This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json) Hash identifier: yM8INprR1tTRJ2bPWo9ZRaaLrdnkpCSARp/wmWapmkU= Subject key identifier: 0F:CA:80:78:A5:54:CC:EE:2D:9F:93:BB:F8:DA:F3:41:C1:17:06:CD Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04 Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04 Certificate serial: 019B3569D1B4620A14B1F2BE053BA3B0213F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft Manifest number: 0C15 Signing time: Fri 19 Dec 2025 07:01:25 +0000 Manifest this update: Fri 19 Dec 2025 07:01:25 +0000 Manifest next update: Sat 20 Dec 2025 07:01:25 +0000 Files and hashes: 1: 0WfJoxMemQt8nwlwlbf0-N5ZBgI.roa (hash: lHb75yOft9Kv2xRvC1d+Vx96c+J/4+jIL8gOSIRqeFs=) 2: 5RlzUCtoZ32Oa93A2fEfoYArcWM.roa (hash: iA8YpgMYI54//mfKtXnw0NA6/nJYpojDOe0q+RA30ZU=) 3: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: 4eaf6ueyCsr125NdEcmZlRzMVXY8uxruMS1ZEFF3tBE=) 4: zmJ9lE5vi4Jqc9Z9iVsq8OjO3sw.roa (hash: b4eeLp19myrQzh9AuX2bzcABMyXzCxCR666FaiLOLYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:d1:b4:62:0a:14:b1:f2:be:05:3b:a3:b0:21:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04 Validity Not Before: Dec 19 07:01:25 2025 GMT Not After : Dec 20 07:01:25 2025 GMT Subject: CN=0fca8078a554ccee2d9f93bbf8daf341c11706cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:f0:34:f4:e5:e7:fd:14:6b:74:7b:76:59: 34:9d:9f:6e:89:96:1b:fe:16:d7:6a:a8:e1:54:b9: eb:d7:8f:bc:4c:02:04:18:22:93:42:f5:07:83:22: 6e:21:d7:34:72:ed:23:64:3d:16:b2:53:df:92:99: c9:fc:e4:3d:38:e1:26:a9:9d:16:01:0a:c0:76:4a: 30:10:86:0b:8f:d3:fb:4b:4d:af:ef:6c:30:94:a1: 26:96:8b:af:c9:35:d9:46:1f:de:73:ce:50:4b:84: 0d:04:0b:39:d0:30:01:15:63:07:21:30:80:cb:b6: 32:67:e0:fe:88:c0:f2:ce:92:96:fa:ce:e5:be:d0: aa:55:5b:f4:83:ba:59:71:4b:96:fd:0a:b0:dd:05: 71:db:79:41:a1:a9:88:02:2c:02:97:94:7e:af:74: 38:17:e1:2e:4c:71:c8:f8:67:67:6a:df:aa:e1:27: ed:50:1a:03:57:77:b7:6a:b6:89:fc:82:0f:9a:2c: f2:71:5f:cb:a0:e9:c1:8b:4a:0a:43:32:c3:c8:09: 50:e1:78:e6:8d:b7:eb:25:60:c6:2e:a9:28:3e:90: 47:6c:14:e8:fe:89:8f:cc:fa:d7:d7:20:21:32:f4: 07:21:a6:6b:f2:92:82:98:8f:4b:d0:c6:1c:69:33: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CA:80:78:A5:54:CC:EE:2D:9F:93:BB:F8:DA:F3:41:C1:17:06:CD X509v3 Authority Key Identifier: keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c5:50:83:c1:95:f1:32:2d:6f:f0:18:8c:eb:42:24:de:cf: 37:f8:b7:7c:e8:fc:5f:3b:42:84:d1:21:88:98:6a:34:86:e7: ca:c3:0d:7a:82:c6:12:1e:85:7c:ab:78:1f:89:04:8d:ef:9e: 04:5b:7e:b7:70:7e:f0:fe:94:81:38:60:21:cf:6d:a3:3e:4a: ad:ec:e0:cb:bd:9c:7a:a2:73:ca:21:41:a3:80:4c:c2:b3:a4: 84:36:ac:5d:92:ff:60:da:13:af:9c:ea:b6:d8:48:b1:da:26: b1:4b:c1:ab:22:67:10:5f:f5:c9:a8:32:de:24:54:11:ad:84: 17:f0:37:6e:3e:bb:32:ed:c8:ad:83:39:03:eb:3d:a5:50:77: 6b:dd:21:67:f8:37:08:10:d9:85:1d:2a:04:d9:b8:12:40:0f: 55:7a:c3:98:a9:72:b2:ee:a0:ca:c3:95:8a:aa:40:ff:47:fd: 38:6e:1f:00:3a:ce:aa:1e:ad:73:2f:51:87:03:3a:d6:b1:3e: 99:35:56:0e:0f:d1:69:5a:33:aa:f9:c4:c9:69:9c:51:48:40: 76:bb:2e:83:80:38:cd:b9:3d:d3:33:bb:b3:e9:61:fa:f1:f3: 27:87:08:39:1c:17:c9:eb:0e:53:c1:c3:f0:ba:41:db:f5:07: 81:5b:55:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1adG0YgoUsfK+BTujsCE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2 YzJhMDQwHhcNMjUxMjE5MDcwMTI1WhcNMjUxMjIwMDcwMTI1WjAzMTEwLwYDVQQD EygwZmNhODA3OGE1NTRjY2VlMmQ5ZjkzYmJmOGRhZjM0MWMxMTcwNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1rwNPTl5/0Ua3R7dlk0nZ9uiZYb /hbXaqjhVLnr14+8TAIEGCKTQvUHgyJuIdc0cu0jZD0WslPfkpnJ/OQ9OOEmqZ0W AQrAdkowEIYLj9P7S02v72wwlKEmlouvyTXZRh/ec85QS4QNBAs50DABFWMHITCA y7YyZ+D+iMDyzpKW+s7lvtCqVVv0g7pZcUuW/Qqw3QVx23lBoamIAiwCl5R+r3Q4 F+EuTHHI+Gdnat+q4SftUBoDV3e3araJ/IIPmizycV/LoOnBi0oKQzLDyAlQ4Xjm jbfrJWDGLqkoPpBHbBTo/omPzPrX1yAhMvQHIaZr8pKCmI9L0MYcaTN7jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/KgHilVMzuLZ+Tu/ja80HBFwbNMB8GA1UdIwQY MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8VQg8GV 8TItb/AYjOtCJN7PN/i3fOj8XztChNEhiJhqNIbnysMNeoLGEh6FfKt4H4kEje+e BFt+t3B+8P6UgThgIc9toz5Krezgy72ceqJzyiFBo4BMwrOkhDasXZL/YNoTr5zq tthIsdomsUvBqyJnEF/1yagy3iRUEa2EF/A3bj67Mu3IrYM5A+s9pVB3a90hZ/g3 CBDZhR0qBNm4EkAPVXrDmKlysu6gysOViqpA/0f9OG4fADrOqh6tcy9RhwM61rE+ mTVWDg/RaVozqvnEyWmcUUhAdrsug4A4zbk90zO7s+lh+vHzJ4cIORwXyesOU8HD 8LpB2/UHgVtVyw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:38:28 2025 by rpki-client