This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json) Hash identifier: hRN7NQo5vs869Zx9bKQ6Xw7UmQArujd9cZt5SZbevPQ= Subject key identifier: 81:66:E2:A8:08:E6:3F:38:A7:42:8D:A4:C7:D6:3E:EA:23:64:88:E7 Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6 Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6 Certificate serial: 019B38A1A9525F267AE606AD2023B0BA28C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft Manifest number: 03B5 Signing time: Fri 19 Dec 2025 22:01:17 +0000 Manifest this update: Fri 19 Dec 2025 22:01:17 +0000 Manifest next update: Sat 20 Dec 2025 22:01:17 +0000 Files and hashes: 1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=) 2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: /+miUudGKOQjxTf5og7B787b56V1Manfg9wCAZOspo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:a9:52:5f:26:7a:e6:06:ad:20:23:b0:ba:28:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6 Validity Not Before: Dec 19 22:01:17 2025 GMT Not After : Dec 20 22:01:17 2025 GMT Subject: CN=8166e2a808e63f38a7428da4c7d63eea236488e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cb:0b:f6:2f:c3:2d:b3:3c:25:51:fe:a6:ff: 56:25:d0:49:95:0f:fb:7c:8e:2f:6c:c3:ec:76:9b: c0:93:4f:b4:aa:e6:d5:72:4b:b3:97:c3:d5:07:ec: c7:b1:cb:ef:31:5b:2f:5f:d6:36:a4:06:4a:0a:e8: 10:75:3a:da:89:35:f7:26:69:f5:57:56:2d:5b:33: 65:31:fe:5c:5b:0d:be:6b:ff:d8:10:0a:5a:8a:5a: 2d:d8:29:bc:69:60:a3:39:69:b9:70:47:97:ec:6f: aa:90:42:89:a9:6d:49:70:72:e8:9b:95:df:a3:d0: b2:9a:d2:cc:f7:59:4d:6a:9d:fb:14:c5:9e:ab:1b: 0a:b0:8a:b6:61:43:39:4b:2f:d1:00:ee:ef:3d:9d: 42:32:a5:99:d6:f1:51:c0:f2:c1:93:ee:c1:06:26: c0:68:09:a6:57:4e:c9:c9:02:81:1a:c7:1a:90:60: e8:2f:02:8c:72:b5:8d:fe:1b:1a:a1:b1:fa:01:79: 76:47:e5:89:79:6d:4b:df:1c:f9:04:09:f0:3d:94: c1:e8:31:79:fe:13:36:99:57:30:35:c9:9c:7e:fe: 3a:8b:35:5e:29:25:b5:d5:73:27:fe:2c:e7:89:ee: 39:3a:85:04:44:71:19:9a:07:67:ad:c4:9e:6e:56: 4e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:66:E2:A8:08:E6:3F:38:A7:42:8D:A4:C7:D6:3E:EA:23:64:88:E7 X509v3 Authority Key Identifier: keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7b:09:6b:87:6a:e4:51:de:aa:1f:3d:df:e8:2e:89:42:c5: 27:98:7c:f9:b0:43:1b:26:04:69:4f:92:80:24:d9:3a:80:99: 6d:82:f6:73:60:02:fa:76:34:43:2d:ee:55:19:a8:5e:90:3f: 86:5f:2a:a3:ef:ee:f7:70:be:e9:ef:1d:e4:65:03:64:b0:a2: 24:49:73:9d:a6:85:b3:4b:55:22:35:1b:06:8e:72:22:56:42: fb:6a:af:c0:74:f5:32:ef:39:a8:b4:4f:4e:9a:9e:3c:6c:73: 35:36:90:d6:87:bf:df:3e:c4:e7:ae:85:51:74:46:69:34:c8: 56:18:76:c7:3c:bb:c0:83:a2:69:ad:24:8b:cb:90:af:d7:1d: 05:c5:84:07:b6:0a:cd:a5:71:e7:5a:eb:d5:79:e1:d6:bf:de: d7:c5:9a:aa:9c:53:7e:09:9b:d1:72:a1:0c:fc:37:32:44:3f: 2d:bc:a6:64:b1:0d:53:ba:b3:82:25:13:68:56:f4:42:41:f6: d4:c4:fd:44:0a:2f:e8:3c:47:7c:aa:f7:43:09:ba:0b:f7:aa: 8e:77:d2:0c:8e:ae:8a:b2:2d:74:ce:83:34:4a:f9:b2:2f:45: 33:73:50:0d:70:e1:24:60:54:f0:e5:44:8c:fb:3e:f6:fd:4d: 93:9c:50:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oalSXyZ65gatICOwuijHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5 Y2RmYjYwHhcNMjUxMjE5MjIwMTE3WhcNMjUxMjIwMjIwMTE3WjAzMTEwLwYDVQQD Eyg4MTY2ZTJhODA4ZTYzZjM4YTc0MjhkYTRjN2Q2M2VlYTIzNjQ4OGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8sL9i/DLbM8JVH+pv9WJdBJlQ/7 fI4vbMPsdpvAk0+0qubVckuzl8PVB+zHscvvMVsvX9Y2pAZKCugQdTraiTX3Jmn1 V1YtWzNlMf5cWw2+a//YEApailot2Cm8aWCjOWm5cEeX7G+qkEKJqW1JcHLom5Xf o9CymtLM91lNap37FMWeqxsKsIq2YUM5Sy/RAO7vPZ1CMqWZ1vFRwPLBk+7BBibA aAmmV07JyQKBGscakGDoLwKMcrWN/hsaobH6AXl2R+WJeW1L3xz5BAnwPZTB6DF5 /hM2mVcwNcmcfv46izVeKSW11XMn/iznie45OoUERHEZmgdnrcSeblZODQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFm4qgI5j84p0KNpMfWPuojZIjnMB8GA1UdIwQY MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHsJa4dq 5FHeqh893+guiULFJ5h8+bBDGyYEaU+SgCTZOoCZbYL2c2AC+nY0Qy3uVRmoXpA/ hl8qo+/u93C+6e8d5GUDZLCiJElznaaFs0tVIjUbBo5yIlZC+2qvwHT1Mu85qLRP TpqePGxzNTaQ1oe/3z7E566FUXRGaTTIVhh2xzy7wIOiaa0ki8uQr9cdBcWEB7YK zaVx51rr1Xnh1r/e18WaqpxTfgmb0XKhDPw3MkQ/LbymZLENU7qzgiUTaFb0QkH2 1MT9RAov6DxHfKr3Qwm6C/eqjnfSDI6uirItdM6DNEr5si9FM3NQDXDhJGBU8OVE jPs+9v1Nk5xQWA== -----END CERTIFICATE-----Generated at Sat Dec 20 04:21:57 2025 by rpki-client