This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json) Hash identifier: bXNnC4si57NqXbqZPNWgyRIE/OeQa1uJkeXpvvTNsjI= Subject key identifier: 73:F5:FF:8F:BB:7F:C5:CF:E5:C2:64:1A:50:17:7C:97:78:70:85:98 Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32 Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32 Certificate serial: 019B5A1AAA93B46FFD2B56B19421EE13D3F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft Manifest number: 0ED4 Signing time: Fri 26 Dec 2025 10:00:55 +0000 Manifest this update: Fri 26 Dec 2025 10:00:55 +0000 Manifest next update: Sat 27 Dec 2025 10:00:55 +0000 Files and hashes: 1: _11c4KnryngFBZ3LrSwCjXVWAnI.roa (hash: 4suX3JVW+dbra41XqoLSgaNnHC7+X6k6GS1R8JLgxL8=) 2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: FVsMjDpZOFRwXNxnTcld0Z8N7n/2Jb4I2Q69rBvdnnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:aa:93:b4:6f:fd:2b:56:b1:94:21:ee:13:d3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32 Validity Not Before: Dec 26 10:00:55 2025 GMT Not After : Dec 27 10:00:55 2025 GMT Subject: CN=73f5ff8fbb7fc5cfe5c2641a50177c9778708598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:e8:15:26:20:98:33:eb:76:eb:45:0e:ce: ca:41:71:ee:b3:00:ae:72:72:1a:07:8c:80:cc:91: 46:ab:ba:c2:82:0e:48:b6:44:33:b1:97:2d:55:33: f0:4b:1b:bb:54:cc:36:40:62:7a:4c:2b:e9:9f:f8: a1:bc:e5:7d:0b:3b:e6:7e:f7:8b:0b:db:88:c5:db: 74:21:05:35:76:cc:fd:1a:d2:67:17:c4:1f:c2:55: 8d:2e:ea:cf:48:74:ba:63:a7:16:da:f9:08:79:5c: 16:65:39:d1:d1:bd:c4:a5:7b:a8:fe:d7:70:ba:59: c1:16:5e:72:43:98:2a:eb:a9:01:23:6c:32:ce:99: af:e1:aa:c4:5c:7a:32:47:4c:7a:70:bb:5c:fb:0e: 44:2c:4b:3f:c8:2f:3f:02:2f:c9:02:2e:ec:23:ed: d1:5e:9b:69:c6:a9:63:91:79:13:04:c2:0d:92:a4: e4:b6:b7:d9:56:cd:27:4f:9c:b1:3e:0b:e5:cd:88: b4:de:5a:cf:4e:3b:34:28:2c:2a:13:c3:43:b3:3c: 98:13:56:31:fb:55:e5:93:3d:a5:cb:46:1d:7f:45: b1:1d:10:0a:81:9d:f3:f8:d8:89:fb:8f:b7:1e:f1: 2d:fd:c2:76:34:ba:30:29:05:35:de:c5:18:c4:dd: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:FF:8F:BB:7F:C5:CF:E5:C2:64:1A:50:17:7C:97:78:70:85:98 X509v3 Authority Key Identifier: keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:19:d7:b1:f3:d3:db:13:6e:fc:62:9b:95:18:b8:49:48:3f: 59:57:4b:57:f7:3f:62:42:45:02:3f:92:cb:09:56:c2:5d:1a: ca:6d:0f:47:c4:d7:26:31:6f:cb:09:15:18:ef:d0:94:15:81: e2:57:92:bd:e5:6b:23:37:6f:65:04:54:13:95:06:40:aa:16: 96:88:e5:15:6a:91:07:67:ae:bb:d5:20:84:25:77:08:67:53: e8:de:7e:74:07:ff:06:33:12:1a:b1:2a:14:d2:f3:b3:b7:3f: e8:47:d7:6d:d7:23:18:59:49:7b:87:c3:56:28:bc:0a:f9:77: 7e:8a:c6:cc:c4:0b:52:bd:33:88:3c:4f:52:2c:08:c5:34:7a: 72:57:32:02:ff:31:1c:11:c5:58:f1:0f:e5:7e:fa:49:ca:77: b5:bd:ad:80:33:29:75:01:28:12:cd:f9:e4:4a:4e:2d:ae:e9: 62:f0:32:42:00:e0:e8:56:f8:72:ad:62:f5:29:4e:c5:9e:1c: 45:ac:57:8f:62:90:3f:b4:d2:bc:e6:c1:44:cd:38:80:99:1d: 7b:f3:f3:a9:8d:d7:0a:9d:da:68:91:23:25:92:fc:d3:1a:e7: bf:d9:1a:2d:73:d2:99:c4:11:6e:92:16:c5:84:35:8d:5b:c6: ba:64:24:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGqqTtG/9K1axlCHuE9P2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMjliMDM5Y2Y4YWFmMTQxZDZlNmQ2MTZlN2MxNjkwODlj YmNiMzIwHhcNMjUxMjI2MTAwMDU1WhcNMjUxMjI3MTAwMDU1WjAzMTEwLwYDVQQD Eyg3M2Y1ZmY4ZmJiN2ZjNWNmZTVjMjY0MWE1MDE3N2M5Nzc4NzA4NTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GboFSYgmDPrdutFDs7KQXHuswCu cnIaB4yAzJFGq7rCgg5ItkQzsZctVTPwSxu7VMw2QGJ6TCvpn/ihvOV9CzvmfveL C9uIxdt0IQU1dsz9GtJnF8QfwlWNLurPSHS6Y6cW2vkIeVwWZTnR0b3EpXuo/tdw ulnBFl5yQ5gq66kBI2wyzpmv4arEXHoyR0x6cLtc+w5ELEs/yC8/Ai/JAi7sI+3R XptpxqljkXkTBMINkqTktrfZVs0nT5yxPgvlzYi03lrPTjs0KCwqE8NDszyYE1Yx +1Xlkz2ly0Ydf0WxHRAKgZ3z+NiJ+4+3HvEt/cJ2NLowKQU13sUYxN3uywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHP1/4+7f8XP5cJkGlAXfJd4cIWYMB8GA1UdIwQY MBaAFHIpsDnPiq8UHW5tYW58FpCJy8syMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jNDA4NzUtMDYxYS00MmRmLTljNmQt ODdhNjg0NWY2NmY5LzEvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9jNDA4NzUtMDYxYS00MmRmLTljNmQtODdhNjg0NWY2NmY5 LzEvY2ltd09jLUtyeFFkYm0xaGJud1drSW5MeXpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBnXsfPT 2xNu/GKblRi4SUg/WVdLV/c/YkJFAj+SywlWwl0aym0PR8TXJjFvywkVGO/QlBWB 4leSveVrIzdvZQRUE5UGQKoWlojlFWqRB2euu9UghCV3CGdT6N5+dAf/BjMSGrEq FNLzs7c/6EfXbdcjGFlJe4fDVii8Cvl3forGzMQLUr0ziDxPUiwIxTR6clcyAv8x HBHFWPEP5X76Scp3tb2tgDMpdQEoEs355EpOLa7pYvAyQgDg6Fb4cq1i9SlOxZ4c RaxXj2KQP7TSvObBRM04gJkde/PzqY3XCp3aaJEjJZL80xrnv9kaLXPSmcQRbpIW xYQ1jVvGumQklQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:12 2025 by rpki-client