This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json) Hash identifier: NoLnRWWhKbRulNNph2uZSH8ggQ/Xr08zo7Ot+PoDmgU= Subject key identifier: EC:9D:7C:3D:32:6E:BA:80:21:B9:20:AA:87:E1:88:A5:BA:34:15:D8 Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25 Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625 Certificate serial: 019B3BD96BCA45FFE17E72CCFD20D2C5D08C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft Manifest number: 17A8 Signing time: Sat 20 Dec 2025 13:01:03 +0000 Manifest this update: Sat 20 Dec 2025 13:01:03 +0000 Manifest next update: Sun 21 Dec 2025 13:01:03 +0000 Files and hashes: 1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=) 2: NSBMSdSMSkDZPZPATZRaYBRZGko.roa (hash: VafNKr4t7DSBVL6FM/c3Z2g09Dsix32ClTmM9E5fADQ=) 3: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=) 4: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=) 5: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: RQyfYSgwVZMn+LDzTnZ91VFfomGeq1JDPnYKYISFE48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:6b:ca:45:ff:e1:7e:72:cc:fd:20:d2:c5:d0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625 Validity Not Before: Dec 20 13:01:03 2025 GMT Not After : Dec 21 13:01:03 2025 GMT Subject: CN=ec9d7c3d326eba8021b920aa87e188a5ba3415d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:20:3b:e4:91:3d:a4:a9:9d:28:8e:84:fc: 76:9d:19:bb:c5:9e:35:13:3f:30:8b:d2:6c:83:e4: 15:40:21:44:4c:a2:bd:c2:bc:45:e8:76:32:39:a8: fe:0e:88:81:63:05:0e:e2:85:f6:0c:6e:f5:a7:7d: 5c:94:36:18:ef:83:d3:b1:a9:da:38:3e:f8:f2:68: 66:b0:ca:69:c8:31:e2:d7:6f:dc:6e:01:6f:67:a0: dc:74:d2:54:21:39:08:f9:c8:2b:dd:8c:5a:9c:09: 39:f6:e3:42:68:80:98:ad:88:ad:89:63:da:8f:25: 55:0b:a7:0a:a2:6d:69:61:a1:3d:9b:42:04:b6:4c: c9:93:c4:e9:98:f6:86:08:5e:18:ea:09:80:a6:87: 6e:58:06:0f:d1:6c:7c:b8:39:f9:c2:c8:28:41:88: 9f:a9:1c:96:53:bb:c9:d9:64:17:2b:93:e0:ad:c4: 42:56:90:fd:9e:1e:8f:e4:39:6c:8d:66:45:50:58: 4a:c9:84:9a:16:0d:4d:40:ea:0f:45:f8:17:b0:3d: ef:a0:ff:34:5e:e4:19:f2:f9:a9:44:db:94:d4:d0: f2:e7:dd:2b:e1:95:00:9d:ee:9a:0f:6c:c4:8b:c3: 91:11:fb:49:4e:66:4e:fc:7f:ae:bc:b5:df:02:00: 1e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9D:7C:3D:32:6E:BA:80:21:B9:20:AA:87:E1:88:A5:BA:34:15:D8 X509v3 Authority Key Identifier: keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:12:15:95:11:ec:ae:41:a5:0e:dc:a1:d9:76:52:dc:7e:e9: 51:3b:47:31:02:5b:92:6b:d8:89:10:66:2e:2b:e5:27:56:64: 90:1b:b0:c1:15:3d:57:c2:76:aa:a3:b2:d9:7f:d9:f1:be:34: 5e:4e:6a:bb:f6:4a:b1:30:b1:97:21:4f:5c:a9:04:32:f3:b9: 19:55:e3:1f:1b:4f:a1:4c:5b:e9:38:ee:36:98:b7:a1:73:22: 20:2d:2a:4d:bc:20:6c:6e:62:40:cd:de:cb:8e:cd:98:66:d1: cd:88:31:58:f1:7e:21:70:30:d9:75:23:93:f4:54:4f:85:da: 67:50:1a:2f:c5:86:a3:78:25:30:4f:5b:74:f9:05:79:92:3b: 1e:e2:0b:0f:1b:a3:74:27:70:cd:4b:95:e8:8c:0e:64:e5:7b: 25:19:d5:b2:57:ee:67:00:1f:ec:f6:a6:d7:83:e6:2c:28:99: ec:c9:26:42:b0:f4:44:4c:70:57:08:7b:02:ca:c2:3d:01:2f: d2:ae:1a:80:53:fe:00:b5:a0:20:a5:f7:45:f4:fe:4b:ad:b4: e4:fa:c7:82:06:91:97:4d:47:49:4c:42:f8:7a:4c:cf:29:e9: f6:2c:cc:cc:33:8c:9b:01:42:3a:e7:15:f6:8f:39:96:d1:84: 0b:0d:6b:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72WvKRf/hfnLM/SDSxdCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjAyNGIyYzI3YTY3ZGZmNWI2NTRlZmEwNmJmN2JmYzEy MjI2MjUwHhcNMjUxMjIwMTMwMTAzWhcNMjUxMjIxMTMwMTAzWjAzMTEwLwYDVQQD EyhlYzlkN2MzZDMyNmViYTgwMjFiOTIwYWE4N2UxODhhNWJhMzQxNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLUgO+SRPaSpnSiOhPx2nRm7xZ41 Ez8wi9Jsg+QVQCFETKK9wrxF6HYyOaj+DoiBYwUO4oX2DG71p31clDYY74PTsana OD748mhmsMppyDHi12/cbgFvZ6DcdNJUITkI+cgr3YxanAk59uNCaICYrYitiWPa jyVVC6cKom1pYaE9m0IEtkzJk8TpmPaGCF4Y6gmApoduWAYP0Wx8uDn5wsgoQYif qRyWU7vJ2WQXK5PgrcRCVpD9nh6P5DlsjWZFUFhKyYSaFg1NQOoPRfgXsD3voP80 XuQZ8vmpRNuU1NDy590r4ZUAne6aD2zEi8OREftJTmZO/H+uvLXfAgAebwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOydfD0ybrqAIbkgqofhiKW6NBXYMB8GA1UdIwQY MBaAFIpgJLLCemff9bZU76Br97/BIiYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEt MDhlOGYwY2JiODQwLzEvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEtMDhlOGYwY2JiODQw LzEvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxIVlRHs rkGlDtyh2XZS3H7pUTtHMQJbkmvYiRBmLivlJ1ZkkBuwwRU9V8J2qqOy2X/Z8b40 Xk5qu/ZKsTCxlyFPXKkEMvO5GVXjHxtPoUxb6TjuNpi3oXMiIC0qTbwgbG5iQM3e y47NmGbRzYgxWPF+IXAw2XUjk/RUT4XaZ1AaL8WGo3glME9bdPkFeZI7HuILDxuj dCdwzUuV6IwOZOV7JRnVslfuZwAf7Pam14PmLCiZ7MkmQrD0RExwVwh7AsrCPQEv 0q4agFP+ALWgIKX3RfT+S6205PrHggaRl01HSUxC+HpMzynp9izMzDOMmwFCOucV 9o85ltGECw1r5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 21:38:47 2025 by rpki-client