This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json) Hash identifier: v9WDukRHLY77sO8KXm9VhbscVbl91f9W7PoY6MAK3pA= Subject key identifier: 95:B3:C5:82:9D:AD:B2:62:B7:F4:64:A0:A7:D6:1C:08:93:84:4C:7B Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb Certificate serial: 019AF5410054A4C9A157927597F44309D334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft Manifest number: 0E78 Signing time: Sat 06 Dec 2025 20:01:09 +0000 Manifest this update: Sat 06 Dec 2025 20:01:09 +0000 Manifest next update: Sun 07 Dec 2025 20:01:09 +0000 Files and hashes: 1: O3Nn92cP9mhnaQHpIkipdhKcmhY.roa (hash: V+9TgZOrsnrsR383ax8U4lIwjvNLrmt7tE94b7Wzobs=) 2: WXv2dwbVJRW9ba0pdaD2mDUFDGQ.roa (hash: KdjFQqVsulL+ig924wHqXhT1yZyNPpl3AA3pYy7D+Qc=) 3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: gzZukdwdCi8k2kqWeUOusxqCaNL7eKLAR/IPZSCNCCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:00:54:a4:c9:a1:57:92:75:97:f4:43:09:d3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb Validity Not Before: Dec 6 20:01:09 2025 GMT Not After : Dec 7 20:01:09 2025 GMT Subject: CN=95b3c5829dadb262b7f464a0a7d61c0893844c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8e:3d:b2:e6:22:22:4e:ce:75:2f:7a:eb:bd: d4:e1:c9:01:61:f0:ea:90:72:5c:6d:58:94:53:d9: 26:f8:63:46:e7:db:c7:6b:36:ee:ee:bb:b6:bf:0e: 1e:0c:90:91:64:1c:be:82:7a:4c:f7:4c:f8:7d:30: bb:37:7b:34:64:d3:07:00:f3:bd:22:7d:74:ca:c9: 0c:48:60:d7:c5:be:88:2e:3b:e0:eb:66:1d:40:d9: 40:94:6c:d7:de:99:7e:27:ea:64:78:fb:f0:4d:d5: 92:d1:05:ec:b2:14:9a:6b:1a:62:69:52:a7:4a:f2: e4:1b:e8:dd:df:38:db:f3:fe:1e:ba:31:24:a6:a6: a5:a1:5a:b1:18:9c:de:57:bc:4b:a9:32:57:09:34: 82:85:73:ca:bd:17:a3:f5:35:11:95:44:07:52:7f: e0:b8:7f:2d:4f:f8:7e:fc:03:17:67:ea:9c:30:a5: 37:9f:9d:66:4e:a9:6c:e3:4d:72:cd:9e:cf:78:75: 28:a5:ab:ab:55:7d:a4:9b:07:98:6d:7b:b3:0b:69: fb:36:db:28:16:0a:93:fc:51:16:18:92:72:b3:b7: d2:ca:ba:65:8a:b6:6f:0c:f5:7d:7a:ad:a5:a7:50: 71:e6:db:d3:71:ed:f0:af:07:00:b6:61:bc:2b:02: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B3:C5:82:9D:AD:B2:62:B7:F4:64:A0:A7:D6:1C:08:93:84:4C:7B X509v3 Authority Key Identifier: keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f7:2a:16:f8:d3:14:02:2f:41:3c:21:b9:82:d3:3c:83:09: 13:db:8c:9a:cc:b0:3e:3e:0e:52:02:58:6c:56:98:52:56:84: af:bd:ae:7b:a7:b4:8a:0b:64:ba:77:d6:0d:60:61:c8:38:54: fe:15:af:aa:d4:8e:7b:ee:fe:b3:3e:95:8b:b8:63:0b:da:18: ff:31:f7:1d:f3:77:d0:77:2f:c0:13:06:7e:a5:c7:fb:a2:6b: 0a:6a:65:0f:06:53:56:4c:b5:62:41:a3:79:e7:a0:0a:33:c1: 91:84:30:a7:ca:90:7b:50:5d:9a:80:63:ae:de:94:06:e6:fe: d5:7d:8d:aa:e8:a9:9d:67:6b:10:1d:c8:85:48:73:60:00:cd: d0:09:54:0a:41:46:50:51:df:46:22:79:82:e2:00:16:bf:18: 08:f1:92:b8:24:ee:ae:5c:4f:93:64:aa:50:5f:af:23:3a:50: 59:20:a8:26:ea:7a:d9:8d:20:8e:9c:88:e3:54:6f:7b:af:5f: a2:7c:3c:a5:37:f9:8f:4d:47:4a:ce:56:0a:43:b5:87:95:e9: 91:fe:d7:dc:ff:08:48:c0:88:cf:f4:d9:64:53:e0:a4:a6:5e: af:bc:63:fb:f5:2c:ea:c4:ae:f4:c5:dd:7b:8d:dd:9b:7c:d1: 87:78:6c:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QQBUpMmhV5J1l/RDCdM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTYyZDMwNzNhODJkYTg2NTQyYWNmYzM2ZjZmY2I5ZTY2 YTA1YmIwHhcNMjUxMjA2MjAwMTA5WhcNMjUxMjA3MjAwMTA5WjAzMTEwLwYDVQQD Eyg5NWIzYzU4MjlkYWRiMjYyYjdmNDY0YTBhN2Q2MWMwODkzODQ0YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3449suYiIk7OdS96673U4ckBYfDq kHJcbViUU9km+GNG59vHazbu7ru2vw4eDJCRZBy+gnpM90z4fTC7N3s0ZNMHAPO9 In10yskMSGDXxb6ILjvg62YdQNlAlGzX3pl+J+pkePvwTdWS0QXsshSaaxpiaVKn SvLkG+jd3zjb8/4eujEkpqaloVqxGJzeV7xLqTJXCTSChXPKvRej9TURlUQHUn/g uH8tT/h+/AMXZ+qcMKU3n51mTqls401yzZ7PeHUopaurVX2kmweYbXuzC2n7Ntso FgqT/FEWGJJys7fSyrplirZvDPV9eq2lp1Bx5tvTce3wrwcAtmG8KwKYqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWzxYKdrbJit/RkoKfWHAiThEx7MB8GA1UdIwQY MBaAFJmmLTBzqC2oZUKs/Db2/LnmagW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYt MmQ5NTM2MDBmZjM3LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYtMmQ5NTM2MDBmZjM3 LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPcqFvjT FAIvQTwhuYLTPIMJE9uMmsywPj4OUgJYbFaYUlaEr72ue6e0igtkunfWDWBhyDhU /hWvqtSOe+7+sz6Vi7hjC9oY/zH3HfN30HcvwBMGfqXH+6JrCmplDwZTVky1YkGj eeegCjPBkYQwp8qQe1BdmoBjrt6UBub+1X2NquipnWdrEB3IhUhzYADN0AlUCkFG UFHfRiJ5guIAFr8YCPGSuCTurlxPk2SqUF+vIzpQWSCoJup62Y0gjpyI41Rve69f onw8pTf5j01HSs5WCkO1h5Xpkf7X3P8ISMCIz/TZZFPgpKZer7xj+/Us6sSu9MXd e43dm3zRh3hsjg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:24 2025 by rpki-client