This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft File: jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json) Hash identifier: ZdyCsq98MduAdBDUoVyBQk9gUBBvTRac3NXoK6uB8so= Subject key identifier: 62:6B:5F:03:B2:44:73:98:93:96:5A:DE:59:AE:1B:3E:E8:D8:5A:0C Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c Certificate serial: 019B2B1CB0C9157BE161DFF0337814C89E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 07:00:59 +0000 Manifest this update: Wed 17 Dec 2025 07:00:59 +0000 Manifest next update: Thu 18 Dec 2025 07:00:59 +0000 Files and hashes: 1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=) 2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: TBMjz335pLbvoPPY8FxmoQkI5/HbINxX/2tktxA+7Xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:b0:c9:15:7b:e1:61:df:f0:33:78:14:c8:9e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c Validity Not Before: Dec 17 07:00:59 2025 GMT Not After : Dec 18 07:00:59 2025 GMT Subject: CN=626b5f03b244739893965ade59ae1b3ee8d85a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:02:95:5e:3a:b6:9b:7e:98:29:fe:9e:d6: 79:77:0d:66:b8:79:64:95:0b:44:da:88:06:9d:b1: bf:d8:63:46:83:49:cd:2c:60:c1:be:3b:bc:4f:34: 91:1b:84:5f:07:83:af:dc:20:e9:62:34:e3:70:30: 97:ba:16:85:ff:6b:ee:9d:55:88:30:45:25:a6:92: c2:8f:2f:60:a8:9d:a1:0b:57:de:06:3f:93:36:8c: 53:d9:3b:a7:d5:d6:97:8f:d4:61:d9:58:f3:ed:e2: 00:f1:1c:0b:82:71:00:52:70:d2:ba:45:59:b2:6f: 52:70:6d:4c:16:9b:35:27:9d:20:06:26:5b:f3:28: 4f:6d:2d:35:c4:9b:c9:df:07:58:bb:2a:11:e3:cc: 36:94:b2:e3:93:45:f8:6c:ae:af:0b:23:14:78:d4: 9e:68:22:55:c4:14:28:50:a7:2a:fe:62:63:50:2e: 2f:48:48:76:b5:dd:b6:5c:a2:ab:b6:c7:47:fe:f8: 14:3d:7b:05:a8:e6:1d:f8:91:64:dd:2c:88:95:2c: 0a:87:7d:69:f4:d0:eb:d8:d4:df:02:67:c3:b2:85: 6c:0e:39:43:e5:5c:c3:04:d8:7a:66:1c:7a:5c:0f: 62:7e:d5:20:04:e6:e7:8f:a6:9b:66:80:36:29:fd: 0e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6B:5F:03:B2:44:73:98:93:96:5A:DE:59:AE:1B:3E:E8:D8:5A:0C X509v3 Authority Key Identifier: keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fc:2d:b6:f7:1f:d5:b1:98:a9:0c:43:db:2e:7b:94:d1:e0: 81:eb:61:dd:fa:50:6b:6e:c8:21:39:b0:f0:6d:a3:99:70:d7: c2:c6:4e:c2:19:63:9e:66:74:d3:99:5c:f3:d1:60:43:4d:42: a9:1c:fa:a9:5c:07:44:ad:79:00:bc:bf:8a:da:3f:64:7d:3a: 27:b6:93:58:93:bc:b8:3e:55:0a:6e:87:78:7e:71:88:07:59: fe:c8:ac:b9:c8:99:c8:ad:07:35:cd:34:38:77:99:ab:21:a0: c8:da:67:74:aa:a2:3a:65:dc:c7:66:32:64:09:9d:c5:dd:c2: a9:95:52:e9:a4:52:dd:c9:ac:0c:05:b3:ef:69:f7:d4:e4:3f: 3f:de:76:89:43:db:cd:9a:c3:d4:81:45:5c:37:06:e8:ed:ee: d6:7b:05:c2:9f:8c:f5:fb:5b:96:f1:bc:a9:b9:3b:46:b1:33: 6b:13:03:43:0b:89:10:7e:7c:6b:da:8e:d4:f0:b7:64:cf:d1: ff:9e:33:d3:dc:53:69:bf:7b:ce:d5:07:22:02:50:32:9d:da: 50:89:40:cc:f6:af:1f:05:1f:9a:b1:9e:2d:92:da:23:5b:18: 14:19:f3:f9:94:d8:3c:b5:2e:c3:6c:30:49:76:df:2d:29:78: 9e:99:b8:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHLDJFXvhYd/wM3gUyJ4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjODk4MDFiMTlhYTk3MjhhZDRmNmJiNzE4NWMxMWYxNGI5 ZDhkN2MwHhcNMjUxMjE3MDcwMDU5WhcNMjUxMjE4MDcwMDU5WjAzMTEwLwYDVQQD Eyg2MjZiNWYwM2IyNDQ3Mzk4OTM5NjVhZGU1OWFlMWIzZWU4ZDg1YTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXsClV46tpt+mCn+ntZ5dw1muHlk lQtE2ogGnbG/2GNGg0nNLGDBvju8TzSRG4RfB4Ov3CDpYjTjcDCXuhaF/2vunVWI MEUlppLCjy9gqJ2hC1feBj+TNoxT2Tun1daXj9Rh2Vjz7eIA8RwLgnEAUnDSukVZ sm9ScG1MFps1J50gBiZb8yhPbS01xJvJ3wdYuyoR48w2lLLjk0X4bK6vCyMUeNSe aCJVxBQoUKcq/mJjUC4vSEh2td22XKKrtsdH/vgUPXsFqOYd+JFk3SyIlSwKh31p 9NDr2NTfAmfDsoVsDjlD5VzDBNh6Zhx6XA9iftUgBObnj6abZoA2Kf0OVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJrXwOyRHOYk5Za3lmuGz7o2FoMMB8GA1UdIwQY MBaAFIyJgBsZqpcorU9rtxhcEfFLnY18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUt NzI4ZTk5NjdkYWNhLzEvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUtNzI4ZTk5NjdkYWNh LzEvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfwttvcf 1bGYqQxD2y57lNHggeth3fpQa27IITmw8G2jmXDXwsZOwhljnmZ005lc89FgQ01C qRz6qVwHRK15ALy/ito/ZH06J7aTWJO8uD5VCm6HeH5xiAdZ/sisuciZyK0HNc00 OHeZqyGgyNpndKqiOmXcx2YyZAmdxd3CqZVS6aRS3cmsDAWz72n31OQ/P952iUPb zZrD1IFFXDcG6O3u1nsFwp+M9ftblvG8qbk7RrEzaxMDQwuJEH58a9qO1PC3ZM/R /54z09xTab97ztUHIgJQMp3aUIlAzPavHwUfmrGeLZLaI1sYFBnz+ZTYPLUuw2ww SXbfLSl4npm4Qw== -----END CERTIFICATE-----Generated at Wed Dec 17 09:24:29 2025 by rpki-client