This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json) Hash identifier: HgoRKV6ExHuMbiDScHzB1GvSRUn5f2vkLzjf2Fo93eI= Subject key identifier: 66:B0:E3:8E:F2:62:47:82:6D:E3:96:17:FE:12:73:B3:D3:57:CB:FC Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96 Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696 Certificate serial: 019B3945F684576C878F52D81BCE3AAEF41B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft Manifest number: 038F Signing time: Sat 20 Dec 2025 01:00:44 +0000 Manifest this update: Sat 20 Dec 2025 01:00:44 +0000 Manifest next update: Sun 21 Dec 2025 01:00:44 +0000 Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: TvG8hg4ZELqn1r1FXRcDpjUbZKVTT7qwoF3DWGQdpwE=) 2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:45:f6:84:57:6c:87:8f:52:d8:1b:ce:3a:ae:f4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696 Validity Not Before: Dec 20 01:00:44 2025 GMT Not After : Dec 21 01:00:44 2025 GMT Subject: CN=66b0e38ef26247826de39617fe1273b3d357cbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:4a:c0:3c:c3:b9:e8:ad:fb:e3:e9:97:91: ef:a5:87:f4:a7:59:17:ee:78:e8:03:c7:96:05:63: 66:05:3e:b5:fe:fd:b6:b2:5d:b6:15:b8:63:68:ab: 8c:5c:19:84:86:40:53:8b:35:04:cf:36:d0:53:62: dd:6c:e3:89:d9:07:49:b3:ab:fb:df:7d:da:49:24: a8:d9:64:48:0d:76:2c:1d:18:1e:cf:c5:83:30:0f: de:23:56:e7:19:7f:80:f7:9f:ab:9c:b1:90:22:02: 7e:58:d1:b1:b3:b6:3b:59:c2:f2:5d:d9:0f:5a:70: fc:41:fb:d0:b7:ea:3e:85:30:48:76:4b:07:21:e4: 2f:45:03:a1:f8:1a:3d:67:5b:2f:b7:34:a3:31:a3: 39:15:ff:69:b7:d4:37:4c:f1:98:7b:6b:de:d1:95: a9:b2:2c:af:c2:af:17:98:ce:c6:2d:2b:80:81:67: c6:b5:87:fa:ba:bb:e5:85:6d:69:18:46:02:04:13: 2b:89:e1:30:ec:3b:4f:5c:df:bf:a8:af:a0:ac:da: fb:65:11:2d:29:75:c1:dd:81:0e:1a:63:05:66:4e: f6:e8:00:8a:59:cc:e2:03:55:aa:b7:10:d8:c3:d8: 1f:21:3d:86:af:49:e0:f7:f0:76:bf:17:f5:a9:57: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:E3:8E:F2:62:47:82:6D:E3:96:17:FE:12:73:B3:D3:57:CB:FC X509v3 Authority Key Identifier: keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:08:05:ac:69:13:d4:6d:4a:fe:b5:b2:d6:06:66:c0:b5:8a: 0a:95:07:43:41:06:cb:6b:85:91:67:aa:1f:3a:7d:06:0e:42: 8f:88:71:ee:f5:07:50:ff:af:68:fc:9c:70:66:9a:d6:a3:0d: 1a:ff:e9:1e:69:b7:9a:5b:f3:d4:28:38:aa:a4:e1:52:10:c3: 27:a7:76:7e:0b:27:29:7e:46:49:a1:6e:e0:c5:09:45:ca:66: 87:64:f2:6a:40:24:ec:a0:d8:c8:55:5e:a2:7a:69:04:d3:4c: 38:57:a5:d9:7e:45:68:79:eb:2b:5c:af:51:91:f5:18:cd:fd: f4:64:f5:34:a7:04:2e:e8:91:7c:dc:ee:86:fc:c0:01:03:64: 57:0f:af:56:e6:30:f7:94:d7:0d:22:e0:31:ce:70:66:86:88: 9a:8d:ab:ca:32:a3:df:71:23:0d:74:30:40:0e:21:96:20:f2: 3b:65:2f:08:a9:8a:be:62:b9:b4:0a:c9:c1:c2:16:97:4f:90: fc:fe:ae:b4:3f:53:8f:11:bc:3a:09:c3:ec:ae:55:2c:3f:b8: 0f:0c:7f:04:fc:78:2a:14:8f:07:ad:93:b7:b2:01:b7:8a:85: da:43:67:97:1a:c2:4b:30:ab:3e:90:23:79:40:20:c0:60:28: c3:cd:aa:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RfaEV2yHj1LYG846rvQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjEzOTEwYzFmOTg3MzVlNDAxNjUwYjFkMzRiZjhiNmEw YTA2OTYwHhcNMjUxMjIwMDEwMDQ0WhcNMjUxMjIxMDEwMDQ0WjAzMTEwLwYDVQQD Eyg2NmIwZTM4ZWYyNjI0NzgyNmRlMzk2MTdmZTEyNzNiM2QzNTdjYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+dKwDzDueit++Ppl5HvpYf0p1kX 7njoA8eWBWNmBT61/v22sl22FbhjaKuMXBmEhkBTizUEzzbQU2LdbOOJ2QdJs6v7 333aSSSo2WRIDXYsHRgez8WDMA/eI1bnGX+A95+rnLGQIgJ+WNGxs7Y7WcLyXdkP WnD8QfvQt+o+hTBIdksHIeQvRQOh+Bo9Z1svtzSjMaM5Ff9pt9Q3TPGYe2ve0ZWp siyvwq8XmM7GLSuAgWfGtYf6urvlhW1pGEYCBBMrieEw7DtPXN+/qK+grNr7ZREt KXXB3YEOGmMFZk726ACKWcziA1WqtxDYw9gfIT2Gr0ng9/B2vxf1qVeKBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaw447yYkeCbeOWF/4Sc7PTV8v8MB8GA1UdIwQY MBaAFCCxORDB+Yc15AFlCx00v4tqCgaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxFNUVNSDVoelhrQVdVTEhUU19pMm9LQnBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85Y2VkMjYtNDdiMC00MjdhLTg4MWUt ZjcxM2FkNTE2MTg1LzEvSUxFNUVNSDVoelhrQVdVTEhUU19pMm9LQnBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85Y2VkMjYtNDdiMC00MjdhLTg4MWUtZjcxM2FkNTE2MTg1 LzEvSUxFNUVNSDVoelhrQVdVTEhUU19pMm9LQnBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQgFrGkT 1G1K/rWy1gZmwLWKCpUHQ0EGy2uFkWeqHzp9Bg5Cj4hx7vUHUP+vaPyccGaa1qMN Gv/pHmm3mlvz1Cg4qqThUhDDJ6d2fgsnKX5GSaFu4MUJRcpmh2TyakAk7KDYyFVe onppBNNMOFel2X5FaHnrK1yvUZH1GM399GT1NKcELuiRfNzuhvzAAQNkVw+vVuYw 95TXDSLgMc5wZoaImo2ryjKj33EjDXQwQA4hliDyO2UvCKmKvmK5tArJwcIWl0+Q /P6utD9TjxG8OgnD7K5VLD+4Dwx/BPx4KhSPB62Tt7IBt4qF2kNnlxrCSzCrPpAj eUAgwGAow82q8A== -----END CERTIFICATE-----Generated at Sat Dec 20 03:30:19 2025 by rpki-client