This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json) Hash identifier: qEBeTWpRpSNEmIOkE/JXJ3rzOPG2Fdzc0kirG4uU+NA= Subject key identifier: F3:25:7D:AB:68:65:8D:93:CA:2D:7B:66:3B:BF:42:62:80:3C:0D:7F Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40 Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040 Certificate serial: 019AF19B1D70F549E47FDF5CA4B4BCAF7720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:05 +0000 Manifest this update: Sat 06 Dec 2025 03:01:05 +0000 Manifest next update: Sun 07 Dec 2025 03:01:05 +0000 Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: 688W1pk474+7m5ZeaVwzrM7vxM7mINqANNbujyDphY4=) 2: xXvpynv9RLlNuhH_ScFehFzRtz4.roa (hash: QSdQRW1EuXcu0ntbVvgh9fj5LXlqpMEhY2XBCGX6qp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1d:70:f5:49:e4:7f:df:5c:a4:b4:bc:af:77:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040 Validity Not Before: Dec 6 03:01:05 2025 GMT Not After : Dec 7 03:01:05 2025 GMT Subject: CN=f3257dab68658d93ca2d7b663bbf4262803c0d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:39:c4:13:7e:d0:2c:3c:f9:57:34:d5:81: c3:71:74:56:56:ce:4f:a4:26:2a:56:2e:f9:72:48: ca:88:c1:f4:d2:ee:22:7a:ff:9d:10:b3:ee:e0:d8: 60:8a:d1:33:5f:64:49:e3:99:49:e3:fd:a2:79:4d: 8d:9d:c9:8b:fc:25:6c:12:03:30:02:29:05:54:c5: 22:96:63:d0:36:80:f6:0a:ae:89:bc:1e:38:fa:73: 24:15:76:85:b8:be:ea:a4:15:fa:4d:3e:d4:85:14: b1:3c:6e:26:9b:dc:9b:47:c9:e3:86:ae:2c:1c:e4: 33:6c:9d:e9:17:ad:95:24:24:75:50:1e:0d:1b:36: 55:4f:0a:76:85:6c:d5:d4:5c:c5:8e:29:ef:8e:76: 40:0f:19:40:f9:05:45:91:c1:39:0a:0e:6f:32:34: b6:8c:e5:ac:93:84:66:92:b7:81:ac:fd:03:c1:13: 97:ee:5a:c6:0a:e2:28:fd:88:9b:69:9a:51:67:05: 47:b5:c1:6a:b7:76:b0:e2:72:78:56:08:4e:20:a1: d9:71:fc:39:2e:fe:55:94:35:ce:50:cc:5e:aa:38: 75:84:8a:0d:9f:2e:cf:c3:15:a0:28:e0:97:21:8b: 1e:f4:f2:6e:6b:b6:71:e1:ce:70:22:3e:cc:f8:39: 57:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:25:7D:AB:68:65:8D:93:CA:2D:7B:66:3B:BF:42:62:80:3C:0D:7F X509v3 Authority Key Identifier: keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6b:cd:c4:95:d6:d0:f7:89:3a:21:d0:ce:ac:66:b2:a8:6a: fd:da:ec:17:a2:a4:37:24:17:40:0e:3e:60:1e:87:4b:03:b6: 82:a3:60:be:d5:d5:0e:d6:74:4d:2c:12:e6:04:2f:03:db:64: e9:93:62:b7:5b:9c:ef:d9:1b:ac:65:12:0a:ae:6b:4d:4e:5f: 99:b4:16:e2:d3:ca:9b:12:62:36:ab:ee:db:bd:ba:2d:e0:47: 6b:a5:ef:7b:00:91:22:de:6a:99:60:1d:24:6e:1e:be:ab:3e: 99:43:3a:6f:89:6e:c1:31:08:04:e5:c8:ba:3a:5f:19:cf:ae: e0:7b:1d:18:7c:fc:b8:26:9a:7a:d3:93:4d:74:08:b3:fd:c8: bb:6e:00:82:a8:c0:f7:8e:d7:7d:01:d2:5a:86:09:64:e7:0f: 9a:0b:8a:84:58:5b:0b:23:7c:70:f8:86:57:73:7f:4f:f3:e7: 47:40:b7:6c:f5:8c:d9:0b:32:3b:22:71:cb:8f:24:9a:16:b1: 4a:dd:50:40:87:36:01:b7:23:2f:0e:e7:ea:61:55:05:46:94: 8c:66:f9:99:db:8c:1e:58:9c:eb:5e:a9:45:c7:f1:4e:da:e5: 5d:6c:68:f9:b5:27:53:01:ff:54:2b:84:73:0b:62:3d:77:89: 6e:2b:42:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmx1w9Unkf99cpLS8r3cgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjk1YjNhYmExZWE0ZTY1NDc4OGM1MTY0MTQ1OGNjOTk1 NzgwNDAwHhcNMjUxMjA2MDMwMTA1WhcNMjUxMjA3MDMwMTA1WjAzMTEwLwYDVQQD EyhmMzI1N2RhYjY4NjU4ZDkzY2EyZDdiNjYzYmJmNDI2MjgwM2MwZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsQ5xBN+0Cw8+Vc01YHDcXRWVs5P pCYqVi75ckjKiMH00u4iev+dELPu4NhgitEzX2RJ45lJ4/2ieU2NncmL/CVsEgMw AikFVMUilmPQNoD2Cq6JvB44+nMkFXaFuL7qpBX6TT7UhRSxPG4mm9ybR8njhq4s HOQzbJ3pF62VJCR1UB4NGzZVTwp2hWzV1FzFjinvjnZADxlA+QVFkcE5Cg5vMjS2 jOWsk4RmkreBrP0DwROX7lrGCuIo/YibaZpRZwVHtcFqt3aw4nJ4VghOIKHZcfw5 Lv5VlDXOUMxeqjh1hIoNny7PwxWgKOCXIYse9PJua7Zx4c5wIj7M+DlXXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMlfatoZY2Tyi17Zju/QmKAPA1/MB8GA1UdIwQY MBaAFIppWzq6HqTmVHiMUWQUWMyZV4BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1sYk9yb2VwT1pVZUl4UlpCUll6SmxYZ0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81MzgxOTQtNzU2MC00NDU2LWI0NWMt Y2EyNmMyMmNmYWZkLzEvaW1sYk9yb2VwT1pVZUl4UlpCUll6SmxYZ0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81MzgxOTQtNzU2MC00NDU2LWI0NWMtY2EyNmMyMmNmYWZk LzEvaW1sYk9yb2VwT1pVZUl4UlpCUll6SmxYZ0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2vNxJXW 0PeJOiHQzqxmsqhq/drsF6KkNyQXQA4+YB6HSwO2gqNgvtXVDtZ0TSwS5gQvA9tk 6ZNit1uc79kbrGUSCq5rTU5fmbQW4tPKmxJiNqvu2726LeBHa6XvewCRIt5qmWAd JG4evqs+mUM6b4luwTEIBOXIujpfGc+u4HsdGHz8uCaaetOTTXQIs/3Iu24AgqjA 947XfQHSWoYJZOcPmguKhFhbCyN8cPiGV3N/T/PnR0C3bPWM2QsyOyJxy48kmhax St1QQIc2AbcjLw7n6mFVBUaUjGb5mduMHlic616pRcfxTtrlXWxo+bUnUwH/VCuE cwtiPXeJbitCwg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:41 2025 by rpki-client