This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft File: RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json) Hash identifier: AdGWjfhqUB7dOu0GtNvX37nVNEJ6WZ8Rm2RJF7C5yEE= Subject key identifier: BB:24:EB:5F:5D:68:8D:99:59:5F:B0:29:8D:05:32:0D:DC:5E:4C:05 Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04 Certificate issuer: /CN=448331851b3559d3cc8299f6b020ef378e2e4b04 Certificate serial: 019B59E3AF5DF7E5AF12AA93F49D8A25DBF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft Manifest number: 08C7 Signing time: Fri 26 Dec 2025 09:00:52 +0000 Manifest this update: Fri 26 Dec 2025 09:00:52 +0000 Manifest next update: Sat 27 Dec 2025 09:00:52 +0000 Files and hashes: 1: Mr0WRrlMlv0_Evxeakjpwz7LiPg.roa (hash: gsCCcQlF73dWTqboxZPlvCMCNzkEYN7/m7aejhTDik0=) 2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: timOOSK2jpAv4ZUek9B/knrOp6uE4ee0uqrUsYvQp9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:af:5d:f7:e5:af:12:aa:93:f4:9d:8a:25:db:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04 Validity Not Before: Dec 26 09:00:52 2025 GMT Not After : Dec 27 09:00:52 2025 GMT Subject: CN=bb24eb5f5d688d99595fb0298d05320ddc5e4c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:5f:57:d8:e3:38:8a:70:75:16:26:e6:30: 91:ca:69:91:e0:e5:49:91:68:57:3e:0f:f1:bf:c8: b0:ed:12:c0:78:ee:0e:49:e7:c4:0d:1e:a7:c5:cb: 2b:88:b7:23:0d:49:f5:67:78:90:c8:05:df:bc:0b: e9:4b:d2:cd:d3:8b:79:ff:b4:84:39:c2:f3:05:f7: 19:39:e9:33:af:7c:11:51:ea:58:83:3d:ab:61:c1: 60:1f:9e:a6:31:af:bf:2c:31:aa:bf:ed:ca:02:fa: ee:4f:55:dc:2c:29:36:47:06:b2:94:a0:45:bf:b8: 22:19:f0:cc:bc:9c:6c:06:ef:72:c8:c7:d0:24:34: 01:4f:e8:90:dc:b9:ee:15:e9:a2:d6:51:89:2f:17: 02:44:87:85:d9:fd:87:40:b2:61:47:e9:9c:7f:3b: 5b:c9:29:85:9f:9f:da:9c:6d:99:4b:aa:2c:ba:67: 1f:db:91:6f:01:40:55:df:4d:c7:7c:81:d4:09:e1: c3:28:6e:cb:fb:8c:f5:49:64:f5:0f:33:18:24:ff: 1f:64:5d:b0:8f:3e:b9:b9:91:02:ff:c6:c6:1c:24: 79:ee:08:71:21:92:79:3c:4c:36:f0:53:97:2b:a9: 85:3f:40:fc:a7:a9:86:b1:21:df:10:01:9b:f2:ef: a9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:24:EB:5F:5D:68:8D:99:59:5F:B0:29:8D:05:32:0D:DC:5E:4C:05 X509v3 Authority Key Identifier: keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:26:ac:f4:78:5c:2e:29:2a:43:81:a6:46:43:3f:b6:e4:d0: 06:33:86:fa:bb:21:29:06:36:14:8f:f2:f8:3d:b2:ca:98:23: 55:c4:1c:d0:0d:fd:ca:ff:8c:f0:85:d8:ef:45:4f:ce:d5:e6: 40:39:c0:9e:3a:ff:25:b4:ff:18:87:48:ff:28:39:48:1d:9d: 46:b1:45:72:df:d1:bc:91:2f:1e:51:24:11:4f:e3:22:16:9a: a9:fd:0d:a8:b7:08:7e:81:9c:50:ee:ef:f0:24:ca:04:af:06: f7:00:88:a5:ab:e0:8b:48:83:1b:7f:f3:32:c6:23:f8:f8:e8: 4e:94:07:86:1a:ea:0d:a9:87:9f:0b:10:fe:9e:46:ed:d4:3e: e4:5a:9a:73:32:26:ce:65:57:7e:9b:af:00:02:19:08:78:a5: ff:72:9b:3d:8a:d6:bd:14:35:42:ae:f3:44:de:4b:7f:5e:ca: 67:02:40:c9:6b:e8:74:8b:de:e3:b8:e6:2f:17:91:58:0f:41: d2:01:e8:20:b2:be:ac:1c:cf:6f:21:44:98:6f:72:19:72:61: 6d:a4:84:15:8a:6b:16:7e:c6:fb:bd:54:a1:d3:57:e8:02:30: 09:97:7a:d5:8b:cb:82:46:63:0f:4c:26:c9:67:b3:62:b2:d8: b1:ed:25:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ469d9+WvEqqT9J2KJdv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ODMzMTg1MWIzNTU5ZDNjYzgyOTlmNmIwMjBlZjM3OGUy ZTRiMDQwHhcNMjUxMjI2MDkwMDUyWhcNMjUxMjI3MDkwMDUyWjAzMTEwLwYDVQQD EyhiYjI0ZWI1ZjVkNjg4ZDk5NTk1ZmIwMjk4ZDA1MzIwZGRjNWU0YzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/hfV9jjOIpwdRYm5jCRymmR4OVJ kWhXPg/xv8iw7RLAeO4OSefEDR6nxcsriLcjDUn1Z3iQyAXfvAvpS9LN04t5/7SE OcLzBfcZOekzr3wRUepYgz2rYcFgH56mMa+/LDGqv+3KAvruT1XcLCk2RwaylKBF v7giGfDMvJxsBu9yyMfQJDQBT+iQ3LnuFemi1lGJLxcCRIeF2f2HQLJhR+mcfztb ySmFn5/anG2ZS6osumcf25FvAUBV303HfIHUCeHDKG7L+4z1SWT1DzMYJP8fZF2w jz65uZEC/8bGHCR57ghxIZJ5PEw28FOXK6mFP0D8p6mGsSHfEAGb8u+p6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsk619daI2ZWV+wKY0FMg3cXkwFMB8GA1UdIwQY MBaAFESDMYUbNVnTzIKZ9rAg7zeOLksEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAt YTA0NzgxNmQ2MjgzLzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAtYTA0NzgxNmQ2Mjgz LzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCas9Hhc LikqQ4GmRkM/tuTQBjOG+rshKQY2FI/y+D2yypgjVcQc0A39yv+M8IXY70VPztXm QDnAnjr/JbT/GIdI/yg5SB2dRrFFct/RvJEvHlEkEU/jIhaaqf0NqLcIfoGcUO7v 8CTKBK8G9wCIpavgi0iDG3/zMsYj+PjoTpQHhhrqDamHnwsQ/p5G7dQ+5FqaczIm zmVXfpuvAAIZCHil/3KbPYrWvRQ1Qq7zRN5Lf17KZwJAyWvodIve47jmLxeRWA9B 0gHoILK+rBzPbyFEmG9yGXJhbaSEFYprFn7G+71UodNX6AIwCZd61YvLgkZjD0wm yWezYrLYse0l8g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:24 2025 by rpki-client