This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft File: imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json) Hash identifier: lWa7g4SdGjJRFLiGkwOJ2lvZ3sQfxY3XBNscGjoQvz8= Subject key identifier: 5F:42:A8:CE:C5:17:10:97:06:37:A5:84:38:75:51:1D:80:28:7A:EB Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D Certificate issuer: /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d Certificate serial: 019AF27679D23193317FF5D4E67243D7E478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: /q29o3dyTuQPm2loLyJCKRU4K/K4VxeseY4USjlxaOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:79:d2:31:93:31:7f:f5:d4:e6:72:43:d7:e4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=5f42a8cec51710970637a5843875511d80287aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:92:52:39:fd:ae:b3:28:ed:19:d2:98:62: fb:21:10:36:1c:06:2b:c0:73:7f:d7:9c:0a:be:40: 09:79:e7:92:e3:20:15:fd:ef:e9:da:00:4b:10:a6: 5f:ee:d0:3c:d9:b0:e1:ee:b3:cb:7f:93:c2:06:96: 1d:58:69:f5:ef:1c:07:04:be:64:f2:f2:e9:65:21: 47:6a:6a:e5:d7:e7:28:e9:78:e1:c0:91:ef:bf:77: 41:f0:21:2a:8c:bd:8a:dc:2f:aa:5e:bd:8a:00:98: f3:cc:a5:14:bc:3d:a4:e6:b8:08:8c:d7:26:3b:d0: 3d:f3:28:9e:c5:10:cd:c5:3f:47:8d:ba:5e:0a:ac: 67:b5:27:c6:91:94:d8:92:ce:e6:06:d6:ee:97:5a: fa:db:0a:ef:a4:bc:dd:db:0b:7f:50:ab:86:9f:db: 07:fe:cd:c6:b5:99:b9:38:28:d2:48:61:21:23:1a: 57:e7:9d:86:97:28:c3:c3:c2:2a:b7:cb:2a:a8:ef: 65:c3:86:18:35:7e:42:dd:59:ab:9c:c9:66:e3:11: 14:91:f1:3e:25:f5:b1:90:94:b9:72:09:07:ed:86: 97:c2:5c:f6:ec:ff:b8:87:22:82:06:23:5e:69:91: 46:7c:6c:bb:fb:86:b4:81:02:ee:66:a0:1a:c1:3a: d7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:42:A8:CE:C5:17:10:97:06:37:A5:84:38:75:51:1D:80:28:7A:EB X509v3 Authority Key Identifier: keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f9:84:57:e0:62:1f:90:b6:f7:c3:94:cd:91:0a:d6:f8:c8: 22:f7:42:de:0f:40:59:c1:9f:cd:98:d6:af:f7:b6:1c:9a:70: 66:52:1f:53:9a:f8:5f:6c:be:3f:8d:f5:13:7e:fb:71:9b:cb: 47:6e:24:c7:33:15:f7:c4:0c:9f:d5:97:64:cc:3b:2e:d9:e8: 6b:4d:d8:09:14:ac:7a:bd:97:0d:2c:60:95:bb:05:b2:1f:7a: ce:4c:89:db:fe:cb:dc:ef:02:8b:b2:0e:f1:cb:5a:4b:46:cc: 66:fc:2c:8d:7a:8a:93:f8:72:67:c4:64:19:c2:16:a6:77:ce: ff:5d:5b:9c:d4:32:03:22:9b:00:a2:fd:02:cf:ea:24:e5:1c: 4c:27:d3:21:2f:0d:6b:3f:bb:fd:a2:ce:f6:79:f3:af:fd:11: f8:7c:5d:b7:1f:e9:ec:e2:1d:0c:3f:48:33:49:fe:96:3d:41: 26:b8:80:e0:5b:2a:7a:da:30:be:81:0a:40:4e:e5:64:08:c0: 3b:22:e1:07:38:32:e4:1e:17:15:5b:f1:b9:34:00:8c:4e:ea: c5:c3:5d:50:31:35:23:74:18:17:e8:dd:c1:3e:7e:f1:73:05: f5:b1:c5:50:0d:2d:f3:8e:7f:6f:99:eb:39:6a:50:30:e5:4f: 8d:02:f2:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnnSMZMxf/XU5nJD1+R4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNmEzNDExNTgzZTI2MTQzMzQ5MmU1MDQ3Y2YzMWM0NmMz ZDJjMWQwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD Eyg1ZjQyYThjZWM1MTcxMDk3MDYzN2E1ODQzODc1NTExZDgwMjg3YWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA056SUjn9rrMo7RnSmGL7IRA2HAYr wHN/15wKvkAJeeeS4yAV/e/p2gBLEKZf7tA82bDh7rPLf5PCBpYdWGn17xwHBL5k 8vLpZSFHamrl1+co6XjhwJHvv3dB8CEqjL2K3C+qXr2KAJjzzKUUvD2k5rgIjNcm O9A98yiexRDNxT9HjbpeCqxntSfGkZTYks7mBtbul1r62wrvpLzd2wt/UKuGn9sH /s3GtZm5OCjSSGEhIxpX552GlyjDw8Iqt8sqqO9lw4YYNX5C3VmrnMlm4xEUkfE+ JfWxkJS5cgkH7YaXwlz27P+4hyKCBiNeaZFGfGy7+4a0gQLuZqAawTrXCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9CqM7FFxCXBjelhDh1UR2AKHrrMB8GA1UdIwQY MBaAFIpqNBFYPiYUM0kuUEfPMcRsPSwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yODI5NzQtMzdmYi00ZDg1LTkyYmYt NzA5OGE3YTUyYzdlLzEvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yODI5NzQtMzdmYi00ZDg1LTkyYmYtNzA5OGE3YTUyYzdl LzEvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfmEV+Bi H5C298OUzZEK1vjIIvdC3g9AWcGfzZjWr/e2HJpwZlIfU5r4X2y+P431E377cZvL R24kxzMV98QMn9WXZMw7Ltnoa03YCRSser2XDSxglbsFsh96zkyJ2/7L3O8Ci7IO 8ctaS0bMZvwsjXqKk/hyZ8RkGcIWpnfO/11bnNQyAyKbAKL9As/qJOUcTCfTIS8N az+7/aLO9nnzr/0R+Hxdtx/p7OIdDD9IM0n+lj1BJriA4FsqetowvoEKQE7lZAjA OyLhBzgy5B4XFVvxuTQAjE7qxcNdUDE1I3QYF+jdwT5+8XMF9bHFUA0t845/b5nr OWpQMOVPjQLysQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:59 2025 by rpki-client