This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft File: IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json) Hash identifier: feoh36+ZaUolMR7qu2SFH2/33xEEilhLk4cYfKgX1ng= Subject key identifier: 61:47:A7:E1:79:45:AC:A7:47:EB:B2:5F:DF:3B:35:86:06:15:16:4F Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Certificate serial: 019B3CB52982CC09A989EC94F92AEE49B57B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft Manifest number: 0651 Signing time: Sat 20 Dec 2025 17:01:04 +0000 Manifest this update: Sat 20 Dec 2025 17:01:04 +0000 Manifest next update: Sun 21 Dec 2025 17:01:04 +0000 Files and hashes: 1: 7xOhUPHtrbr-aDnyk2sqIXaZxmE.roa (hash: kq8yM7VvfoH1+ATjkQ5zBAmoZIPQA7DySnzjc28AM7I=) 2: EO7_sAa5INTWdb0sB8KoIZTsSpE.roa (hash: SZljpS9Me6EqFyINGEQdOy6JlEANEGEhl0H6HmWV3fM=) 3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: sNmsE0m8z4mUKhOg3RB70wypPiGQd21Q+dP4OlA6dYc=) 4: Wr8EOmHckxzTGd0Aamj6K9DADdU.roa (hash: OPshObN2z5FsqJnygnFeWGUMJE0uYykW0pM3DUOjmQQ=) 5: YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa (hash: oxg1KeTKZ090F7XaYRFBJpN4jEk7flH1GMsXEE67BF0=) 6: wS-ZYWnE9Zk6DJUs3sCV5yBn3ak.roa (hash: 4bRb80RRs/QoIhxBs4Ime6HGYShS2787nhwQD+lr7Xw=) 7: wnHzclbUTpmI2i25YXVP3hxML5Y.roa (hash: aE81auZ0/hL8t66uhuMDoL2Ds7gb0agCHWXH7RqZEB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:29:82:cc:09:a9:89:ec:94:f9:2a:ee:49:b5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Validity Not Before: Dec 20 17:01:04 2025 GMT Not After : Dec 21 17:01:04 2025 GMT Subject: CN=6147a7e17945aca747ebb25fdf3b35860615164f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:43:02:f4:10:1c:8e:39:dd:ff:32:93:cb: 35:5c:bc:6a:e4:04:0d:14:8b:9c:ec:27:a3:c1:b4: d0:6c:29:e1:1e:21:09:1e:1b:5f:89:d7:9e:ad:10: af:da:32:90:44:ce:1f:e0:94:45:a5:e8:4a:b7:1b: 33:f1:23:6c:63:32:cf:5c:9c:dc:4c:66:7b:65:db: 13:36:da:d3:c6:fd:cb:71:6f:ff:be:06:54:47:f2: f6:97:14:3b:ef:76:f3:ad:39:90:07:63:27:0b:88: 27:8e:11:fd:2b:99:47:7e:b3:d6:91:46:3c:f8:67: a6:59:24:e4:26:cd:6b:d5:b9:84:b0:b3:2f:19:01: 5b:7c:e0:1b:96:0c:56:a5:ca:bd:9c:d1:9b:87:98: 6f:a1:fa:a4:b8:61:2a:05:2d:95:62:b8:7d:de:ee: 83:62:99:44:84:31:bb:2c:9d:a6:43:ce:d6:62:d2: ba:36:ff:d9:fa:27:e2:4e:fe:cc:ae:94:56:ea:b9: 55:0a:8c:80:e4:67:06:91:5d:a9:37:20:f7:fc:0d: dc:61:58:e7:90:7d:62:87:eb:09:20:11:3e:72:9b: bd:d1:ff:e6:65:34:77:a8:6d:af:da:d1:f2:63:04: eb:f2:cb:39:e9:ec:7d:df:42:d6:5d:be:81:51:ed: 0d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:47:A7:E1:79:45:AC:A7:47:EB:B2:5F:DF:3B:35:86:06:15:16:4F X509v3 Authority Key Identifier: keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:51:ea:f7:d5:86:6f:47:f3:b0:35:20:58:ea:40:9e:6d:a1: 7d:47:56:16:a1:29:63:e3:9f:19:cb:69:ab:7f:61:b9:95:4e: 83:71:2c:dd:06:b6:37:43:2f:c4:c1:82:55:49:a1:10:98:1d: d7:fd:34:9f:4e:6d:fb:64:66:4f:b6:55:80:db:a7:10:2a:17: 62:fa:59:13:05:bd:ba:93:a6:62:88:39:d0:82:f7:31:75:e0: 2a:50:74:0e:e9:60:a2:af:9a:d6:0c:c1:2b:4b:f0:be:79:45: 37:75:34:5c:ca:d2:1d:23:a0:98:f1:57:24:3a:fa:51:ff:95: 10:85:b0:73:07:f0:b1:2d:a3:87:1b:f4:1d:a8:83:4b:20:87: 59:1b:db:54:1a:3e:52:c7:da:a6:5a:56:85:5e:02:b7:03:4a: a1:29:52:2f:76:19:2b:22:4f:fa:68:58:1f:15:48:b4:54:6f: 9d:91:ba:cc:0d:94:f8:d1:44:a7:21:10:92:d6:5b:ed:eb:8e: 6a:e5:29:45:be:ce:ba:53:ed:05:a0:db:8a:18:6e:69:4f:ec: ea:4f:51:74:01:00:3b:99:2c:2f:8a:30:81:a6:b1:f5:ae:17: 25:69:4c:b1:37:5c:9a:a1:09:2d:25:fe:4e:db:b4:27:c6:f3: 4e:ec:98:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tSmCzAmpieyU+SruSbV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzVlZTAyZDJlMDU4NjFkZDkwNmZlMDZiMzg0NGYwNGQz NzhjNzMwHhcNMjUxMjIwMTcwMTA0WhcNMjUxMjIxMTcwMTA0WjAzMTEwLwYDVQQD Eyg2MTQ3YTdlMTc5NDVhY2E3NDdlYmIyNWZkZjNiMzU4NjA2MTUxNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JRDAvQQHI453f8yk8s1XLxq5AQN FIuc7CejwbTQbCnhHiEJHhtfideerRCv2jKQRM4f4JRFpehKtxsz8SNsYzLPXJzc TGZ7ZdsTNtrTxv3LcW//vgZUR/L2lxQ773bzrTmQB2MnC4gnjhH9K5lHfrPWkUY8 +GemWSTkJs1r1bmEsLMvGQFbfOAblgxWpcq9nNGbh5hvofqkuGEqBS2VYrh93u6D YplEhDG7LJ2mQ87WYtK6Nv/Z+ifiTv7MrpRW6rlVCoyA5GcGkV2pNyD3/A3cYVjn kH1ih+sJIBE+cpu90f/mZTR3qG2v2tHyYwTr8ss56ex930LWXb6BUe0NlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFHp+F5RaynR+uyX987NYYGFRZPMB8GA1UdIwQY MBaAFCDF7gLS4Fhh3ZBv4Gs4RPBNN4xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUt Njc3NzEzNTlhMmIzLzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUtNjc3NzEzNTlhMmIz LzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1Hq99WG b0fzsDUgWOpAnm2hfUdWFqEpY+OfGctpq39huZVOg3Es3Qa2N0MvxMGCVUmhEJgd 1/00n05t+2RmT7ZVgNunECoXYvpZEwW9upOmYog50IL3MXXgKlB0Dulgoq+a1gzB K0vwvnlFN3U0XMrSHSOgmPFXJDr6Uf+VEIWwcwfwsS2jhxv0HaiDSyCHWRvbVBo+ UsfaplpWhV4CtwNKoSlSL3YZKyJP+mhYHxVItFRvnZG6zA2U+NFEpyEQktZb7euO auUpRb7OulPtBaDbihhuaU/s6k9RdAEAO5ksL4owgaax9a4XJWlMsTdcmqEJLSX+ Ttu0J8bzTuyYBA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:24:26 2025 by rpki-client