This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft File: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json) Hash identifier: fW9s/7NW8Dq45J827iMIWDdLann3CBNN0BH04NAPZ80= Subject key identifier: 0A:7D:99:86:7F:33:A9:8F:CE:6C:B7:B8:41:2B:AF:07:AD:1A:8B:BC Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79 Certificate issuer: /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79 Certificate serial: 019B0E92A0575232A0CBEB82A70697FD81ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft Manifest number: 0E56 Signing time: Thu 11 Dec 2025 18:00:48 +0000 Manifest this update: Thu 11 Dec 2025 18:00:48 +0000 Manifest next update: Fri 12 Dec 2025 18:00:48 +0000 Files and hashes: 1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: fP9suNfB46VAjEvicHgVCzqmAw/DCdZWM7Qgp7QdXPU=) 2: sFqvD3DbXn90SlSxedk-_VFVTi4.roa (hash: JtGbnCe8rSKW4mIxvzXo/VN0LsuEsKsi7iRdKw/3Gk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:a0:57:52:32:a0:cb:eb:82:a7:06:97:fd:81:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79 Validity Not Before: Dec 11 18:00:48 2025 GMT Not After : Dec 12 18:00:48 2025 GMT Subject: CN=0a7d99867f33a98fce6cb7b8412baf07ad1a8bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6f:61:3a:84:2a:b9:35:e8:02:ed:88:22:4a: 3a:e6:16:21:df:98:84:ba:d5:d2:fb:08:c4:33:c7: 79:67:6a:7b:02:14:73:94:3a:2d:7e:b5:ed:a6:06: 19:ca:66:2f:e7:15:86:83:55:d3:05:7b:33:74:b6: 6a:d0:1e:20:18:08:c9:8b:c5:2d:a9:19:be:cf:82: df:dc:4a:10:f6:58:2c:e7:32:c9:ce:ba:bf:90:e0: fd:53:10:ed:88:67:f5:19:46:c1:74:1d:44:89:8e: 8c:c1:0e:e9:17:ae:7b:7a:c5:2d:23:3c:8d:18:fd: 50:17:de:81:b9:93:0f:5d:66:ec:48:25:03:ce:67: 8c:5a:1c:ad:c6:72:8b:90:68:65:be:a7:b6:7d:04: 37:a5:5f:61:83:69:e5:68:ac:73:75:2e:d4:5e:d1: 45:1e:6c:71:3e:ba:61:ac:cd:60:99:5f:d3:79:ff: 92:e8:f6:46:d5:fc:ea:13:f8:2f:0a:fe:7b:22:7b: 36:db:7e:f8:cd:a1:42:54:16:ae:71:67:c4:9f:e3: 67:5d:c7:99:11:97:b4:91:92:9e:b0:40:32:cd:61: 9f:a6:b4:44:e7:c2:36:0a:d2:48:d3:05:7c:59:d4: 72:02:3e:fd:97:6a:92:84:d5:6f:67:6a:77:64:82: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7D:99:86:7F:33:A9:8F:CE:6C:B7:B8:41:2B:AF:07:AD:1A:8B:BC X509v3 Authority Key Identifier: keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:45:40:e0:5e:1e:b4:2d:95:82:ab:ab:ea:a5:d3:d6:bd:38: ae:21:66:7a:86:50:45:ba:94:29:38:f0:e2:ff:5a:11:eb:18: 61:b8:a9:60:4c:42:a7:21:c1:e3:3f:45:a8:3b:4d:cf:2e:b1: c0:40:ce:24:77:cf:ce:8f:38:1d:d3:c6:ee:f4:15:30:2f:7f: 00:13:3a:81:5f:18:b0:46:f7:2f:75:d8:4d:ce:74:ac:be:a8: d6:b6:19:34:fe:1f:9b:ab:f5:07:08:66:e3:1a:80:4b:d0:91: 15:69:60:b9:86:8e:da:9b:db:b1:15:62:c0:ff:91:95:f9:a1: ce:10:16:8f:ba:3f:84:27:6e:06:c1:28:8b:b9:79:76:5b:82: c0:33:6d:83:39:2b:45:d6:02:0d:36:c7:75:33:87:f5:de:c2: 00:81:f5:47:3f:22:c9:9b:65:0e:cf:d8:17:e2:d4:49:79:5f: c6:0e:32:43:5d:aa:26:5b:66:8b:b0:7c:d7:e8:c3:5e:a2:b9: a7:5c:4f:15:4c:5f:a0:6b:1f:25:21:8d:1b:27:0f:5e:aa:e7: c0:95:47:a0:b3:41:27:d7:4f:95:48:65:e4:81:b0:23:7b:eb: 07:e9:6c:b5:60:80:3a:4b:32:34:31:c3:2a:45:db:5c:88:2c: 9f:23:24:06 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsOkqBXUjKgy+uCpwaX/YHtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MThhNWY4Yjk1MTUwMTdjOGQ2NDg4YTlhOTQ3ZDQ4MjBi NmZiNzkwHhcNMjUxMjExMTgwMDQ4WhcNMjUxMjEyMTgwMDQ4WjAzMTEwLwYDVQQD EygwYTdkOTk4NjdmMzNhOThmY2U2Y2I3Yjg0MTJiYWYwN2FkMWE4YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm29hOoQquTXoAu2IIko65hYh35iE utXS+wjEM8d5Z2p7AhRzlDotfrXtpgYZymYv5xWGg1XTBXszdLZq0B4gGAjJi8Ut qRm+z4Lf3EoQ9lgs5zLJzrq/kOD9UxDtiGf1GUbBdB1EiY6MwQ7pF657esUtIzyN GP1QF96BuZMPXWbsSCUDzmeMWhytxnKLkGhlvqe2fQQ3pV9hg2nlaKxzdS7UXtFF HmxxPrphrM1gmV/Tef+S6PZG1fzqE/gvCv57Ins22374zaFCVBaucWfEn+NnXceZ EZe0kZKesEAyzWGfprRE58I2CtJI0wV8WdRyAj79l2qShNVvZ2p3ZILF+wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAp9mYZ/M6mPzmy3uEErrwetGou8MB8GA1UdIwQY MBaAFPkYpfi5UVAXyNZIipqUfUggtvt5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SaWwtTGxSVUJmSTFraUttcFI5U0NDMi0zay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvYjIyZDZlLTRjNGYtNDU5ZC1hMDQ4 LWRkMzQ3NTM3NjgzZS8xLzEtUmlsLUxsUlVCZkkxa2lLbXBSOVNDQzItM2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI3L2IyMmQ2ZS00YzRmLTQ1OWQtYTA0OC1kZDM0NzUzNzY4 M2UvMS8xLVJpbC1MbFJVQmZJMWtpS21wUjlTQ0MyLTNrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUVA 4F4etC2Vgqur6qXT1r04riFmeoZQRbqUKTjw4v9aEesYYbipYExCpyHB4z9FqDtN zy6xwEDOJHfPzo84HdPG7vQVMC9/ABM6gV8YsEb3L3XYTc50rL6o1rYZNP4fm6v1 Bwhm4xqAS9CRFWlguYaO2pvbsRViwP+RlfmhzhAWj7o/hCduBsEoi7l5dluCwDNt gzkrRdYCDTbHdTOH9d7CAIH1Rz8iyZtlDs/YF+LUSXlfxg4yQ12qJltmi7B81+jD XqK5p1xPFUxfoGsfJSGNGycPXqrnwJVHoLNBJ9dPlUhl5IGwI3vrB+lstWCAOksy NDHDKkXbXIgsnyMkBg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:15:37 2025 by rpki-client