This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft File: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json) Hash identifier: SRkvmKvITduR07Ui3GAg3QBS2ziPa8RuF13U3Ix78wk= Subject key identifier: 12:CF:5A:6E:31:2D:F7:25:C2:EB:95:88:F4:65:B9:D9:30:47:D3:D3 Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92 Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92 Certificate serial: 019B0E92C9CD6C6EA5EAE8537B54CFCF62EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft Manifest number: 01DB Signing time: Thu 11 Dec 2025 18:00:59 +0000 Manifest this update: Thu 11 Dec 2025 18:00:59 +0000 Manifest next update: Fri 12 Dec 2025 18:00:59 +0000 Files and hashes: 1: 51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa (hash: kL30wYXOZY9LJWeAQp8i76XhBLFPrIojNg32/XqLy4o=) 2: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: 6v+u5PrnWqGdgwefKmefY66ju+H3c57ZUioTpKr9vYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:c9:cd:6c:6e:a5:ea:e8:53:7b:54:cf:cf:62:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=225326a0b249d2109f5292961392495071d89c92 Validity Not Before: Dec 11 18:00:59 2025 GMT Not After : Dec 12 18:00:59 2025 GMT Subject: CN=12cf5a6e312df725c2eb9588f465b9d93047d3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:f4:e9:36:9f:66:0b:85:84:1b:99:e5:12: 07:e7:99:ec:86:2e:24:03:f0:d3:ec:dc:54:53:76: 67:c4:9c:c5:58:7a:4e:a3:a6:2d:06:ff:39:23:be: f6:6f:a5:9a:2a:72:7b:7e:e6:96:db:20:34:d2:d5: bc:d2:1a:33:66:f2:60:90:75:be:2a:29:41:58:aa: e4:37:33:65:74:ff:92:37:f7:88:8e:6f:e2:19:b9: 95:e3:9f:2c:39:7a:7b:3c:29:1f:3f:d3:c3:14:a5: 13:ab:fe:65:c5:18:50:69:ee:1f:37:59:1e:5d:d6: c2:fa:84:73:4e:1c:34:62:fd:2f:da:c7:5c:52:fb: 7b:3c:f3:90:87:74:15:6d:97:66:93:ec:cd:31:1c: 47:24:6a:a3:26:a3:3c:c9:6f:77:59:d6:55:e5:f3: 39:ed:f1:91:0d:38:de:09:b2:37:a3:5b:32:4d:1a: a3:23:b4:b7:17:ae:f1:0c:3f:85:c7:46:92:9a:e6: d8:6e:b8:65:2d:3e:a7:38:74:d6:69:dd:06:cf:5a: 24:67:6e:46:44:db:bd:1a:1c:52:aa:c8:2b:31:7e: 1d:09:fc:3d:41:aa:0d:03:a7:8d:be:38:f8:0d:34: 2d:0c:b2:e5:50:ab:0e:90:09:a1:6f:b9:7f:64:ac: 4e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CF:5A:6E:31:2D:F7:25:C2:EB:95:88:F4:65:B9:D9:30:47:D3:D3 X509v3 Authority Key Identifier: keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:fc:86:64:17:8e:13:13:60:80:e8:f9:61:5b:d0:7f:8b:63: ce:6d:b1:58:ac:39:03:4b:48:33:6b:a3:21:64:2d:45:ab:5d: 56:fc:c8:65:8f:b2:84:98:3b:65:a0:db:00:44:d3:d4:74:88: 6f:43:8c:1c:03:e9:e6:23:a6:1f:53:2d:8f:09:09:aa:f8:1a: 35:b6:e4:a6:14:03:03:2c:88:0c:04:c9:b8:87:3e:dd:e7:16: 4c:0e:e7:fd:30:54:c8:9e:22:5a:9d:1b:82:8d:5c:9d:4a:c2: c6:45:13:25:0c:e2:bb:f3:b5:f4:bc:2d:f2:b6:0c:4a:f3:41: e7:6e:08:63:2b:63:33:58:8f:4d:7f:96:55:c3:43:0b:73:d1: 2d:5f:b0:1b:b6:c7:70:88:45:63:e4:7a:9d:d7:31:3e:86:f9: c8:9a:48:39:94:84:b6:6b:21:87:36:69:df:31:5e:94:c8:28: 48:41:9e:f9:27:eb:a8:9a:37:65:db:b1:dd:cd:18:2c:d9:fd: 43:64:dd:1c:d5:8a:f6:29:07:87:86:69:ce:3f:a0:22:e3:41: f0:0c:fd:d8:e8:df:8c:ec:f2:25:28:77:91:9b:26:6a:af:34: 09:56:38:cb:c1:db:74:f7:d7:22:c9:c4:da:2b:89:36:0c:81: f8:9b:7e:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOksnNbG6l6uhTe1TPz2LvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNTMyNmEwYjI0OWQyMTA5ZjUyOTI5NjEzOTI0OTUwNzFk ODljOTIwHhcNMjUxMjExMTgwMDU5WhcNMjUxMjEyMTgwMDU5WjAzMTEwLwYDVQQD EygxMmNmNWE2ZTMxMmRmNzI1YzJlYjk1ODhmNDY1YjlkOTMwNDdkM2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp/06TafZguFhBuZ5RIH55nshi4k A/DT7NxUU3ZnxJzFWHpOo6YtBv85I772b6WaKnJ7fuaW2yA00tW80hozZvJgkHW+ KilBWKrkNzNldP+SN/eIjm/iGbmV458sOXp7PCkfP9PDFKUTq/5lxRhQae4fN1ke XdbC+oRzThw0Yv0v2sdcUvt7PPOQh3QVbZdmk+zNMRxHJGqjJqM8yW93WdZV5fM5 7fGRDTjeCbI3o1syTRqjI7S3F67xDD+Fx0aSmubYbrhlLT6nOHTWad0Gz1okZ25G RNu9GhxSqsgrMX4dCfw9QaoNA6eNvjj4DTQtDLLlUKsOkAmhb7l/ZKxO7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLPWm4xLfclwuuViPRludkwR9PTMB8GA1UdIwQY MBaAFCJTJqCySdIQn1KSlhOSSVBx2JySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWxNbW9MSkowaENmVXBLV0U1SkpVSEhZbkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yOGMyYzAtZTk4My00NmFlLThiODUt OWZjOTMzZWY2MTI3LzEvSWxNbW9MSkowaENmVXBLV0U1SkpVSEhZbkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yOGMyYzAtZTk4My00NmFlLThiODUtOWZjOTMzZWY2MTI3 LzEvSWxNbW9MSkowaENmVXBLV0U1SkpVSEhZbkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPyGZBeO ExNggOj5YVvQf4tjzm2xWKw5A0tIM2ujIWQtRatdVvzIZY+yhJg7ZaDbAETT1HSI b0OMHAPp5iOmH1MtjwkJqvgaNbbkphQDAyyIDATJuIc+3ecWTA7n/TBUyJ4iWp0b go1cnUrCxkUTJQziu/O19Lwt8rYMSvNB524IYytjM1iPTX+WVcNDC3PRLV+wG7bH cIhFY+R6ndcxPob5yJpIOZSEtmshhzZp3zFelMgoSEGe+SfrqJo3Zdux3c0YLNn9 Q2TdHNWK9ikHh4Zpzj+gIuNB8Az92OjfjOzyJSh3kZsmaq80CVY4y8HbdPfXIsnE 2iuJNgyB+Jt+lg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:34:23 2025 by rpki-client