This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json) Hash identifier: 6JCB+3rDrBz/Acb9Qftv+tDOsOYJ5dj0oFmAmfLXnoo= Subject key identifier: A0:47:30:A8:66:81:F7:7C:2B:41:30:7E:FB:DA:0C:CB:1B:DA:8E:72 Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b Certificate serial: 019B23634497761C6E504CD01C4A8D8CC7A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft Manifest number: 0481 Signing time: Mon 15 Dec 2025 19:01:06 +0000 Manifest this update: Mon 15 Dec 2025 19:01:06 +0000 Manifest next update: Tue 16 Dec 2025 19:01:06 +0000 Files and hashes: 1: HO9laPPsdq6sfNd_PR3udt1kywk.roa (hash: ySqE/9cHXiOyjfUHGzF3+AzH1p8/SUImSsDU40s2CbI=) 2: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: CMo51H8yemFMUR1GaIKX61ggyT6StVZjw5OWY52wc/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:44:97:76:1c:6e:50:4c:d0:1c:4a:8d:8c:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b Validity Not Before: Dec 15 19:01:06 2025 GMT Not After : Dec 16 19:01:06 2025 GMT Subject: CN=a04730a86681f77c2b41307efbda0ccb1bda8e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:89:28:3a:4d:eb:eb:4a:24:30:8f:56:76: 09:21:19:ac:d8:b8:8f:12:7e:fb:83:9d:5a:4f:78: 6f:87:13:ff:7d:6c:f2:7b:ff:b8:51:8f:4a:13:ad: 4a:c0:ff:55:94:c6:4c:a0:3d:83:40:c5:79:6f:7b: 98:48:e1:9f:31:6a:16:a1:76:6f:95:94:e8:9c:83: cf:b1:23:1e:13:27:b4:3c:b7:b9:7a:c0:e4:e9:19: 80:72:9f:55:01:7d:57:0a:ed:6b:73:fd:30:be:f7: 49:33:ef:21:c2:f1:bc:25:d4:14:55:5d:ae:10:b0: 21:0f:68:af:b2:f1:8c:dd:7b:7d:8a:9e:c7:19:93: fe:1c:35:3c:c4:8b:e0:9c:5a:56:c7:c4:0f:03:3f: 1c:78:2e:a1:dd:56:ce:ed:f7:45:96:c5:f0:d2:d8: da:a0:98:37:e6:e6:88:6f:25:47:0f:36:34:31:ef: b2:bc:0b:ce:aa:fd:9b:9d:91:d4:58:cd:3d:4b:b2: f7:a1:c3:d8:a3:a6:88:d1:18:1b:c4:43:54:37:f6: a1:55:60:bb:58:f2:2c:9a:b5:22:3f:ec:88:e7:36: ce:42:c0:0f:bc:be:f7:d0:7e:e7:71:92:e6:4f:c4: 56:03:8a:79:25:c2:55:ed:a6:f6:69:7e:72:7b:af: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:47:30:A8:66:81:F7:7C:2B:41:30:7E:FB:DA:0C:CB:1B:DA:8E:72 X509v3 Authority Key Identifier: keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3b:d8:1e:0c:ea:d0:f0:6f:b3:ed:ba:87:2b:eb:c7:25:29: 03:b1:63:ec:a0:00:e1:5c:be:72:84:f1:f7:13:22:45:fc:98: 68:92:8f:f3:92:91:6c:b7:64:97:42:d4:25:f5:76:ce:3f:a9: 74:b7:94:76:b4:c0:3e:42:f2:2f:c6:1d:f4:f9:e1:4c:ab:74: a1:74:e1:d1:74:be:4f:18:8f:d3:d8:39:a3:2d:a7:e9:3f:dd: 56:cc:bd:af:d2:d8:09:1d:b9:bc:b6:15:ef:cf:c5:95:ef:d7: df:45:1d:bc:f0:0a:dc:83:84:35:57:97:61:95:03:7e:f0:89: d5:20:0c:77:cb:88:3a:5a:b8:cb:32:d6:58:dd:44:9b:b0:d0: 17:e4:fa:cb:3c:1c:bb:32:52:b4:2a:85:bf:88:20:db:5e:31: b4:82:8c:9b:01:f3:db:94:a4:96:2d:0d:34:20:a9:1a:89:77: 2d:e0:c3:38:50:cd:22:d3:48:d3:be:e9:e9:c3:26:fd:03:d1: 60:b2:ca:aa:d1:ca:6c:3b:f7:96:23:a7:68:f4:80:b3:d8:af: 65:b4:fb:8c:48:31:fc:c5:f0:53:da:3a:40:97:47:53:4e:27: fb:8b:28:11:11:51:a9:c1:e8:65:ea:22:be:c3:c7:b9:96:08: 6b:37:0d:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY0SXdhxuUEzQHEqNjMegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwY2NmNmRmYTcwOTU3M2E4MjFiNjNjNGNiNjk1NjA1ZmQy NjY4MGIwHhcNMjUxMjE1MTkwMTA2WhcNMjUxMjE2MTkwMTA2WjAzMTEwLwYDVQQD EyhhMDQ3MzBhODY2ODFmNzdjMmI0MTMwN2VmYmRhMGNjYjFiZGE4ZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKuJKDpN6+tKJDCPVnYJIRms2LiP En77g51aT3hvhxP/fWzye/+4UY9KE61KwP9VlMZMoD2DQMV5b3uYSOGfMWoWoXZv lZTonIPPsSMeEye0PLe5esDk6RmAcp9VAX1XCu1rc/0wvvdJM+8hwvG8JdQUVV2u ELAhD2ivsvGM3Xt9ip7HGZP+HDU8xIvgnFpWx8QPAz8ceC6h3VbO7fdFlsXw0tja oJg35uaIbyVHDzY0Me+yvAvOqv2bnZHUWM09S7L3ocPYo6aI0RgbxENUN/ahVWC7 WPIsmrUiP+yI5zbOQsAPvL730H7ncZLmT8RWA4p5JcJV7ab2aX5ye6/EiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBHMKhmgfd8K0EwfvvaDMsb2o5yMB8GA1UdIwQY MBaAFCDM9t+nCVc6ghtjxMtpVgX9JmgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWIt M2EyOGY4YTljNzA3LzEvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWItM2EyOGY4YTljNzA3 LzEvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTvYHgzq 0PBvs+26hyvrxyUpA7Fj7KAA4Vy+coTx9xMiRfyYaJKP85KRbLdkl0LUJfV2zj+p dLeUdrTAPkLyL8Yd9PnhTKt0oXTh0XS+TxiP09g5oy2n6T/dVsy9r9LYCR25vLYV 78/Fle/X30UdvPAK3IOENVeXYZUDfvCJ1SAMd8uIOlq4yzLWWN1Em7DQF+T6yzwc uzJStCqFv4gg214xtIKMmwHz25Skli0NNCCpGol3LeDDOFDNItNI077p6cMm/QPR YLLKqtHKbDv3liOnaPSAs9ivZbT7jEgx/MXwU9o6QJdHU04n+4soERFRqcHoZeoi vsPHuZYIazcNYg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:27 2025 by rpki-client