This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json) Hash identifier: PGLLxznTa2X0t0M1/iLnUEgw/TdeUE2j8v3Jw6vrF90= Subject key identifier: 22:5F:95:32:FE:B8:19:06:9F:A4:6C:15:A5:D2:C9:F6:25:1B:1C:D4 Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89 Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89 Certificate serial: 019B1D9899BAABB6DA4BA72D659F1E4F2CEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft Manifest number: 05C2 Signing time: Sun 14 Dec 2025 16:01:38 +0000 Manifest this update: Sun 14 Dec 2025 16:01:38 +0000 Manifest next update: Mon 15 Dec 2025 16:01:38 +0000 Files and hashes: 1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: zTTErFqr9o5NzaAdq7uQ0HNHGkHFVGHI4pNdYNBcXUc=) 2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=) 3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:99:ba:ab:b6:da:4b:a7:2d:65:9f:1e:4f:2c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89 Validity Not Before: Dec 14 16:01:38 2025 GMT Not After : Dec 15 16:01:38 2025 GMT Subject: CN=225f9532feb819069fa46c15a5d2c9f6251b1cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:20:a9:fe:8f:aa:e8:00:5e:b8:08:0a:fd: 9b:16:e1:60:21:6d:82:f3:59:48:e4:e0:c8:08:30: aa:04:bf:c0:b6:24:72:af:6c:ea:3f:2e:0b:b3:b0: 13:9e:2a:05:6a:55:b3:73:8c:33:37:8b:42:5a:dc: 69:1f:fe:38:7c:7d:5d:1f:08:bd:25:72:2e:20:b8: e5:2f:2c:ff:c1:89:1f:7c:8e:4c:c9:24:a6:6d:29: 84:04:cc:30:b2:e6:57:01:08:c7:93:31:1e:ad:7e: 02:24:e2:f9:4f:5c:f1:ed:e1:b4:e6:eb:6c:7c:60: 59:b2:c7:54:28:81:49:83:be:c4:01:46:4c:a5:86: fb:33:7f:f2:2f:d1:ac:09:a5:0b:68:2b:c9:9a:ac: d0:b7:d5:d0:ad:96:c7:ff:9d:35:a5:d0:7f:df:ac: 5a:51:93:ea:64:bb:81:68:11:ac:1f:79:c8:80:bc: cf:9c:87:09:19:57:d6:6f:10:7b:8b:71:05:dd:7d: 58:25:22:37:34:f7:68:11:65:f2:75:49:79:ad:3b: 98:85:5e:94:cc:44:71:59:af:a6:83:ef:eb:1d:68: 41:7c:88:73:0f:a3:70:af:53:1f:d7:b7:0a:4b:a0: 82:33:b0:4c:e9:86:8e:a3:bd:0a:83:67:e5:84:75: 22:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5F:95:32:FE:B8:19:06:9F:A4:6C:15:A5:D2:C9:F6:25:1B:1C:D4 X509v3 Authority Key Identifier: keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:69:d0:9d:89:6d:7c:76:87:22:db:42:2e:20:6d:8c:ae:4a: f3:7e:a3:85:e3:71:b3:a3:5f:11:d7:4c:a7:5e:a4:d3:87:ed: 23:ad:e1:90:c5:55:04:86:2d:70:ca:cf:28:c5:08:ba:87:86: e7:95:ac:82:e1:95:3a:8b:28:ee:88:e1:d0:1b:ca:20:d9:ea: 06:8b:97:c3:28:bd:1d:dc:f4:ba:0c:7e:4a:de:3b:8f:8b:11: 62:89:30:5e:45:a4:f1:95:7c:4e:ce:69:2c:8a:cb:d4:aa:82: 4b:ff:22:ae:3d:f1:a1:93:2d:30:33:5b:41:b4:f7:db:33:07: 79:06:c1:6b:1a:99:5b:48:47:53:0c:3a:d0:d7:20:ab:a7:ab: 56:67:17:6e:b1:52:8f:55:fa:40:59:01:2a:30:3c:64:f0:5e: e2:f9:4e:de:2b:7f:8e:b0:ae:dc:a5:be:d9:c8:14:7e:6d:5f: 32:1e:09:f9:20:72:33:14:2d:d6:3c:1e:78:7a:3d:d1:a3:42: 8e:b3:31:be:29:a7:7d:64:0f:a3:05:87:63:e8:19:92:91:6c: 56:10:32:4a:4a:20:e5:1d:d6:16:0b:08:18:bf:76:52:e8:98: 5d:fa:54:ba:f1:ab:8d:fe:de:ec:f5:a0:8e:fa:8e:cb:d3:df: 9a:fe:22:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmJm6q7baS6ctZZ8eTyzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYmRlZjNiZWI0MTE0Y2ZjYmZlYjlmYjRlZDhkYTk4ZmFm NGZhODkwHhcNMjUxMjE0MTYwMTM4WhcNMjUxMjE1MTYwMTM4WjAzMTEwLwYDVQQD EygyMjVmOTUzMmZlYjgxOTA2OWZhNDZjMTVhNWQyYzlmNjI1MWIxY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDIgqf6PqugAXrgICv2bFuFgIW2C 81lI5ODICDCqBL/AtiRyr2zqPy4Ls7ATnioFalWzc4wzN4tCWtxpH/44fH1dHwi9 JXIuILjlLyz/wYkffI5MySSmbSmEBMwwsuZXAQjHkzEerX4CJOL5T1zx7eG05uts fGBZssdUKIFJg77EAUZMpYb7M3/yL9GsCaULaCvJmqzQt9XQrZbH/501pdB/36xa UZPqZLuBaBGsH3nIgLzPnIcJGVfWbxB7i3EF3X1YJSI3NPdoEWXydUl5rTuYhV6U zERxWa+mg+/rHWhBfIhzD6Nwr1Mf17cKS6CCM7BM6YaOo70Kg2flhHUi5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJflTL+uBkGn6RsFaXSyfYlGxzUMB8GA1UdIwQY MBaAFCC97zvrQRTPy/65+07Y2pj69PqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTkt MWQ4MmFiMTVjNDE1LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTktMWQ4MmFiMTVjNDE1 LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWnQnYlt fHaHIttCLiBtjK5K836jheNxs6NfEddMp16k04ftI63hkMVVBIYtcMrPKMUIuoeG 55WsguGVOoso7ojh0BvKINnqBouXwyi9Hdz0ugx+St47j4sRYokwXkWk8ZV8Ts5p LIrL1KqCS/8irj3xoZMtMDNbQbT32zMHeQbBaxqZW0hHUww60Ncgq6erVmcXbrFS j1X6QFkBKjA8ZPBe4vlO3it/jrCu3KW+2cgUfm1fMh4J+SByMxQt1jweeHo90aNC jrMxvimnfWQPowWHY+gZkpFsVhAySkog5R3WFgsIGL92UuiYXfpUuvGrjf7e7PWg jvqOy9Pfmv4isg== -----END CERTIFICATE-----Generated at Sun Dec 14 22:03:28 2025 by rpki-client