This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json) Hash identifier: azvmDHftU0nuJtyc5A6a5SDlwRjNB4NmH0vspKu45qM= Subject key identifier: 32:25:7B:BD:9C:56:42:03:DD:AE:4A:1C:F7:27:A7:7D:D5:86:81:D9 Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6 Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6 Certificate serial: 019AF31CC250F875DE26D6686A95072F8A4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft Manifest number: 0391 Signing time: Sat 06 Dec 2025 10:02:19 +0000 Manifest this update: Sat 06 Dec 2025 10:02:19 +0000 Manifest next update: Sun 07 Dec 2025 10:02:19 +0000 Files and hashes: 1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=) 2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: V7D5uHIRDYTcZ7cZDyEFhyWorez1UzRVyDgbJZZ5I3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c2:50:f8:75:de:26:d6:68:6a:95:07:2f:8a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6 Validity Not Before: Dec 6 10:02:19 2025 GMT Not After : Dec 7 10:02:19 2025 GMT Subject: CN=32257bbd9c564203ddae4a1cf727a77dd58681d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:c0:05:b3:2f:5d:f4:cd:5d:09:99:e5:b1: 57:0c:e1:ed:70:e6:5a:dc:45:49:4f:a9:aa:d2:3b: 08:ce:fe:41:6d:fc:08:4e:05:a6:ed:75:66:4f:37: 40:f6:23:62:33:0c:37:14:fa:cd:b7:32:f0:81:ee: 3e:84:11:de:ae:6f:6a:de:b5:00:7f:6e:2e:bc:c2: 45:78:34:20:64:13:cd:40:f3:8a:b5:cd:47:85:31: 1c:02:55:e2:14:f9:62:cc:83:6e:84:49:5a:5d:af: 84:d5:12:25:29:7b:c0:f3:36:df:54:e9:22:2d:f6: d6:a6:5b:2f:a5:ce:03:7b:4c:c9:cb:38:9f:87:f8: 3b:d2:83:18:b2:78:79:51:8c:b4:0f:03:9a:36:59: dc:fc:aa:23:05:69:ac:7d:cf:37:52:4b:6e:f6:96: 20:ef:4d:d6:62:b1:8a:07:76:d4:af:a7:86:ae:91: 35:8d:99:18:64:4c:7f:26:4e:42:3e:9a:01:92:2a: 3c:ba:d4:c8:54:53:91:fb:fa:da:9a:7c:f6:1e:2d: 56:d6:de:38:fd:f3:c9:d7:dc:3e:7c:73:48:72:49: ee:6e:b9:bb:fa:19:a0:6f:27:1e:5a:2d:d0:4c:13: 91:47:c4:8e:6c:bf:01:d6:fb:18:32:3a:02:43:2a: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:25:7B:BD:9C:56:42:03:DD:AE:4A:1C:F7:27:A7:7D:D5:86:81:D9 X509v3 Authority Key Identifier: keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:02:5e:ef:83:f0:bb:c8:7d:92:07:d7:33:00:cc:1e:70:9d: 2a:ce:ab:18:80:d5:8a:f6:53:22:3e:e3:7a:2f:39:00:b0:3f: a9:17:b8:3d:51:37:7f:f3:a2:46:35:ea:81:8a:76:63:70:55: 25:05:28:e4:08:de:f1:66:61:37:41:8a:30:b7:51:3d:6f:c8: de:ab:33:d9:13:b8:7b:96:6c:b9:f1:50:00:7c:26:2c:b0:31: d9:c4:b5:2d:c5:34:89:86:98:10:5e:80:ec:2e:c5:8a:b6:9c: 4f:bf:5e:9b:eb:d1:da:95:d1:1e:39:0f:b6:35:4f:b0:60:0d: 35:49:ec:a8:73:16:b0:e7:e0:42:f2:eb:ee:4a:c7:a6:c6:f9: 32:4c:fa:6f:5e:3c:c2:99:3a:57:39:25:6e:a7:f2:ab:c8:dc: 45:f8:ab:6c:d5:8f:21:30:70:ac:00:cc:77:a2:d8:52:b0:23: 1d:14:c0:a8:1b:be:bf:10:93:e3:df:c0:36:5f:e0:ab:ff:8f: aa:a0:35:96:51:5b:c7:e6:ab:6f:50:f4:9c:f9:fa:cd:9b:fd: 32:3e:b7:c9:87:17:27:e1:f8:7d:fb:78:d6:29:f3:15:67:03: 8b:46:e5:51:6c:f7:45:5b:38:63:ca:d9:f0:33:48:cb:bf:d7: 18:44:01:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMJQ+HXeJtZoapUHL4pNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5 Y2RmYjYwHhcNMjUxMjA2MTAwMjE5WhcNMjUxMjA3MTAwMjE5WjAzMTEwLwYDVQQD EygzMjI1N2JiZDljNTY0MjAzZGRhZTRhMWNmNzI3YTc3ZGQ1ODY4MWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtunABbMvXfTNXQmZ5bFXDOHtcOZa 3EVJT6mq0jsIzv5BbfwITgWm7XVmTzdA9iNiMww3FPrNtzLwge4+hBHerm9q3rUA f24uvMJFeDQgZBPNQPOKtc1HhTEcAlXiFPlizINuhElaXa+E1RIlKXvA8zbfVOki LfbWplsvpc4De0zJyzifh/g70oMYsnh5UYy0DwOaNlnc/KojBWmsfc83Uktu9pYg 703WYrGKB3bUr6eGrpE1jZkYZEx/Jk5CPpoBkio8utTIVFOR+/ramnz2Hi1W1t44 /fPJ19w+fHNIcknubrm7+hmgbyceWi3QTBORR8SObL8B1vsYMjoCQyr9kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIle72cVkID3a5KHPcnp33VhoHZMB8GA1UdIwQY MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwJe74Pw u8h9kgfXMwDMHnCdKs6rGIDVivZTIj7jei85ALA/qRe4PVE3f/OiRjXqgYp2Y3BV JQUo5Aje8WZhN0GKMLdRPW/I3qsz2RO4e5ZsufFQAHwmLLAx2cS1LcU0iYaYEF6A 7C7FiracT79em+vR2pXRHjkPtjVPsGANNUnsqHMWsOfgQvLr7krHpsb5Mkz6b148 wpk6Vzklbqfyq8jcRfirbNWPITBwrADMd6LYUrAjHRTAqBu+vxCT49/ANl/gq/+P qqA1llFbx+arb1D0nPn6zZv9Mj63yYcXJ+H4fft41inzFWcDi0blUWz3RVs4Y8rZ 8DNIy7/XGEQBVA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:03:38 2025 by rpki-client