This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json) Hash identifier: m13Uo2CIABL3F5pYrwXMoXdkQeuzBVSu2V8Yg4o7TqA= Subject key identifier: 4E:DD:F5:4E:06:E0:0E:14:5A:EF:D0:5F:20:FA:87:E7:FF:CB:AC:B9 Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b Certificate serial: 019B405C2173F9D1CAC57F646D7CE078B1F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft Manifest number: 0490 Signing time: Sun 21 Dec 2025 10:02:18 +0000 Manifest this update: Sun 21 Dec 2025 10:02:18 +0000 Manifest next update: Mon 22 Dec 2025 10:02:18 +0000 Files and hashes: 1: HO9laPPsdq6sfNd_PR3udt1kywk.roa (hash: ySqE/9cHXiOyjfUHGzF3+AzH1p8/SUImSsDU40s2CbI=) 2: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: LQUCbvb430jyaICmxyDXuSGKn9FPE8gG55t3fn7K15k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:21:73:f9:d1:ca:c5:7f:64:6d:7c:e0:78:b1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b Validity Not Before: Dec 21 10:02:18 2025 GMT Not After : Dec 22 10:02:18 2025 GMT Subject: CN=4eddf54e06e00e145aefd05f20fa87e7ffcbacb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b7:d3:c3:ed:dc:a7:17:ab:31:b2:c0:62:4c: 26:41:42:b7:c6:da:7b:9f:fc:e7:d0:f8:78:f9:35: 65:6c:a5:5c:68:c2:e9:5b:f3:be:2d:f5:98:ed:4c: 2e:b1:87:87:29:b7:5f:6a:dc:63:f4:ca:ec:8e:00: 05:46:1d:87:cc:23:df:09:6c:48:35:7a:e0:05:ce: b9:bb:df:47:c0:84:c7:0c:68:dc:50:0b:cf:60:3d: 43:41:2a:c2:2a:77:51:b1:8f:6a:3f:66:1d:33:cc: c2:72:95:39:dc:49:d4:05:25:90:cf:41:d2:34:71: 2b:b7:88:5d:e5:f9:ad:0a:15:84:ce:99:68:2d:d4: e6:53:29:31:0e:c7:5b:44:47:e0:5c:63:20:91:73: 0d:04:85:ba:5e:20:d2:c0:e9:e9:94:3e:80:07:95: 5e:49:14:f9:2e:f9:8d:93:4f:db:03:64:6b:bf:75: 44:9a:3c:f0:b4:73:3a:bc:43:b2:58:16:1b:21:9c: a1:f4:8b:8f:b4:42:1a:78:13:75:99:3f:44:17:b4: 2f:90:0b:cd:6f:82:09:d7:bc:a6:17:bc:cc:e2:55: fc:79:74:9c:04:77:8e:cc:5d:1d:18:81:c0:c3:0f: 18:cd:d0:78:ec:16:a9:83:4d:3e:bc:04:8a:c0:6a: cf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DD:F5:4E:06:E0:0E:14:5A:EF:D0:5F:20:FA:87:E7:FF:CB:AC:B9 X509v3 Authority Key Identifier: keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fc:1e:c7:f9:c5:b2:fd:77:b6:0b:75:b8:44:1f:e2:23:7b: f4:1a:5f:ad:24:18:ec:5b:d3:bc:87:fe:16:89:9f:b8:66:ce: d0:40:ae:68:d5:c9:ab:8d:a0:9d:e7:8f:6d:34:3b:32:71:5e: 1f:0f:79:a0:66:e5:62:1f:f8:1f:21:35:53:e8:34:1b:af:3b: 5e:89:b3:3f:f8:17:e6:3e:63:db:92:09:90:a1:59:63:d0:4d: 7e:84:30:c3:58:8f:9a:1f:cd:06:03:db:c5:06:a7:44:42:67: de:3b:54:2c:93:87:30:03:29:c7:a8:51:a0:55:71:26:44:89: d6:ae:2a:4d:b2:71:b3:46:08:13:67:64:33:44:96:34:f1:ae: 24:b7:bc:03:4a:98:ff:67:bc:b0:05:d0:b8:a0:39:43:35:11: 6c:d7:4b:fa:44:19:76:15:7a:32:fd:0c:19:8e:15:11:7f:6f: 08:18:e3:39:c1:4d:7f:72:8d:9c:17:5e:4b:ad:60:59:23:32: be:85:bd:b1:3b:d8:d6:4b:a1:fb:20:60:a7:fe:10:73:02:d6: 22:dc:41:28:d5:7d:e8:3f:11:57:af:ac:29:93:f5:de:59:30: f5:91:6f:3d:42:54:66:00:3c:95:ca:4e:23:bc:a3:1d:79:03: b6:0a:d5:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXCFz+dHKxX9kbXzgeLH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwY2NmNmRmYTcwOTU3M2E4MjFiNjNjNGNiNjk1NjA1ZmQy NjY4MGIwHhcNMjUxMjIxMTAwMjE4WhcNMjUxMjIyMTAwMjE4WjAzMTEwLwYDVQQD Eyg0ZWRkZjU0ZTA2ZTAwZTE0NWFlZmQwNWYyMGZhODdlN2ZmY2JhY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rfTw+3cpxerMbLAYkwmQUK3xtp7 n/zn0Ph4+TVlbKVcaMLpW/O+LfWY7UwusYeHKbdfatxj9MrsjgAFRh2HzCPfCWxI NXrgBc65u99HwITHDGjcUAvPYD1DQSrCKndRsY9qP2YdM8zCcpU53EnUBSWQz0HS NHErt4hd5fmtChWEzploLdTmUykxDsdbREfgXGMgkXMNBIW6XiDSwOnplD6AB5Ve SRT5LvmNk0/bA2Rrv3VEmjzwtHM6vEOyWBYbIZyh9IuPtEIaeBN1mT9EF7QvkAvN b4IJ17ymF7zM4lX8eXScBHeOzF0dGIHAww8YzdB47Bapg00+vASKwGrPrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7d9U4G4A4UWu/QXyD6h+f/y6y5MB8GA1UdIwQY MBaAFCDM9t+nCVc6ghtjxMtpVgX9JmgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWIt M2EyOGY4YTljNzA3LzEvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWItM2EyOGY4YTljNzA3 LzEvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvwex/nF sv13tgt1uEQf4iN79BpfrSQY7FvTvIf+FomfuGbO0ECuaNXJq42gneePbTQ7MnFe Hw95oGblYh/4HyE1U+g0G687XomzP/gX5j5j25IJkKFZY9BNfoQww1iPmh/NBgPb xQanREJn3jtULJOHMAMpx6hRoFVxJkSJ1q4qTbJxs0YIE2dkM0SWNPGuJLe8A0qY /2e8sAXQuKA5QzURbNdL+kQZdhV6Mv0MGY4VEX9vCBjjOcFNf3KNnBdeS61gWSMy voW9sTvY1kuh+yBgp/4QcwLWItxBKNV96D8RV6+sKZP13lkw9ZFvPUJUZgA8lcpO I7yjHXkDtgrVBw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:38:28 2025 by rpki-client