This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json) Hash identifier: K754a9m0y4UsR1ShELY4ZJF8QRxqnkW7uHlTLN5pqnk= Subject key identifier: 20:E1:A0:DE:12:77:22:FC:35:36:8C:18:AF:DB:E5:91:A9:AD:AB:6B Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7 Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7 Certificate serial: 019B661F14F59009C26B1AF1A252480303C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft Manifest number: 10C4 Signing time: Sun 28 Dec 2025 18:01:11 +0000 Manifest this update: Sun 28 Dec 2025 18:01:11 +0000 Manifest next update: Mon 29 Dec 2025 18:01:11 +0000 Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: /hzFSYJqu9iyyfhbClq9OIhlnKT05xMNyRd4KgLyQr0=) 2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=) 3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=) 4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1f:14:f5:90:09:c2:6b:1a:f1:a2:52:48:03:03:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7 Validity Not Before: Dec 28 18:01:11 2025 GMT Not After : Dec 29 18:01:11 2025 GMT Subject: CN=20e1a0de127722fc35368c18afdbe591a9adab6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:39:0b:80:f3:36:54:64:be:4f:03:51:33: fa:53:b6:99:37:ca:f5:9d:31:59:5d:4f:7c:8f:fa: f8:35:f1:5a:7c:5c:6b:86:ec:e3:e9:de:d6:a6:55: f2:89:72:1e:84:2c:2f:b6:26:42:a4:c1:83:ab:d5: 3f:b8:81:e0:6a:20:0e:30:06:32:b6:5d:4d:18:f0: 27:ad:51:88:84:cb:ae:a6:25:71:e4:d6:6b:cc:26: f0:75:d0:90:ee:2b:df:40:ab:9d:ce:82:39:61:8f: a7:cd:a0:37:b0:9f:e6:86:dc:c0:78:70:51:9f:3b: 95:6e:8a:bc:1b:2d:d4:e9:4e:88:aa:34:1a:d0:b3: 90:52:47:d3:7b:78:72:83:fb:32:fa:48:3e:42:4e: 12:9b:a2:b9:48:59:9a:05:20:a0:85:6d:46:68:6b: 87:5d:80:64:de:da:8c:ed:fe:11:07:e0:17:94:b0: f1:b0:ae:c5:2b:82:c0:b6:ed:10:7d:7f:48:12:40: 83:6e:62:17:c7:e2:07:0d:8d:86:38:57:b5:c9:d9: d1:19:1c:6b:70:2c:ca:7a:0f:53:9c:3a:3a:70:cd: 3d:e8:cb:1b:76:9a:ba:2d:52:2b:74:f4:47:35:9a: 42:da:0f:f1:e9:75:0e:27:35:9e:13:b6:25:ce:9b: 55:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E1:A0:DE:12:77:22:FC:35:36:8C:18:AF:DB:E5:91:A9:AD:AB:6B X509v3 Authority Key Identifier: keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d4:d1:0f:df:c5:b3:f1:32:0f:24:b0:e6:71:4d:19:bf:0f: 78:f7:2b:ee:aa:1f:f9:be:aa:2a:ea:92:78:bc:bb:03:da:b8: 14:b9:2b:c9:ba:a2:e2:95:d1:b8:9b:82:18:5c:87:a3:96:6d: 6e:77:da:7e:4a:cb:69:4f:2a:d0:0f:7f:c1:d1:5e:16:3f:75: 64:97:4e:a8:5c:b3:e4:76:10:16:71:a5:b6:b9:f8:51:82:3b: 18:d8:fd:aa:82:de:a2:4f:21:30:f2:67:fb:68:70:18:09:49: d2:40:89:bf:d8:80:cd:12:78:09:1c:18:81:25:11:0d:5a:54: 5a:43:f8:fe:b6:64:e5:c8:03:75:c5:79:2c:ce:d3:80:c6:85: 95:58:32:ac:0c:8e:4d:85:34:17:67:bf:b7:de:81:93:65:4a: 64:d4:6e:3d:b7:98:c7:6f:b1:6e:53:03:08:95:10:fa:23:1f: c0:fb:54:f6:20:df:ad:52:55:20:9a:80:61:48:e9:6d:59:fe: e9:88:fc:e6:d1:d6:03:87:72:98:e3:3c:ff:25:9b:00:1e:23: 3f:cb:2d:33:3c:71:a4:ab:da:48:64:9e:e5:1b:b8:f8:96:51: 7b:a2:d7:27:0d:96:22:9e:50:52:86:12:ec:31:b0:9c:9c:7f: 1d:04:4d:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHxT1kAnCaxrxolJIAwPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy MmFjZTcwHhcNMjUxMjI4MTgwMTExWhcNMjUxMjI5MTgwMTExWjAzMTEwLwYDVQQD EygyMGUxYTBkZTEyNzcyMmZjMzUzNjhjMThhZmRiZTU5MWE5YWRhYjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVQ5C4DzNlRkvk8DUTP6U7aZN8r1 nTFZXU98j/r4NfFafFxrhuzj6d7WplXyiXIehCwvtiZCpMGDq9U/uIHgaiAOMAYy tl1NGPAnrVGIhMuupiVx5NZrzCbwddCQ7ivfQKudzoI5YY+nzaA3sJ/mhtzAeHBR nzuVboq8Gy3U6U6IqjQa0LOQUkfTe3hyg/sy+kg+Qk4Sm6K5SFmaBSCghW1GaGuH XYBk3tqM7f4RB+AXlLDxsK7FK4LAtu0QfX9IEkCDbmIXx+IHDY2GOFe1ydnRGRxr cCzKeg9TnDo6cM096Msbdpq6LVIrdPRHNZpC2g/x6XUOJzWeE7YlzptVvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDhoN4SdyL8NTaMGK/b5ZGpratrMB8GA1UdIwQY MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9TRD9/F s/EyDySw5nFNGb8PePcr7qof+b6qKuqSeLy7A9q4FLkrybqi4pXRuJuCGFyHo5Zt bnfafkrLaU8q0A9/wdFeFj91ZJdOqFyz5HYQFnGltrn4UYI7GNj9qoLeok8hMPJn +2hwGAlJ0kCJv9iAzRJ4CRwYgSURDVpUWkP4/rZk5cgDdcV5LM7TgMaFlVgyrAyO TYU0F2e/t96Bk2VKZNRuPbeYx2+xblMDCJUQ+iMfwPtU9iDfrVJVIJqAYUjpbVn+ 6Yj85tHWA4dymOM8/yWbAB4jP8stMzxxpKvaSGSe5Ru4+JZRe6LXJw2WIp5QUoYS 7DGwnJx/HQRNLg== -----END CERTIFICATE-----Generated at Sun Dec 28 23:37:39 2025 by rpki-client