This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json) Hash identifier: kyM4KyiyablnUcdBrnrRrzkPsBjPlcOyxzT/Ov8nIIw= Subject key identifier: FA:C9:A5:F9:22:8B:4C:8C:04:ED:8C:FA:BC:B3:96:4B:A3:CB:54:B0 Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09 Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209 Certificate serial: 019B5A1AFC562934603CF24D4DCF0545D0B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft Manifest number: 0C6B Signing time: Fri 26 Dec 2025 10:01:16 +0000 Manifest this update: Fri 26 Dec 2025 10:01:16 +0000 Manifest next update: Sat 27 Dec 2025 10:01:16 +0000 Files and hashes: 1: 1AXI6VS8x1NwH1qDWre2Y7s5Obw.roa (hash: PooxuLbMU5urdiMSlTyQqEI+acICcUNAG9hxeoEBuCc=) 2: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: 47xXrIDdPzCL4DwQtnqP53hrdikcddNQjDqVa7pTWh8=) 3: ojCAlBieGgvtH-Amg5Pbx-kD3Ks.asa (hash: E8BQNyWryGM1yvv9Iab0H4klKvyW9tS+D+O7/6V8RiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:fc:56:29:34:60:3c:f2:4d:4d:cf:05:45:d0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209 Validity Not Before: Dec 26 10:01:16 2025 GMT Not After : Dec 27 10:01:16 2025 GMT Subject: CN=fac9a5f9228b4c8c04ed8cfabcb3964ba3cb54b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:27:67:f2:e2:46:76:b1:3b:b5:b9:55:4f:d7: 98:8f:61:65:d8:34:64:b3:10:0b:04:48:75:ec:c4: 4a:df:f7:32:68:1d:e1:7f:0e:a9:46:6d:75:5e:6f: 5f:18:35:78:15:a3:6d:f6:8b:c8:e2:36:dd:8f:2d: ac:73:8d:64:23:28:8a:3b:2a:d5:f3:31:cd:0a:1b: c2:cf:d0:71:03:dd:c6:e5:6f:88:69:29:18:58:e2: dc:68:50:56:5a:17:f2:bd:a3:a4:64:a5:ee:f9:72: bd:67:ac:60:7b:71:d8:c7:81:40:18:f9:33:5b:e2: 7c:86:fc:2d:3b:3d:95:2b:6f:15:97:08:bc:34:35: 73:6c:d8:68:8e:61:b6:29:27:ff:b6:f5:fb:38:20: 19:56:d6:29:fe:4c:e2:80:23:f4:e5:d1:88:d5:a9: e8:0f:57:50:7c:db:55:10:81:84:91:00:69:9f:f2: b2:e3:0b:f3:06:33:1e:21:06:fd:6b:6e:0d:f9:12: 2b:c0:7b:c0:31:7d:e2:f2:b4:d2:af:08:c5:5f:03: 0b:2d:82:7c:56:07:14:13:6c:fa:c1:ed:a9:7b:2c: 1a:82:4f:4a:30:0d:1e:2b:08:c9:ec:4e:bd:94:03: 49:a5:84:22:02:1d:cc:61:e8:10:39:89:f2:6a:0a: b4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C9:A5:F9:22:8B:4C:8C:04:ED:8C:FA:BC:B3:96:4B:A3:CB:54:B0 X509v3 Authority Key Identifier: keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:87:38:31:dc:46:b8:c3:41:38:12:19:08:6e:0c:cf:f8:48: 12:f5:2c:e8:10:c0:41:af:8d:e7:2c:44:ea:8b:c7:b2:e1:f4: 89:16:63:26:02:dd:7d:10:9b:65:a4:a3:74:ab:85:e2:6b:1f: 18:57:39:01:5d:94:e1:a3:86:6e:80:e9:65:0f:95:3c:ae:18: f1:31:e3:17:ff:de:98:a1:be:97:9c:81:7f:36:07:af:b3:f9: 87:67:b1:8e:9d:c6:de:20:d7:2b:35:50:e7:01:37:84:3c:17: 63:a3:14:f3:75:6f:5f:2d:89:94:98:49:d2:97:42:c5:56:92: 01:fc:f4:89:5d:ce:92:48:c8:dd:1a:90:34:8d:40:c0:f1:74: 97:23:90:70:c1:23:34:cc:a5:87:db:04:c3:db:2a:bf:0a:9f: e3:d3:73:4b:c0:9e:f8:5a:b0:d2:45:eb:a4:7f:3c:6b:b0:e5: 21:69:e0:60:b0:ce:92:6a:7a:0d:b5:16:57:c0:e5:18:b7:65: 91:57:97:86:51:d5:e7:8f:5c:e8:9f:9b:a7:a4:4f:e6:92:c7: b5:ad:9a:16:02:8d:42:24:a2:92:6e:27:8d:8c:af:54:c5:08: 95:8c:61:d6:3b:21:e6:87:a4:3b:84:cb:ff:93:d6:1e:ba:cc: 01:85:43:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGvxWKTRgPPJNTc8FRdC4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzdlYWM0NWM4ZGJiNWU1ZWZkZDY1YzE4ODE0NDk4NjAz ZjAyMDkwHhcNMjUxMjI2MTAwMTE2WhcNMjUxMjI3MTAwMTE2WjAzMTEwLwYDVQQD EyhmYWM5YTVmOTIyOGI0YzhjMDRlZDhjZmFiY2IzOTY0YmEzY2I1NGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ydn8uJGdrE7tblVT9eYj2Fl2DRk sxALBEh17MRK3/cyaB3hfw6pRm11Xm9fGDV4FaNt9ovI4jbdjy2sc41kIyiKOyrV 8zHNChvCz9BxA93G5W+IaSkYWOLcaFBWWhfyvaOkZKXu+XK9Z6xge3HYx4FAGPkz W+J8hvwtOz2VK28Vlwi8NDVzbNhojmG2KSf/tvX7OCAZVtYp/kzigCP05dGI1ano D1dQfNtVEIGEkQBpn/Ky4wvzBjMeIQb9a24N+RIrwHvAMX3i8rTSrwjFXwMLLYJ8 VgcUE2z6we2peywagk9KMA0eKwjJ7E69lANJpYQiAh3MYegQOYnyagq0yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrJpfkii0yMBO2M+ryzlkujy1SwMB8GA1UdIwQY MBaAFCDH6sRcjbteXv3WXBiBRJhgPwIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1mcXhGeU51MTVlX2RaY0dJRkVtR0FfQWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jNWU0OTgtYzg5NS00MzU0LWJlODUt NzA0ZWFiNmNhM2U4LzEvSU1mcXhGeU51MTVlX2RaY0dJRkVtR0FfQWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jNWU0OTgtYzg5NS00MzU0LWJlODUtNzA0ZWFiNmNhM2U4 LzEvSU1mcXhGeU51MTVlX2RaY0dJRkVtR0FfQWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIc4MdxG uMNBOBIZCG4Mz/hIEvUs6BDAQa+N5yxE6ovHsuH0iRZjJgLdfRCbZaSjdKuF4msf GFc5AV2U4aOGboDpZQ+VPK4Y8THjF//emKG+l5yBfzYHr7P5h2exjp3G3iDXKzVQ 5wE3hDwXY6MU83VvXy2JlJhJ0pdCxVaSAfz0iV3OkkjI3RqQNI1AwPF0lyOQcMEj NMylh9sEw9sqvwqf49NzS8Ce+Fqw0kXrpH88a7DlIWngYLDOkmp6DbUWV8DlGLdl kVeXhlHV549c6J+bp6RP5pLHta2aFgKNQiSikm4njYyvVMUIlYxh1jsh5oekO4TL /5PWHrrMAYVDmg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:28 2025 by rpki-client