This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft File: ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json) Hash identifier: FezhZQaErQU+2rtj/ZOv6W2VqV903ArLqh8VEHBtk34= Subject key identifier: 43:91:8B:07:13:0B:B0:84:7F:CF:F3:8B:AA:CC:1A:43:BF:F0:BD:51 Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c Certificate serial: 019B3BD96D9F924C5EAD5FCFF7B2CC73C0C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft Manifest number: 0123 Signing time: Sat 20 Dec 2025 13:01:03 +0000 Manifest this update: Sat 20 Dec 2025 13:01:03 +0000 Manifest next update: Sun 21 Dec 2025 13:01:03 +0000 Files and hashes: 1: bvDQqROOqfcLitLUBX84FPsCs1c.roa (hash: 5rWrrkrkVV/HRYCs0+RexUArPHHbqW+EtH7f8xFEtLs=) 2: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: /fwLolNKyY5Ek3yC+fiOt1zkKD3R0lpXU9dnaRDKYFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:6d:9f:92:4c:5e:ad:5f:cf:f7:b2:cc:73:c0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c Validity Not Before: Dec 20 13:01:03 2025 GMT Not After : Dec 21 13:01:03 2025 GMT Subject: CN=43918b07130bb0847fcff38baacc1a43bff0bd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:92:f9:23:b2:bd:10:69:25:f0:4e:e1:c8:06: 64:31:55:0c:8e:e2:46:8c:bd:2c:93:7d:15:6f:30: a0:19:6c:1a:44:45:15:60:5b:fa:31:0e:1a:31:a9: 2d:30:a5:50:e8:3a:6e:14:5f:30:a4:95:77:dc:e5: ee:e2:30:7d:8d:39:f1:8d:2f:26:08:c5:fa:b5:16: 40:61:9d:92:66:ab:4b:22:0e:3c:51:d5:f4:d4:ce: 06:d2:6a:05:05:e0:78:ae:f8:2b:5c:61:5e:cb:df: d1:ae:85:71:8d:ac:58:41:05:1b:50:bd:45:37:34: c1:56:63:19:5a:be:97:4d:b4:15:7e:06:2f:2d:55: f9:ee:c2:db:72:c1:9c:7e:11:a2:3e:46:4b:f9:10: 92:4b:b3:fd:4e:a6:fd:78:69:e0:ae:34:e9:18:f1: 3f:90:cf:ae:6f:28:1e:f6:35:37:2b:b9:42:b1:84: 51:24:23:74:46:07:23:02:7c:10:6c:6c:7d:9d:47: ff:db:59:6c:88:94:9a:67:1f:2e:14:a4:4d:0e:e3: 33:d1:53:eb:85:bd:c4:7b:d4:5f:78:f9:e2:03:93: 68:75:44:3b:3b:47:13:77:ba:06:c1:75:2f:26:b8: 36:5b:97:4a:7c:78:e9:a2:89:7b:e0:a2:de:41:39: b9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:91:8B:07:13:0B:B0:84:7F:CF:F3:8B:AA:CC:1A:43:BF:F0:BD:51 X509v3 Authority Key Identifier: keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:7f:5f:80:2e:2c:28:1b:86:e0:a6:aa:27:ac:65:12:51:73: 7f:ca:c9:31:fa:2a:14:3a:49:21:77:f4:07:e7:8d:28:6f:31: e7:eb:3c:14:28:c0:f3:3c:7b:2d:db:32:e3:02:a4:31:34:e1: c5:8e:e4:4b:95:8d:51:0d:87:20:c2:41:c8:49:e5:c3:f0:01: 4d:f3:b4:de:55:22:e0:68:84:c3:a3:b7:20:77:b9:39:15:f3: 82:4c:ba:8b:4f:3f:d3:32:27:01:7f:28:fb:87:4d:19:93:f2: 5a:82:31:7e:f4:11:a7:d6:f7:26:01:56:af:5c:55:dc:dc:8c: 83:ec:b2:71:01:1a:bc:54:ce:df:31:d8:c2:88:9b:c3:9f:5a: 48:cb:9b:15:a4:2a:05:18:62:df:b4:0d:0a:02:81:fe:69:b0: 81:3e:3c:1d:57:b4:74:e4:8b:a8:fb:37:7c:60:8d:1c:cb:96: 51:76:4a:74:4e:da:59:14:18:86:6c:5c:cc:61:df:61:3b:b2: d4:56:c1:9f:52:18:45:7e:bf:e8:6d:99:e1:1e:91:f5:2f:98: 44:c6:21:0d:01:86:0b:2e:e4:1b:5e:52:70:96:45:6e:21:29: 71:70:b5:0d:2d:fb:24:fe:53:46:3a:bc:11:dd:ba:92:4f:73: eb:2a:54:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72W2fkkxerV/P97LMc8DHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTUyZGQ4Njk1ZDQ4M2Q0N2NlNGNmODQ1YjkwNmIxNzUy NzZhNWMwHhcNMjUxMjIwMTMwMTAzWhcNMjUxMjIxMTMwMTAzWjAzMTEwLwYDVQQD Eyg0MzkxOGIwNzEzMGJiMDg0N2ZjZmYzOGJhYWNjMWE0M2JmZjBiZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJL5I7K9EGkl8E7hyAZkMVUMjuJG jL0sk30VbzCgGWwaREUVYFv6MQ4aMaktMKVQ6DpuFF8wpJV33OXu4jB9jTnxjS8m CMX6tRZAYZ2SZqtLIg48UdX01M4G0moFBeB4rvgrXGFey9/RroVxjaxYQQUbUL1F NzTBVmMZWr6XTbQVfgYvLVX57sLbcsGcfhGiPkZL+RCSS7P9Tqb9eGngrjTpGPE/ kM+ubyge9jU3K7lCsYRRJCN0RgcjAnwQbGx9nUf/21lsiJSaZx8uFKRNDuMz0VPr hb3Ee9RfePniA5NodUQ7O0cTd7oGwXUvJrg2W5dKfHjpool74KLeQTm5MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEORiwcTC7CEf8/zi6rMGkO/8L1RMB8GA1UdIwQY MBaAFIpVLdhpXUg9R85M+EW5BrF1J2pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxVdDJHbGRTRDFIemt6NFJia0dzWFVuYWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MjA2MjEtOThiOS00OTYxLWEyMzAt MjliM2YwMjcyYjlmLzEvaWxVdDJHbGRTRDFIemt6NFJia0dzWFVuYWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MjA2MjEtOThiOS00OTYxLWEyMzAtMjliM2YwMjcyYjlm LzEvaWxVdDJHbGRTRDFIemt6NFJia0dzWFVuYWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsn9fgC4s KBuG4KaqJ6xlElFzf8rJMfoqFDpJIXf0B+eNKG8x5+s8FCjA8zx7Ldsy4wKkMTTh xY7kS5WNUQ2HIMJByEnlw/ABTfO03lUi4GiEw6O3IHe5ORXzgky6i08/0zInAX8o +4dNGZPyWoIxfvQRp9b3JgFWr1xV3NyMg+yycQEavFTO3zHYwoibw59aSMubFaQq BRhi37QNCgKB/mmwgT48HVe0dOSLqPs3fGCNHMuWUXZKdE7aWRQYhmxczGHfYTuy 1FbBn1IYRX6/6G2Z4R6R9S+YRMYhDQGGCy7kG15ScJZFbiEpcXC1DS37JP5TRjq8 Ed26kk9z6ypUyA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:00:09 2025 by rpki-client