This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft File: IMotTLPla10plwqX_GResv1odqE.mft (raw, json) Hash identifier: lnZa7Syi6Lewm1LgFt1YzPCM7XlkWytaYQg6nXEMn8U= Subject key identifier: 43:79:0A:EC:E7:79:7B:9F:4F:0D:F4:E4:A5:06:DE:9B:C4:5B:56:E0 Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1 Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1 Certificate serial: 019B2EF968CC4CF7DFB5C8EACDD1250F3934 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft Manifest number: 14B4 Signing time: Thu 18 Dec 2025 01:00:55 +0000 Manifest this update: Thu 18 Dec 2025 01:00:55 +0000 Manifest next update: Fri 19 Dec 2025 01:00:55 +0000 Files and hashes: 1: IMotTLPla10plwqX_GResv1odqE.crl (hash: 2b5d/odYKDZ8+3+lRpExREf3rSX9m36rRly1iUVs1BY=) 2: PrisiX9cIn99AliDWgpNGUfmj_8.roa (hash: rN8Y2pR83WML1BI+RzSSfaDf/yYr4j471dxo3B4dyzY=) 3: bSEsv80VTIqhxykqIB8M44nU7N8.roa (hash: Ooz65LuwKjo+iPeOY+Zh+YXr8ijMf6WnGg7hpdHzR2I=) 4: mDAtJGSElDm2O92EFy5g2Ab4svc.roa (hash: 06wyeaq77omoVi1U61nSXVnjJJye2vIP4bDLXfzxENg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:68:cc:4c:f7:df:b5:c8:ea:cd:d1:25:0f:39:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1 Validity Not Before: Dec 18 01:00:55 2025 GMT Not After : Dec 19 01:00:55 2025 GMT Subject: CN=43790aece7797b9f4f0df4e4a506de9bc45b56e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ec:4c:67:94:a4:48:cb:db:af:77:e4:64:14: b4:0e:23:90:09:cd:c5:c1:a0:28:c6:51:fd:3b:02: be:82:55:f1:7c:ba:93:ed:76:2f:df:9b:4a:54:fd: d3:73:52:d6:d4:7d:64:ab:c0:6f:6d:fd:81:c7:3f: 56:65:2d:91:29:b5:dc:64:6c:04:55:0a:74:4d:21: f3:a9:57:bb:37:e3:74:56:c0:72:aa:fc:dd:4c:93: aa:d9:c5:75:88:56:7f:8f:17:03:76:5d:fa:46:77: 16:f0:47:b4:32:a6:ee:8b:be:a4:75:ca:47:0e:14: f1:e8:bc:ff:f9:b7:46:a4:5f:ec:14:6f:7d:96:3f: 76:10:90:73:2b:ae:5a:2a:25:b8:91:61:de:d0:01: 13:88:fc:00:1d:c9:94:10:52:6d:21:76:25:05:a1: 0d:47:d2:5a:de:14:ff:d8:da:fe:9b:ba:5c:ba:2e: 5a:fc:e7:ca:23:15:44:3d:54:ec:79:a9:b3:3a:ff: 21:25:ee:49:30:20:37:b9:e2:85:ab:8a:0d:30:0e: 09:c2:24:c3:cf:62:a0:50:09:8d:c2:ab:cd:d6:50: ed:40:c5:9e:53:a7:13:66:fe:a3:3f:34:78:62:17: 66:80:28:33:6d:4f:38:69:a9:15:71:07:a1:dd:95: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:79:0A:EC:E7:79:7B:9F:4F:0D:F4:E4:A5:06:DE:9B:C4:5B:56:E0 X509v3 Authority Key Identifier: keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:79:81:73:8e:89:38:71:dc:50:f4:38:03:fa:b5:18:98:16: b4:b6:03:57:34:1f:53:08:a6:5c:3b:e1:48:11:2a:2d:f5:c4: 29:17:59:e1:3e:d6:12:be:93:0a:be:84:53:99:b1:2a:99:a3: b2:c2:61:a8:03:2b:73:eb:9c:55:50:9a:1f:ea:6e:cd:ef:97: 75:1e:6e:8f:ff:6b:cd:f8:04:45:ef:45:b7:e2:4e:6d:82:ea: 5c:90:6a:46:02:39:1c:4a:5d:f9:04:93:46:80:a7:38:a6:b5: a5:f4:a9:5a:84:5b:23:0d:f4:7e:32:82:1c:b2:72:eb:ee:be: 46:74:15:0b:72:f9:af:c7:fa:dc:8c:39:58:0b:2d:b0:27:94: 81:69:52:57:39:24:90:1a:06:24:55:86:7c:2a:b9:a2:96:43: db:8c:d0:69:91:ab:ec:4f:3c:92:e1:bb:d2:65:50:76:95:16: 6c:89:d9:03:37:75:48:bd:c4:14:75:d9:d4:2e:a2:80:65:8e: 77:ce:74:05:dc:f8:54:d4:34:57:58:22:65:3c:b0:56:d6:d0: b6:69:d6:57:8b:3a:5c:5e:a9:5e:dd:a8:4b:9b:88:d6:3e:d1: 24:ce:91:bc:3c:a1:32:71:76:e9:43:d5:f9:2f:ef:bb:bc:27: 13:f4:ce:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+WjMTPfftcjqzdElDzk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2 ODc2YTEwHhcNMjUxMjE4MDEwMDU1WhcNMjUxMjE5MDEwMDU1WjAzMTEwLwYDVQQD Eyg0Mzc5MGFlY2U3Nzk3YjlmNGYwZGY0ZTRhNTA2ZGU5YmM0NWI1NmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OxMZ5SkSMvbr3fkZBS0DiOQCc3F waAoxlH9OwK+glXxfLqT7XYv35tKVP3Tc1LW1H1kq8Bvbf2Bxz9WZS2RKbXcZGwE VQp0TSHzqVe7N+N0VsByqvzdTJOq2cV1iFZ/jxcDdl36RncW8Ee0Mqbui76kdcpH DhTx6Lz/+bdGpF/sFG99lj92EJBzK65aKiW4kWHe0AETiPwAHcmUEFJtIXYlBaEN R9Ja3hT/2Nr+m7pcui5a/OfKIxVEPVTseamzOv8hJe5JMCA3ueKFq4oNMA4JwiTD z2KgUAmNwqvN1lDtQMWeU6cTZv6jPzR4YhdmgCgzbU84aakVcQeh3ZWDEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEN5CuzneXufTw305KUG3pvEW1bgMB8GA1UdIwQY MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt ZWVjNDg4NWM0ZjhkLzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHmBc46J OHHcUPQ4A/q1GJgWtLYDVzQfUwimXDvhSBEqLfXEKRdZ4T7WEr6TCr6EU5mxKpmj ssJhqAMrc+ucVVCaH+puze+XdR5uj/9rzfgERe9Ft+JObYLqXJBqRgI5HEpd+QST RoCnOKa1pfSpWoRbIw30fjKCHLJy6+6+RnQVC3L5r8f63Iw5WAstsCeUgWlSVzkk kBoGJFWGfCq5opZD24zQaZGr7E88kuG70mVQdpUWbInZAzd1SL3EFHXZ1C6igGWO d850Bdz4VNQ0V1giZTywVtbQtmnWV4s6XF6pXt2oS5uI1j7RJM6RvDyhMnF26UPV +S/vu7wnE/TObQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:50:07 2025 by rpki-client