb:36:d6:0c:68:15:dc:80:1e:46:d3:1e:44:66:4b: 1d:4a:ab:91:7d:f7:04:e3:b7:7b:2e:1e:20:55:bf: 99:f1:54:44:e5:6d:30:ce:92:aa:28:b7:8c:57:80: 73:63:a5:91:20:56:b1:28:97:bc:e8:d1:58:e5:81: ea:79:a9:0a:d6:76:d6:25:ca:7e:2d:1f:41:76:b2: 24:27:a8:1b:9b:1d:6e:03:af:1c:c5:b5:fb:93:d9: 5d:af:c6:20:ec:5e:4e:ff:ee:99:f7:60:81:e9:4b: 5a:ae:68:b8:c0:4f:fd:01:f1:d3:7c:0b:db:56:cb: ca:44:c9:42:84:d3:eb:22:48:f0:3a:00:7f:06:d5: f1:39:a1:95:2b:55:4a:a9:c1:59:7b:35:e1:0c:37: 50:e3:f9:92:25:9a:51:3b:ee:75:92:dd:79:6c:82: 5b:c9:cd:5b:02:cf:92:6a:4d:d7:9d:7e:fa:1d:38: 01:e9:4b:50:78:5b:da:5c:81:43:ec:77:8f:22:f3: 15:dc:75:fe:8a:50:7c:74:6c:87:c2:6e:b8:54:bd: 28:a9:25:5d:50:13:6b:b5:07:15:77:74:fe:3b:ea: 07:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:14:41:B4:B8:36:B2:88:22:59:2C:08:E7:BC:F7:2F:EA:E5:7D:54 X509v3 Authority Key Identifier: keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f7:c7:a9:2d:69:c2:a4:af:19:b8:46:fb:49:c2:db:18:f2: 02:89:95:41:8e:cd:8f:3a:bb:d8:41:17:10:9c:91:86:20:c1: f2:aa:04:01:ee:fe:7b:25:8e:e3:7f:8a:60:7e:63:71:d7:79: 8b:d7:03:11:72:b9:8e:84:0f:18:f5:24:00:82:ad:b0:77:4d: f9:5d:cf:6d:6a:c9:73:7e:6d:c7:32:df:39:70:a6:41:47:6f: f8:eb:bd:c6:90:03:29:5f:8c:0f:9e:79:b4:3f:40:15:69:27: e5:5b:6b:ff:9c:10:73:28:c0:f8:cd:cc:88:da:47:a0:8e:43: 99:e9:87:a3:f3:91:23:7c:bd:71:0f:0b:9c:b1:27:ee:0a:c8: 79:27:3f:fb:06:44:fb:49:f4:21:9c:06:83:16:37:03:d7:d8: 22:0d:94:38:c4:bf:f8:7a:f0:1a:41:73:9c:bf:dd:87:24:99: 41:82:1b:eb:92:e3:99:72:3b:76:08:41:01:62:d8:13:14:f0: 35:a3:96:02:8c:e8:70:c7:bb:09:08:67:0c:eb:c0:6c:75:9d: 9e:d7:22:d0:53:ed:53:2b:74:5e:8c:2a:72:5e:4a:7f:20:58: 8c:77:12:b6:39:ed:b9:e9:8f:77:57:b3:54:f3:84:6b:e1:8b: a5:ad:45:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f2Swy4aYSpPjVrE+fF42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw YjY4NmEwHhcNMjUxMjIxMDYwMTEyWhcNMjUxMjIyMDYwMTEyWjAzMTEwLwYDVQQD EygyZjE0NDFiNGI4MzZiMjg4MjI1OTJjMDhlN2JjZjcyZmVhZTU3ZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurVSqS0CtSK60z4b+GHwgaj4+mUy aRiNTAATczO7NtYMaBXcgB5G0x5EZksdSquRffcE47d7Lh4gVb+Z8VRE5W0wzpKq KLeMV4BzY6WRIFaxKJe86NFY5YHqeakK1nbWJcp+LR9BdrIkJ6gbmx1uA68cxbX7 k9ldr8Yg7F5O/+6Z92CB6Utarmi4wE/9AfHTfAvbVsvKRMlChNPrIkjwOgB/BtXx OaGVK1VKqcFZezXhDDdQ4/mSJZpRO+51kt15bIJbyc1bAs+Sak3XnX76HTgB6UtQ eFvaXIFD7HePIvMV3HX+ilB8dGyHwm64VL0oqSVdUBNrtQcVd3T+O+oHRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8UQbS4NrKIIlksCOe89y/q5X1UMB8GA1UdIwQY MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt ZTVkNTA3YTgyNmJmLzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALffHqS1p wqSvGbhG+0nC2xjyAomVQY7Njzq72EEXEJyRhiDB8qoEAe7+eyWO43+KYH5jcdd5 i9cDEXK5joQPGPUkAIKtsHdN+V3PbWrJc35txzLfOXCmQUdv+Ou9xpADKV+MD555 tD9AFWkn5Vtr/5wQcyjA+M3MiNpHoI5DmemHo/ORI3y9cQ8LnLEn7grIeSc/+wZE +0n0IZwGgxY3A9fYIg2UOMS/+HrwGkFznL/dhySZQYIb65LjmXI7dghBAWLYExTw NaOWAozocMe7CQhnDOvAbHWdntci0FPtUyt0Xowqcl5KfyBYjHcStjntuemPd1ez VPOEa+GLpa1Flw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:04:29 2025 by rpki-client