This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft File: ImidD5E9Kcxj1skmy0Yssn8YRAg.mft (raw, json) Hash identifier: B1t1D51+mvFTtHmfn3WWQncaHO/CPGJOpjgP1LSqur0= Subject key identifier: 72:0D:2B:5C:78:B4:40:45:F1:D3:90:17:E1:B1:6A:86:64:8B:D7:A0 Authority key identifier: 22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08 Certificate issuer: /CN=22689d0f913d29cc63d6c926cb462cb27f184408 Certificate serial: 019AF12CED878CDA3544921D1A162F0B971E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:00:44 +0000 Manifest this update: Sat 06 Dec 2025 01:00:44 +0000 Manifest next update: Sun 07 Dec 2025 01:00:44 +0000 Files and hashes: 1: ImidD5E9Kcxj1skmy0Yssn8YRAg.crl (hash: X4fpBFmsdz/3vIA80tUXF7GlpLOitN4/e/utDOsizLg=) 2: PnGxbbyenKRUkbRi2afvxfE-S9E.roa (hash: JW3Jf++XQ8LN1xPVRRNLBe2ZMK/kXqbkLdynsPQmUsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ed:87:8c:da:35:44:92:1d:1a:16:2f:0b:97:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22689d0f913d29cc63d6c926cb462cb27f184408 Validity Not Before: Dec 6 01:00:44 2025 GMT Not After : Dec 7 01:00:44 2025 GMT Subject: CN=720d2b5c78b44045f1d39017e1b16a86648bd7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f5:da:68:dd:0f:bb:13:89:62:07:9f:9d:71: fb:4a:02:05:07:f5:3e:cd:92:a8:ee:e7:0f:75:ec: b1:27:66:e2:f5:b4:75:83:f9:ae:26:3f:f6:76:8b: 0b:45:ef:66:ac:7e:e7:79:14:da:6b:ee:e7:41:29: 53:ae:61:fb:29:6b:72:c3:94:64:b2:c2:f7:fe:b3: 38:b4:44:dd:06:43:db:29:e5:08:7d:9a:9a:22:e2: c8:6d:b4:2e:67:f5:1e:4e:df:cb:e5:3a:2e:55:a2: dd:76:97:6f:d3:81:e3:b1:cb:f9:81:a3:a0:5c:c2: 67:fb:8d:cd:2e:0b:ca:45:2b:c8:a4:3e:d1:85:44: 23:f4:b5:95:17:20:bc:66:18:c7:93:97:e0:c8:06: 01:4b:4e:15:a8:c2:4b:3b:19:b1:a1:aa:d5:0d:6d: 57:b8:52:cd:57:f1:bd:2b:c0:29:c2:bc:b5:ac:90: 22:46:a4:2e:9f:f4:60:d4:d5:05:52:e0:4a:46:01: 76:25:d9:ac:a0:88:72:ed:d7:74:b3:3c:fc:f9:bc: ed:f1:ed:c2:5b:9a:e0:a4:ed:c1:c8:5c:55:4c:c5: 59:07:9c:77:c1:28:7a:cc:ea:9b:a0:28:06:e3:ba: 24:75:79:8a:71:e4:0a:9e:4e:68:e4:7c:97:3a:4f: 61:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0D:2B:5C:78:B4:40:45:F1:D3:90:17:E1:B1:6A:86:64:8B:D7:A0 X509v3 Authority Key Identifier: keyid:22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ee:ca:a0:4b:08:d8:65:9b:24:57:fe:fb:31:6e:19:1c:ad: 2f:30:4b:e3:d0:59:02:4d:8c:93:82:f7:44:3a:a5:7c:32:97: 76:ab:99:e7:e4:04:c8:73:b2:8d:c2:42:7d:3f:49:6b:5b:63: ef:9a:81:bf:7f:11:67:43:83:23:8b:49:19:2d:8d:2c:e6:31: 47:e1:14:37:07:69:a8:33:55:aa:ea:47:64:30:24:ee:e4:06: 38:d3:ca:9a:9c:b2:58:4e:4c:fe:74:f8:52:f8:96:c1:fb:39: f8:ec:0b:72:62:d6:ab:a9:c6:85:54:92:38:4c:7c:eb:14:44: e2:79:05:71:3d:8f:6f:30:4a:e1:42:8e:e1:95:de:14:81:6f: b4:df:d6:43:47:bd:c2:a5:c3:bc:b6:d7:e3:a4:82:88:45:e8: df:c4:95:4e:09:d4:a8:2e:43:13:1d:57:72:eb:c5:7b:20:a5: 3c:2b:ab:ad:d1:d8:4b:57:62:6d:cc:0a:bb:e6:ba:f2:33:d5: d3:fc:e0:4f:bc:f3:81:09:4d:42:61:d4:15:d4:52:e3:73:52: 91:09:0a:2c:85:a3:f7:0f:76:7e:e7:a6:82:cd:e9:c5:8a:cf: 4c:15:0c:37:cd:fb:e9:ac:df:8e:c9:bf:94:31:b8:c5:4b:74: 21:ba:18:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLO2HjNo1RJIdGhYvC5ceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNjg5ZDBmOTEzZDI5Y2M2M2Q2YzkyNmNiNDYyY2IyN2Yx ODQ0MDgwHhcNMjUxMjA2MDEwMDQ0WhcNMjUxMjA3MDEwMDQ0WjAzMTEwLwYDVQQD Eyg3MjBkMmI1Yzc4YjQ0MDQ1ZjFkMzkwMTdlMWIxNmE4NjY0OGJkN2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fXaaN0PuxOJYgefnXH7SgIFB/U+ zZKo7ucPdeyxJ2bi9bR1g/muJj/2dosLRe9mrH7neRTaa+7nQSlTrmH7KWtyw5Rk ssL3/rM4tETdBkPbKeUIfZqaIuLIbbQuZ/UeTt/L5TouVaLddpdv04Hjscv5gaOg XMJn+43NLgvKRSvIpD7RhUQj9LWVFyC8ZhjHk5fgyAYBS04VqMJLOxmxoarVDW1X uFLNV/G9K8Apwry1rJAiRqQun/Rg1NUFUuBKRgF2JdmsoIhy7dd0szz8+bzt8e3C W5rgpO3ByFxVTMVZB5x3wSh6zOqboCgG47okdXmKceQKnk5o5HyXOk9hTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHINK1x4tEBF8dOQF+GxaoZki9egMB8GA1UdIwQY MBaAFCJonQ+RPSnMY9bJJstGLLJ/GEQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wNDNlZWUtMzE5OS00ZjhlLWIwYTkt NGFkODUyYTEyY2Q2LzEvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wNDNlZWUtMzE5OS00ZjhlLWIwYTktNGFkODUyYTEyY2Q2 LzEvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXu7KoEsI 2GWbJFf++zFuGRytLzBL49BZAk2Mk4L3RDqlfDKXdquZ5+QEyHOyjcJCfT9Ja1tj 75qBv38RZ0ODI4tJGS2NLOYxR+EUNwdpqDNVqupHZDAk7uQGONPKmpyyWE5M/nT4 UviWwfs5+OwLcmLWq6nGhVSSOEx86xRE4nkFcT2PbzBK4UKO4ZXeFIFvtN/WQ0e9 wqXDvLbX46SCiEXo38SVTgnUqC5DEx1XcuvFeyClPCurrdHYS1dibcwKu+a68jPV 0/zgT7zzgQlNQmHUFdRS43NSkQkKLIWj9w92fuemgs3pxYrPTBUMN8376azfjsm/ lDG4xUt0IboYFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:49 2025 by rpki-client