This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json) Hash identifier: 8zaxi1/ZHH0sT5254agOww6PjQoRBtL6eAlivMwfLEM= Subject key identifier: E7:86:EA:22:FD:5A:82:C7:9B:41:D3:FB:51:77:7B:D7:C5:6A:E3:04 Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66 Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966 Certificate serial: 019B10811B1B9FA48A14979452C8F0AAA800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft Manifest number: 017A Signing time: Fri 12 Dec 2025 03:00:55 +0000 Manifest this update: Fri 12 Dec 2025 03:00:55 +0000 Manifest next update: Sat 13 Dec 2025 03:00:55 +0000 Files and hashes: 1: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: QvXaMj77ySgnNQ/NyjEWI8Ekztl0h7vipMFIDwJXD+s=) 2: uiqUmBv1k_uKYh_cj-a4QIhQlX4.roa (hash: HVtBzgdEAqEsdJNBkXbZl0/YnvdMRPK6u/IdD/XaEXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:1b:1b:9f:a4:8a:14:97:94:52:c8:f0:aa:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966 Validity Not Before: Dec 12 03:00:55 2025 GMT Not After : Dec 13 03:00:55 2025 GMT Subject: CN=e786ea22fd5a82c79b41d3fb51777bd7c56ae304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:ef:56:cc:cd:2b:38:69:3e:82:59:96:cc: 67:2e:0b:99:52:d9:1e:54:f1:84:82:0f:9b:8d:59: 71:ec:c4:28:83:e3:4f:c3:52:f5:c0:38:57:b4:a4: 03:1c:09:1a:aa:38:15:a1:47:e8:9d:80:d8:23:83: 67:f8:2a:6b:2d:bf:e2:0d:e1:de:60:5c:b9:3a:8f: 85:1d:be:f7:28:9f:61:08:7b:cf:87:e6:20:60:5d: a2:77:14:71:23:83:be:3e:ca:08:99:68:05:45:d3: 5a:fe:98:58:32:8f:52:b8:3d:a6:79:a5:6c:8a:46: 2e:5e:38:0e:1e:1b:6f:33:86:82:cb:22:a0:01:07: 2c:dc:84:83:ee:32:a4:63:0f:cb:3a:35:4d:46:de: 9a:f6:64:d9:3f:d3:11:d1:16:ce:3c:a6:d0:86:77: 4b:d7:6f:b5:46:44:a4:b9:ff:a3:55:05:f1:39:5f: db:91:ab:8c:78:37:89:d6:d4:af:09:2f:9e:af:d0: 29:16:6b:3d:17:2f:8e:1f:c1:ef:7f:9d:13:e2:80: e8:c0:01:2b:23:77:6d:8d:00:53:ed:0a:8d:f8:63: f7:8c:67:91:52:2f:bc:bc:ca:99:d0:a8:76:31:06: 39:db:01:65:c3:69:90:9b:e0:f7:20:de:fc:88:ae: f3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:86:EA:22:FD:5A:82:C7:9B:41:D3:FB:51:77:7B:D7:C5:6A:E3:04 X509v3 Authority Key Identifier: keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:44:0d:b2:b5:6d:e6:f6:e0:74:bc:5e:6c:7c:e5:e6:c6:f6: 1c:de:14:c8:c3:e4:9f:45:d0:92:e1:54:18:b0:66:d7:74:00: df:9c:7e:7d:d3:54:29:f7:d7:e1:40:79:41:c7:46:41:5c:37: ff:c7:37:6c:80:5a:86:68:28:7b:5a:19:b9:25:78:7b:0f:50: 4a:5d:b9:c1:e4:ec:94:b8:6b:0e:53:20:c4:74:e3:05:26:39: a5:ca:1e:be:32:3f:de:17:35:6f:36:15:17:c1:66:de:07:9b: 5d:b7:10:e0:60:d3:a5:1d:ae:cb:2b:7e:26:98:dd:e1:f1:bc: bf:81:88:be:60:f3:e9:d2:cf:55:16:6f:0f:80:06:fc:71:2b: 6d:e2:e6:e5:da:b9:67:42:92:81:f9:ab:ee:96:a1:5b:4f:90: 01:55:7b:06:eb:06:81:d8:7c:1f:53:5b:0f:6d:26:a3:42:64: 36:69:6d:cb:23:7d:05:fa:91:98:47:fb:68:10:36:28:37:ce: 1d:d6:bb:53:dc:a9:60:42:7b:e4:b0:85:5a:51:cc:dd:01:36: cd:e6:76:6a:ee:39:ef:5f:cc:c5:32:d6:dd:4f:02:42:3e:10: 12:66:3b:59:2f:73:e0:d6:39:b8:34:73:85:03:58:57:95:7a: b5:7a:bb:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgRsbn6SKFJeUUsjwqqgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YjE1NGNlMTc5OGI5YWM1MzBmMjA3ZjJkYWIwNmEzYWQz YTI5NjYwHhcNMjUxMjEyMDMwMDU1WhcNMjUxMjEzMDMwMDU1WjAzMTEwLwYDVQQD EyhlNzg2ZWEyMmZkNWE4MmM3OWI0MWQzZmI1MTc3N2JkN2M1NmFlMzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gDvVszNKzhpPoJZlsxnLguZUtke VPGEgg+bjVlx7MQog+NPw1L1wDhXtKQDHAkaqjgVoUfonYDYI4Nn+CprLb/iDeHe YFy5Oo+FHb73KJ9hCHvPh+YgYF2idxRxI4O+PsoImWgFRdNa/phYMo9SuD2meaVs ikYuXjgOHhtvM4aCyyKgAQcs3ISD7jKkYw/LOjVNRt6a9mTZP9MR0RbOPKbQhndL 12+1RkSkuf+jVQXxOV/bkauMeDeJ1tSvCS+er9ApFms9Fy+OH8Hvf50T4oDowAEr I3dtjQBT7QqN+GP3jGeRUi+8vMqZ0Kh2MQY52wFlw2mQm+D3IN78iK7zgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeG6iL9WoLHm0HT+1F3e9fFauMEMB8GA1UdIwQY MBaAFIixVM4XmLmsUw8gfy2rBqOtOilmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUt YWI0M2MwMDg1NDdmLzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUtYWI0M2MwMDg1NDdm LzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkQNsrVt 5vbgdLxebHzl5sb2HN4UyMPkn0XQkuFUGLBm13QA35x+fdNUKffX4UB5QcdGQVw3 /8c3bIBahmgoe1oZuSV4ew9QSl25weTslLhrDlMgxHTjBSY5pcoevjI/3hc1bzYV F8Fm3gebXbcQ4GDTpR2uyyt+Jpjd4fG8v4GIvmDz6dLPVRZvD4AG/HErbeLm5dq5 Z0KSgfmr7pahW0+QAVV7BusGgdh8H1NbD20mo0JkNmltyyN9BfqRmEf7aBA2KDfO Hda7U9ypYEJ75LCFWlHM3QE2zeZ2au4571/MxTLW3U8CQj4QEmY7WS9z4NY5uDRz hQNYV5V6tXq7pg== -----END CERTIFICATE-----Generated at Fri Dec 12 06:31:20 2025 by rpki-client