This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft File: maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json) Hash identifier: mGGeR933R0Y4HApm/P69q7LYunWNrTnl4eYOUgfVn68= Subject key identifier: D2:06:F2:35:72:EE:D0:BC:B7:B3:75:C1:4A:9C:80:87:19:8D:5F:EB Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Certificate serial: 019BF72D26B647CCA0BF086E80B64131D4A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 22:01:29 +0000 Manifest this update: Sun 25 Jan 2026 22:01:29 +0000 Manifest next update: Mon 26 Jan 2026 22:01:29 +0000 Files and hashes: 1: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=) 2: YoLNLyuosFKuT_-ema2hiJHs0ZY.roa (hash: hWuyH98+DzBIQmHmAmY9RDKZV1I45ddKJD4en0HvYcI=) 3: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: 7eKz68m/eqGiu0a0x1iCoYnASN1URfOqTAIHvMyWTwk=) 4: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=) 5: poLUczAkpZ-X35ck8qyvSthMHVI.roa (hash: 0jkj8MirRFlW0k6UiG4ranSvkFvq8sDiHxNpMa/cyFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:26:b6:47:cc:a0:bf:08:6e:80:b6:41:31:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Validity Not Before: Jan 25 22:01:29 2026 GMT Not After : Jan 26 22:01:29 2026 GMT Subject: CN=d206f23572eed0bcb7b375c14a9c8087198d5feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:21:c3:8d:f5:69:03:da:f9:87:9e:e0:7f: b2:ad:a6:e9:5c:28:e5:7f:a9:95:bf:75:b5:62:31: fe:2d:25:5d:d9:15:c3:52:85:f7:aa:df:d5:17:3d: 6a:53:3f:54:10:89:e8:ed:98:ca:bc:f8:80:f4:df: 9b:d8:d3:00:85:99:9d:e2:92:3f:a9:ca:be:43:96: 50:c3:d5:38:d2:0f:38:1d:e9:04:4d:62:51:b8:50: 78:47:8d:1a:c0:13:45:81:3c:5f:de:11:ef:93:be: de:e7:be:5d:e8:b3:e3:c2:ba:d7:18:e5:85:d9:15: 87:57:49:ab:11:52:10:26:98:45:53:b9:ac:66:14: e0:d1:ec:c3:3d:94:f7:0d:8d:94:b0:0c:41:ce:cb: 8e:50:c1:b2:30:a1:ed:83:a5:77:77:eb:11:f7:57: e4:5e:1d:3e:10:58:d2:db:6c:b8:c8:70:e1:e7:79: 1c:06:42:69:43:a9:d7:7a:fe:eb:95:d4:d3:69:4c: 11:87:63:4f:a0:79:bc:47:4a:3d:3b:3d:5e:bb:22: 88:6f:32:b1:80:4a:98:98:ca:44:ac:59:6d:8f:e9: 9b:f5:93:b4:71:9c:6d:a5:eb:4a:b1:d0:91:cb:a7: cd:7d:dd:4a:45:21:0f:f3:03:1b:9f:a4:85:d1:09: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:06:F2:35:72:EE:D0:BC:B7:B3:75:C1:4A:9C:80:87:19:8D:5F:EB X509v3 Authority Key Identifier: keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ae:78:58:02:ba:fc:d8:1b:f7:48:06:a0:9b:ff:1c:dd:c7: 7f:e8:51:23:be:25:d7:73:7a:cd:f4:94:9b:3d:50:56:39:6b: 5b:c0:f7:47:b1:da:40:29:59:e9:54:0f:11:4b:e8:57:63:d7: 5a:bb:3e:d0:dc:97:3d:24:e9:0c:81:ca:4f:26:c5:22:d3:0b: 79:c9:cf:6c:c0:3e:39:7f:ca:98:41:09:ea:3a:f6:5b:fe:17: aa:53:7c:54:11:ea:1e:94:d0:06:b5:53:8c:fc:c6:4c:cc:e3: 0c:44:13:5c:e9:92:87:d6:49:e5:57:34:96:82:91:7a:54:b6: 54:1d:81:bd:36:46:0b:09:c1:c1:09:4d:d9:05:48:e2:f9:9d: 00:f3:ec:19:4a:92:1f:27:01:42:d3:c3:e3:af:8b:71:96:65: 7a:30:72:04:dc:d4:50:c9:58:24:99:2f:79:5c:6e:39:01:0d: 2b:e3:8f:93:74:b7:3e:7a:85:ae:4d:51:90:0b:75:9b:72:b8: e3:80:4d:2b:48:47:67:80:dc:0c:a8:75:9a:b2:7b:1a:1a:ca: cd:87:c1:5a:32:91:0e:99:75:bf:28:06:c4:c1:bf:ac:e1:63: 34:f2:de:24:4b:5c:02:4a:6d:b0:6a:66:f8:29:9d:23:e3:5e: 51:6c:7b:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LSa2R8ygvwhugLZBMdSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw YjY4NmEwHhcNMjYwMTI1MjIwMTI5WhcNMjYwMTI2MjIwMTI5WjAzMTEwLwYDVQQD EyhkMjA2ZjIzNTcyZWVkMGJjYjdiMzc1YzE0YTljODA4NzE5OGQ1ZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU4hw431aQPa+Yee4H+yrabpXCjl f6mVv3W1YjH+LSVd2RXDUoX3qt/VFz1qUz9UEIno7ZjKvPiA9N+b2NMAhZmd4pI/ qcq+Q5ZQw9U40g84HekETWJRuFB4R40awBNFgTxf3hHvk77e575d6LPjwrrXGOWF 2RWHV0mrEVIQJphFU7msZhTg0ezDPZT3DY2UsAxBzsuOUMGyMKHtg6V3d+sR91fk Xh0+EFjS22y4yHDh53kcBkJpQ6nXev7rldTTaUwRh2NPoHm8R0o9Oz1euyKIbzKx gEqYmMpErFltj+mb9ZO0cZxtpetKsdCRy6fNfd1KRSEP8wMbn6SF0QlvxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIG8jVy7tC8t7N1wUqcgIcZjV/rMB8GA1UdIwQY MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt ZTVkNTA3YTgyNmJmLzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnK54WAK6 /Ngb90gGoJv/HN3Hf+hRI74l13N6zfSUmz1QVjlrW8D3R7HaQClZ6VQPEUvoV2PX Wrs+0NyXPSTpDIHKTybFItMLecnPbMA+OX/KmEEJ6jr2W/4XqlN8VBHqHpTQBrVT jPzGTMzjDEQTXOmSh9ZJ5Vc0loKRelS2VB2BvTZGCwnBwQlN2QVI4vmdAPPsGUqS HycBQtPD46+LcZZlejByBNzUUMlYJJkveVxuOQENK+OPk3S3PnqFrk1RkAt1m3K4 44BNK0hHZ4DcDKh1mrJ7GhrKzYfBWjKRDpl1vygGxMG/rOFjNPLeJEtcAkptsGpm +CmdI+NeUWx73A== -----END CERTIFICATE-----Generated at Mon Jan 26 07:21:12 2026 by rpki-client