This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json) Hash identifier: ByV9Nw8I8laCUjrKiZRqGlida0ebaCoHW7y1hmzhxK8= Subject key identifier: EE:66:3C:90:AD:C7:C0:04:E9:2A:F4:A7:17:2E:FB:CD:DF:AD:C9:60 Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0 Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0 Certificate serial: 019B07B57D9DF6485F1442537A7686B7A519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft Manifest number: 14A8 Signing time: Wed 10 Dec 2025 10:01:33 +0000 Manifest this update: Wed 10 Dec 2025 10:01:33 +0000 Manifest next update: Thu 11 Dec 2025 10:01:33 +0000 Files and hashes: 1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=) 2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: ICKnON+TKVOeju/jinMIutkel0+s9Ptp4ES82FLmUJY=) 3: XwcmvCdfYih2y5WbBoBCn2IfFV8.roa (hash: f+XB0GSqJ+7PsH+7sWsNx0utGPF06ZO3iKtvMRIKXy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:7d:9d:f6:48:5f:14:42:53:7a:76:86:b7:a5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0 Validity Not Before: Dec 10 10:01:33 2025 GMT Not After : Dec 11 10:01:33 2025 GMT Subject: CN=ee663c90adc7c004e92af4a7172efbcddfadc960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:26:f9:69:21:cb:83:31:10:f8:01:63:f3: 0f:e5:39:b2:89:03:70:ad:f4:b1:ba:c6:7a:c2:ac: a4:35:67:6b:11:45:d8:70:e6:71:70:8a:c5:13:e3: 71:56:23:04:6c:22:00:28:f2:52:78:2d:61:b6:25: dc:91:21:7c:9b:be:ed:46:66:f9:e8:bd:ed:54:67: 20:ae:35:d7:09:65:22:dd:53:d6:2e:fb:4b:16:75: da:24:bf:03:53:9c:68:61:39:6f:41:85:ca:e8:12: b0:11:c8:5e:7c:2c:f6:4a:6e:39:8a:46:dc:2c:b2: 15:c3:07:5e:d5:e9:cc:fb:cc:e1:5f:89:1e:df:29: ef:ba:06:fc:e2:f9:a7:c4:54:c9:12:cf:9f:c0:e7: 9d:e6:82:7c:6b:8f:61:b1:ee:18:b5:b0:80:e6:66: 89:6f:55:e3:51:29:21:f3:68:ce:a6:90:a1:90:f8: f1:72:e0:e5:ed:dd:4c:8f:56:20:7c:6e:80:52:0e: f3:ea:08:58:41:ef:9c:c7:88:00:9a:52:cb:36:d4: 09:65:87:fe:b4:74:1a:45:cb:af:40:47:99:40:e9: 50:55:a6:7a:09:43:b3:48:a5:59:a4:43:32:1a:ca: dc:1a:04:78:41:55:fb:e4:83:8e:ce:5d:03:a0:3f: f0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:66:3C:90:AD:C7:C0:04:E9:2A:F4:A7:17:2E:FB:CD:DF:AD:C9:60 X509v3 Authority Key Identifier: keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f8:37:4c:56:98:f9:8d:2e:95:f4:70:51:a2:10:bc:8a:e2: bb:63:75:b2:78:69:d9:c8:86:49:f8:e8:04:0d:95:6c:7d:01: 21:9a:71:31:bd:cc:2d:6f:23:d3:e1:8c:9d:44:1a:34:e2:97: 82:b1:81:81:25:a2:51:d4:98:aa:e4:db:90:10:fc:94:ba:f6: 10:92:b7:41:61:85:73:45:fd:f5:c1:c7:9c:1e:22:be:28:e9: cd:db:71:d9:8f:2a:ef:6a:07:1b:56:07:98:01:1f:91:f7:b4: 63:8d:3f:27:4c:4e:1b:ca:3e:19:be:5c:9a:71:9d:d8:6d:5d: ed:54:60:89:ed:f6:3e:e2:5c:1a:61:3b:d3:3b:4f:dc:24:7b: d9:b5:3e:8b:63:61:4f:c6:cb:6c:e0:97:d3:94:a2:2b:46:c2: f1:b1:3f:9a:98:ff:55:51:89:bc:b8:dd:af:fd:4f:de:97:04: 5c:44:da:42:6d:7a:4f:75:75:2f:8a:12:99:9c:b4:0e:3d:4b: 88:2f:dc:53:68:f7:5d:5d:17:00:2c:48:6b:55:7e:4a:28:6e: 83:38:69:d4:ba:5f:92:98:14:4f:e0:8e:de:d4:f9:fb:04:e2: be:f1:5c:bc:ec:17:24:3c:38:1f:00:93:28:86:3f:d5:84:2a: a7:ba:ee:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtX2d9khfFEJTenaGt6UZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGY4YmY4ZDAxMmEyNWNjY2VlMjEwNjgwM2Q3MDY0MzIw ZWQwZjAwHhcNMjUxMjEwMTAwMTMzWhcNMjUxMjExMTAwMTMzWjAzMTEwLwYDVQQD EyhlZTY2M2M5MGFkYzdjMDA0ZTkyYWY0YTcxNzJlZmJjZGRmYWRjOTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Am+Wkhy4MxEPgBY/MP5TmyiQNw rfSxusZ6wqykNWdrEUXYcOZxcIrFE+NxViMEbCIAKPJSeC1htiXckSF8m77tRmb5 6L3tVGcgrjXXCWUi3VPWLvtLFnXaJL8DU5xoYTlvQYXK6BKwEchefCz2Sm45ikbc LLIVwwde1enM+8zhX4ke3ynvugb84vmnxFTJEs+fwOed5oJ8a49hse4YtbCA5maJ b1XjUSkh82jOppChkPjxcuDl7d1Mj1YgfG6AUg7z6ghYQe+cx4gAmlLLNtQJZYf+ tHQaRcuvQEeZQOlQVaZ6CUOzSKVZpEMyGsrcGgR4QVX75IOOzl0DoD/w3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5mPJCtx8AE6Sr0pxcu+83frclgMB8GA1UdIwQY MBaAFCCPi/jQEqJczO4hBoA9cGQyDtDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEt ODA1NWVjMTBmZjBhLzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEtODA1NWVjMTBmZjBh LzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/g3TFaY +Y0ulfRwUaIQvIriu2N1snhp2ciGSfjoBA2VbH0BIZpxMb3MLW8j0+GMnUQaNOKX grGBgSWiUdSYquTbkBD8lLr2EJK3QWGFc0X99cHHnB4ivijpzdtx2Y8q72oHG1YH mAEfkfe0Y40/J0xOG8o+Gb5cmnGd2G1d7VRgie32PuJcGmE70ztP3CR72bU+i2Nh T8bLbOCX05SiK0bC8bE/mpj/VVGJvLjdr/1P3pcEXETaQm16T3V1L4oSmZy0Dj1L iC/cU2j3XV0XACxIa1V+Sihugzhp1LpfkpgUT+CO3tT5+wTivvFcvOwXJDw4HwCT KIY/1YQqp7ru/Q== -----END CERTIFICATE-----Generated at Wed Dec 10 18:26:45 2025 by rpki-client