This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft File: iMaZNJivBRiWLl9I1chG3BddGIQ.mft (raw, json) Hash identifier: wRSg+FlfIs7fZQiNN5YXq1lUxYiiOWazg28NHU7Ub+4= Subject key identifier: 93:9D:0E:E2:8A:3E:E6:69:E3:74:67:38:D9:F5:58:4F:8C:DF:F5:EA Authority key identifier: 88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84 Certificate issuer: /CN=88c6993498af0518962e5f48d5c846dc175d1884 Certificate serial: 019B74ECFAE027B710ACA065F8ADAEE5A119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft Manifest number: 17A3 Signing time: Wed 31 Dec 2025 15:00:46 +0000 Manifest this update: Wed 31 Dec 2025 15:00:46 +0000 Manifest next update: Thu 01 Jan 2026 15:00:46 +0000 Files and hashes: 1: iMaZNJivBRiWLl9I1chG3BddGIQ.crl (hash: eXJQDM54s4vs9M56JsMgV5Lo4VgawoQtRzBNiTasvb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ec:fa:e0:27:b7:10:ac:a0:65:f8:ad:ae:e5:a1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c6993498af0518962e5f48d5c846dc175d1884 Validity Not Before: Dec 31 15:00:46 2025 GMT Not After : Jan 1 15:00:46 2026 GMT Subject: CN=939d0ee28a3ee669e3746738d9f5584f8cdff5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:48:0b:b0:e1:8e:d7:ca:f3:0e:86:73:8c:09: a3:ba:c9:9c:87:c9:c9:ee:a6:52:46:42:10:0d:a4: 2d:8f:a5:8e:d1:b4:fc:56:dc:7e:bb:6f:11:4f:14: 08:e4:17:ce:8c:7e:89:bb:03:c6:94:af:c6:5c:fd: 7d:5f:56:fc:30:6c:a8:17:84:75:57:7a:f0:5f:8f: ba:1f:fa:2c:a5:7e:05:48:b9:49:37:48:f0:3c:5a: 6c:41:ba:83:55:8d:30:cd:3b:85:63:fb:27:f8:46: 4d:2e:d9:3f:61:d0:db:25:a0:2c:32:a8:30:2a:3b: ca:52:9f:c4:8c:b0:48:6d:a1:a8:64:fe:8a:b9:92: 76:8a:0f:9e:c4:e6:08:90:ff:ed:d8:fd:b6:b5:62: 85:a2:45:a4:13:c1:30:6e:2c:7e:71:6e:97:77:12: 7c:8c:5c:7a:be:6a:b9:da:d4:d5:e3:f1:45:72:3b: e8:a4:f3:90:17:4a:71:21:f5:55:b4:4a:e9:d9:90: 46:76:60:69:a4:b0:d5:f9:45:d5:e8:77:3b:3b:c3: a0:77:10:57:6a:9e:be:9a:30:26:6b:d8:4b:e9:d0: 9d:86:72:2e:d8:b1:9d:3e:81:a1:1a:2f:dc:c5:8a: f8:77:a7:4b:ca:ca:ea:67:f9:69:79:c0:7f:5e:13: 05:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9D:0E:E2:8A:3E:E6:69:E3:74:67:38:D9:F5:58:4F:8C:DF:F5:EA X509v3 Authority Key Identifier: keyid:88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:74:f9:e2:93:1d:99:0b:7f:81:06:a0:83:31:e9:64:9a:c1: 77:21:79:21:ac:1c:47:94:37:af:50:c0:57:fc:7a:f2:d0:6f: 45:cc:e7:d0:d9:15:0c:ad:a9:6b:d3:f3:41:c8:42:7e:ae:74: 3d:ad:45:75:62:05:a2:fe:30:72:27:14:33:34:72:03:7f:70: 9c:a6:c7:c6:c8:2a:7b:0b:a4:f9:60:00:2b:68:d2:b6:a4:96: cf:51:70:b2:44:ce:28:32:02:e0:c3:11:74:c2:81:e6:f3:9f: 62:c8:90:11:32:f7:3b:31:66:dc:67:07:be:ae:25:ab:1f:4d: c8:eb:5b:80:39:0a:fa:81:f7:b9:f6:bd:24:33:e8:d1:8e:9b: 2b:2f:eb:74:86:cd:d4:0d:22:c2:26:81:74:6f:66:70:d9:04: b2:72:e3:d8:c7:67:d3:5b:d9:fe:38:fa:1f:19:af:6b:4b:78: af:bc:a2:59:11:ce:cf:fd:b6:a0:64:81:7b:12:3a:07:18:39: 60:c1:9c:a2:2f:47:70:2d:6b:07:0d:15:33:9f:7f:94:82:dd: fb:0f:c4:7a:24:d4:60:85:de:3d:c1:95:83:75:20:41:da:1f: 5e:0f:93:08:98:00:03:02:21:39:40:d9:b3:0a:b1:21:74:0c: 6e:59:fa:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07PrgJ7cQrKBl+K2u5aEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YzY5OTM0OThhZjA1MTg5NjJlNWY0OGQ1Yzg0NmRjMTc1 ZDE4ODQwHhcNMjUxMjMxMTUwMDQ2WhcNMjYwMTAxMTUwMDQ2WjAzMTEwLwYDVQQD Eyg5MzlkMGVlMjhhM2VlNjY5ZTM3NDY3MzhkOWY1NTg0ZjhjZGZmNWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EgLsOGO18rzDoZzjAmjusmch8nJ 7qZSRkIQDaQtj6WO0bT8Vtx+u28RTxQI5BfOjH6JuwPGlK/GXP19X1b8MGyoF4R1 V3rwX4+6H/ospX4FSLlJN0jwPFpsQbqDVY0wzTuFY/sn+EZNLtk/YdDbJaAsMqgw KjvKUp/EjLBIbaGoZP6KuZJ2ig+exOYIkP/t2P22tWKFokWkE8Ewbix+cW6XdxJ8 jFx6vmq52tTV4/FFcjvopPOQF0pxIfVVtErp2ZBGdmBppLDV+UXV6Hc7O8OgdxBX ap6+mjAma9hL6dCdhnIu2LGdPoGhGi/cxYr4d6dLysrqZ/lpecB/XhMFswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOdDuKKPuZp43RnONn1WE+M3/XqMB8GA1UdIwQY MBaAFIjGmTSYrwUYli5fSNXIRtwXXRiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU1hWk5KaXZCUmlXTGw5STFjaEczQmRkR0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MWIwMGEtZjY4ZC00NGY0LTg4MjUt OTgyNzM2YjQ1YmRmLzEvaU1hWk5KaXZCUmlXTGw5STFjaEczQmRkR0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MWIwMGEtZjY4ZC00NGY0LTg4MjUtOTgyNzM2YjQ1YmRm LzEvaU1hWk5KaXZCUmlXTGw5STFjaEczQmRkR0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXT54pMd mQt/gQaggzHpZJrBdyF5IawcR5Q3r1DAV/x68tBvRczn0NkVDK2pa9PzQchCfq50 Pa1FdWIFov4wcicUMzRyA39wnKbHxsgqewuk+WAAK2jStqSWz1FwskTOKDIC4MMR dMKB5vOfYsiQETL3OzFm3GcHvq4lqx9NyOtbgDkK+oH3ufa9JDPo0Y6bKy/rdIbN 1A0iwiaBdG9mcNkEsnLj2Mdn01vZ/jj6Hxmva0t4r7yiWRHOz/22oGSBexI6Bxg5 YMGcoi9HcC1rBw0VM59/lILd+w/EeiTUYIXePcGVg3UgQdofXg+TCJgAAwIhOUDZ swqxIXQMbln6Pw== -----END CERTIFICATE-----Generated at Wed Dec 31 22:55:19 2025 by rpki-client