This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft File: ImidD5E9Kcxj1skmy0Yssn8YRAg.mft (raw, json) Hash identifier: eyrVFICTdz30DMBwwg59xATkyLPyIUk6dIxOc485Esc= Subject key identifier: 2A:01:77:48:7A:CB:4A:A1:2A:F1:F5:C4:3E:A3:8C:67:83:C0:5F:CE Authority key identifier: 22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08 Certificate issuer: /CN=22689d0f913d29cc63d6c926cb462cb27f184408 Certificate serial: 019B5D527FB55F1D3456EB0FD0BF631AC961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 01:00:46 +0000 Manifest this update: Sat 27 Dec 2025 01:00:46 +0000 Manifest next update: Sun 28 Dec 2025 01:00:46 +0000 Files and hashes: 1: ImidD5E9Kcxj1skmy0Yssn8YRAg.crl (hash: bNue0m/xhC4zdJaiWkIfwHfQC40ZQ993HeaLQcYEYvQ=) 2: PnGxbbyenKRUkbRi2afvxfE-S9E.roa (hash: JW3Jf++XQ8LN1xPVRRNLBe2ZMK/kXqbkLdynsPQmUsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:7f:b5:5f:1d:34:56:eb:0f:d0:bf:63:1a:c9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22689d0f913d29cc63d6c926cb462cb27f184408 Validity Not Before: Dec 27 01:00:46 2025 GMT Not After : Dec 28 01:00:46 2025 GMT Subject: CN=2a0177487acb4aa12af1f5c43ea38c6783c05fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:5f:59:b1:d1:64:ba:8c:71:16:b9:c8:c9: 55:c7:f2:ad:8d:95:4e:01:5f:5b:c4:1d:90:f4:ff: fd:61:62:e0:63:7f:2c:0c:5c:94:0e:97:5f:66:64: 6f:5c:60:c5:b6:f2:b0:4a:83:d5:bd:b3:e4:a1:5b: 64:1f:46:93:29:2c:fa:e5:7c:8d:0f:d8:de:0a:46: bd:42:07:e7:85:b9:78:51:e1:15:dd:d2:87:49:e6: 8d:6d:24:6c:d1:99:43:74:da:3d:fe:e0:f4:14:b7: 54:12:89:dd:4f:9c:40:5b:f5:42:d4:41:cf:66:4c: 12:85:44:a2:6f:2a:61:70:a2:a6:e6:fc:ac:c1:81: 53:69:ef:27:72:49:63:1f:e4:fe:97:d4:ea:86:e3: 34:7b:83:ed:06:97:89:b6:7e:80:07:56:0d:9a:43: b7:6d:a3:69:c0:49:54:24:87:07:1d:c6:e6:02:3a: fc:da:7b:34:f5:da:16:d9:87:65:02:d2:98:97:73: cd:48:d2:85:45:dd:73:44:9a:70:b7:f5:ca:63:94: 22:7e:61:28:aa:7f:5b:cb:ee:55:a7:73:8f:4e:ce: 51:88:6f:14:e6:10:d9:a2:e5:11:d6:97:5c:41:8d: 45:c1:49:86:57:5b:3b:e4:b6:e1:ed:93:ef:c1:5f: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:01:77:48:7A:CB:4A:A1:2A:F1:F5:C4:3E:A3:8C:67:83:C0:5F:CE X509v3 Authority Key Identifier: keyid:22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c8:d9:f7:3c:cf:fa:ab:70:9a:f7:00:db:dd:8e:e2:5b:de: 7c:7e:12:b6:d0:9f:69:11:06:6f:a1:7a:48:a7:3e:57:e5:b1: 71:72:f3:df:44:47:f7:8d:48:ff:7e:ee:17:89:16:b2:a5:01: 4d:c2:c2:8b:ea:73:9a:b3:39:14:78:1f:9f:bc:2c:f4:a5:57: 9b:5e:9d:ae:82:db:76:04:7d:2f:1f:df:9c:e2:d4:5d:a5:22: b2:25:16:0c:cb:eb:29:4c:57:da:3a:b3:d9:66:c6:c0:a5:10: 03:08:9d:4f:59:b6:af:e5:eb:6c:9b:dd:75:57:d5:d0:d5:2f: b0:fd:96:46:8b:94:ce:64:d2:df:8a:e7:c2:ef:7b:94:3f:53: 82:83:da:1c:e0:c6:3a:f6:63:38:c8:45:ac:36:0e:be:03:d8: c4:62:5e:da:09:c8:fe:98:c5:65:2e:5d:4c:0d:39:30:1e:18: 3e:10:25:76:e3:a7:38:59:32:88:38:f6:0f:8a:01:18:10:c2: b0:0f:d1:fd:33:ba:a1:b6:96:43:38:63:dc:92:cb:db:de:4e: dc:6d:a5:bb:61:ab:c3:0b:df:67:5b:47:5a:20:8b:3f:29:5f: 5b:1b:24:29:44:7d:d7:8b:60:bc:2e:c1:b9:af:f6:fd:4d:cb: bc:e2:71:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUn+1Xx00VusP0L9jGslhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNjg5ZDBmOTEzZDI5Y2M2M2Q2YzkyNmNiNDYyY2IyN2Yx ODQ0MDgwHhcNMjUxMjI3MDEwMDQ2WhcNMjUxMjI4MDEwMDQ2WjAzMTEwLwYDVQQD EygyYTAxNzc0ODdhY2I0YWExMmFmMWY1YzQzZWEzOGM2NzgzYzA1ZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTpfWbHRZLqMcRa5yMlVx/KtjZVO AV9bxB2Q9P/9YWLgY38sDFyUDpdfZmRvXGDFtvKwSoPVvbPkoVtkH0aTKSz65XyN D9jeCka9Qgfnhbl4UeEV3dKHSeaNbSRs0ZlDdNo9/uD0FLdUEondT5xAW/VC1EHP ZkwShUSibyphcKKm5vyswYFTae8nckljH+T+l9TqhuM0e4PtBpeJtn6AB1YNmkO3 baNpwElUJIcHHcbmAjr82ns09doW2YdlAtKYl3PNSNKFRd1zRJpwt/XKY5QifmEo qn9by+5Vp3OPTs5RiG8U5hDZouUR1pdcQY1FwUmGV1s75Lbh7ZPvwV/kYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoBd0h6y0qhKvH1xD6jjGeDwF/OMB8GA1UdIwQY MBaAFCJonQ+RPSnMY9bJJstGLLJ/GEQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wNDNlZWUtMzE5OS00ZjhlLWIwYTkt NGFkODUyYTEyY2Q2LzEvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wNDNlZWUtMzE5OS00ZjhlLWIwYTktNGFkODUyYTEyY2Q2 LzEvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsjZ9zzP +qtwmvcA292O4lvefH4SttCfaREGb6F6SKc+V+WxcXLz30RH941I/37uF4kWsqUB TcLCi+pzmrM5FHgfn7ws9KVXm16droLbdgR9Lx/fnOLUXaUisiUWDMvrKUxX2jqz 2WbGwKUQAwidT1m2r+XrbJvddVfV0NUvsP2WRouUzmTS34rnwu97lD9TgoPaHODG OvZjOMhFrDYOvgPYxGJe2gnI/pjFZS5dTA05MB4YPhAlduOnOFkyiDj2D4oBGBDC sA/R/TO6obaWQzhj3JLL295O3G2lu2GrwwvfZ1tHWiCLPylfWxskKUR914tgvC7B ua/2/U3LvOJxCg== -----END CERTIFICATE-----Generated at Sat Dec 27 06:16:22 2025 by rpki-client