This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft File: il2GqrTAl08MJ_Q9lo30JvU99dI.mft (raw, json) Hash identifier: OM8UXnm8P3y+rP8IH+Zlf2BtqaBOzTj/m0L8goxSevo= Subject key identifier: 42:20:38:43:D7:0C:35:79:1C:EB:41:F4:61:87:5F:6D:FF:60:94:BF Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2 Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2 Certificate serial: 019B115CA4AE321201954DEB62E62F6F4F1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 07:00:42 +0000 Manifest this update: Fri 12 Dec 2025 07:00:42 +0000 Manifest next update: Sat 13 Dec 2025 07:00:42 +0000 Files and hashes: 1: M3KJXsjqIPVIXxYev2SfgVojrU4.roa (hash: Gvsx8H9toLZ4v4VpdY9JPnhwGvrW2p7tLKUQ/kP8+Nc=) 2: il2GqrTAl08MJ_Q9lo30JvU99dI.crl (hash: VkOnwA6Rsd24HYi4tE7bGNh6HSexTohIQi0A9Hie2gc=) 3: lyju-WcsfjKzHsY-MgdKzzZhTIw.roa (hash: EiV9Q5uHzoj0xoTRtMoDguUYz6ko8D3bkiYvM3cYUXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:a4:ae:32:12:01:95:4d:eb:62:e6:2f:6f:4f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2 Validity Not Before: Dec 12 07:00:42 2025 GMT Not After : Dec 13 07:00:42 2025 GMT Subject: CN=42203843d70c35791ceb41f461875f6dff6094bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:84:45:33:a7:98:82:ac:66:59:a1:af:25: 9a:fc:a9:f4:df:8c:66:d2:2f:12:a4:5a:63:a7:55: d0:b6:7f:e7:7a:ad:73:0f:9f:5f:28:54:10:e3:80: 24:4d:9d:2b:e5:cc:c5:c6:d9:15:b4:e3:d8:fa:87: d2:7e:d8:7d:89:bb:bb:66:e0:8e:76:fe:60:7f:95: 99:02:90:87:1a:c0:b4:d6:05:f5:33:eb:f0:31:98: 0f:69:f2:40:3b:92:b7:25:b6:04:ed:fc:0e:33:79: 27:33:f4:e2:36:49:e6:1f:49:1a:e2:4f:e8:00:57: aa:f8:81:73:63:46:89:0f:2a:9d:a8:20:4c:33:5b: e4:5b:53:95:40:a7:f3:4b:3c:c3:6c:7b:92:9c:70: 2d:9f:23:84:95:09:1f:06:a7:d4:f0:6d:61:b8:a9: be:17:4e:87:c8:02:83:84:8f:a2:9b:31:3a:ed:f7: 4f:86:1b:31:8d:c2:2a:27:b3:69:fd:45:65:c9:36: 5f:b6:19:2a:cb:fe:11:3f:fe:81:ec:c7:fc:d2:e3: 0d:08:c1:a5:cd:3c:2f:c4:0d:6e:06:d6:7c:74:35: 4d:81:5e:76:5f:8d:ee:a5:3a:b5:60:4f:a5:30:be: e2:37:2f:f9:4b:2e:93:da:a7:53:0a:2c:86:1e:bc: f3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:20:38:43:D7:0C:35:79:1C:EB:41:F4:61:87:5F:6D:FF:60:94:BF X509v3 Authority Key Identifier: keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:22:0c:41:2d:55:28:f3:40:6a:fd:18:f2:66:34:a3:4b:87: 25:07:77:48:6f:ed:73:c4:30:f6:7c:2b:c0:ee:3f:3d:f3:e7: ac:c1:45:cb:08:03:a7:aa:7f:a4:1d:b2:23:c1:af:b1:e8:15: be:c3:d1:37:c9:60:07:ea:85:07:91:ec:4a:29:27:0e:f4:ec: 27:62:64:b8:ba:8c:06:f2:42:9a:5f:fd:52:79:19:97:56:38: 49:bf:b1:52:42:d8:ef:ea:eb:12:92:3a:7e:13:8f:11:90:4a: f9:86:55:0d:3d:5a:64:19:14:2a:25:27:7f:69:be:65:53:48: af:dd:d0:c2:8e:2c:de:b6:84:76:fc:ef:83:7d:23:ba:c2:ba: 5e:f3:72:10:56:0c:41:7f:2f:61:9b:00:64:71:69:84:8a:74: 8c:cd:bf:ca:87:d9:89:c4:51:c1:40:d1:f4:90:a1:8c:86:ee: be:c8:e1:5c:63:65:99:24:52:9d:bd:11:09:0a:b3:66:3f:86: 4b:13:4a:40:fa:19:0c:20:98:b2:a1:74:67:5f:90:91:5c:d8: c6:00:2e:63:73:1f:c0:63:20:63:85:ec:f1:32:a0:38:99:d3: 23:fd:fd:77:5e:2d:71:40:a2:6d:cf:07:d9:a1:ce:f7:2c:c6: 64:be:8d:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXKSuMhIBlU3rYuYvb08fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNWQ4NmFhYjRjMDk3NGYwYzI3ZjQzZDk2OGRmNDI2ZjUz ZGY1ZDIwHhcNMjUxMjEyMDcwMDQyWhcNMjUxMjEzMDcwMDQyWjAzMTEwLwYDVQQD Eyg0MjIwMzg0M2Q3MGMzNTc5MWNlYjQxZjQ2MTg3NWY2ZGZmNjA5NGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseiERTOnmIKsZlmhryWa/Kn034xm 0i8SpFpjp1XQtn/neq1zD59fKFQQ44AkTZ0r5czFxtkVtOPY+ofSfth9ibu7ZuCO dv5gf5WZApCHGsC01gX1M+vwMZgPafJAO5K3JbYE7fwOM3knM/TiNknmH0ka4k/o AFeq+IFzY0aJDyqdqCBMM1vkW1OVQKfzSzzDbHuSnHAtnyOElQkfBqfU8G1huKm+ F06HyAKDhI+imzE67fdPhhsxjcIqJ7Np/UVlyTZfthkqy/4RP/6B7Mf80uMNCMGl zTwvxA1uBtZ8dDVNgV52X43upTq1YE+lML7iNy/5Sy6T2qdTCiyGHrzzRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIgOEPXDDV5HOtB9GGHX23/YJS/MB8GA1UdIwQY MBaAFIpdhqq0wJdPDCf0PZaN9Cb1PfXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80Y2VhNzktMmEwOS00YWU3LWE1MGMt ZjhhODM2ZjAxYjIxLzEvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80Y2VhNzktMmEwOS00YWU3LWE1MGMtZjhhODM2ZjAxYjIx LzEvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCIMQS1V KPNAav0Y8mY0o0uHJQd3SG/tc8Qw9nwrwO4/PfPnrMFFywgDp6p/pB2yI8GvsegV vsPRN8lgB+qFB5HsSiknDvTsJ2JkuLqMBvJCml/9UnkZl1Y4Sb+xUkLY7+rrEpI6 fhOPEZBK+YZVDT1aZBkUKiUnf2m+ZVNIr93Qwo4s3raEdvzvg30jusK6XvNyEFYM QX8vYZsAZHFphIp0jM2/yofZicRRwUDR9JChjIbuvsjhXGNlmSRSnb0RCQqzZj+G SxNKQPoZDCCYsqF0Z1+QkVzYxgAuY3MfwGMgY4Xs8TKgOJnTI/39d14tcUCibc8H 2aHO9yzGZL6NyQ== -----END CERTIFICATE-----Generated at Fri Dec 12 12:59:27 2025 by rpki-client