This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft File: IMotTLPla10plwqX_GResv1odqE.mft (raw, json) Hash identifier: yGEAj5ijd410EbCjFcuD9CTcVvogPQEBTv/+R63GAVY= Subject key identifier: 6D:85:88:BE:FB:8A:F2:F3:8A:CF:9C:0C:DF:D1:FB:9E:80:C7:54:DD Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1 Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1 Certificate serial: 019B405BF13A797B116735E2DF1382BF8998 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft Manifest number: 14BD Signing time: Sun 21 Dec 2025 10:02:05 +0000 Manifest this update: Sun 21 Dec 2025 10:02:05 +0000 Manifest next update: Mon 22 Dec 2025 10:02:05 +0000 Files and hashes: 1: IMotTLPla10plwqX_GResv1odqE.crl (hash: 21uIInkQMuRyaj/Ft3AZsDtlfd67JkJi51mFg8mGxX4=) 2: PrisiX9cIn99AliDWgpNGUfmj_8.roa (hash: rN8Y2pR83WML1BI+RzSSfaDf/yYr4j471dxo3B4dyzY=) 3: bSEsv80VTIqhxykqIB8M44nU7N8.roa (hash: Ooz65LuwKjo+iPeOY+Zh+YXr8ijMf6WnGg7hpdHzR2I=) 4: mDAtJGSElDm2O92EFy5g2Ab4svc.roa (hash: 06wyeaq77omoVi1U61nSXVnjJJye2vIP4bDLXfzxENg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:f1:3a:79:7b:11:67:35:e2:df:13:82:bf:89:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1 Validity Not Before: Dec 21 10:02:05 2025 GMT Not After : Dec 22 10:02:05 2025 GMT Subject: CN=6d8588befb8af2f38acf9c0cdfd1fb9e80c754dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:58:f3:11:38:38:b1:4e:9c:05:c1:33:25:57: d3:c5:92:8e:f8:45:85:45:c8:c1:af:e4:c6:ae:80: e7:76:cf:4d:02:3f:49:ff:45:c6:78:9e:9d:73:ae: 5e:40:3a:d3:c1:72:20:d6:56:e0:e7:5e:a1:68:70: 15:99:86:a6:76:6a:45:23:b9:39:c0:ee:35:c5:54: 63:d3:58:ee:2b:f0:f9:de:94:41:c7:c9:62:a0:6e: 81:2c:d0:13:65:0b:56:8c:b0:b4:30:7e:b5:30:d5: 17:d1:c6:35:b0:00:00:2b:d1:4b:6f:42:0c:a1:75: 27:42:d9:19:8f:fc:ca:52:1a:5f:58:e2:d6:2f:b2: f5:26:96:9f:fa:17:3d:1b:09:0d:cc:a2:d5:e7:1a: 94:b0:36:ed:c8:f2:be:8f:30:83:50:fc:e5:94:d2: 2f:ea:58:a5:2b:73:de:3f:aa:62:ca:b2:ee:16:32: a4:47:45:1b:95:ca:4c:32:3a:2a:65:e6:9a:28:5c: 15:75:92:91:34:3f:91:2f:97:1f:6f:1d:52:34:70: 17:8d:ae:1e:78:8d:b4:ad:89:d0:ba:ee:e8:d9:4f: 4a:56:d4:5f:bc:5f:4e:63:7f:eb:76:11:67:db:bc: 84:c3:5c:30:63:d4:18:0f:b4:44:e7:9f:1d:ea:1a: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:85:88:BE:FB:8A:F2:F3:8A:CF:9C:0C:DF:D1:FB:9E:80:C7:54:DD X509v3 Authority Key Identifier: keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ce:0d:9c:bb:53:53:3a:de:3f:53:9b:ea:6d:4b:da:83:b7: 8d:d5:2c:a1:c4:d5:9d:6c:aa:c1:d3:e4:b3:93:2e:32:1d:1b: e9:20:e8:9f:d1:e4:38:2a:dc:14:28:0c:8f:a1:77:e9:27:79: 73:12:9c:8c:62:1f:e7:09:f5:9c:c1:94:2c:73:3b:2a:2f:89: 95:9a:95:76:54:b8:a1:6f:55:d9:a6:32:b4:f6:66:23:18:03: 13:89:33:8a:f4:b1:67:08:d0:09:9a:a6:b2:32:93:3a:9a:84: d3:1e:0d:5b:c3:73:f4:60:df:98:50:11:51:8d:04:bc:34:c4: 7f:74:f9:a4:f1:e8:26:c9:ec:62:11:bf:f4:b5:3c:18:32:1a: 2d:00:38:01:00:4f:92:00:35:9b:d4:48:2d:53:15:c8:15:62: c0:ba:5b:cd:fc:bf:af:15:13:d6:75:dc:78:2e:f5:f7:dc:d6: 17:f3:84:ed:0f:e0:74:64:28:8e:2e:fa:1b:82:9d:98:25:28: 0a:9c:a1:2f:4b:f9:15:b8:8d:28:11:c2:93:4a:a1:e4:fc:c6: cd:0c:54:73:31:d0:30:68:f6:6b:b5:2e:72:4c:37:a9:92:cf: ca:93:f6:53:08:fd:0b:00:f7:86:d3:69:d8:f8:c9:1c:eb:a5: 58:0d:ad:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW/E6eXsRZzXi3xOCv4mYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2 ODc2YTEwHhcNMjUxMjIxMTAwMjA1WhcNMjUxMjIyMTAwMjA1WjAzMTEwLwYDVQQD Eyg2ZDg1ODhiZWZiOGFmMmYzOGFjZjljMGNkZmQxZmI5ZTgwYzc1NGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1jzETg4sU6cBcEzJVfTxZKO+EWF RcjBr+TGroDnds9NAj9J/0XGeJ6dc65eQDrTwXIg1lbg516haHAVmYamdmpFI7k5 wO41xVRj01juK/D53pRBx8lioG6BLNATZQtWjLC0MH61MNUX0cY1sAAAK9FLb0IM oXUnQtkZj/zKUhpfWOLWL7L1Jpaf+hc9GwkNzKLV5xqUsDbtyPK+jzCDUPzllNIv 6lilK3PeP6piyrLuFjKkR0UblcpMMjoqZeaaKFwVdZKRND+RL5cfbx1SNHAXja4e eI20rYnQuu7o2U9KVtRfvF9OY3/rdhFn27yEw1wwY9QYD7RE558d6hrFpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2FiL77ivLzis+cDN/R+56Ax1TdMB8GA1UdIwQY MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt ZWVjNDg4NWM0ZjhkLzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj84NnLtT UzreP1Ob6m1L2oO3jdUsocTVnWyqwdPks5MuMh0b6SDon9HkOCrcFCgMj6F36Sd5 cxKcjGIf5wn1nMGULHM7Ki+JlZqVdlS4oW9V2aYytPZmIxgDE4kzivSxZwjQCZqm sjKTOpqE0x4NW8Nz9GDfmFARUY0EvDTEf3T5pPHoJsnsYhG/9LU8GDIaLQA4AQBP kgA1m9RILVMVyBViwLpbzfy/rxUT1nXceC7199zWF/OE7Q/gdGQoji76G4KdmCUo CpyhL0v5FbiNKBHCk0qh5PzGzQxUczHQMGj2a7Uuckw3qZLPypP2Uwj9CwD3htNp 2PjJHOulWA2t3A== -----END CERTIFICATE-----Generated at Sun Dec 21 15:45:07 2025 by rpki-client