This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json) Hash identifier: ytbG8rPahQJR+1WckPi4dIOmvSQsppbEazXtc/tDvXw= Subject key identifier: 44:29:B3:5E:09:2F:9B:DD:6A:C3:F7:73:58:F3:8A:2B:BD:21:01:D6 Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7 Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7 Certificate serial: 019AF42E7B8D5A257BF0426A29EAFAC64C8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft Manifest number: 1089 Signing time: Sat 06 Dec 2025 15:01:18 +0000 Manifest this update: Sat 06 Dec 2025 15:01:18 +0000 Manifest next update: Sun 07 Dec 2025 15:01:18 +0000 Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: 7i3GVCi3a5txAK+TnieSbU5gXXA8ircFZU9KH37yMlI=) 2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=) 3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=) 4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:7b:8d:5a:25:7b:f0:42:6a:29:ea:fa:c6:4c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7 Validity Not Before: Dec 6 15:01:18 2025 GMT Not After : Dec 7 15:01:18 2025 GMT Subject: CN=4429b35e092f9bdd6ac3f77358f38a2bbd2101d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:1c:64:6b:be:7a:7a:42:67:db:13:31:4a: b1:f5:f5:c9:b6:44:19:e5:d7:e9:ca:76:70:9f:a3: b6:de:1c:19:21:df:f0:d8:1e:9e:17:fa:83:10:8e: d0:88:d8:04:03:29:de:0c:41:e8:9d:c1:25:53:d9: d8:1f:e6:b5:8c:22:00:3e:31:11:4e:4f:ce:9f:ad: da:10:53:02:7e:1b:bb:a9:d0:8b:a4:67:92:ec:ed: 8d:56:22:28:a8:1c:9f:85:a6:d5:02:68:01:25:77: 5a:cb:b3:79:9d:84:7d:ca:af:c9:fb:36:4c:a9:5d: 75:7a:14:b9:32:d8:d8:c7:84:63:8b:fb:f9:43:59: 6a:c0:5e:31:08:e3:cb:49:d5:1f:63:a8:71:97:d7: cb:5f:2c:15:05:23:db:bd:83:ac:7b:96:35:74:3c: 78:84:11:76:5e:24:6b:87:89:21:1f:b4:19:fa:ec: d8:31:10:45:82:21:46:04:73:47:99:8a:c8:c2:4c: b2:25:50:11:90:f7:6c:0f:17:94:6c:65:a7:45:b1: 37:eb:f6:ec:57:a0:8d:e7:c1:6b:f1:89:1c:6c:69: 5c:6d:3c:ab:29:e9:b7:47:a7:32:6b:f1:6e:d5:96: d8:e3:c9:fa:93:47:e3:37:b5:3c:71:ce:8a:a4:7b: 36:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:29:B3:5E:09:2F:9B:DD:6A:C3:F7:73:58:F3:8A:2B:BD:21:01:D6 X509v3 Authority Key Identifier: keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ef:f8:a9:1f:82:6d:fe:3e:2d:e2:02:21:43:67:5a:94:b6: 3a:ee:c0:44:16:c6:fc:e1:a4:ff:84:e0:3e:d5:e2:46:ac:04: 1c:35:c5:df:a8:25:e7:0e:bf:47:91:44:4c:cc:70:53:04:11: 4a:05:ed:52:fa:4f:a0:80:ac:62:03:32:1b:48:2d:26:7d:bf: 67:6a:83:b4:4d:6f:7d:25:49:ea:25:f8:f4:ca:67:83:7c:f9: 95:51:29:73:c5:f3:e8:08:7d:e0:b1:26:7d:6f:91:9c:d6:7f: e3:d6:46:e7:54:82:a5:42:4e:23:2b:68:ea:4d:c1:8e:97:af: 90:62:a5:7f:8e:02:5a:4b:4a:85:15:a9:c3:3c:1e:cb:e8:8e: c2:6b:3e:12:85:5d:63:b8:8c:c4:1c:d4:d2:b9:ea:9c:cd:be: 2c:8f:15:e9:9f:96:38:71:79:77:7b:e6:42:ed:81:2a:e4:62: 3b:ce:01:5d:2a:97:b3:e1:97:4f:ac:9e:c3:48:62:ba:f0:73: 63:53:0e:8b:eb:ba:9e:d8:ce:6c:e2:ae:ed:bb:c3:59:48:84: f4:e3:41:f8:ae:ce:9b:cb:93:b8:18:d8:e6:20:a1:a9:f0:8f: 88:36:ad:97:29:35:f2:df:85:2b:93:40:83:41:4f:29:64:fa: cc:b2:e5:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LnuNWiV78EJqKer6xkyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy MmFjZTcwHhcNMjUxMjA2MTUwMTE4WhcNMjUxMjA3MTUwMTE4WjAzMTEwLwYDVQQD Eyg0NDI5YjM1ZTA5MmY5YmRkNmFjM2Y3NzM1OGYzOGEyYmJkMjEwMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNYcZGu+enpCZ9sTMUqx9fXJtkQZ 5dfpynZwn6O23hwZId/w2B6eF/qDEI7QiNgEAyneDEHoncElU9nYH+a1jCIAPjER Tk/On63aEFMCfhu7qdCLpGeS7O2NViIoqByfhabVAmgBJXday7N5nYR9yq/J+zZM qV11ehS5MtjYx4Rji/v5Q1lqwF4xCOPLSdUfY6hxl9fLXywVBSPbvYOse5Y1dDx4 hBF2XiRrh4khH7QZ+uzYMRBFgiFGBHNHmYrIwkyyJVARkPdsDxeUbGWnRbE36/bs V6CN58Fr8YkcbGlcbTyrKem3R6cya/Fu1ZbY48n6k0fjN7U8cc6KpHs2UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQps14JL5vdasP3c1jziiu9IQHWMB8GA1UdIwQY MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAku/4qR+C bf4+LeICIUNnWpS2Ou7ARBbG/OGk/4TgPtXiRqwEHDXF36gl5w6/R5FETMxwUwQR SgXtUvpPoICsYgMyG0gtJn2/Z2qDtE1vfSVJ6iX49Mpng3z5lVEpc8Xz6Ah94LEm fW+RnNZ/49ZG51SCpUJOIyto6k3BjpevkGKlf44CWktKhRWpwzwey+iOwms+EoVd Y7iMxBzU0rnqnM2+LI8V6Z+WOHF5d3vmQu2BKuRiO84BXSqXs+GXT6yew0hiuvBz Y1MOi+u6ntjObOKu7bvDWUiE9ONB+K7Om8uTuBjY5iChqfCPiDatlyk18t+FK5NA g0FPKWT6zLLl9w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:51 2025 by rpki-client