This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json) Hash identifier: /M9H+pTD7pjGoUA9XE1KqvNrLf9Y+qZt+Lrp5rkFn60= Subject key identifier: 31:DF:62:5F:CA:76:B1:7B:31:DB:8B:93:15:F5:81:1B:E8:FA:9A:09 Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6 Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6 Certificate serial: 019B3AFE3AF74475D5B774F0EB68580E6D5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft Manifest number: 04B7 Signing time: Sat 20 Dec 2025 09:01:38 +0000 Manifest this update: Sat 20 Dec 2025 09:01:38 +0000 Manifest next update: Sun 21 Dec 2025 09:01:38 +0000 Files and hashes: 1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=) 2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: J8F5k07NUG36iJgRq+3wmlcFwzPXzi5spP5b1J1/1Ck=) 3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:3a:f7:44:75:d5:b7:74:f0:eb:68:58:0e:6d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6 Validity Not Before: Dec 20 09:01:38 2025 GMT Not After : Dec 21 09:01:38 2025 GMT Subject: CN=31df625fca76b17b31db8b9315f5811be8fa9a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:6e:c5:a6:ac:9d:41:1e:d4:be:5f:f2:33: 8b:b8:8e:50:57:ea:bd:8b:e7:2d:4d:7a:34:a5:7a: 17:e2:43:e8:c1:fd:c1:c5:2e:3a:20:d9:6d:2a:97: 77:6d:00:63:14:c9:62:92:d0:5a:8d:8f:55:ac:22: f8:22:ac:d6:dc:aa:ec:f3:13:3c:32:2a:d6:b6:a5: 02:7f:ff:39:3a:37:8f:c7:1b:5e:0c:b6:62:1e:ee: 5f:fc:b3:8f:b3:08:60:71:fe:2f:86:e6:c2:88:9c: 03:5f:04:b5:21:a6:76:2f:33:b7:ab:04:5a:e2:5e: d1:1a:5f:fa:ff:58:c8:5f:0b:02:2e:c5:d3:45:23: 6a:d8:aa:0d:1f:d7:b6:2b:e9:97:50:66:1d:95:16: 87:2b:38:fb:d2:37:42:f6:a3:c0:77:cb:bf:aa:3b: e7:33:ba:7b:3e:2f:86:df:51:95:cc:71:e3:35:b4: 10:35:c3:6e:fb:82:07:83:3f:2c:d3:66:4f:0e:c2: 22:ab:b4:34:19:ca:99:b7:be:32:f1:b1:10:de:33: d2:c4:1b:66:4b:dc:bf:23:64:8b:0b:bf:dc:4b:68: 26:c6:7a:f1:f3:ad:6d:ee:a0:1f:93:1d:33:3d:b9: fb:62:70:93:16:be:6e:d2:af:24:dd:20:7e:cc:eb: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DF:62:5F:CA:76:B1:7B:31:DB:8B:93:15:F5:81:1B:E8:FA:9A:09 X509v3 Authority Key Identifier: keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9c:86:a2:8e:fd:47:ff:98:ec:c0:21:2d:2f:f0:32:dc:0d: d2:f8:ef:d8:90:b0:57:cf:80:bf:e1:fb:df:d4:97:4e:1a:11: 92:da:79:6f:6f:03:f3:18:22:fb:82:05:99:6d:3a:95:d5:03: 4e:b5:de:c0:20:df:74:2e:cb:a9:04:e8:83:eb:4f:ef:0f:1f: 1e:8d:64:56:0e:fd:24:4e:88:e3:31:60:8a:c0:1c:d9:0b:52: 79:65:39:78:e4:d6:dd:99:e1:bd:1e:45:72:df:c7:9c:69:23: e2:7a:e0:b2:91:b0:ee:d3:0f:52:17:aa:ea:99:51:cb:f4:60: 01:37:4d:77:3e:eb:4b:3b:c4:9a:07:2b:9b:4f:0d:e1:b2:b7: 7e:5e:9e:fd:c8:a2:e9:55:d4:50:6b:4f:3a:34:fa:c0:f1:f0: 47:0d:4f:34:dc:7b:d6:0f:a6:72:13:92:69:ce:25:a2:75:1e: fd:22:a7:3f:92:da:a4:43:2e:d5:38:d1:6e:45:72:9b:5c:b4: eb:88:1c:90:41:5d:38:53:93:49:0b:1d:48:6b:66:b1:07:97: 36:79:08:38:20:5a:5e:88:9e:70:fe:c4:9d:d6:cf:5b:d6:c1: 75:2f:45:d9:95:bf:3d:7a:ef:80:97:48:7f:a1:36:e3:df:55: 6d:0c:e7:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/jr3RHXVt3Tw62hYDm1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjA2MDM1M2I5OGY1MzMxNmQwMjJmYTAxZDI5OWQ3NWZm ZjIyZDYwHhcNMjUxMjIwMDkwMTM4WhcNMjUxMjIxMDkwMTM4WjAzMTEwLwYDVQQD EygzMWRmNjI1ZmNhNzZiMTdiMzFkYjhiOTMxNWY1ODExYmU4ZmE5YTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgxuxaasnUEe1L5f8jOLuI5QV+q9 i+ctTXo0pXoX4kPowf3BxS46INltKpd3bQBjFMliktBajY9VrCL4IqzW3Krs8xM8 MirWtqUCf/85OjePxxteDLZiHu5f/LOPswhgcf4vhubCiJwDXwS1IaZ2LzO3qwRa 4l7RGl/6/1jIXwsCLsXTRSNq2KoNH9e2K+mXUGYdlRaHKzj70jdC9qPAd8u/qjvn M7p7Pi+G31GVzHHjNbQQNcNu+4IHgz8s02ZPDsIiq7Q0GcqZt74y8bEQ3jPSxBtm S9y/I2SLC7/cS2gmxnrx861t7qAfkx0zPbn7YnCTFr5u0q8k3SB+zOv54wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHfYl/KdrF7MduLkxX1gRvo+poJMB8GA1UdIwQY MBaAFIpgYDU7mPUzFtAi+gHSmddf/yLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUt NTJlZTQzNjQyZTEwLzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUtNTJlZTQzNjQyZTEw LzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5yGoo79 R/+Y7MAhLS/wMtwN0vjv2JCwV8+Av+H739SXThoRktp5b28D8xgi+4IFmW06ldUD TrXewCDfdC7LqQTog+tP7w8fHo1kVg79JE6I4zFgisAc2QtSeWU5eOTW3ZnhvR5F ct/HnGkj4nrgspGw7tMPUheq6plRy/RgATdNdz7rSzvEmgcrm08N4bK3fl6e/cii 6VXUUGtPOjT6wPHwRw1PNNx71g+mchOSac4lonUe/SKnP5LapEMu1TjRbkVym1y0 64gckEFdOFOTSQsdSGtmsQeXNnkIOCBaXoiecP7EndbPW9bBdS9F2ZW/PXrvgJdI f6E2499VbQznZw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:43 2025 by rpki-client