This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json) Hash identifier: 0kW+bLDAP8vnX51jBgsMJszpNegarhla7SJIc+VEkUs= Subject key identifier: 66:49:6E:1D:E8:D4:BA:5E:FF:AB:A3:8C:E2:BB:5C:9F:A5:35:F8:91 Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d Certificate serial: 019B2D0B8CA72ABFD58576E498AEDAC7004A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft Manifest number: 08CB Signing time: Wed 17 Dec 2025 16:01:30 +0000 Manifest this update: Wed 17 Dec 2025 16:01:30 +0000 Manifest next update: Thu 18 Dec 2025 16:01:30 +0000 Files and hashes: 1: HWWs6MqFS2nmbLw3ShctihMbNaY.roa (hash: KSXNNa9oIp9r32J4311J0aN03+Peflc2SZu+HPxriyM=) 2: QUH08L51MfImU-aeLB1gViX82cI.roa (hash: YfmDCd25c+HZBRwpm39HGU+G/47jVrQR3XrIyRY2J8U=) 3: b81h_NWwhKjMbH2-sUXyjP4n64s.roa (hash: e3T+4A186w/5PvOch5tYGnvLHtBctNKp6kP6+X8+j/w=) 4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: Ilr6eqGk21CvFM035SN9KvaPzZjr1j0J8uJZMv+fI5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:8c:a7:2a:bf:d5:85:76:e4:98:ae:da:c7:00:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d Validity Not Before: Dec 17 16:01:30 2025 GMT Not After : Dec 18 16:01:30 2025 GMT Subject: CN=66496e1de8d4ba5effaba38ce2bb5c9fa535f891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:82:ed:15:06:92:7e:b5:9e:51:42:f7:5c: ff:36:e5:e6:7c:83:b6:02:97:27:03:ad:5d:69:38: 00:98:e1:e0:a8:f0:75:9c:fc:11:28:e9:90:3f:e4: 3a:52:68:17:4d:4e:7f:d6:27:0a:cc:57:4c:1c:24: 63:1f:e2:b6:88:65:10:4c:e3:54:f4:ea:f5:8f:26: 3b:6f:47:c2:74:f4:31:fc:2a:b6:ca:2c:38:3a:b4: 6b:0c:91:85:20:b9:16:88:ae:bb:68:34:8b:24:31: c2:e0:65:ea:c3:c5:da:9c:4d:7d:89:8b:7e:4b:c4: 41:76:ba:3b:10:d6:50:a6:da:6f:e9:25:91:9a:04: d8:38:3b:28:e7:d1:fe:15:2b:68:c6:3c:70:69:a0: 16:be:6d:37:bc:3d:96:57:37:80:87:27:cc:0f:a7: af:ca:87:8b:5e:fc:78:12:df:8f:53:07:9e:ef:65: 13:5a:ad:fe:68:0b:b8:7d:ce:be:43:ac:13:6d:d0: 14:ef:d8:b9:27:53:aa:08:aa:f7:5f:b1:4a:9d:1a: 09:c0:b1:af:65:a5:0c:84:e7:98:59:38:a9:10:bd: 3f:19:87:dc:2e:9b:7a:db:cc:99:26:19:14:c6:b0: c2:c5:9b:74:67:69:10:f7:b8:a9:59:81:57:db:c0: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:49:6E:1D:E8:D4:BA:5E:FF:AB:A3:8C:E2:BB:5C:9F:A5:35:F8:91 X509v3 Authority Key Identifier: keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ae:ac:19:fb:15:94:5e:6f:7f:b7:54:ad:ac:f0:a1:93:9e: 97:2d:47:f9:c1:9f:01:d7:6b:00:8b:e0:af:93:1e:e0:1e:45: 02:38:71:20:15:31:25:42:7b:de:fd:a0:8a:fd:6c:d7:73:91: 62:e1:8d:5c:1a:e0:59:af:ab:36:0d:87:09:36:83:46:b7:e3: 08:83:34:8c:df:3e:a6:e0:fb:b2:1b:9a:a9:fb:2a:58:8d:e3: 93:7f:1b:e1:52:5d:c9:6f:ca:ab:2e:e6:14:03:75:31:2a:e4: 45:b4:cd:47:25:59:9a:9a:ad:7f:27:df:c2:d3:1b:fe:fc:e2: d7:68:62:c9:6d:18:cd:e2:e6:04:57:da:72:9a:92:9e:e0:3d: b0:86:a7:50:9b:ef:9f:b8:2f:63:eb:04:7e:1a:d1:fe:f0:da: 58:37:67:aa:41:5d:d4:41:f0:bd:c7:e4:60:bf:4f:ed:03:65: ae:aa:4f:98:86:bf:48:83:05:d7:ff:2c:6a:88:80:ba:01:39: 42:52:02:1a:42:50:00:d1:00:a6:a7:98:3f:d9:1d:24:48:84: bb:e8:6d:10:a8:ca:74:ef:a0:b4:52:ee:f7:60:cc:1a:d6:69: c4:af:a8:e0:ef:1a:7d:43:db:13:24:0b:10:47:47:83:d2:af: 33:70:4f:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC4ynKr/VhXbkmK7axwBKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjODlhZjYwOTg2ZTZkOTU4MzIyZmIwMjZjNmI2NWFlZWM5 NDlhMGQwHhcNMjUxMjE3MTYwMTMwWhcNMjUxMjE4MTYwMTMwWjAzMTEwLwYDVQQD Eyg2NjQ5NmUxZGU4ZDRiYTVlZmZhYmEzOGNlMmJiNWM5ZmE1MzVmODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYaC7RUGkn61nlFC91z/NuXmfIO2 ApcnA61daTgAmOHgqPB1nPwRKOmQP+Q6UmgXTU5/1icKzFdMHCRjH+K2iGUQTONU 9Or1jyY7b0fCdPQx/Cq2yiw4OrRrDJGFILkWiK67aDSLJDHC4GXqw8XanE19iYt+ S8RBdro7ENZQptpv6SWRmgTYODso59H+FStoxjxwaaAWvm03vD2WVzeAhyfMD6ev yoeLXvx4Et+PUwee72UTWq3+aAu4fc6+Q6wTbdAU79i5J1OqCKr3X7FKnRoJwLGv ZaUMhOeYWTipEL0/GYfcLpt628yZJhkUxrDCxZt0Z2kQ97ipWYFX28BxMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZJbh3o1Lpe/6ujjOK7XJ+lNfiRMB8GA1UdIwQY MBaAFKyJr2CYbm2VgyL7AmxrZa7slJoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTIt OWM4YmJhNjY0ZmYwLzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTItOWM4YmJhNjY0ZmYw LzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf66sGfsV lF5vf7dUrazwoZOely1H+cGfAddrAIvgr5Me4B5FAjhxIBUxJUJ73v2giv1s13OR YuGNXBrgWa+rNg2HCTaDRrfjCIM0jN8+puD7shuaqfsqWI3jk38b4VJdyW/Kqy7m FAN1MSrkRbTNRyVZmpqtfyffwtMb/vzi12hiyW0YzeLmBFfacpqSnuA9sIanUJvv n7gvY+sEfhrR/vDaWDdnqkFd1EHwvcfkYL9P7QNlrqpPmIa/SIMF1/8saoiAugE5 QlICGkJQANEApqeYP9kdJEiEu+htEKjKdO+gtFLu92DMGtZpxK+o4O8afUPbEyQL EEdHg9KvM3BPYg== -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:48 2025 by rpki-client