This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft File: maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json) Hash identifier: 7gILJyEMa9oG48QIsWOf/WKAEF2WsJ6kxoY0i3NjrNU= Subject key identifier: 50:DB:C3:76:0C:7D:02:54:F1:40:88:25:96:2E:EE:92:F8:E7:18:CC Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Certificate serial: 019B0F377F1CCE9CA0DA20D702118CB2D092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft Manifest number: 1777 Signing time: Thu 11 Dec 2025 21:00:53 +0000 Manifest this update: Thu 11 Dec 2025 21:00:53 +0000 Manifest next update: Fri 12 Dec 2025 21:00:53 +0000 Files and hashes: 1: 7SHUyFna48Gf23nUCUcnIJUN0XE.roa (hash: Ec+uLYhIFx++PbARlrI21OedFGiTD/IgiH7xQ2ltHrQ=) 2: kbF58umfOAdBtIYcGYzLP1M0THQ.roa (hash: yOTBG23MZMkfBQCZJEYn1qCc0xRSjBYNZHJvnVk7GVU=) 3: l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa (hash: nBkBluTNUREBdIijySnHRU5IOfDXkAtF0rCyhddkb6A=) 4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: /dYrEtku5ekGeczRFQiUh4jHtUOejAakoMOp5fdw0+Q=) 5: vgIq0oA7dsz4YveZyNyrfiJkguc.roa (hash: Sy+M0tdHwOYb8xMH8vV2+d4iB36APQaABzmr+xlZblA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:7f:1c:ce:9c:a0:da:20:d7:02:11:8c:b2:d0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Validity Not Before: Dec 11 21:00:53 2025 GMT Not After : Dec 12 21:00:53 2025 GMT Subject: CN=50dbc3760c7d0254f1408825962eee92f8e718cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:9b:68:34:fb:19:10:92:c2:05:e1:65:b5: 7b:f4:b2:f7:04:95:e2:81:43:f9:81:ff:82:dd:09: c9:2a:f8:e9:e8:f6:48:c8:fc:b6:62:76:3c:66:fc: 68:55:e7:bc:e2:c7:29:6f:21:d1:f4:be:c2:13:98: be:44:a8:9e:d8:7f:f4:05:44:66:2e:a2:fe:a3:f3: 63:2d:b6:c3:47:76:6d:39:7c:48:78:59:bc:2c:0d: e1:ab:42:df:0b:c7:e2:c8:f6:92:f5:35:33:d3:21: f4:e4:a5:7b:de:8c:94:10:ec:71:a8:21:4e:3e:b2: fc:54:f3:13:0c:86:e0:8f:cd:c4:9f:2c:9d:d9:83: 46:71:a4:e4:2a:05:a7:e6:fa:f5:24:22:e4:3a:b7: be:44:ff:53:fe:b3:03:2d:85:2f:29:07:30:d4:14: 81:ea:ea:8c:73:f5:a5:c1:60:2f:b3:6c:08:4b:f9: d2:fc:21:25:c5:b8:03:db:1e:d6:8b:0b:44:15:11: 91:47:8d:8a:e5:07:ea:70:52:5b:9b:6d:a3:ae:ba: e0:da:8a:a6:3b:66:b4:bf:52:16:e7:22:0b:b8:70: ab:e6:25:6b:1f:02:18:ee:a9:93:ce:ec:8e:00:f7: 05:5e:43:6f:c9:d9:bc:40:f1:42:e9:0d:97:8a:56: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DB:C3:76:0C:7D:02:54:F1:40:88:25:96:2E:EE:92:F8:E7:18:CC X509v3 Authority Key Identifier: keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:57:b9:d8:40:29:11:12:be:17:b7:2c:f4:6d:ee:76:a3:a6: b9:27:bb:c7:0a:dd:29:21:03:7a:18:f7:7b:a1:c7:9e:fd:c9: b0:1b:ba:b5:b5:a1:45:ed:fb:d5:fd:6f:f8:00:d0:09:e0:14: 90:90:0a:7b:90:74:4c:a2:80:c2:6b:af:33:d1:5c:db:33:e1: ee:35:fc:6f:9b:f8:6c:19:ca:a6:c8:0d:21:6c:de:19:95:98: 6c:2f:84:3f:d7:ad:a8:51:c2:a4:f6:d4:1c:94:c5:ac:94:3d: de:e3:49:db:84:23:ed:b9:f3:3a:5b:74:1d:0b:4c:ea:bf:3d: ca:8a:81:c7:77:83:bc:3f:dd:2d:18:7a:2b:c2:f9:e0:55:67: e8:44:38:f0:6b:a0:8d:95:ba:60:e2:24:98:24:53:af:67:4d: 02:bc:3f:83:c1:48:fd:55:70:5c:77:2b:00:ba:71:99:68:7f: b8:d7:fd:1a:da:a6:97:cf:a3:34:ed:81:c2:f0:e0:56:b7:3f: 52:49:af:ae:63:29:4b:c8:8d:16:43:68:de:93:82:0e:7c:59: 98:8e:9b:34:fd:f2:80:5c:de:0b:d9:49:ca:f6:a5:4a:08:98: 24:a5:2e:65:85:83:69:00:42:2b:aa:09:11:d2:19:e8:8b:f9: 1c:0c:0c:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN38czpyg2iDXAhGMstCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw YjY4NmEwHhcNMjUxMjExMjEwMDUzWhcNMjUxMjEyMjEwMDUzWjAzMTEwLwYDVQQD Eyg1MGRiYzM3NjBjN2QwMjU0ZjE0MDg4MjU5NjJlZWU5MmY4ZTcxOGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9qbaDT7GRCSwgXhZbV79LL3BJXi gUP5gf+C3QnJKvjp6PZIyPy2YnY8ZvxoVee84scpbyHR9L7CE5i+RKie2H/0BURm LqL+o/NjLbbDR3ZtOXxIeFm8LA3hq0LfC8fiyPaS9TUz0yH05KV73oyUEOxxqCFO PrL8VPMTDIbgj83Enyyd2YNGcaTkKgWn5vr1JCLkOre+RP9T/rMDLYUvKQcw1BSB 6uqMc/WlwWAvs2wIS/nS/CElxbgD2x7WiwtEFRGRR42K5QfqcFJbm22jrrrg2oqm O2a0v1IW5yILuHCr5iVrHwIY7qmTzuyOAPcFXkNvydm8QPFC6Q2XilYeGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDbw3YMfQJU8UCIJZYu7pL45xjMMB8GA1UdIwQY MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt ZTVkNTA3YTgyNmJmLzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVe52EAp ERK+F7cs9G3udqOmuSe7xwrdKSEDehj3e6HHnv3JsBu6tbWhRe371f1v+ADQCeAU kJAKe5B0TKKAwmuvM9Fc2zPh7jX8b5v4bBnKpsgNIWzeGZWYbC+EP9etqFHCpPbU HJTFrJQ93uNJ24Qj7bnzOlt0HQtM6r89yoqBx3eDvD/dLRh6K8L54FVn6EQ48Gug jZW6YOIkmCRTr2dNArw/g8FI/VVwXHcrALpxmWh/uNf9Gtqml8+jNO2BwvDgVrc/ UkmvrmMpS8iNFkNo3pOCDnxZmI6bNP3ygFzeC9lJyvalSgiYJKUuZYWDaQBCK6oJ EdIZ6Iv5HAwMnw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:07:44 2025 by rpki-client