This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft File: IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json) Hash identifier: lTtPGkaPM0bwjMa/NWkM8PZTQkQpYTSRZ8mOttU6gW4= Subject key identifier: 0A:D9:D3:2A:FF:12:27:87:B1:B8:CD:D8:1F:C5:3A:53:FD:06:EF:CA Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Certificate serial: 019B104A3AB29F55FDE91722BB0EAC87A1EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft Manifest number: 063A Signing time: Fri 12 Dec 2025 02:00:58 +0000 Manifest this update: Fri 12 Dec 2025 02:00:58 +0000 Manifest next update: Sat 13 Dec 2025 02:00:58 +0000 Files and hashes: 1: 7xOhUPHtrbr-aDnyk2sqIXaZxmE.roa (hash: kq8yM7VvfoH1+ATjkQ5zBAmoZIPQA7DySnzjc28AM7I=) 2: EO7_sAa5INTWdb0sB8KoIZTsSpE.roa (hash: SZljpS9Me6EqFyINGEQdOy6JlEANEGEhl0H6HmWV3fM=) 3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: AXNEyO7ArLkD+1Heel1v3b2Q6MBIMpl5IXZnWAgUkVA=) 4: Wr8EOmHckxzTGd0Aamj6K9DADdU.roa (hash: OPshObN2z5FsqJnygnFeWGUMJE0uYykW0pM3DUOjmQQ=) 5: YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa (hash: oxg1KeTKZ090F7XaYRFBJpN4jEk7flH1GMsXEE67BF0=) 6: wS-ZYWnE9Zk6DJUs3sCV5yBn3ak.roa (hash: 4bRb80RRs/QoIhxBs4Ime6HGYShS2787nhwQD+lr7Xw=) 7: wnHzclbUTpmI2i25YXVP3hxML5Y.roa (hash: aE81auZ0/hL8t66uhuMDoL2Ds7gb0agCHWXH7RqZEB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:3a:b2:9f:55:fd:e9:17:22:bb:0e:ac:87:a1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Validity Not Before: Dec 12 02:00:58 2025 GMT Not After : Dec 13 02:00:58 2025 GMT Subject: CN=0ad9d32aff122787b1b8cdd81fc53a53fd06efca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:ac:e7:9f:f7:74:7b:35:9d:50:24:48:26: 5d:16:65:58:a4:25:1a:5c:98:d2:58:b7:62:14:25: 30:3a:f2:97:4c:13:94:7d:4c:69:61:23:ad:46:c2: 6e:0d:62:02:b5:a5:3f:76:8a:38:63:ae:cc:9d:93: 8d:21:e6:68:f5:dc:4f:8d:10:8c:b9:b5:78:ee:be: dd:ab:b1:40:8a:5d:e1:3a:7c:c4:c6:80:4f:c9:5c: 3c:45:6b:ed:5e:5a:e0:8b:cb:35:e5:9e:b2:b9:11: 60:91:d4:59:28:23:95:16:09:93:1d:24:70:d7:83: e0:ac:ea:4a:d3:f5:8d:c7:03:0e:c6:88:f3:37:d8: 08:49:cd:37:e4:7c:ae:fb:5a:5e:5f:cb:03:53:61: 85:8d:aa:f3:bb:5e:49:be:a1:9c:c5:63:73:c1:fd: 91:70:db:8c:e7:b2:6e:89:6c:d7:01:46:b5:7a:97: b9:7a:68:33:f1:d5:e9:d3:73:4d:c6:44:af:8d:08: 66:20:dd:8f:90:ba:ef:c1:6e:9b:24:91:85:a2:84: 1e:e4:52:f7:43:06:b6:ac:b5:05:09:41:b9:ee:3b: 2d:bc:94:25:bb:9f:ac:99:6f:d7:4c:97:ea:5c:9e: e3:b5:7e:47:b6:cb:b6:e4:42:05:5c:91:99:7f:a9: 57:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D9:D3:2A:FF:12:27:87:B1:B8:CD:D8:1F:C5:3A:53:FD:06:EF:CA X509v3 Authority Key Identifier: keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bd:5c:a9:2b:d5:d2:98:30:15:b7:12:c2:ea:42:d2:12:15: e0:dc:fe:fc:7e:74:f2:92:cc:e6:49:53:54:5d:6c:96:06:a0: 63:59:7d:32:9a:d5:c2:15:18:da:36:1a:b6:55:b5:fa:8d:11: de:ee:b4:dc:a7:99:85:de:b9:e3:e4:da:ba:e7:bc:8f:0a:aa: 51:18:fc:38:91:c2:60:81:70:8c:79:99:bd:cf:99:85:82:f0: b2:d1:43:27:46:f8:61:6c:70:a7:8c:54:43:69:63:72:7a:15: 7b:6a:44:a4:77:98:03:88:e9:f5:97:aa:37:90:3b:c5:9d:57: 98:f6:d9:18:af:78:c0:a2:03:8e:a7:8d:ce:f5:95:4b:f6:02: 07:6e:7b:d9:f5:af:86:f1:77:10:5f:b1:31:fa:c9:b6:33:46: ce:fe:0e:e5:c8:a5:13:55:e7:a1:6d:f1:84:54:90:8f:be:b7: a9:01:a0:28:0d:8e:e3:1c:fe:e8:af:29:eb:c4:e1:94:0e:26: 92:7e:e3:43:f3:2e:a3:3d:62:90:24:1e:c6:5c:90:85:98:ec: 91:70:0f:4d:2c:2c:d3:c1:0b:e0:ae:ba:1b:6a:3c:d2:7e:d0: ba:d0:62:a4:dc:71:f1:fc:27:e8:20:bb:c3:d9:21:22:de:95: b6:91:5e:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSjqyn1X96Rciuw6sh6HvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzVlZTAyZDJlMDU4NjFkZDkwNmZlMDZiMzg0NGYwNGQz NzhjNzMwHhcNMjUxMjEyMDIwMDU4WhcNMjUxMjEzMDIwMDU4WjAzMTEwLwYDVQQD EygwYWQ5ZDMyYWZmMTIyNzg3YjFiOGNkZDgxZmM1M2E1M2ZkMDZlZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArROs55/3dHs1nVAkSCZdFmVYpCUa XJjSWLdiFCUwOvKXTBOUfUxpYSOtRsJuDWICtaU/doo4Y67MnZONIeZo9dxPjRCM ubV47r7dq7FAil3hOnzExoBPyVw8RWvtXlrgi8s15Z6yuRFgkdRZKCOVFgmTHSRw 14PgrOpK0/WNxwMOxojzN9gISc035Hyu+1peX8sDU2GFjarzu15JvqGcxWNzwf2R cNuM57JuiWzXAUa1epe5emgz8dXp03NNxkSvjQhmIN2PkLrvwW6bJJGFooQe5FL3 Qwa2rLUFCUG57jstvJQlu5+smW/XTJfqXJ7jtX5Htsu25EIFXJGZf6lXcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArZ0yr/EieHsbjN2B/FOlP9Bu/KMB8GA1UdIwQY MBaAFCDF7gLS4Fhh3ZBv4Gs4RPBNN4xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUt Njc3NzEzNTlhMmIzLzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUtNjc3NzEzNTlhMmIz LzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP71cqSvV 0pgwFbcSwupC0hIV4Nz+/H508pLM5klTVF1slgagY1l9MprVwhUY2jYatlW1+o0R 3u603KeZhd654+Tauue8jwqqURj8OJHCYIFwjHmZvc+ZhYLwstFDJ0b4YWxwp4xU Q2ljcnoVe2pEpHeYA4jp9ZeqN5A7xZ1XmPbZGK94wKIDjqeNzvWVS/YCB2572fWv hvF3EF+xMfrJtjNGzv4O5cilE1XnoW3xhFSQj763qQGgKA2O4xz+6K8p68ThlA4m kn7jQ/Muoz1ikCQexlyQhZjskXAPTSws08EL4K66G2o80n7QutBipNxx8fwn6CC7 w9khIt6VtpFeUA== -----END CERTIFICATE-----Generated at Fri Dec 12 10:29:43 2025 by rpki-client