This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json) Hash identifier: AXxomJokFvuvHGm4l8eAE07CqHfH9H23nXQq8pXBNzA= Subject key identifier: CA:67:0A:32:B9:D9:60:E7:76:57:26:AA:7A:2E:A0:7D:53:7A:AC:D0 Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11 Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11 Certificate serial: 019B378E79417F01472879B618753FC2BCD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft Manifest number: 0362 Signing time: Fri 19 Dec 2025 17:00:42 +0000 Manifest this update: Fri 19 Dec 2025 17:00:42 +0000 Manifest next update: Sat 20 Dec 2025 17:00:42 +0000 Files and hashes: 1: FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa (hash: EJb3Kv4NZ5uykz2bapaHUVNVx3Yhwe8+JKhWBXNnXgc=) 2: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: 2+8fJAnEudxYMT/SZEhorJev5Gj2BBs/YpXR/fEANJE=) 3: ik9pAs-oXBS0l0utPLQdJhXZ5X0.roa (hash: LmKUQUveU3bNm/doGhpBXkqduAWf1pf1v3+L9U63Su8=) 4: uc150UpyVmM0lf0Kf7nSAGa2PLU.roa (hash: z6Z1141CZgjCa4I7tNTWjh0/Dh9WixbtG/HNloenv6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:79:41:7f:01:47:28:79:b6:18:75:3f:c2:bc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11 Validity Not Before: Dec 19 17:00:42 2025 GMT Not After : Dec 20 17:00:42 2025 GMT Subject: CN=ca670a32b9d960e7765726aa7a2ea07d537aacd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:14:92:14:a2:06:4f:73:09:18:a2:f8:5d:07: 51:e5:08:e1:3f:4d:57:72:db:b2:bc:b0:3f:ec:0f: 26:33:ac:d0:e7:21:58:d5:15:68:95:37:92:5d:06: d1:e1:b4:43:1f:a1:00:35:75:9a:5e:53:01:42:da: 87:86:53:1f:90:db:24:c9:bc:c0:fa:e8:ca:4f:5f: 66:76:bd:ad:84:5a:01:a3:6f:ca:2a:7c:7b:6a:5b: ba:26:56:8e:c0:d8:a6:f4:3d:10:56:fb:76:4d:67: be:74:c7:7c:c7:ad:0c:fb:5c:75:0f:e2:f3:3f:c4: d0:ed:04:0b:27:0d:df:c5:9a:12:fa:d8:86:2a:8e: 59:de:f8:97:cd:82:29:8d:30:44:cd:6d:72:a2:98: 36:f9:8c:61:46:75:7a:2c:d3:ec:f0:83:33:ef:31: 6e:8e:da:4b:98:30:18:40:bf:c4:83:5b:45:1e:3e: cf:22:82:a4:01:99:82:99:dd:74:94:37:cb:49:bc: 70:44:4f:ae:ce:8e:3b:41:63:55:d6:a1:88:24:b7: 47:50:e4:c8:a8:25:a6:c2:0e:c2:f4:93:4d:55:5b: 90:d8:7b:cc:6e:a4:67:af:a6:ec:71:3a:f4:95:1b: fe:f5:9a:e0:52:08:eb:ad:b6:3b:2a:fb:b3:5a:c9: 32:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:67:0A:32:B9:D9:60:E7:76:57:26:AA:7A:2E:A0:7D:53:7A:AC:D0 X509v3 Authority Key Identifier: keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:ce:3a:5f:8f:32:df:d8:2d:ac:e8:e9:5f:cd:10:57:8c:2c: 5b:48:b7:7c:f7:8d:86:ee:15:9c:97:b8:53:79:50:7f:c5:18: 51:42:2d:d7:22:3c:a5:3b:69:00:ee:13:ec:19:b5:92:ea:7f: 1f:56:11:c6:cf:af:41:b2:21:77:68:12:00:20:b8:1b:e8:61: 32:0d:70:2b:ad:5f:b6:b5:3a:40:a1:3a:cb:92:d0:6b:6e:29: f3:b5:c9:c1:82:48:0f:a9:3e:a8:fa:c9:8b:44:d9:d5:47:be: 24:58:3e:53:02:78:52:db:d4:46:e4:2c:1d:e2:1a:52:71:d2: 7c:aa:41:41:ef:bb:44:a1:5e:35:58:d8:e8:28:4c:25:c7:48: 76:a8:ff:e2:c9:9c:d5:52:18:55:ca:f5:01:7f:19:17:f7:2e: 61:7c:c6:9a:21:13:eb:1e:ed:f3:01:be:f0:a1:f0:c3:24:83: 9b:84:32:62:02:5f:63:44:60:b5:5f:60:58:34:f9:c3:99:c7: a1:6b:5e:0d:28:70:05:e1:cd:64:57:8e:f1:65:ad:46:81:87: f8:ab:57:91:db:98:46:99:d3:7f:31:77:45:f1:fc:78:6a:0d: 34:c2:bb:05:91:1f:c0:dc:0f:d2:57:a7:2c:07:d8:ea:db:e8: d5:78:4c:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jnlBfwFHKHm2GHU/wrzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNjRkOGFhMTg3OGY5ZGMxNDI0ZDJmZGFkZTQwMzllMTIw ZDViMTEwHhcNMjUxMjE5MTcwMDQyWhcNMjUxMjIwMTcwMDQyWjAzMTEwLwYDVQQD EyhjYTY3MGEzMmI5ZDk2MGU3NzY1NzI2YWE3YTJlYTA3ZDUzN2FhY2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BSSFKIGT3MJGKL4XQdR5QjhP01X ctuyvLA/7A8mM6zQ5yFY1RVolTeSXQbR4bRDH6EANXWaXlMBQtqHhlMfkNskybzA +ujKT19mdr2thFoBo2/KKnx7alu6JlaOwNim9D0QVvt2TWe+dMd8x60M+1x1D+Lz P8TQ7QQLJw3fxZoS+tiGKo5Z3viXzYIpjTBEzW1yopg2+YxhRnV6LNPs8IMz7zFu jtpLmDAYQL/Eg1tFHj7PIoKkAZmCmd10lDfLSbxwRE+uzo47QWNV1qGIJLdHUOTI qCWmwg7C9JNNVVuQ2HvMbqRnr6bscTr0lRv+9ZrgUgjrrbY7KvuzWsky3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpnCjK52WDndlcmqnouoH1TeqzQMB8GA1UdIwQY MBaAFCJk2KoYePncFCTS/a3kA54SDVsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQt Yzk5OGYwMjkyMTM1LzEvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQtYzk5OGYwMjkyMTM1 LzEvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx846X48y 39gtrOjpX80QV4wsW0i3fPeNhu4VnJe4U3lQf8UYUUIt1yI8pTtpAO4T7Bm1kup/ H1YRxs+vQbIhd2gSACC4G+hhMg1wK61ftrU6QKE6y5LQa24p87XJwYJID6k+qPrJ i0TZ1Ue+JFg+UwJ4UtvURuQsHeIaUnHSfKpBQe+7RKFeNVjY6ChMJcdIdqj/4smc 1VIYVcr1AX8ZF/cuYXzGmiET6x7t8wG+8KHwwySDm4QyYgJfY0RgtV9gWDT5w5nH oWteDShwBeHNZFeO8WWtRoGH+KtXkduYRpnTfzF3RfH8eGoNNMK7BZEfwNwP0len LAfY6tvo1XhMbw== -----END CERTIFICATE-----Generated at Sat Dec 20 03:16:47 2025 by rpki-client