This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft File: IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json) Hash identifier: xd2E5k6zTuojyiMopASN+fw9JsUzt6s/ZTF5XA592dI= Subject key identifier: 83:18:02:6E:33:82:2F:25:78:23:F6:11:D2:2B:D8:8F:0B:A9:EF:71 Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD Certificate issuer: /CN=20c9f249519b1ff479350f317254f405e8bfcabd Certificate serial: 019B2BF8D5602B782CEFC13AA126D3C87D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft Manifest number: 1175 Signing time: Wed 17 Dec 2025 11:01:26 +0000 Manifest this update: Wed 17 Dec 2025 11:01:26 +0000 Manifest next update: Thu 18 Dec 2025 11:01:26 +0000 Files and hashes: 1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: QaXD1JrSWMQYHTbzV2qohAzS/MkfQfiU1mocEfGpE8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:d5:60:2b:78:2c:ef:c1:3a:a1:26:d3:c8:7d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd Validity Not Before: Dec 17 11:01:26 2025 GMT Not After : Dec 18 11:01:26 2025 GMT Subject: CN=8318026e33822f257823f611d22bd88f0ba9ef71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:dd:38:a3:0a:82:0f:c2:92:59:09:cd:b7: 6d:4a:d7:78:e9:64:74:73:16:bf:38:46:c7:9a:2a: 04:3d:3d:31:e1:39:1f:ce:29:e8:52:9b:79:e2:07: dc:81:3a:cd:73:d1:44:94:35:4a:5b:f1:51:cb:a4: 43:0b:f7:7d:7b:b0:97:06:7b:99:09:2b:fa:df:86: 0b:97:c2:1e:61:4a:4f:b3:e8:21:67:a0:35:fb:b4: 4e:a0:1a:8c:de:49:f1:2f:b0:5a:eb:df:20:8e:3a: 19:29:d8:73:8c:48:6e:27:47:db:ff:25:4a:40:92: 00:2a:6b:47:17:a7:b7:dc:66:63:c6:96:69:b1:85: cb:4a:85:8e:3e:9b:df:2f:b4:9b:86:d3:f8:a4:50: 9c:88:54:08:09:ae:29:d3:4b:ba:db:f7:c4:32:15: ab:3f:00:e7:43:c6:eb:f0:ea:a1:96:fc:2b:f7:a6: 5f:8a:10:b8:0d:2f:72:d2:31:1a:0b:77:ea:60:e0: 45:ae:a1:a1:9d:9c:2a:04:2c:c0:9f:52:4d:93:38: 0d:26:0b:fe:8b:31:0b:3b:4f:15:d0:c7:1e:dd:d6: c4:4a:cf:d2:e6:e8:2e:99:d1:21:4d:3f:8a:52:51: a7:7b:f6:76:57:60:21:6f:74:a5:ff:2e:8f:2a:10: 26:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:18:02:6E:33:82:2F:25:78:23:F6:11:D2:2B:D8:8F:0B:A9:EF:71 X509v3 Authority Key Identifier: keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:69:03:2b:74:be:8d:32:8e:b6:73:be:a5:9b:11:73:f0:e4: 44:6c:7a:17:c5:94:61:92:4f:5c:57:0b:bc:d0:aa:d2:bb:9b: 8d:45:b5:b2:16:75:b0:6e:28:a9:7d:cf:87:52:4e:d5:0e:f6: 70:df:82:4d:4c:dc:94:26:ec:34:4a:1a:0f:03:cd:a0:ad:0c: b1:8e:a1:02:0d:cd:af:c3:a4:e7:f5:ca:b6:08:5e:be:72:dd: 0a:e9:46:4b:25:c0:18:14:1f:5b:b8:57:77:c8:9e:b7:2c:31: 08:4f:d5:50:0c:21:ce:f6:6e:53:3e:7d:35:7c:77:6d:47:c7: 6a:90:51:09:0e:28:9a:1e:a2:93:4d:2e:d8:ae:4a:a7:d0:fc: ec:cf:49:6a:00:e8:7b:f6:3c:56:67:5a:3c:28:ff:96:0d:5a: 27:0f:da:ae:40:eb:42:da:5e:5f:12:f6:34:7c:00:b4:c7:7b: ac:30:ee:1a:da:23:ec:66:85:cb:f2:03:9c:c3:20:cf:01:ef: a7:3c:f3:0b:c7:8f:49:5e:21:cc:d2:9b:48:b4:0d:0e:02:d9: 69:6a:97:ad:6f:78:4e:5f:e7:f5:de:52:42:ef:51:a6:69:14: 37:76:ba:3e:5c:f1:fb:23:18:12:b9:53:5a:54:a4:6a:05:50: 28:ff:70:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+NVgK3gs78E6oSbTyH05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzlmMjQ5NTE5YjFmZjQ3OTM1MGYzMTcyNTRmNDA1ZThi ZmNhYmQwHhcNMjUxMjE3MTEwMTI2WhcNMjUxMjE4MTEwMTI2WjAzMTEwLwYDVQQD Eyg4MzE4MDI2ZTMzODIyZjI1NzgyM2Y2MTFkMjJiZDg4ZjBiYTllZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RndOKMKgg/CklkJzbdtStd46WR0 cxa/OEbHmioEPT0x4TkfzinoUpt54gfcgTrNc9FElDVKW/FRy6RDC/d9e7CXBnuZ CSv634YLl8IeYUpPs+ghZ6A1+7ROoBqM3knxL7Ba698gjjoZKdhzjEhuJ0fb/yVK QJIAKmtHF6e33GZjxpZpsYXLSoWOPpvfL7SbhtP4pFCciFQICa4p00u62/fEMhWr PwDnQ8br8Oqhlvwr96ZfihC4DS9y0jEaC3fqYOBFrqGhnZwqBCzAn1JNkzgNJgv+ izELO08V0Mce3dbESs/S5ugumdEhTT+KUlGne/Z2V2Ahb3Sl/y6PKhAmNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMYAm4zgi8leCP2EdIr2I8Lqe9xMB8GA1UdIwQY MBaAFCDJ8klRmx/0eTUPMXJU9AXov8q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2Qt MGU2YmNlZDAwNDYzLzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2QtMGU2YmNlZDAwNDYz LzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGkDK3S+ jTKOtnO+pZsRc/DkRGx6F8WUYZJPXFcLvNCq0rubjUW1shZ1sG4oqX3Ph1JO1Q72 cN+CTUzclCbsNEoaDwPNoK0MsY6hAg3Nr8Ok5/XKtghevnLdCulGSyXAGBQfW7hX d8ietywxCE/VUAwhzvZuUz59NXx3bUfHapBRCQ4omh6ik00u2K5Kp9D87M9JagDo e/Y8VmdaPCj/lg1aJw/arkDrQtpeXxL2NHwAtMd7rDDuGtoj7GaFy/IDnMMgzwHv pzzzC8ePSV4hzNKbSLQNDgLZaWqXrW94Tl/n9d5SQu9RpmkUN3a6Plzx+yMYErlT WlSkagVQKP9wsw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:02:34 2025 by rpki-client