This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft File: iLJuRMUJzzYPfLp8ijtRNABSrzE.mft (raw, json) Hash identifier: g6ItCXl5wjH0W3EnKVDuwo/jnughFASSawuPl4Gfx7U= Subject key identifier: CA:75:E2:9C:3F:A6:6E:EF:A1:F1:A3:6D:29:CA:B9:C3:D8:15:51:9E Authority key identifier: 88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31 Certificate issuer: /CN=88b26e44c509cf360f7cba7c8a3b51340052af31 Certificate serial: 019B59777B17490D33AFA349D81B53EB0216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft Manifest number: 0A89 Signing time: Fri 26 Dec 2025 07:02:40 +0000 Manifest this update: Fri 26 Dec 2025 07:02:40 +0000 Manifest next update: Sat 27 Dec 2025 07:02:40 +0000 Files and hashes: 1: iLJuRMUJzzYPfLp8ijtRNABSrzE.crl (hash: 9f8X88LGIlCYxeVMz99/ymft4MBUO7OZnD9zgwpS+lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.crl rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:7b:17:49:0d:33:af:a3:49:d8:1b:53:eb:02:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88b26e44c509cf360f7cba7c8a3b51340052af31 Validity Not Before: Dec 26 07:02:40 2025 GMT Not After : Dec 27 07:02:40 2025 GMT Subject: CN=ca75e29c3fa66eefa1f1a36d29cab9c3d815519e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:6c:0b:01:a2:0d:34:65:57:64:4e:b9:54: f9:16:53:d9:ef:7c:c3:fd:2b:81:43:44:3b:a6:67: 11:b0:ce:1a:35:20:44:9c:12:ef:ed:3e:13:4b:3a: 38:d0:9e:d2:ce:cd:06:c5:dc:59:3e:94:24:2a:d1: a1:19:fb:47:55:b0:c8:34:19:20:5a:6e:81:cc:c6: d3:9f:14:a4:9e:25:96:08:99:5c:ce:c6:29:44:2b: 8e:66:35:96:7a:ae:2c:32:ad:79:85:c0:d7:4b:b3: df:61:11:91:4c:ac:30:1d:d5:56:0b:be:8b:50:c3: 04:50:2f:92:3d:5a:23:cb:c0:32:ca:ad:6d:d0:b8: 6b:3a:da:cf:36:bc:ae:6d:75:d0:4e:6a:3c:2b:13: 9e:40:63:45:00:49:7a:89:03:7b:26:17:e9:df:4f: da:23:6a:73:1d:20:72:26:ec:63:44:e5:3f:5d:23: 38:dd:dd:18:f2:d8:9c:fa:33:5c:fb:d2:5b:db:1f: 9e:f3:83:b7:1c:34:b8:02:18:cc:11:dd:fc:da:e5: 3e:56:4f:5a:98:cc:74:1c:42:dd:56:79:41:02:99: f5:31:42:7a:9f:c4:f4:a3:c5:46:71:c8:9f:21:9c: b4:ba:f2:2b:a4:4c:a3:57:a0:ad:e5:be:2c:90:38: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:75:E2:9C:3F:A6:6E:EF:A1:F1:A3:6D:29:CA:B9:C3:D8:15:51:9E X509v3 Authority Key Identifier: keyid:88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ee:ef:b2:d2:9d:3f:4d:eb:ff:bb:d1:2a:8a:34:3f:ba:f6: da:13:51:93:02:7e:69:3e:cd:4f:c2:2f:ea:77:bc:b6:3d:b4: 33:51:48:39:11:71:73:2d:4b:d5:4b:d5:6b:68:82:42:e2:e3: c5:4b:3d:ad:6b:7c:0d:9a:95:47:34:74:ca:47:86:a8:1c:ac: 2a:8d:67:cb:01:6c:d4:48:65:9c:e8:a5:ef:fa:f2:26:07:26: be:1e:d4:b7:f3:81:5a:f9:4d:64:96:c0:6a:4c:d5:08:01:3d: 27:84:02:17:c7:e4:bd:df:06:ce:cf:ad:42:a3:a1:4c:b8:25: 3a:34:6d:df:62:71:68:ee:9f:7d:b6:d4:01:d5:bd:30:79:e5: 08:5d:37:68:51:be:e7:23:89:af:81:f6:e9:ba:73:ee:45:a5: f1:61:de:27:67:78:d6:76:35:f2:13:1e:1b:38:3a:96:ab:c9: 16:76:68:ef:d4:e1:f1:cb:58:9b:88:e5:36:52:19:2f:d6:fa: aa:6d:c4:b9:3a:76:cb:7a:f9:19:d1:0a:87:5d:cb:cf:82:69: 8b:8e:9f:2d:a2:20:ed:aa:d9:c9:cc:1d:43:24:8a:03:0f:7d: 18:a1:48:1f:46:13:e8:23:c1:c0:bf:22:75:71:55:9e:b8:b9: e6:db:7a:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd3sXSQ0zr6NJ2BtT6wIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YjI2ZTQ0YzUwOWNmMzYwZjdjYmE3YzhhM2I1MTM0MDA1 MmFmMzEwHhcNMjUxMjI2MDcwMjQwWhcNMjUxMjI3MDcwMjQwWjAzMTEwLwYDVQQD EyhjYTc1ZTI5YzNmYTY2ZWVmYTFmMWEzNmQyOWNhYjljM2Q4MTU1MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaFsCwGiDTRlV2ROuVT5FlPZ73zD /SuBQ0Q7pmcRsM4aNSBEnBLv7T4TSzo40J7Szs0GxdxZPpQkKtGhGftHVbDINBkg Wm6BzMbTnxSkniWWCJlczsYpRCuOZjWWeq4sMq15hcDXS7PfYRGRTKwwHdVWC76L UMMEUC+SPVojy8Ayyq1t0LhrOtrPNryubXXQTmo8KxOeQGNFAEl6iQN7Jhfp30/a I2pzHSByJuxjROU/XSM43d0Y8tic+jNc+9Jb2x+e84O3HDS4AhjMEd382uU+Vk9a mMx0HELdVnlBApn1MUJ6n8T0o8VGccifIZy0uvIrpEyjV6Ct5b4skDhWrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMp14pw/pm7vofGjbSnKucPYFVGeMB8GA1UdIwQY MBaAFIiybkTFCc82D3y6fIo7UTQAUq8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUxKdVJNVUp6ellQZkxwOGlqdFJOQUJTcnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYmQ2Y2MtYzZlZi00ZDdhLTk4NzYt MGVmNzkwYTdiOTBlLzEvaUxKdVJNVUp6ellQZkxwOGlqdFJOQUJTcnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kYmQ2Y2MtYzZlZi00ZDdhLTk4NzYtMGVmNzkwYTdiOTBl LzEvaUxKdVJNVUp6ellQZkxwOGlqdFJOQUJTcnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHu7vstKd P03r/7vRKoo0P7r22hNRkwJ+aT7NT8Iv6ne8tj20M1FIORFxcy1L1UvVa2iCQuLj xUs9rWt8DZqVRzR0ykeGqBysKo1nywFs1EhlnOil7/ryJgcmvh7Ut/OBWvlNZJbA akzVCAE9J4QCF8fkvd8Gzs+tQqOhTLglOjRt32JxaO6ffbbUAdW9MHnlCF03aFG+ 5yOJr4H26bpz7kWl8WHeJ2d41nY18hMeGzg6lqvJFnZo79Th8ctYm4jlNlIZL9b6 qm3EuTp2y3r5GdEKh13Lz4Jpi46fLaIg7arZycwdQySKAw99GKFIH0YT6CPBwL8i dXFVnri55tt66g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:59 2025 by rpki-client