This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json) Hash identifier: 6ddVsgb76SwXPlCKEyViHf44Jwvx+6PsqaTXH0E5tgs= Subject key identifier: 29:DE:93:B8:32:B3:23:33:D3:87:1C:A8:07:97:C9:4D:6D:FA:76:06 Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d Certificate serial: 019B115C8527FB809B81728DAA94EF72CF19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft Manifest number: 1776 Signing time: Fri 12 Dec 2025 07:00:34 +0000 Manifest this update: Fri 12 Dec 2025 07:00:34 +0000 Manifest next update: Sat 13 Dec 2025 07:00:34 +0000 Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: ARhIprl35WvP1vN2RuQvdq1KPJZ/hSL9OiEMYE2EeVY=) 2: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=) 3: UPhAaB84R0Xe1XTexqfwP-ciVHM.roa (hash: p28psRkGWXa6krQq8ETJGtszXl3PhjiqO+T48rxu9sI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:85:27:fb:80:9b:81:72:8d:aa:94:ef:72:cf:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d Validity Not Before: Dec 12 07:00:34 2025 GMT Not After : Dec 13 07:00:34 2025 GMT Subject: CN=29de93b832b32333d3871ca80797c94d6dfa7606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:64:ad:bf:d3:ca:32:35:84:cf:4e:2a:71: 82:40:cb:3d:54:e3:ff:21:22:fc:d2:35:22:f8:aa: 23:5f:d4:b8:ad:8e:35:87:13:39:81:a2:0b:3f:25: c1:37:44:f0:d6:96:6b:5c:2c:12:63:0a:e0:d2:72: 57:3c:cc:fb:6b:69:60:bd:7c:a2:55:05:5f:28:68: 1e:d7:76:c9:bd:0e:91:db:df:12:dd:b7:76:7d:84: f7:85:66:19:38:79:3f:9f:94:68:92:27:6a:8f:52: 2b:3a:78:33:5d:7e:45:9e:d5:af:ad:e7:55:2d:de: 9a:d8:2f:db:11:5f:fc:f1:12:c3:3e:45:67:81:0e: f1:25:a6:57:9f:2d:3b:2e:3b:7b:2d:7b:e4:c0:3d: 40:23:b1:ba:fd:47:ce:e5:3e:3c:d7:2c:d2:ca:35: 0e:33:53:27:d6:3f:24:db:54:80:3f:b5:6a:46:43: 40:3c:04:12:1a:2a:fc:58:8c:b3:73:57:8e:b2:10: 51:24:15:c9:d6:93:8c:3c:dd:7a:94:d7:74:65:7f: 76:ef:37:c7:5b:63:72:f6:8d:c6:3a:16:40:af:2b: f2:1c:a5:92:5e:d4:85:cc:7e:fd:58:fa:4e:c5:d5: b8:63:14:8f:0e:36:b5:1c:d5:63:33:d1:0d:26:9f: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DE:93:B8:32:B3:23:33:D3:87:1C:A8:07:97:C9:4D:6D:FA:76:06 X509v3 Authority Key Identifier: keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b9:80:aa:06:d4:ad:8f:0f:47:cc:fe:81:d0:e1:97:f7:9b: ff:df:1c:f6:ed:10:c6:99:4d:7f:39:76:7c:e2:17:b8:8f:76: 3c:a3:b0:41:03:c3:77:4b:5d:d9:c5:41:ef:50:11:e8:93:3c: 72:bb:59:f4:c5:87:3e:bd:c8:7e:11:ff:33:05:8c:af:00:7f: b2:83:03:50:92:af:19:40:80:3c:c7:1b:cd:c2:74:fe:58:70: 7f:54:ca:80:c2:2d:17:a1:04:43:96:c9:9a:64:36:04:8f:b2: 5b:8a:23:84:e3:de:72:fb:8a:1a:c2:05:7e:3a:2a:9c:ee:5b: 48:b8:dd:e6:8b:a4:ae:f6:55:2d:68:f3:e9:d5:a1:d0:64:33: 0b:72:fb:34:c6:2c:9b:fe:e4:a1:5d:cb:72:b9:57:db:53:60: 8f:54:bb:d3:eb:1b:a8:45:5f:c2:f9:5f:d1:84:c1:da:2a:ca: 43:9c:43:8e:e8:5a:0e:28:42:1f:e7:70:23:92:9b:2b:9d:cf: 02:9b:56:bd:83:5f:7a:50:34:d0:c3:44:2f:14:78:c2:58:6c: 00:59:93:3b:a4:e3:45:e5:45:96:b6:b3:18:83:75:78:31:d7: f0:e4:1d:36:54:7f:bc:37:66:12:67:f8:19:f6:56:15:74:15: 26:50:3d:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXIUn+4CbgXKNqpTvcs8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi MDY4NGQwHhcNMjUxMjEyMDcwMDM0WhcNMjUxMjEzMDcwMDM0WjAzMTEwLwYDVQQD EygyOWRlOTNiODMyYjMyMzMzZDM4NzFjYTgwNzk3Yzk0ZDZkZmE3NjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhRkrb/TyjI1hM9OKnGCQMs9VOP/ ISL80jUi+KojX9S4rY41hxM5gaILPyXBN0Tw1pZrXCwSYwrg0nJXPMz7a2lgvXyi VQVfKGge13bJvQ6R298S3bd2fYT3hWYZOHk/n5Rokidqj1IrOngzXX5FntWvredV Ld6a2C/bEV/88RLDPkVngQ7xJaZXny07Ljt7LXvkwD1AI7G6/UfO5T481yzSyjUO M1Mn1j8k21SAP7VqRkNAPAQSGir8WIyzc1eOshBRJBXJ1pOMPN16lNd0ZX927zfH W2Ny9o3GOhZAryvyHKWSXtSFzH79WPpOxdW4YxSPDja1HNVjM9ENJp9qQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnek7gysyMz04ccqAeXyU1t+nYGMB8GA1UdIwQY MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt NzMyMDJmMGUxZDAzLzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7mAqgbU rY8PR8z+gdDhl/eb/98c9u0QxplNfzl2fOIXuI92PKOwQQPDd0td2cVB71AR6JM8 crtZ9MWHPr3IfhH/MwWMrwB/soMDUJKvGUCAPMcbzcJ0/lhwf1TKgMItF6EEQ5bJ mmQ2BI+yW4ojhOPecvuKGsIFfjoqnO5bSLjd5oukrvZVLWjz6dWh0GQzC3L7NMYs m/7koV3LcrlX21Ngj1S70+sbqEVfwvlf0YTB2irKQ5xDjuhaDihCH+dwI5KbK53P AptWvYNfelA00MNELxR4wlhsAFmTO6TjReVFlrazGIN1eDHX8OQdNlR/vDdmEmf4 GfZWFXQVJlA9wA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:39:22 2025 by rpki-client