This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft File: iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json) Hash identifier: wYxtH8lJxUNUY720/t0aAAQ6sAIf+5T3L/HQpgFx2oM= Subject key identifier: 7E:83:35:89:E0:0B:6D:0E:3B:B3:D1:6B:90:50:03:D8:CF:B6:7B:39 Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5 Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5 Certificate serial: 019B59E4428626A7ADC05BFD4BFBAC8900D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft Manifest number: 06CB Signing time: Fri 26 Dec 2025 09:01:30 +0000 Manifest this update: Fri 26 Dec 2025 09:01:30 +0000 Manifest next update: Sat 27 Dec 2025 09:01:30 +0000 Files and hashes: 1: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: BaNOXg7YU6SLuSIbrRVLlKAf1dmj5IoTyOinUopxMkk=) 2: r8ye77zqIb8BIbvCeWpbvAUL4Aw.roa (hash: wjEomxk07ox6hhu7Ke9tXLk+PxIAdxXrhUQiAqx1wcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:42:86:26:a7:ad:c0:5b:fd:4b:fb:ac:89:00:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5 Validity Not Before: Dec 26 09:01:30 2025 GMT Not After : Dec 27 09:01:30 2025 GMT Subject: CN=7e833589e00b6d0e3bb3d16b905003d8cfb67b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:2e:78:3a:c4:51:3f:50:e6:c4:d4:68:d3: be:4e:fb:1b:6a:fd:58:db:4e:af:b8:51:95:01:8d: 47:d1:a1:07:ee:19:4c:bb:a9:d8:4b:88:26:e5:81: 2d:fa:b0:6b:3b:36:38:f3:e7:77:0f:84:a7:00:df: 92:a8:45:2c:7e:95:98:c3:85:5b:84:71:93:c7:a5: 36:1c:c0:0e:4d:84:b3:64:af:24:44:34:66:3a:bf: 4f:27:de:02:fa:c6:44:b4:c0:cf:84:a5:b6:a8:d8: e4:2b:45:29:e2:64:81:25:2c:b2:bb:18:56:85:25: 96:9f:23:7e:65:e6:bf:da:ad:a6:42:31:24:3b:8d: 45:3b:3d:3b:c5:15:33:08:ee:4a:4d:dd:5e:f2:0a: 9a:02:33:ce:92:ce:0e:53:4f:ec:ed:b9:16:78:00: 36:df:aa:52:ae:e7:7b:a4:14:96:82:b3:a5:af:79: b0:77:3e:04:bd:f8:19:9a:5b:30:35:a4:eb:eb:c9: 4e:c7:b4:64:e6:1e:61:e3:f8:a4:af:90:8d:fd:32: 75:bd:78:2f:48:96:37:18:1b:70:4c:a9:a9:6f:68: 36:0b:ba:3f:f4:39:95:d8:53:2d:d2:61:b1:2c:4d: 27:2f:67:0a:fb:a9:33:f5:2d:66:95:3f:75:94:28: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:83:35:89:E0:0B:6D:0E:3B:B3:D1:6B:90:50:03:D8:CF:B6:7B:39 X509v3 Authority Key Identifier: keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4e:5a:aa:3c:75:fc:f9:1c:2b:64:cf:8a:1e:be:e9:6e:4a: c7:64:b5:74:83:a4:d6:eb:01:88:69:a5:47:a5:8e:d2:a7:b1: 64:4e:c3:9a:5c:d1:5d:24:4d:3d:c1:d7:95:ce:06:1e:e4:e2: 4d:78:d6:a7:66:8b:16:f5:5d:13:84:c4:6a:9c:94:a8:d8:66: 84:03:b1:26:62:a4:bc:d2:01:6e:78:ec:9e:2d:98:c0:8a:51: 63:65:99:ee:90:ac:64:76:f6:3c:c4:1f:44:68:5b:2e:d5:7d: 69:a9:8e:97:be:a7:2a:fe:ad:52:84:22:6a:fe:f9:55:8d:22: cf:ce:4c:2c:75:ab:e4:d2:8a:51:90:f1:cd:cb:22:f7:6b:09: 43:bd:df:9e:43:6f:a7:c4:72:2f:49:49:96:35:48:a6:63:ee: 2c:d3:de:d9:c6:b7:dd:37:f4:90:92:4e:c2:74:2f:90:f4:c3: 74:52:06:2c:b4:98:c7:0e:41:43:eb:98:f8:f8:36:5b:0f:5e: 1f:c1:4c:07:54:e5:b1:17:d9:b7:66:35:ad:24:6d:6d:4f:82: 04:52:c4:07:10:b5:15:7b:da:32:c9:27:8e:5e:b7:d5:32:5d: da:a9:da:a4:38:dd:f8:79:65:2c:c5:ac:39:a8:e5:6e:07:ae: 93:32:37:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5EKGJqetwFv9S/usiQDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YjJjYjA0OTMyMDYwNTY5Yzk3MjA2ODdkZWQ4OTFjMzRl YmI2ZDUwHhcNMjUxMjI2MDkwMTMwWhcNMjUxMjI3MDkwMTMwWjAzMTEwLwYDVQQD Eyg3ZTgzMzU4OWUwMGI2ZDBlM2JiM2QxNmI5MDUwMDNkOGNmYjY3YjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4AueDrEUT9Q5sTUaNO+Tvsbav1Y 206vuFGVAY1H0aEH7hlMu6nYS4gm5YEt+rBrOzY48+d3D4SnAN+SqEUsfpWYw4Vb hHGTx6U2HMAOTYSzZK8kRDRmOr9PJ94C+sZEtMDPhKW2qNjkK0Up4mSBJSyyuxhW hSWWnyN+Zea/2q2mQjEkO41FOz07xRUzCO5KTd1e8gqaAjPOks4OU0/s7bkWeAA2 36pSrud7pBSWgrOlr3mwdz4EvfgZmlswNaTr68lOx7Rk5h5h4/ikr5CN/TJ1vXgv SJY3GBtwTKmpb2g2C7o/9DmV2FMt0mGxLE0nL2cK+6kz9S1mlT91lCipBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6DNYngC20OO7PRa5BQA9jPtns5MB8GA1UdIwQY MBaAFIiyywSTIGBWnJcgaH3tiRw067bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMt NGFkOGRhNDdjOWE2LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMtNGFkOGRhNDdjOWE2 LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqE5aqjx1 /PkcK2TPih6+6W5Kx2S1dIOk1usBiGmlR6WO0qexZE7DmlzRXSRNPcHXlc4GHuTi TXjWp2aLFvVdE4TEapyUqNhmhAOxJmKkvNIBbnjsni2YwIpRY2WZ7pCsZHb2PMQf RGhbLtV9aamOl76nKv6tUoQiav75VY0iz85MLHWr5NKKUZDxzcsi92sJQ73fnkNv p8RyL0lJljVIpmPuLNPe2ca33Tf0kJJOwnQvkPTDdFIGLLSYxw5BQ+uY+Pg2Ww9e H8FMB1TlsRfZt2Y1rSRtbU+CBFLEBxC1FXvaMsknjl631TJd2qnapDjd+HllLMWs OajlbgeukzI3NA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:20 2025 by rpki-client