This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json) Hash identifier: r+SJdA/x6VqTfHNmMK2o7CNpcdvHclQ9f5kiq/P+5/A= Subject key identifier: 22:B5:7D:1E:40:51:03:62:81:0D:2C:CC:B1:A8:7B:7F:91:DF:7A:29 Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6 Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6 Certificate serial: 019B3E6D3D342262732534CF933562CA81B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft Manifest number: 03B8 Signing time: Sun 21 Dec 2025 01:01:44 +0000 Manifest this update: Sun 21 Dec 2025 01:01:44 +0000 Manifest next update: Mon 22 Dec 2025 01:01:44 +0000 Files and hashes: 1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=) 2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: 2350oSXuWewxlocBlBWHUYYpW/l1AK5BZdIHZGx0f1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:3d:34:22:62:73:25:34:cf:93:35:62:ca:81:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6 Validity Not Before: Dec 21 01:01:44 2025 GMT Not After : Dec 22 01:01:44 2025 GMT Subject: CN=22b57d1e40510362810d2cccb1a87b7f91df7a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ef:bc:b4:16:28:87:d6:38:c2:6d:82:22:df: 13:8a:6f:59:76:e1:66:b8:c1:da:c8:c9:de:61:2f: ee:bc:13:23:51:d3:2a:04:7c:98:76:47:1f:01:52: dc:78:ae:55:12:1d:38:91:e6:99:44:d4:6a:fe:f2: e1:71:a1:ca:87:fd:e7:50:76:1d:c8:c7:f4:4b:f0: 03:81:1b:fa:1b:78:68:0f:4f:37:60:28:6b:b4:5b: c7:39:c7:c6:6e:5e:04:f0:3a:ea:34:37:f5:4b:cd: 17:da:e4:70:b0:a9:6b:b0:68:22:48:76:50:37:b0: 7f:9b:3a:11:05:22:bc:f4:d8:76:69:ea:23:5c:29: ca:06:72:fd:f7:04:15:b6:02:a3:db:c7:2f:57:04: 8f:d2:81:48:54:1f:f5:94:ee:7d:b7:b7:93:19:57: c9:3f:f9:f5:4b:7b:81:30:14:22:fc:48:9b:1e:e9: 62:02:84:96:7d:67:c0:b5:54:15:1f:95:76:3c:59: f6:27:74:80:e1:72:48:e9:67:a7:80:8d:90:b1:81: e7:15:53:f2:8c:fb:b8:c9:e3:ef:bc:3a:1c:7d:09: 99:50:a8:5f:ec:da:1d:3f:3c:99:62:35:31:39:34: 01:23:4e:a3:1d:19:e7:f9:44:a2:e2:3f:70:8a:61: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B5:7D:1E:40:51:03:62:81:0D:2C:CC:B1:A8:7B:7F:91:DF:7A:29 X509v3 Authority Key Identifier: keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:dc:91:bd:a4:03:4d:6c:37:37:45:03:f1:a2:33:98:65:92: 18:82:92:b8:a9:08:99:ee:e1:c1:3f:ee:fb:7a:26:ba:dd:de: e4:0d:03:af:62:94:0e:c9:a7:49:10:30:8b:98:fd:54:05:be: 23:49:51:4a:5e:8f:ef:d5:96:aa:ec:59:33:59:12:ca:86:08: 65:5c:d3:ce:9e:2a:b7:cb:63:3c:f9:8c:17:8d:89:bf:48:be: 5b:6b:11:c6:cc:e0:6c:1e:f0:3f:64:29:8e:33:79:6c:0f:5a: c2:0d:0c:0c:6a:3e:d0:b5:ca:14:36:13:25:ca:75:e5:7a:c0: 2a:54:c1:fc:81:7c:99:d9:9c:70:d5:98:59:69:c0:b4:77:d1: 3a:df:2a:3b:c8:d1:7d:9d:7d:c7:62:4e:31:05:5e:4c:7d:e6: 73:31:20:68:fb:ef:a5:71:03:f2:2b:50:e3:7b:58:ef:65:4c: 3f:d8:0a:a0:45:1f:c5:70:7c:04:b3:e4:ca:62:c7:96:0e:76: bb:d4:1d:89:db:48:ef:3d:e6:f1:7d:b0:72:6e:75:15:45:d0: 8a:f4:de:39:9d:02:fc:01:a5:0a:12:64:96:ba:9d:55:9c:a1: ea:5a:21:77:84:cb:7c:9c:35:4f:9d:96:ba:b2:ec:9b:3d:8e: 91:7a:ee:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bT00ImJzJTTPkzViyoG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5 Y2RmYjYwHhcNMjUxMjIxMDEwMTQ0WhcNMjUxMjIyMDEwMTQ0WjAzMTEwLwYDVQQD EygyMmI1N2QxZTQwNTEwMzYyODEwZDJjY2NiMWE4N2I3ZjkxZGY3YTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3++8tBYoh9Y4wm2CIt8Tim9ZduFm uMHayMneYS/uvBMjUdMqBHyYdkcfAVLceK5VEh04keaZRNRq/vLhcaHKh/3nUHYd yMf0S/ADgRv6G3hoD083YChrtFvHOcfGbl4E8DrqNDf1S80X2uRwsKlrsGgiSHZQ N7B/mzoRBSK89Nh2aeojXCnKBnL99wQVtgKj28cvVwSP0oFIVB/1lO59t7eTGVfJ P/n1S3uBMBQi/EibHuliAoSWfWfAtVQVH5V2PFn2J3SA4XJI6WengI2QsYHnFVPy jPu4yePvvDocfQmZUKhf7NodPzyZYjUxOTQBI06jHRnn+USi4j9wimGMDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK1fR5AUQNigQ0szLGoe3+R33opMB8GA1UdIwQY MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftyRvaQD TWw3N0UD8aIzmGWSGIKSuKkIme7hwT/u+3omut3e5A0Dr2KUDsmnSRAwi5j9VAW+ I0lRSl6P79WWquxZM1kSyoYIZVzTzp4qt8tjPPmMF42Jv0i+W2sRxszgbB7wP2Qp jjN5bA9awg0MDGo+0LXKFDYTJcp15XrAKlTB/IF8mdmccNWYWWnAtHfROt8qO8jR fZ19x2JOMQVeTH3mczEgaPvvpXED8itQ43tY72VMP9gKoEUfxXB8BLPkymLHlg52 u9QdidtI7z3m8X2wcm51FUXQivTeOZ0C/AGlChJklrqdVZyh6lohd4TLfJw1T52W urLsmz2OkXrumA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:19 2025 by rpki-client