This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json) Hash identifier: gI5B1ZGz9SBPZZMK+zo/f6qC5LAwh1zJPKtCBUiEU5Y= Subject key identifier: 9A:A3:46:AA:3D:C0:D0:5E:94:07:FE:0B:76:08:67:60:0C:EE:95:5C Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6 Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6 Certificate serial: 019B3C7F647C60942ABD9EDFCAB93733B99E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft Manifest number: 03B7 Signing time: Sat 20 Dec 2025 16:02:20 +0000 Manifest this update: Sat 20 Dec 2025 16:02:20 +0000 Manifest next update: Sun 21 Dec 2025 16:02:20 +0000 Files and hashes: 1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=) 2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: 2PFiKNIBVl6MABlMUwCznXHdwJ4pUyxJU3noS2/F9ZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:64:7c:60:94:2a:bd:9e:df:ca:b9:37:33:b9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6 Validity Not Before: Dec 20 16:02:20 2025 GMT Not After : Dec 21 16:02:20 2025 GMT Subject: CN=9aa346aa3dc0d05e9407fe0b760867600cee955c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:12:8b:b8:c1:a6:86:5f:e5:8e:d3:c3:a3:d5: f8:f4:d7:ba:70:68:37:1a:9e:a1:04:bc:4e:d8:9b: 5c:6b:81:27:1f:a2:ae:bd:4a:70:6e:ab:47:10:59: af:40:cd:29:c6:b0:75:2d:cd:03:4d:31:05:76:30: 89:fd:b5:9f:ab:a3:08:00:44:7f:6e:d8:7f:90:93: ec:2e:77:ec:d5:cb:99:58:76:c9:fe:b7:b6:12:de: d3:27:28:eb:96:a6:bf:7e:cb:47:11:c0:ff:e8:bb: fe:ad:0e:2d:22:b3:b1:0e:85:2f:1d:e6:6c:fb:77: 1b:f0:06:c6:49:20:f9:0e:14:74:41:d2:ad:b5:49: 7c:90:f2:e0:a6:ca:ba:7b:f2:c9:5a:90:a4:b1:2d: 11:ee:e8:c1:5c:db:81:24:e6:72:fe:35:3a:22:ca: 0c:59:27:56:d8:69:1d:68:9f:8f:7a:55:9b:6a:f3: bc:ef:3b:d3:a5:06:70:ab:bd:5a:63:81:bb:f8:bd: b8:1d:a6:df:4b:05:4a:32:c5:0b:8d:d5:3f:3b:c4: fa:fa:9f:7b:f2:cb:54:f2:81:c1:b0:69:15:bc:59: ee:8f:f1:29:e5:ab:98:2e:b3:2a:7a:a9:e5:e0:33: 55:54:8c:e0:ca:e9:1b:7e:fc:af:fc:79:78:cf:52: 4c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A3:46:AA:3D:C0:D0:5E:94:07:FE:0B:76:08:67:60:0C:EE:95:5C X509v3 Authority Key Identifier: keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:24:6d:5e:c2:a4:a3:de:52:cf:be:d9:48:97:5d:28:ec:8a: c0:1c:95:a7:7b:9e:bc:de:4f:07:49:a3:63:4e:e3:9c:7b:9e: 19:82:80:ef:e0:84:0a:11:7f:48:43:4a:52:26:ff:30:8d:58: 68:5a:0b:c2:34:48:54:90:67:be:84:ba:9d:da:27:7e:b5:38: 1b:ab:ed:42:1c:c4:b6:e1:7f:78:2d:a3:e4:2c:46:99:48:7d: 66:bc:80:bd:26:96:a8:9a:df:73:be:fd:5b:fe:72:64:ec:2f: 4d:39:c0:da:12:0d:1c:2e:64:84:e6:03:c7:f0:f9:db:17:1e: 7f:a4:a7:21:19:2d:c7:7c:59:6d:3c:0a:00:87:e7:4d:34:ec: 20:d7:f8:b9:df:3d:dc:9c:16:2a:83:73:89:b1:50:24:12:7f: b5:92:5d:81:a4:77:c3:92:49:e3:57:62:5e:1b:b3:5b:cf:06: 90:d6:b2:82:3d:12:d3:b1:a0:62:6d:fe:9d:02:85:c6:f7:f8: 65:19:22:47:bd:bc:b1:de:c6:f6:d4:98:44:50:66:f8:a9:27: a6:83:5f:a3:f9:f1:0c:00:41:81:67:3a:1a:47:41:4a:ae:bd: df:8c:a9:4d:15:e8:78:7d:db:76:0c:9e:a2:d7:d6:70:88:1f: 36:81:01:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f2R8YJQqvZ7fyrk3M7meMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5 Y2RmYjYwHhcNMjUxMjIwMTYwMjIwWhcNMjUxMjIxMTYwMjIwWjAzMTEwLwYDVQQD Eyg5YWEzNDZhYTNkYzBkMDVlOTQwN2ZlMGI3NjA4Njc2MDBjZWU5NTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxKLuMGmhl/ljtPDo9X49Ne6cGg3 Gp6hBLxO2Jtca4EnH6KuvUpwbqtHEFmvQM0pxrB1Lc0DTTEFdjCJ/bWfq6MIAER/ bth/kJPsLnfs1cuZWHbJ/re2Et7TJyjrlqa/fstHEcD/6Lv+rQ4tIrOxDoUvHeZs +3cb8AbGSSD5DhR0QdKttUl8kPLgpsq6e/LJWpCksS0R7ujBXNuBJOZy/jU6IsoM WSdW2GkdaJ+PelWbavO87zvTpQZwq71aY4G7+L24HabfSwVKMsULjdU/O8T6+p97 8stU8oHBsGkVvFnuj/Ep5auYLrMqeqnl4DNVVIzgyukbfvyv/Hl4z1JM+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqjRqo9wNBelAf+C3YIZ2AM7pVcMB8GA1UdIwQY MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiRtXsKk o95Sz77ZSJddKOyKwByVp3uevN5PB0mjY07jnHueGYKA7+CEChF/SENKUib/MI1Y aFoLwjRIVJBnvoS6ndonfrU4G6vtQhzEtuF/eC2j5CxGmUh9ZryAvSaWqJrfc779 W/5yZOwvTTnA2hINHC5khOYDx/D52xcef6SnIRktx3xZbTwKAIfnTTTsINf4ud89 3JwWKoNzibFQJBJ/tZJdgaR3w5JJ41diXhuzW88GkNaygj0S07GgYm3+nQKFxvf4 ZRkiR728sd7G9tSYRFBm+KknpoNfo/nxDABBgWc6GkdBSq6934ypTRXoeH3bdgye otfWcIgfNoEBRw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:38 2025 by rpki-client