This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json) Hash identifier: OQQ7P7Zm6n0j16beDcccE6SU9ErFsdBJvQIbP243ehA= Subject key identifier: 97:1D:FB:2D:F9:35:9B:69:AE:2D:2E:4E:EF:79:BB:36:5E:94:0C:A4 Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb Certificate serial: 019B330D3981BCF31A8FFCE0CEBFA5C962BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft Manifest number: 0E98 Signing time: Thu 18 Dec 2025 20:01:03 +0000 Manifest this update: Thu 18 Dec 2025 20:01:03 +0000 Manifest next update: Fri 19 Dec 2025 20:01:03 +0000 Files and hashes: 1: O3Nn92cP9mhnaQHpIkipdhKcmhY.roa (hash: V+9TgZOrsnrsR383ax8U4lIwjvNLrmt7tE94b7Wzobs=) 2: WXv2dwbVJRW9ba0pdaD2mDUFDGQ.roa (hash: KdjFQqVsulL+ig924wHqXhT1yZyNPpl3AA3pYy7D+Qc=) 3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: 0DL/gbtL+YW9+QA88TyrvKW1FRjy+Ru9j4OWGRKCai8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:39:81:bc:f3:1a:8f:fc:e0:ce:bf:a5:c9:62:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb Validity Not Before: Dec 18 20:01:03 2025 GMT Not After : Dec 19 20:01:03 2025 GMT Subject: CN=971dfb2df9359b69ae2d2e4eef79bb365e940ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:8a:71:a8:ca:0c:46:36:f4:8b:d7:5e:14: 27:b8:0b:3d:3b:8c:25:91:57:26:17:2e:4c:f4:62: c4:4c:ca:04:b7:52:20:20:bb:a3:8e:3a:e4:1d:3c: 41:5d:ea:0f:dc:26:16:5a:0d:14:b0:01:62:ec:c7: 65:f2:4f:69:27:98:5f:d3:5d:70:20:e9:eb:17:3d: 83:f2:73:dc:25:5f:a1:4a:4c:c8:c0:14:53:14:7f: 7e:4e:d5:41:b1:09:db:e0:a5:fe:38:d1:80:1d:25: 88:b6:72:f1:da:ab:0c:f4:c8:9b:93:92:7b:e3:05: 51:79:8a:fd:ea:e2:4f:ac:56:02:22:62:4c:2b:3c: c5:cc:7f:e7:d1:a6:44:f1:dc:e5:f3:cd:72:8c:15: f1:b6:24:c0:33:c2:9d:50:0b:03:4e:cf:1e:86:9b: 6f:ea:8f:a3:81:ac:fe:c5:b7:be:ad:6f:d9:ac:d1: d5:5d:54:4d:56:94:90:a6:4a:88:e5:a4:7b:3e:fe: 8f:eb:50:c7:2b:82:f5:44:07:d5:a6:71:d9:c4:a1: 7d:90:60:40:2f:b0:5e:32:94:63:e6:ec:c3:31:98: b7:01:88:f3:a0:71:8c:07:d6:cc:05:e8:88:60:5d: 1f:16:93:fe:22:ef:4f:d3:6f:f0:75:20:8c:59:20: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1D:FB:2D:F9:35:9B:69:AE:2D:2E:4E:EF:79:BB:36:5E:94:0C:A4 X509v3 Authority Key Identifier: keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:46:06:20:23:95:35:53:f6:0b:6f:e2:47:ed:24:b3:f6:95: ad:5a:d4:ba:c1:0b:52:bf:9a:26:17:3c:d9:51:88:7f:af:62: 48:38:4c:6d:58:1d:e8:c0:ba:3f:96:9f:17:38:1f:31:18:3a: fd:dd:73:91:a6:9f:02:30:d4:57:3d:2d:90:a4:70:5f:e3:24: 50:d6:9b:a1:b3:7d:a6:1e:c6:71:bd:b8:ee:73:f4:46:26:2e: 5f:92:8e:95:84:51:d6:99:51:45:28:45:1f:5d:35:fa:b6:f7: 39:3a:d9:bd:2a:01:8c:59:39:0f:0b:07:8e:c6:a1:9d:10:b7: f7:80:8f:0d:4d:88:27:b2:65:20:ef:cd:97:6e:e9:b3:65:c4: 71:08:ba:cd:42:07:50:a2:ec:bb:7f:a6:91:6a:79:71:b9:e5: a2:97:ba:f3:d6:5c:e0:cf:a8:fe:db:49:25:76:7a:d1:56:5b: c3:90:27:1e:11:13:5c:94:e3:10:6e:2e:a7:b0:70:8d:2d:4b: c6:eb:f5:eb:11:b3:c2:d9:85:e4:9e:35:a0:89:25:e6:ba:3f: 99:85:6d:54:dc:5c:33:b6:bf:57:f1:3a:dc:41:2e:7c:76:d8: e0:fd:56:11:ae:7b:ca:89:2f:e8:2c:6b:9d:b3:99:6f:fc:82: 2b:55:b8:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDTmBvPMaj/zgzr+lyWK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTYyZDMwNzNhODJkYTg2NTQyYWNmYzM2ZjZmY2I5ZTY2 YTA1YmIwHhcNMjUxMjE4MjAwMTAzWhcNMjUxMjE5MjAwMTAzWjAzMTEwLwYDVQQD Eyg5NzFkZmIyZGY5MzU5YjY5YWUyZDJlNGVlZjc5YmIzNjVlOTQwY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoySKcajKDEY29IvXXhQnuAs9O4wl kVcmFy5M9GLETMoEt1IgILujjjrkHTxBXeoP3CYWWg0UsAFi7Mdl8k9pJ5hf011w IOnrFz2D8nPcJV+hSkzIwBRTFH9+TtVBsQnb4KX+ONGAHSWItnLx2qsM9Mibk5J7 4wVReYr96uJPrFYCImJMKzzFzH/n0aZE8dzl881yjBXxtiTAM8KdUAsDTs8ehptv 6o+jgaz+xbe+rW/ZrNHVXVRNVpSQpkqI5aR7Pv6P61DHK4L1RAfVpnHZxKF9kGBA L7BeMpRj5uzDMZi3AYjzoHGMB9bMBeiIYF0fFpP+Iu9P02/wdSCMWSD5pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcd+y35NZtpri0uTu95uzZelAykMB8GA1UdIwQY MBaAFJmmLTBzqC2oZUKs/Db2/LnmagW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYt MmQ5NTM2MDBmZjM3LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYtMmQ5NTM2MDBmZjM3 LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0YGICOV NVP2C2/iR+0ks/aVrVrUusELUr+aJhc82VGIf69iSDhMbVgd6MC6P5afFzgfMRg6 /d1zkaafAjDUVz0tkKRwX+MkUNabobN9ph7Gcb247nP0RiYuX5KOlYRR1plRRShF H101+rb3OTrZvSoBjFk5DwsHjsahnRC394CPDU2IJ7JlIO/Nl27ps2XEcQi6zUIH UKLsu3+mkWp5cbnlope689Zc4M+o/ttJJXZ60VZbw5AnHhETXJTjEG4up7BwjS1L xuv16xGzwtmF5J41oIkl5ro/mYVtVNxcM7a/V/E63EEufHbY4P1WEa57yokv6Cxr nbOZb/yCK1W4bQ== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:41 2025 by rpki-client