This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft File: MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft (raw, json) Hash identifier: ObV9q0pekW6H51ORaXmYGk95/FW8W2LsyssdlpFHx2M= Subject key identifier: 18:D1:67:EA:3D:E2:21:20:00:69:C4:C1:AF:4C:06:71:3C:8E:C7:DE Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12 Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412 Certificate serial: 019B3757C1DB02C9558FDAF59547E9E0B3BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 16:00:56 +0000 Manifest this update: Fri 19 Dec 2025 16:00:56 +0000 Manifest next update: Sat 20 Dec 2025 16:00:56 +0000 Files and hashes: 1: DStV17Hecan-6QQiecnzOLb7PtA.roa (hash: E6s1lLpFj1dG9iVyKbgkYVYs/gktTO6G9yKQPD1Kbsk=) 2: MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl (hash: T2doD1UqEbvDAsgXMAboUaZBS5FZWUnJb5hqdyoEjM4=) 3: OOR2C4NfwLbcE74byGedRUcg34A.roa (hash: tExNqyl7DFFkGILQ3eOlKSLeSHLrbYUZ9m6SSiTSCJM=) 4: daYV5svP14BSfH0S8i-aZ5WBv5M.roa (hash: Hs0nBQ6m77zflugmlg/FABCDAsXWbLjyitCeWa+v+ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:c1:db:02:c9:55:8f:da:f5:95:47:e9:e0:b3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412 Validity Not Before: Dec 19 16:00:56 2025 GMT Not After : Dec 20 16:00:56 2025 GMT Subject: CN=18d167ea3de221200069c4c1af4c06713c8ec7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:ac:d8:ae:7f:91:77:76:f6:a6:4c:25:f7: 10:3d:22:d3:70:44:47:17:df:05:3b:b0:1b:99:7e: c7:93:b3:a7:34:68:bf:74:a1:7d:47:97:df:1e:a2: 7e:56:33:4c:f8:4d:84:f3:38:cc:6b:24:26:ba:96: 22:ef:eb:a3:11:59:2b:98:65:40:ea:c4:d6:a0:c8: 14:42:a7:3b:15:04:b3:2b:38:61:55:86:46:0f:2a: 89:30:6e:b7:5d:c2:5e:40:b7:9b:b2:b3:a1:dd:02: 49:49:bf:64:91:9c:bd:51:2c:a2:2b:75:d9:dc:63: 09:6e:71:29:66:f9:b7:2a:74:f1:a1:2e:ee:c8:85: 3a:ed:82:f4:de:41:20:e2:4a:6e:40:55:e1:43:ac: b7:d7:6d:47:9f:b1:54:44:b2:a0:53:bb:0a:22:03: 13:06:d0:7e:48:8d:dc:26:0b:a6:1d:54:69:14:8e: 15:07:22:d9:aa:a7:20:8f:45:00:5f:22:f6:3f:e9: 97:cd:40:ab:33:87:08:d9:7e:a4:0f:ee:20:97:9b: 8b:a0:e6:86:09:e5:3d:ca:bd:85:dd:75:4e:b7:2d: 0a:db:90:5a:a5:22:d2:56:b9:ee:6a:4d:e0:0c:c0: 16:47:8b:89:53:5e:54:8d:4f:11:86:f6:c1:51:da: 61:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D1:67:EA:3D:E2:21:20:00:69:C4:C1:AF:4C:06:71:3C:8E:C7:DE X509v3 Authority Key Identifier: keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5f:94:0d:27:b2:0c:7c:df:41:7b:64:80:a8:e4:89:72:0b: c4:f7:9f:d2:6d:51:82:cd:15:75:8e:7b:d9:1a:96:5a:6d:39: dc:a2:ee:21:c0:72:0e:34:58:1a:dc:31:52:67:38:01:72:4d: f7:29:ec:3c:23:b2:be:23:fe:7a:54:f9:a0:e9:05:d1:4c:ec: 31:3c:9f:e7:d0:84:61:b5:13:ad:8b:74:cf:3c:7e:b0:fe:97: b0:e3:49:b4:f6:07:d1:e0:bb:8a:aa:fc:53:94:7e:7e:91:38: c1:05:55:6b:29:82:3d:54:70:1a:a2:b3:a7:35:a9:35:d7:28: ae:52:18:fb:78:7c:c7:ae:09:df:86:9f:74:aa:ab:f5:15:97: b2:4f:a6:95:4d:df:7f:db:50:1b:45:de:95:b1:66:4b:79:92: fa:2d:75:d5:18:97:fd:28:69:5b:c9:75:4c:40:b8:9c:ea:75: f9:f2:47:67:7d:27:1e:61:ee:3b:ee:62:23:7b:ed:88:d6:a0: 40:82:27:b4:48:a8:f6:d1:a5:0c:54:5f:e4:ca:e8:e7:c3:fb: fa:37:01:e6:d1:2a:29:6c:35:a2:5b:e8:d0:a7:1d:43:da:60: eb:61:83:3f:ae:39:8c:23:d0:37:6e:ea:0e:b7:b8:c8:f2:3c: 84:6b:75:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V8HbAslVj9r1lUfp4LO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYTNkYTZkMGZhZmQyN2QwMWI3NDcwM2JiMzlkOGMxMTVl ODY0MTIwHhcNMjUxMjE5MTYwMDU2WhcNMjUxMjIwMTYwMDU2WjAzMTEwLwYDVQQD EygxOGQxNjdlYTNkZTIyMTIwMDA2OWM0YzFhZjRjMDY3MTNjOGVjN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Cs2K5/kXd29qZMJfcQPSLTcERH F98FO7AbmX7Hk7OnNGi/dKF9R5ffHqJ+VjNM+E2E8zjMayQmupYi7+ujEVkrmGVA 6sTWoMgUQqc7FQSzKzhhVYZGDyqJMG63XcJeQLebsrOh3QJJSb9kkZy9USyiK3XZ 3GMJbnEpZvm3KnTxoS7uyIU67YL03kEg4kpuQFXhQ6y3121Hn7FURLKgU7sKIgMT BtB+SI3cJgumHVRpFI4VByLZqqcgj0UAXyL2P+mXzUCrM4cI2X6kD+4gl5uLoOaG CeU9yr2F3XVOty0K25BapSLSVrnuak3gDMAWR4uJU15UjU8RhvbBUdph0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjRZ+o94iEgAGnEwa9MBnE8jsfeMB8GA1UdIwQY MBaAFDGj2m0Pr9J9AbdHA7s52MEV6GQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYt NmNkNGM5ODBhNTIzLzEvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYtNmNkNGM5ODBhNTIz LzEvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1+UDSey DHzfQXtkgKjkiXILxPef0m1Rgs0VdY572RqWWm053KLuIcByDjRYGtwxUmc4AXJN 9ynsPCOyviP+elT5oOkF0UzsMTyf59CEYbUTrYt0zzx+sP6XsONJtPYH0eC7iqr8 U5R+fpE4wQVVaymCPVRwGqKzpzWpNdcorlIY+3h8x64J34afdKqr9RWXsk+mlU3f f9tQG0XelbFmS3mS+i111RiX/ShpW8l1TEC4nOp1+fJHZ30nHmHuO+5iI3vtiNag QIIntEio9tGlDFRf5Mro58P7+jcB5tEqKWw1olvo0KcdQ9pg62GDP645jCPQN27q Dre4yPI8hGt1iw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:53:12 2025 by rpki-client