This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json) Hash identifier: duhOySRCeZgqDjeUvVDaMl+wpfVO25eV+YCnLy3U+uA= Subject key identifier: 6D:AE:C4:CA:3C:2F:E4:23:A8:A3:4A:37:23:B7:3B:9D:8E:B6:6B:98 Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32 Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32 Certificate serial: 019B4E84D55E49B4E30485DDBABEB4A9035C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft Manifest number: 0ECE Signing time: Wed 24 Dec 2025 04:01:26 +0000 Manifest this update: Wed 24 Dec 2025 04:01:26 +0000 Manifest next update: Thu 25 Dec 2025 04:01:26 +0000 Files and hashes: 1: _11c4KnryngFBZ3LrSwCjXVWAnI.roa (hash: 4suX3JVW+dbra41XqoLSgaNnHC7+X6k6GS1R8JLgxL8=) 2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: 28BDHR2ZO1HfmYAE/t4M99YNYliegP1PItbTwJPToak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:d5:5e:49:b4:e3:04:85:dd:ba:be:b4:a9:03:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32 Validity Not Before: Dec 24 04:01:26 2025 GMT Not After : Dec 25 04:01:26 2025 GMT Subject: CN=6daec4ca3c2fe423a8a34a3723b73b9d8eb66b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:88:43:68:cb:74:7b:ea:1d:fb:1c:ba:c0: 3b:d1:68:91:34:e3:e3:93:fb:72:c4:e7:1d:ab:48: cb:44:9d:7b:0d:7d:1f:36:47:7e:68:97:de:2f:ef: 87:70:a6:4e:ab:cc:56:ff:d1:fc:92:a9:ea:ae:3f: 76:f6:0a:a1:a7:b7:50:89:3b:f7:47:e3:97:90:dc: 22:00:1d:7d:cd:3e:3d:dc:e3:57:5c:94:6c:40:1b: 8f:6d:98:8b:d0:73:e4:61:e6:76:cd:63:86:58:b3: 6c:65:01:a3:ae:57:e2:2b:eb:9f:58:dd:b9:71:5e: 03:28:5b:fb:c7:a9:6e:1d:e0:fd:63:df:76:87:ff: d6:f4:b5:71:e7:d0:7d:9d:ae:88:66:0b:ed:6a:39: 77:15:e9:7c:c1:9c:7e:55:5b:9b:a5:0f:d3:c9:af: 97:c6:75:59:e0:49:49:b2:fc:8c:95:7a:12:65:85: 52:11:16:8b:de:48:8d:56:41:38:44:e0:d2:54:ed: 33:d7:a7:b3:77:04:df:bd:19:56:cc:02:79:e9:df: 61:15:08:4a:eb:6e:bf:ca:c0:c4:42:57:c6:b6:b6: 3e:b5:30:3d:40:13:77:de:6a:54:a9:49:c1:67:3d: 9e:a4:bd:d1:c7:f0:8b:fd:2d:e2:4a:a4:d9:df:bb: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AE:C4:CA:3C:2F:E4:23:A8:A3:4A:37:23:B7:3B:9D:8E:B6:6B:98 X509v3 Authority Key Identifier: keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:fe:56:d2:36:51:6d:b6:18:17:d4:d2:d0:49:85:a2:61:b6: 5f:b6:9b:ac:73:df:3b:1c:67:43:14:e8:89:e7:87:d3:f8:ee: d6:f7:d8:e8:85:94:50:ff:96:fe:7c:c7:67:4b:b5:70:2a:00: a0:62:55:46:be:c2:34:73:6d:45:25:39:3c:f3:00:df:02:b2: 1e:7f:a7:b4:37:c3:bd:9a:3a:a5:1a:1a:e0:a0:c1:a8:6e:70: e0:7d:17:55:f7:ce:c1:83:69:43:24:75:4c:9e:16:32:a7:66: 80:43:12:9f:06:47:39:3d:25:51:5d:0b:69:ea:69:6e:ce:a3: e3:f5:c3:78:4d:91:4a:3e:3a:ae:1e:ed:08:48:d7:c9:90:6a: c2:ef:c6:96:31:e7:9f:a6:6a:a7:29:fd:b3:00:50:30:83:27: de:3d:cd:0d:4f:4a:77:1d:81:8a:d2:a6:7d:58:f1:3d:22:bd: 53:79:14:18:f8:cd:e3:0f:bd:8d:9c:62:47:08:ee:35:7e:98: 3b:27:b1:b1:29:09:3f:82:5e:eb:d7:f1:91:a7:2b:b9:15:43: 8c:eb:a3:69:cb:08:b1:77:49:2d:45:a7:2c:18:03:69:49:99: fa:c6:4f:46:e1:d2:2d:61:03:02:99:39:bd:3f:20:ba:06:7d: 64:4f:96:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhNVeSbTjBIXdur60qQNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMjliMDM5Y2Y4YWFmMTQxZDZlNmQ2MTZlN2MxNjkwODlj YmNiMzIwHhcNMjUxMjI0MDQwMTI2WhcNMjUxMjI1MDQwMTI2WjAzMTEwLwYDVQQD Eyg2ZGFlYzRjYTNjMmZlNDIzYThhMzRhMzcyM2I3M2I5ZDhlYjY2Yjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6WIQ2jLdHvqHfscusA70WiRNOPj k/tyxOcdq0jLRJ17DX0fNkd+aJfeL++HcKZOq8xW/9H8kqnqrj929gqhp7dQiTv3 R+OXkNwiAB19zT493ONXXJRsQBuPbZiL0HPkYeZ2zWOGWLNsZQGjrlfiK+ufWN25 cV4DKFv7x6luHeD9Y992h//W9LVx59B9na6IZgvtajl3Fel8wZx+VVubpQ/Tya+X xnVZ4ElJsvyMlXoSZYVSERaL3kiNVkE4RODSVO0z16ezdwTfvRlWzAJ56d9hFQhK 626/ysDEQlfGtrY+tTA9QBN33mpUqUnBZz2epL3Rx/CL/S3iSqTZ37vj8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2uxMo8L+QjqKNKNyO3O52OtmuYMB8GA1UdIwQY MBaAFHIpsDnPiq8UHW5tYW58FpCJy8syMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jNDA4NzUtMDYxYS00MmRmLTljNmQt ODdhNjg0NWY2NmY5LzEvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9jNDA4NzUtMDYxYS00MmRmLTljNmQtODdhNjg0NWY2NmY5 LzEvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqv5W0jZR bbYYF9TS0EmFomG2X7abrHPfOxxnQxToieeH0/ju1vfY6IWUUP+W/nzHZ0u1cCoA oGJVRr7CNHNtRSU5PPMA3wKyHn+ntDfDvZo6pRoa4KDBqG5w4H0XVffOwYNpQyR1 TJ4WMqdmgEMSnwZHOT0lUV0Laeppbs6j4/XDeE2RSj46rh7tCEjXyZBqwu/GljHn n6Zqpyn9swBQMIMn3j3NDU9Kdx2BitKmfVjxPSK9U3kUGPjN4w+9jZxiRwjuNX6Y OyexsSkJP4Je69fxkacruRVDjOujacsIsXdJLUWnLBgDaUmZ+sZPRuHSLWEDApk5 vT8gugZ9ZE+WrQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:05 2025 by rpki-client