This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft File: ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json) Hash identifier: quBwVksa1OnO0XOJaKoBSwXzjTSsvd+FBEYqe3K9yls= Subject key identifier: 54:DF:F0:80:3B:7F:0E:77:47:28:26:DA:E7:C5:1B:5B:34:F3:42:4A Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE Certificate issuer: /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee Certificate serial: 019B5A886BC37607DEA68ECECF9FE9619FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 12:00:48 +0000 Manifest this update: Fri 26 Dec 2025 12:00:48 +0000 Manifest next update: Sat 27 Dec 2025 12:00:48 +0000 Files and hashes: 1: gx1SCX17EN8yNFFOaZKqHyy38bg.roa (hash: y86l006aIRQbh6g6sMv1/V04L9sTmUKHfB0xrZAQk4Q=) 2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: l3j3cb7k4NjWMhfgH/YC/7G8kFM7HkY+ZajZgDnT1mE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:6b:c3:76:07:de:a6:8e:ce:cf:9f:e9:61:9f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee Validity Not Before: Dec 26 12:00:48 2025 GMT Not After : Dec 27 12:00:48 2025 GMT Subject: CN=54dff0803b7f0e77472826dae7c51b5b34f3424a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:03:fe:f9:9b:fa:98:54:28:20:38:ed:0c: bd:8c:14:8c:f8:48:cb:68:f4:6e:0b:52:c4:48:03: e5:14:bc:c5:90:9b:25:67:e9:db:69:63:87:e4:74: 49:1a:83:23:73:ab:ec:1f:5e:ee:9f:c8:64:d5:97: 2f:e1:e5:43:cb:cb:7c:a8:5a:c2:1a:dc:54:5c:36: 6a:ce:68:b9:df:87:e3:1d:00:03:d9:c6:40:c7:9d: 3c:fd:48:34:53:91:2b:34:34:24:22:38:f4:73:27: 85:98:d1:3b:39:76:43:86:09:a9:81:a8:2a:40:fc: df:75:83:80:96:7c:75:81:96:b0:c5:fa:c6:78:2c: 61:3f:6a:5c:5d:70:cf:e0:93:e0:4d:88:fd:16:f4: c8:8e:b1:ac:3e:9f:4e:ce:0c:54:1d:a2:71:38:18: db:d8:04:82:05:a8:8d:7d:ee:01:fe:fe:7b:66:41: 4c:e2:48:8c:6e:39:3b:fc:e3:c9:6c:9e:a4:bd:28: 9b:1b:0c:bb:f7:75:b6:57:61:9e:2d:09:27:66:64: 9f:35:0a:8c:80:64:c9:5d:63:4c:a9:5e:89:0c:58: 79:83:17:55:ef:a4:34:5e:f3:45:4d:59:6f:51:81: 73:f3:65:5f:10:a6:0c:ce:ad:91:7e:41:e4:4b:98: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DF:F0:80:3B:7F:0E:77:47:28:26:DA:E7:C5:1B:5B:34:F3:42:4A X509v3 Authority Key Identifier: keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:26:c2:4c:ea:07:32:b2:53:ea:64:9d:64:7c:cc:f9:2e:ff: fa:c2:71:cb:96:49:ea:72:42:17:c0:8c:94:4c:c2:09:8c:c3: 71:26:50:09:2d:f0:18:5d:8d:fd:ab:cb:0a:87:32:44:ff:89: e3:37:ea:4c:22:46:59:86:dc:92:42:60:61:d8:31:d8:94:06: d8:87:1d:7a:bf:08:ae:8e:57:a3:96:fa:51:89:14:7e:a3:c2: 88:03:68:87:da:52:88:e7:19:57:ee:54:63:be:e7:0b:76:bc: e0:54:a2:f2:25:5e:fb:86:15:2b:e1:92:3f:fb:86:73:08:44: 3e:6b:80:26:70:ca:5f:04:93:e2:d0:8c:3e:8d:27:f4:bc:3d: a5:8a:a6:a8:b8:c4:62:5e:63:76:2c:8b:8e:ce:e3:88:9d:39: ed:fb:89:64:74:5d:09:15:42:ba:a3:39:ac:89:c8:df:eb:2e: 9a:4e:20:83:11:10:1a:01:87:18:81:18:08:0b:db:6b:9c:fd: d3:28:3d:6a:80:23:8f:6e:0e:3c:f4:8e:9f:ec:ed:52:91:89: 05:c5:ae:b8:04:97:a1:ae:68:32:4a:e5:b3:91:72:f3:c0:f2: a9:e7:c5:b4:e9:99:b6:f0:ad:dd:b5:09:e9:8a:f8:eb:ea:c2: ed:bf:41:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiGvDdgfepo7Oz5/pYZ+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTUyYTg2ZTMxYjY5ZTVkNTMyMGVkZTgxZDM0YmIxMjhh NDVjZWUwHhcNMjUxMjI2MTIwMDQ4WhcNMjUxMjI3MTIwMDQ4WjAzMTEwLwYDVQQD Eyg1NGRmZjA4MDNiN2YwZTc3NDcyODI2ZGFlN2M1MWI1YjM0ZjM0MjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFsD/vmb+phUKCA47Qy9jBSM+EjL aPRuC1LESAPlFLzFkJslZ+nbaWOH5HRJGoMjc6vsH17un8hk1Zcv4eVDy8t8qFrC GtxUXDZqzmi534fjHQAD2cZAx508/Ug0U5ErNDQkIjj0cyeFmNE7OXZDhgmpgagq QPzfdYOAlnx1gZawxfrGeCxhP2pcXXDP4JPgTYj9FvTIjrGsPp9OzgxUHaJxOBjb 2ASCBaiNfe4B/v57ZkFM4kiMbjk7/OPJbJ6kvSibGwy793W2V2GeLQknZmSfNQqM gGTJXWNMqV6JDFh5gxdV76Q0XvNFTVlvUYFz82VfEKYMzq2RfkHkS5iSmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTf8IA7fw53Rygm2ufFG1s080JKMB8GA1UdIwQY MBaAFIpVKobjG2nl1TIO3oHTS7EopFzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lOTU0YjktODczOC00NDk2LTg5YWQt NzhhMTI2YmYwYWRjLzEvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lOTU0YjktODczOC00NDk2LTg5YWQtNzhhMTI2YmYwYWRj LzEvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaybCTOoH MrJT6mSdZHzM+S7/+sJxy5ZJ6nJCF8CMlEzCCYzDcSZQCS3wGF2N/avLCocyRP+J 4zfqTCJGWYbckkJgYdgx2JQG2Icder8Iro5Xo5b6UYkUfqPCiANoh9pSiOcZV+5U Y77nC3a84FSi8iVe+4YVK+GSP/uGcwhEPmuAJnDKXwST4tCMPo0n9Lw9pYqmqLjE Yl5jdiyLjs7jiJ057fuJZHRdCRVCuqM5rInI3+sumk4ggxEQGgGHGIEYCAvba5z9 0yg9aoAjj24OPPSOn+ztUpGJBcWuuASXoa5oMkrls5Fy88DyqefFtOmZtvCt3bUJ 6Yr46+rC7b9B3A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:23 2025 by rpki-client