This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json) Hash identifier: YJec8yNBACdK+ObGqFXd8qCz5sNt5gikdcP7TDbH8xA= Subject key identifier: 4A:76:40:F5:A1:D1:60:47:F2:EB:02:31:B6:1D:92:42:1C:B5:79:26 Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7 Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7 Certificate serial: 019B3D9119CAEEEAAFF586B06A19FF359CD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft Manifest number: 10AF Signing time: Sat 20 Dec 2025 21:01:18 +0000 Manifest this update: Sat 20 Dec 2025 21:01:18 +0000 Manifest next update: Sun 21 Dec 2025 21:01:18 +0000 Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: zeKLXEgoR+ztCpwhRedDa4/uQA7ALaUkrOHJNynaFRI=) 2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=) 3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=) 4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:19:ca:ee:ea:af:f5:86:b0:6a:19:ff:35:9c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7 Validity Not Before: Dec 20 21:01:18 2025 GMT Not After : Dec 21 21:01:18 2025 GMT Subject: CN=4a7640f5a1d16047f2eb0231b61d92421cb57926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:b2:ce:97:98:b8:3c:ba:87:f4:55:e4:82: e6:f4:20:92:bf:f7:91:e4:50:ae:6d:11:49:4b:06: 20:52:9d:7a:a6:df:cf:7f:74:47:90:23:74:9b:0d: df:d5:1c:12:68:52:e3:ad:3d:db:55:cf:48:82:1a: 17:d0:99:bd:d7:3d:7e:85:47:1a:dc:4b:81:60:06: c0:1b:20:f3:36:4d:df:df:f6:e9:af:74:4a:27:8c: fb:ab:b7:a8:c2:88:5b:2e:72:6f:f1:a6:62:ab:6f: 62:b2:a0:6b:ff:80:a9:a1:d6:07:cd:8b:25:26:ef: 21:87:46:bf:b1:39:a9:4c:d9:bc:69:be:af:8a:30: f7:5c:14:6d:76:38:34:8c:6a:9e:7d:89:a4:cf:28: 56:16:a2:d0:e9:c6:88:80:01:ad:dd:c6:ba:eb:e9: 6e:8e:cd:dc:2e:2b:cb:3e:a6:5d:d8:80:ff:d9:92: 08:d5:a5:47:ab:a3:e5:8e:dc:2d:95:04:37:c3:90: 7c:be:0f:d8:fc:35:ae:f6:ad:86:d9:aa:42:90:d7: 82:4c:ef:5b:5d:5b:b4:42:39:9f:d2:87:3f:17:ff: 86:4b:a8:b1:27:b8:62:bf:1f:6e:46:e6:90:17:15: f9:c8:62:74:ba:fb:cb:22:2f:4e:58:25:80:ee:4e: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:76:40:F5:A1:D1:60:47:F2:EB:02:31:B6:1D:92:42:1C:B5:79:26 X509v3 Authority Key Identifier: keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:3a:be:ca:7e:36:6a:41:2c:bf:0f:a2:1d:b2:d0:cb:5b:d2: 25:88:86:f9:4c:07:df:3b:08:c3:3c:39:5f:51:c0:70:8f:c7: 2f:7f:ac:41:a9:53:f9:b2:de:da:4b:ee:c1:4a:55:13:11:78: 57:4f:51:ce:f3:8c:cd:fb:65:04:ae:3c:35:c0:11:2d:c6:50: f6:5f:b2:15:d2:a4:e5:63:b6:be:b2:c7:ca:84:b6:fc:69:ed: fc:c5:84:7f:09:6d:b9:01:1a:2f:6c:46:45:8b:df:b6:06:83: 02:f8:77:5e:70:37:fc:b1:5d:e7:47:dd:39:85:5f:0c:81:1f: 2a:fa:1a:9e:e0:43:79:46:f9:2d:43:6a:04:76:5c:91:bd:8d: ee:11:0d:9a:67:07:ed:30:99:23:73:50:6e:6b:2e:2d:a0:b6: 65:1e:2b:57:f9:7f:a7:00:91:8a:b4:49:99:da:96:54:8f:9e: 61:32:1f:47:7a:af:41:67:4e:42:16:ec:2e:37:70:0b:1d:09: a7:72:1c:2f:8c:a9:59:95:c4:41:fb:4e:04:55:a0:95:2c:77: 51:f2:1d:8f:18:64:73:a6:db:e6:aa:2b:b9:05:67:d1:8a:a6: 3a:f0:86:6f:42:4d:cb:c8:d1:1d:24:88:db:19:ea:1d:cf:92: d6:cb:1c:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRnK7uqv9Yawahn/NZzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy MmFjZTcwHhcNMjUxMjIwMjEwMTE4WhcNMjUxMjIxMjEwMTE4WjAzMTEwLwYDVQQD Eyg0YTc2NDBmNWExZDE2MDQ3ZjJlYjAyMzFiNjFkOTI0MjFjYjU3OTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJeyzpeYuDy6h/RV5ILm9CCSv/eR 5FCubRFJSwYgUp16pt/Pf3RHkCN0mw3f1RwSaFLjrT3bVc9IghoX0Jm91z1+hUca 3EuBYAbAGyDzNk3f3/bpr3RKJ4z7q7eowohbLnJv8aZiq29isqBr/4CpodYHzYsl Ju8hh0a/sTmpTNm8ab6vijD3XBRtdjg0jGqefYmkzyhWFqLQ6caIgAGt3ca66+lu js3cLivLPqZd2ID/2ZII1aVHq6PljtwtlQQ3w5B8vg/Y/DWu9q2G2apCkNeCTO9b XVu0Qjmf0oc/F/+GS6ixJ7hivx9uRuaQFxX5yGJ0uvvLIi9OWCWA7k7a2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEp2QPWh0WBH8usCMbYdkkIctXkmMB8GA1UdIwQY MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzq+yn42 akEsvw+iHbLQy1vSJYiG+UwH3zsIwzw5X1HAcI/HL3+sQalT+bLe2kvuwUpVExF4 V09RzvOMzftlBK48NcARLcZQ9l+yFdKk5WO2vrLHyoS2/Gnt/MWEfwltuQEaL2xG RYvftgaDAvh3XnA3/LFd50fdOYVfDIEfKvoanuBDeUb5LUNqBHZckb2N7hENmmcH 7TCZI3NQbmsuLaC2ZR4rV/l/pwCRirRJmdqWVI+eYTIfR3qvQWdOQhbsLjdwCx0J p3IcL4ypWZXEQftOBFWglSx3UfIdjxhkc6bb5qoruQVn0YqmOvCGb0JNy8jRHSSI 2xnqHc+S1ssc6w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:38:56 2025 by rpki-client