This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft File: ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json) Hash identifier: 6X97FsZhAiQJUo5L1WsyMuNhag2iYOLD0HTsnwfR41Y= Subject key identifier: A0:2E:25:83:84:E5:43:79:CF:3B:A6:44:BB:AB:D7:6B:44:80:16:CE Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e Certificate serial: 019B424A8D4C8F37CD52E66C811277EB9310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft Manifest number: 1185 Signing time: Sun 21 Dec 2025 19:02:20 +0000 Manifest this update: Sun 21 Dec 2025 19:02:20 +0000 Manifest next update: Mon 22 Dec 2025 19:02:20 +0000 Files and hashes: 1: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: Fz4wrRJcFb4Av/Y6DnPV2tGI+POYMBl9r3Gbxep0yOc=) 2: yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa (hash: 6I7n0xCvQ3FC2MV2Pqk6KjdQE1M7SQrxGUU9YrmgwbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:8d:4c:8f:37:cd:52:e6:6c:81:12:77:eb:93:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e Validity Not Before: Dec 21 19:02:20 2025 GMT Not After : Dec 22 19:02:20 2025 GMT Subject: CN=a02e258384e54379cf3ba644bbabd76b448016ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:a6:8f:c2:98:fc:eb:e6:83:e7:96:b6:19: 12:c6:f8:d6:a7:02:56:8b:49:fc:b9:ba:45:9c:dc: dd:9b:28:b3:e3:fb:10:c2:46:35:60:8f:39:7e:8f: cf:c0:ac:a1:a7:d0:0c:6e:04:f7:99:b1:64:0d:d3: e6:a7:a7:9b:e7:cb:5c:9c:ca:b0:47:01:02:e9:12: cb:60:f6:22:3a:27:98:22:9f:1b:55:74:86:ce:b7: c5:6e:a5:85:1d:9d:5a:04:87:56:a4:4f:78:cd:53: 1b:2d:d6:20:af:a9:ef:fc:58:2d:b9:f8:74:62:01: 31:c9:bd:4f:13:1b:78:1a:2c:90:b3:fd:e1:eb:82: 46:8d:4c:a1:d8:6d:44:40:cc:d0:de:ba:a1:9d:7f: 01:c6:00:32:d9:8b:68:d5:83:9d:1f:70:fe:db:d9: 76:a0:d2:0d:68:ea:2d:6b:b6:7c:6b:8d:b8:3e:ca: 3e:c4:99:d2:6f:8b:d5:4f:9a:cc:ec:ad:f1:18:68: 76:58:c1:e0:04:23:71:f2:9d:9d:d6:65:de:40:4c: 53:db:cb:e5:f8:29:e8:b6:8d:bd:17:8f:43:b5:a7: d5:57:1e:2e:3a:c9:c1:38:b2:37:8b:ea:db:cd:65: f9:df:05:7a:c1:a2:a5:92:fc:cf:4e:02:c0:c8:50: e3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2E:25:83:84:E5:43:79:CF:3B:A6:44:BB:AB:D7:6B:44:80:16:CE X509v3 Authority Key Identifier: keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:73:75:2d:74:ad:55:e4:16:91:1b:2c:d4:5e:d3:3e:10:2b: 3b:22:c4:1b:8e:2b:3e:1a:37:f8:24:92:5c:c0:54:7f:e7:38: 4d:af:b2:f3:16:bd:7a:fd:17:5a:e9:dc:ae:07:00:1a:fa:2e: 41:40:b4:68:22:c3:42:d6:74:ea:94:f5:e5:e1:d4:de:e4:e3: 11:3f:dc:60:a4:4b:b0:63:02:04:b5:7b:8c:aa:e9:91:09:57: 7a:6c:d9:70:f0:50:a2:8e:8f:a9:ac:20:91:eb:24:2f:2f:44: 0b:84:b0:15:5e:98:41:6c:a8:f5:68:8c:e9:64:71:b7:d4:78: f3:10:59:da:12:25:44:a6:51:31:d8:0d:24:af:f6:cb:31:74: a5:66:92:25:d8:fa:81:28:88:dc:a6:37:d6:ee:5d:76:c1:f8: a4:56:7b:99:80:62:17:07:a5:db:1d:2d:6f:50:a3:77:45:3a: 71:a7:13:bb:2e:84:89:c5:00:46:42:82:b9:be:1e:17:05:c4: 01:5d:1f:0f:74:d7:e6:ac:24:98:3e:9c:58:e5:c2:07:ea:65: 33:16:11:19:7d:91:fe:40:1f:d2:41:d3:ac:9d:f3:a3:44:92: c6:8b:14:cc:da:43:f3:b3:3b:e5:0c:7b:d8:2b:c1:8a:8b:3b: 57:9d:db:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSo1MjzfNUuZsgRJ365MQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTVmNDg5OWMyNDZkMTc1NGExNjg4MmQwZTc2ODA3ZWI4 ZTJiNWUwHhcNMjUxMjIxMTkwMjIwWhcNMjUxMjIyMTkwMjIwWjAzMTEwLwYDVQQD EyhhMDJlMjU4Mzg0ZTU0Mzc5Y2YzYmE2NDRiYmFiZDc2YjQ0ODAxNmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H2mj8KY/Ovmg+eWthkSxvjWpwJW i0n8ubpFnNzdmyiz4/sQwkY1YI85fo/PwKyhp9AMbgT3mbFkDdPmp6eb58tcnMqw RwEC6RLLYPYiOieYIp8bVXSGzrfFbqWFHZ1aBIdWpE94zVMbLdYgr6nv/Fgtufh0 YgExyb1PExt4GiyQs/3h64JGjUyh2G1EQMzQ3rqhnX8BxgAy2Yto1YOdH3D+29l2 oNINaOota7Z8a424Pso+xJnSb4vVT5rM7K3xGGh2WMHgBCNx8p2d1mXeQExT28vl +Cnoto29F49DtafVVx4uOsnBOLI3i+rbzWX53wV6waKlkvzPTgLAyFDjEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAuJYOE5UN5zzumRLur12tEgBbOMB8GA1UdIwQY MBaAFIpV9ImcJG0XVKFogtDnaAfrjiteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAt YmVkYWZiMDkyMmRkLzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAtYmVkYWZiMDkyMmRk LzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnN1LXSt VeQWkRss1F7TPhArOyLEG44rPho3+CSSXMBUf+c4Ta+y8xa9ev0XWuncrgcAGvou QUC0aCLDQtZ06pT15eHU3uTjET/cYKRLsGMCBLV7jKrpkQlXemzZcPBQoo6Pqawg keskLy9EC4SwFV6YQWyo9WiM6WRxt9R48xBZ2hIlRKZRMdgNJK/2yzF0pWaSJdj6 gSiI3KY31u5ddsH4pFZ7mYBiFwel2x0tb1Cjd0U6cacTuy6EicUARkKCub4eFwXE AV0fD3TX5qwkmD6cWOXCB+plMxYRGX2R/kAf0kHTrJ3zo0SSxosUzNpD87M75Qx7 2CvBios7V53b8Q== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:42 2025 by rpki-client