This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft File: IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json) Hash identifier: CP8dqmX6LKKyQ29sjQ0xJ6v0gCDUGM1n5tJDnu4OPiU= Subject key identifier: 05:94:1C:F2:94:00:F0:6D:B2:72:DE:B1:9E:13:3A:52:42:2F:9C:11 Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD Certificate issuer: /CN=20c9f249519b1ff479350f317254f405e8bfcabd Certificate serial: 019B43254D4790929D442F51BDA2E48EF674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft Manifest number: 1181 Signing time: Sun 21 Dec 2025 23:01:16 +0000 Manifest this update: Sun 21 Dec 2025 23:01:16 +0000 Manifest next update: Mon 22 Dec 2025 23:01:16 +0000 Files and hashes: 1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: FsVPBf3qZh68RUwDJ65VKQWMtXUXpBhERLyB0oiR3zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:4d:47:90:92:9d:44:2f:51:bd:a2:e4:8e:f6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd Validity Not Before: Dec 21 23:01:16 2025 GMT Not After : Dec 22 23:01:16 2025 GMT Subject: CN=05941cf29400f06db272deb19e133a52422f9c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:17:04:fc:76:bd:58:5b:53:21:8e:37:0b: 4d:3a:8c:4e:72:74:e9:47:0c:88:a5:10:a0:13:5a: fb:1c:98:82:1d:b1:e1:f2:d1:9a:15:ce:0b:71:14: 38:da:aa:a0:d9:b9:ae:c5:9c:bd:51:2e:14:de:af: 87:27:4a:c5:0b:dc:23:0e:c7:fd:f1:b7:03:81:13: 13:75:87:b3:4b:ed:6a:0a:12:f5:8c:9e:dd:b7:4c: 5f:77:d8:0f:6c:d3:8d:91:3f:5f:c0:d5:46:e0:68: 78:97:9f:83:64:97:59:d8:03:af:92:4b:f4:3d:88: 86:e6:ba:72:39:dc:18:64:74:7b:69:58:41:fe:af: ef:51:da:b6:73:68:1c:64:da:2f:ff:0a:e5:a3:33: f6:b7:f8:53:d4:2d:c8:7c:63:d6:2a:e2:cd:61:c7: f5:59:f3:fc:91:b9:4c:9d:0f:5b:c3:63:5a:3c:d1: 4d:22:f8:44:80:57:86:be:75:e2:5e:3a:bc:e4:1b: 78:0d:80:6e:af:90:6f:36:60:94:51:0b:0f:7c:21: b2:1a:55:d7:81:11:dd:db:88:3b:e1:84:ec:26:22: 00:fe:4c:81:a1:c7:6d:89:78:59:cc:a8:32:99:7f: 6f:aa:6c:1f:03:31:94:2e:47:e1:1c:c5:85:9e:05: fe:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:94:1C:F2:94:00:F0:6D:B2:72:DE:B1:9E:13:3A:52:42:2F:9C:11 X509v3 Authority Key Identifier: keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:3c:54:2d:22:16:f4:c1:6f:42:84:9c:2a:93:cc:fe:08:cf: 43:78:be:fa:83:e0:9e:33:c8:18:4f:b8:58:59:d5:19:a3:28: 6a:ca:a5:6d:21:da:ab:6c:44:91:26:75:14:83:01:00:5e:6d: 5e:26:b1:6b:90:a1:27:8e:78:82:49:09:b3:bf:65:1e:2e:ef: 22:09:86:b1:7f:41:b8:87:da:62:c5:f7:b4:c0:0f:fb:af:11: 4d:84:4c:25:4f:c4:b3:30:cb:e2:be:8f:6f:b3:e9:c9:f4:2d: cc:34:f1:ea:8d:37:23:7c:c9:f9:91:ca:83:ac:d5:71:c5:79: bd:31:ec:b3:6f:40:e5:5f:da:1b:79:ba:d8:6a:a8:a8:14:f1: 19:22:a8:f5:d5:25:e1:a8:ad:f2:6b:05:39:35:5f:7a:3d:85: a2:ff:7f:5b:f1:75:45:3e:10:ae:03:b5:1c:00:15:f9:1a:96: 31:6e:ab:6c:44:57:6f:93:e8:0f:3b:69:d7:73:ee:a1:a2:57: 26:14:99:cc:62:cc:7e:f7:31:1c:f9:7c:98:4e:11:49:8f:73: d7:61:77:09:f6:ff:94:15:74:08:21:e9:82:56:07:69:33:01: b9:36:96:6d:b1:c3:66:d5:90:7a:e7:59:9f:92:16:04:03:28: 94:50:1d:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJU1HkJKdRC9RvaLkjvZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzlmMjQ5NTE5YjFmZjQ3OTM1MGYzMTcyNTRmNDA1ZThi ZmNhYmQwHhcNMjUxMjIxMjMwMTE2WhcNMjUxMjIyMjMwMTE2WjAzMTEwLwYDVQQD EygwNTk0MWNmMjk0MDBmMDZkYjI3MmRlYjE5ZTEzM2E1MjQyMmY5YzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhYXBPx2vVhbUyGONwtNOoxOcnTp RwyIpRCgE1r7HJiCHbHh8tGaFc4LcRQ42qqg2bmuxZy9US4U3q+HJ0rFC9wjDsf9 8bcDgRMTdYezS+1qChL1jJ7dt0xfd9gPbNONkT9fwNVG4Gh4l5+DZJdZ2AOvkkv0 PYiG5rpyOdwYZHR7aVhB/q/vUdq2c2gcZNov/wrlozP2t/hT1C3IfGPWKuLNYcf1 WfP8kblMnQ9bw2NaPNFNIvhEgFeGvnXiXjq85Bt4DYBur5BvNmCUUQsPfCGyGlXX gRHd24g74YTsJiIA/kyBocdtiXhZzKgymX9vqmwfAzGULkfhHMWFngX+vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWUHPKUAPBtsnLesZ4TOlJCL5wRMB8GA1UdIwQY MBaAFCDJ8klRmx/0eTUPMXJU9AXov8q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2Qt MGU2YmNlZDAwNDYzLzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2QtMGU2YmNlZDAwNDYz LzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojxULSIW 9MFvQoScKpPM/gjPQ3i++oPgnjPIGE+4WFnVGaMoasqlbSHaq2xEkSZ1FIMBAF5t Xiaxa5ChJ454gkkJs79lHi7vIgmGsX9BuIfaYsX3tMAP+68RTYRMJU/EszDL4r6P b7PpyfQtzDTx6o03I3zJ+ZHKg6zVccV5vTHss29A5V/aG3m62GqoqBTxGSKo9dUl 4ait8msFOTVfej2Fov9/W/F1RT4QrgO1HAAV+RqWMW6rbERXb5PoDztp13PuoaJX JhSZzGLMfvcxHPl8mE4RSY9z12F3Cfb/lBV0CCHpglYHaTMBuTaWbbHDZtWQeudZ n5IWBAMolFAdYg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:53:17 2025 by rpki-client