This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft File: ilqFDZoDAtO1zC3firM8qrfM5KY.mft (raw, json) Hash identifier: 3XBzZbaN0qc48tGTd/tBLTdJ81pZz1DxxB72w5SXkxQ= Subject key identifier: B8:B2:95:03:2F:28:BB:40:29:C6:96:6A:ED:E2:68:43:AE:32:F3:7D Authority key identifier: 8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6 Certificate issuer: /CN=8a5a850d9a0302d3b5cc2ddf8ab33caab7cce4a6 Certificate serial: 019B59E43607A2CCC2300C05411390220341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft Manifest number: 0B Signing time: Fri 26 Dec 2025 09:01:26 +0000 Manifest this update: Fri 26 Dec 2025 09:01:26 +0000 Manifest next update: Sat 27 Dec 2025 09:01:26 +0000 Files and hashes: 1: ilqFDZoDAtO1zC3firM8qrfM5KY.crl (hash: DMvfJmNN4tnGBV94MGNOJOVvcDEBtRVFWbQUApd1Ev0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:36:07:a2:cc:c2:30:0c:05:41:13:90:22:03:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5a850d9a0302d3b5cc2ddf8ab33caab7cce4a6 Validity Not Before: Dec 26 09:01:26 2025 GMT Not After : Dec 27 09:01:26 2025 GMT Subject: CN=b8b295032f28bb4029c6966aede26843ae32f37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:ca:20:bb:ed:74:d2:58:89:67:e7:5b:a2: 07:4c:d3:37:c1:4c:6a:5e:35:26:74:18:bd:86:29: c3:8a:fe:8b:f7:b4:34:8b:4e:b6:7d:38:3a:52:1f: 43:01:45:b6:80:c1:2f:79:4d:6a:f9:d0:31:7d:dd: 78:0f:78:99:07:09:89:d1:59:63:f1:c4:9d:f5:c9: ec:fa:11:b0:11:a1:4a:12:ad:84:96:cc:b3:50:89: 35:b1:07:4d:f1:5f:5d:12:8d:d6:b0:d6:d7:d7:6d: 7b:2d:d6:31:b0:32:81:58:41:f8:c4:8f:0d:ed:5a: 48:5c:f1:9b:df:8c:68:40:15:84:dd:54:6f:d6:9e: 0d:93:1b:c5:45:1a:c6:e5:fc:f3:5e:a3:61:7d:d6: 3d:91:16:21:35:ce:f6:4d:96:ca:53:90:20:bb:6d: b4:19:be:6b:c4:d6:79:da:f8:4c:11:d4:3e:82:e8: d2:69:40:f2:32:8c:2f:04:dc:64:12:78:93:f2:6b: eb:9b:9a:38:2c:55:55:e7:f2:62:c8:91:59:1b:42: b8:1f:97:af:28:e8:83:55:29:50:bd:7b:b5:fa:5b: 25:ea:33:8f:e4:48:86:35:9d:ca:24:23:5d:3f:db: d1:2d:0a:55:5d:8b:aa:5a:88:29:94:b3:a8:6b:79: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B2:95:03:2F:28:BB:40:29:C6:96:6A:ED:E2:68:43:AE:32:F3:7D X509v3 Authority Key Identifier: keyid:8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:00:b8:ec:4e:1a:bd:0e:97:34:c0:1d:ae:d9:69:d6:c4:85: e2:2d:e4:6f:af:c3:ea:00:63:b3:b0:f9:78:91:f3:da:d3:99: 73:0f:87:e8:8c:a8:13:6a:b7:2e:7c:1b:9d:98:41:e1:f8:47: e9:a5:d0:78:43:a9:5b:91:73:7b:98:50:a8:63:97:13:2b:fd: 8e:b7:9e:eb:63:39:c7:f5:9d:82:59:ae:4f:f2:0a:2b:44:51: 04:7e:03:1d:4a:1f:cc:4f:80:ce:0f:2c:16:6b:60:b5:21:a2: a7:cd:8f:9a:66:db:96:2c:e3:71:dc:c0:05:e1:2c:73:cf:df: 4c:9e:47:8f:0d:4f:46:1d:99:dd:34:b0:53:5c:9a:2d:67:08: ae:04:0b:21:2d:b7:9b:69:c7:8a:4e:30:51:b6:98:c7:72:67: bf:03:01:2c:32:fb:4d:aa:54:45:dd:e5:40:02:aa:79:3a:59: a3:5c:f3:3d:18:4c:69:3d:fe:c0:2e:6f:35:19:25:66:dc:b2: cb:18:c3:e8:d8:bf:60:a3:a4:69:b7:2e:0a:fd:25:a7:28:42: 3a:75:86:dc:4d:90:e2:8f:d3:37:56:0e:23:31:0d:83:19:9f: 4f:c0:fb:9c:47:0e:0a:74:e5:4d:e1:ca:d6:77:23:36:51:fe: a5:64:90:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5DYHoszCMAwFQROQIgNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNWE4NTBkOWEwMzAyZDNiNWNjMmRkZjhhYjMzY2FhYjdj Y2U0YTYwHhcNMjUxMjI2MDkwMTI2WhcNMjUxMjI3MDkwMTI2WjAzMTEwLwYDVQQD EyhiOGIyOTUwMzJmMjhiYjQwMjljNjk2NmFlZGUyNjg0M2FlMzJmMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyHKILvtdNJYiWfnW6IHTNM3wUxq XjUmdBi9hinDiv6L97Q0i062fTg6Uh9DAUW2gMEveU1q+dAxfd14D3iZBwmJ0Vlj 8cSd9cns+hGwEaFKEq2ElsyzUIk1sQdN8V9dEo3WsNbX1217LdYxsDKBWEH4xI8N 7VpIXPGb34xoQBWE3VRv1p4NkxvFRRrG5fzzXqNhfdY9kRYhNc72TZbKU5Agu220 Gb5rxNZ52vhMEdQ+gujSaUDyMowvBNxkEniT8mvrm5o4LFVV5/JiyJFZG0K4H5ev KOiDVSlQvXu1+lsl6jOP5EiGNZ3KJCNdP9vRLQpVXYuqWogplLOoa3mv6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiylQMvKLtAKcaWau3iaEOuMvN9MB8GA1UdIwQY MBaAFIpahQ2aAwLTtcwt34qzPKq3zOSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxxRkRab0RBdE8xekMzZmlyTThxcmZNNUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zMTk1ZGMtMmRhNS00NDhjLWE4ZjMt NmY1Y2Y3OWYwMDY0LzEvaWxxRkRab0RBdE8xekMzZmlyTThxcmZNNUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zMTk1ZGMtMmRhNS00NDhjLWE4ZjMtNmY1Y2Y3OWYwMDY0 LzEvaWxxRkRab0RBdE8xekMzZmlyTThxcmZNNUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAC47E4a vQ6XNMAdrtlp1sSF4i3kb6/D6gBjs7D5eJHz2tOZcw+H6IyoE2q3LnwbnZhB4fhH 6aXQeEOpW5Fze5hQqGOXEyv9jree62M5x/WdglmuT/IKK0RRBH4DHUofzE+Azg8s FmtgtSGip82PmmbblizjcdzABeEsc8/fTJ5Hjw1PRh2Z3TSwU1yaLWcIrgQLIS23 m2nHik4wUbaYx3JnvwMBLDL7TapURd3lQAKqeTpZo1zzPRhMaT3+wC5vNRklZtyy yxjD6Ni/YKOkabcuCv0lpyhCOnWG3E2Q4o/TN1YOIzENgxmfT8D7nEcOCnTlTeHK 1ncjNlH+pWSQrw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:28 2025 by rpki-client