This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json) Hash identifier: etNtqpWXDxuRRf3ymFBGUTlPnr2BnQ+wGbJkDCYGGgs= Subject key identifier: 06:62:2C:E2:24:F0:F5:BA:CE:CD:A6:FB:88:68:DB:23:B2:31:1B:50 Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40 Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040 Certificate serial: 019B6D3333ED2A18CB2AD5A7D7B00B3F910E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft Manifest number: 17A0 Signing time: Tue 30 Dec 2025 03:00:30 +0000 Manifest this update: Tue 30 Dec 2025 03:00:30 +0000 Manifest next update: Wed 31 Dec 2025 03:00:30 +0000 Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: vRm8/I+wG3WogKzF5OSC5vzXp7Iyu+WUrepuygomaGM=) 2: xXvpynv9RLlNuhH_ScFehFzRtz4.roa (hash: QSdQRW1EuXcu0ntbVvgh9fj5LXlqpMEhY2XBCGX6qp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:33:ed:2a:18:cb:2a:d5:a7:d7:b0:0b:3f:91:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040 Validity Not Before: Dec 30 03:00:30 2025 GMT Not After : Dec 31 03:00:30 2025 GMT Subject: CN=06622ce224f0f5bacecda6fb8868db23b2311b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:8c:87:0e:09:bb:00:12:b6:4e:89:1c:88: 28:4f:71:c6:dd:2e:64:10:de:e2:23:d4:6c:39:20: dd:9d:ac:26:71:0e:ba:36:2e:66:db:d8:57:34:44: 92:b3:10:65:f7:a7:80:69:d0:7b:65:c1:c1:65:24: 5f:7e:9d:1e:40:96:95:b4:de:8d:34:b2:3c:e6:a5: 34:c3:95:f8:c0:2f:be:e9:8c:6f:60:58:02:10:83: 38:c2:d5:3e:cd:9a:1a:ad:f7:b5:b6:25:ac:e3:7a: d6:6b:4e:b3:62:bb:ca:a5:6e:c4:fd:8f:27:ee:b1: 55:0d:1f:dc:87:3e:93:3c:bc:e7:60:9c:8b:1d:65: 81:ea:75:95:db:90:a3:63:7a:db:58:23:0d:13:83: e0:e7:47:b0:67:82:4b:ac:da:97:4c:68:12:64:2d: b3:07:e8:7b:a0:c9:5d:18:01:fe:65:f3:72:c3:7c: 9a:3e:b8:d3:e8:f4:5d:4c:a1:a4:67:eb:1e:d5:0c: 5b:ad:42:f0:80:0d:e5:65:75:fb:8c:03:0b:38:5c: 7f:21:6c:89:b5:3c:9c:d9:84:38:bd:18:46:f3:c4: e2:99:97:3a:a1:a3:82:e1:bd:65:c4:87:31:5a:4d: 94:45:95:c6:1d:10:74:aa:74:91:05:3d:22:33:c4: a5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:62:2C:E2:24:F0:F5:BA:CE:CD:A6:FB:88:68:DB:23:B2:31:1B:50 X509v3 Authority Key Identifier: keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d5:cc:3f:1c:71:4c:22:4c:db:c6:25:2f:db:be:36:22:b3: 19:cc:ee:67:aa:62:17:47:a0:60:21:a7:2e:a4:66:46:d6:f7: 27:3e:7b:7b:b7:0d:ad:e4:be:a3:c4:eb:b2:4f:89:ec:7e:07: 6d:45:fd:a4:84:e7:76:93:ae:7f:69:cf:fb:9e:92:a7:44:c4: fe:79:96:41:46:35:f5:10:76:2e:be:71:88:be:0b:0b:5f:21: 18:dc:8e:3b:e9:cf:3b:f7:4e:72:75:00:f0:b0:ba:11:94:f2: a0:ab:15:84:6e:8d:32:2d:08:4e:b9:63:c3:cd:cc:ff:64:32: e7:64:9e:75:4d:1c:1a:a6:b1:a5:a0:ca:69:23:5f:6c:16:30: 94:37:91:0f:0f:5b:2c:06:df:4f:47:f4:ec:fb:f7:ea:8d:31: 9d:31:4d:af:88:fd:1b:dc:61:34:6c:af:09:3f:84:9f:9d:c6: a2:33:e1:2b:71:31:20:21:a6:74:fd:bb:0b:8c:a3:f3:67:b8: 14:a1:2a:50:76:89:67:fb:eb:86:29:cc:5e:f8:f6:c8:89:91: 89:6f:bc:3c:2f:40:5e:c5:8b:2e:df:16:5a:61:a7:98:5f:ab: 2a:ec:7e:3b:28:1a:4b:9c:46:ec:68:68:70:d9:59:b1:16:0a: 0c:e8:be:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttMzPtKhjLKtWn17ALP5EOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjk1YjNhYmExZWE0ZTY1NDc4OGM1MTY0MTQ1OGNjOTk1 NzgwNDAwHhcNMjUxMjMwMDMwMDMwWhcNMjUxMjMxMDMwMDMwWjAzMTEwLwYDVQQD EygwNjYyMmNlMjI0ZjBmNWJhY2VjZGE2ZmI4ODY4ZGIyM2IyMzExYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPaMhw4JuwAStk6JHIgoT3HG3S5k EN7iI9RsOSDdnawmcQ66Ni5m29hXNESSsxBl96eAadB7ZcHBZSRffp0eQJaVtN6N NLI85qU0w5X4wC++6YxvYFgCEIM4wtU+zZoarfe1tiWs43rWa06zYrvKpW7E/Y8n 7rFVDR/chz6TPLznYJyLHWWB6nWV25CjY3rbWCMNE4Pg50ewZ4JLrNqXTGgSZC2z B+h7oMldGAH+ZfNyw3yaPrjT6PRdTKGkZ+se1QxbrULwgA3lZXX7jAMLOFx/IWyJ tTyc2YQ4vRhG88TimZc6oaOC4b1lxIcxWk2URZXGHRB0qnSRBT0iM8SloQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZiLOIk8PW6zs2m+4ho2yOyMRtQMB8GA1UdIwQY MBaAFIppWzq6HqTmVHiMUWQUWMyZV4BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1sYk9yb2VwT1pVZUl4UlpCUll6SmxYZ0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81MzgxOTQtNzU2MC00NDU2LWI0NWMt Y2EyNmMyMmNmYWZkLzEvaW1sYk9yb2VwT1pVZUl4UlpCUll6SmxYZ0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81MzgxOTQtNzU2MC00NDU2LWI0NWMtY2EyNmMyMmNmYWZk LzEvaW1sYk9yb2VwT1pVZUl4UlpCUll6SmxYZ0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNXMPxxx TCJM28YlL9u+NiKzGczuZ6piF0egYCGnLqRmRtb3Jz57e7cNreS+o8Trsk+J7H4H bUX9pITndpOuf2nP+56Sp0TE/nmWQUY19RB2Lr5xiL4LC18hGNyOO+nPO/dOcnUA 8LC6EZTyoKsVhG6NMi0ITrljw83M/2Qy52SedU0cGqaxpaDKaSNfbBYwlDeRDw9b LAbfT0f07Pv36o0xnTFNr4j9G9xhNGyvCT+En53GojPhK3ExICGmdP27C4yj82e4 FKEqUHaJZ/vrhinMXvj2yImRiW+8PC9AXsWLLt8WWmGnmF+rKux+OygaS5xG7Gho cNlZsRYKDOi+Zw== -----END CERTIFICATE-----Generated at Tue Dec 30 08:52:32 2025 by rpki-client