This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json) Hash identifier: ByPIKP2jpBKQhwDQQGsuAMbSt3R+72jffM0bf+pieoY= Subject key identifier: 61:B8:96:DA:8C:26:30:E2:54:ED:0D:55:B5:31:A1:C5:66:E6:DB:B0 Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1 Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1 Certificate serial: 019B488321D7901B9A51383390BC4915F9A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft Manifest number: 07BE Signing time: Tue 23 Dec 2025 00:01:51 +0000 Manifest this update: Tue 23 Dec 2025 00:01:51 +0000 Manifest next update: Wed 24 Dec 2025 00:01:51 +0000 Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: lbtjIX24puFLax7QtXmfGu3k1eqHZEMEcsSSc8xFfb8=) 2: KM2VT3L9ZMXwTHPYv5ODDxzONBw.roa (hash: bksDGAxzNsshB1aRuaWU81TLlTV46EhoUgnARWy0HJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:83:21:d7:90:1b:9a:51:38:33:90:bc:49:15:f9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1 Validity Not Before: Dec 23 00:01:51 2025 GMT Not After : Dec 24 00:01:51 2025 GMT Subject: CN=61b896da8c2630e254ed0d55b531a1c566e6dbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:58:a6:44:f3:3d:71:cd:db:9e:f4:29:ca: 10:0c:39:5b:99:cf:fd:87:2e:3c:0c:dd:50:d4:56: 16:ab:6f:74:53:e1:9b:51:45:42:31:1e:9c:fa:b1: 98:8b:89:af:7c:67:2c:e9:99:ba:30:1f:d2:81:63: 1c:db:86:af:a8:f9:53:bd:3f:53:dd:97:22:82:1b: b6:02:28:5c:63:88:6d:bc:22:a6:9d:f8:6b:51:c1: 45:6d:70:ef:56:bd:7e:86:cf:db:52:b8:35:8a:27: 87:1d:fd:57:a7:84:9a:3a:23:67:be:e4:f9:0e:37: 12:bb:ba:38:92:df:8f:80:04:80:8a:c0:ac:34:69: 02:f4:b3:f1:25:45:0e:86:87:00:02:66:b8:3b:a5: bc:b9:6b:a4:7b:35:1f:34:8c:1a:7b:9d:29:94:9a: 46:d5:57:b9:5e:1b:eb:2a:f9:f1:6b:e1:e8:93:a0: 35:8a:8c:34:77:b4:99:24:ec:d1:47:eb:df:3d:44: 23:58:c1:07:43:35:5e:ac:36:66:17:05:e1:6f:7a: 08:79:07:93:6c:8e:31:27:fe:ae:b1:f2:9e:40:4f: b4:30:4f:20:51:bf:76:fa:50:72:18:a2:f8:04:44: 7c:e1:15:30:28:40:e0:c1:58:16:3f:e1:aa:bd:d1: 97:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B8:96:DA:8C:26:30:E2:54:ED:0D:55:B5:31:A1:C5:66:E6:DB:B0 X509v3 Authority Key Identifier: keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6f:b3:86:50:f2:9b:2a:27:37:ad:9b:b1:fe:17:26:47:7d: 05:70:70:14:17:c2:f0:1a:4f:43:91:ae:e3:64:79:49:c0:3a: a9:bb:b1:a8:72:65:ea:ef:e4:ad:fa:94:82:fb:cc:e5:33:92: 46:19:27:be:3d:8b:8a:e1:4d:ae:54:21:fb:78:e5:52:aa:f4: 24:44:8a:f8:cb:b9:9a:36:c9:26:3a:9b:94:90:7d:19:87:ee: 95:aa:fe:d7:8d:d6:d3:2d:ac:0c:c8:37:6d:9c:3d:d7:9e:f0: 24:bc:f9:82:4f:ac:c6:b3:25:0a:60:cd:50:2e:fc:07:06:20: 44:9c:a3:17:b6:9a:38:c9:ed:75:fb:b2:34:52:5a:05:bc:80: 2a:76:aa:a9:ea:0b:09:fc:3f:1f:28:a2:e7:2e:eb:d8:fa:a5: 9d:49:28:a5:2a:b3:e4:62:46:8d:ff:d1:9b:48:cf:1f:4d:d9: a8:32:94:5d:f9:61:7f:09:87:27:6d:87:82:cb:d5:c2:b4:74: 5f:6b:0f:66:48:e8:2b:7b:7d:41:e6:1a:37:a4:d6:69:de:ca: 0b:d5:60:6b:d0:d6:b6:47:0f:13:7b:5a:88:77:81:b7:0c:1b: fd:db:a0:c8:88:ec:66:e2:18:36:5c:a9:2b:4e:0a:dd:db:b1: 9a:2d:ad:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgyHXkBuaUTgzkLxJFfmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjgzMDgzMzg3OGI2Yzg2MTI2OWEwZTJhNDU4MzdhYTk0 ODViZTEwHhcNMjUxMjIzMDAwMTUxWhcNMjUxMjI0MDAwMTUxWjAzMTEwLwYDVQQD Eyg2MWI4OTZkYThjMjYzMGUyNTRlZDBkNTViNTMxYTFjNTY2ZTZkYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgRYpkTzPXHN2570KcoQDDlbmc/9 hy48DN1Q1FYWq290U+GbUUVCMR6c+rGYi4mvfGcs6Zm6MB/SgWMc24avqPlTvT9T 3Zcighu2AihcY4htvCKmnfhrUcFFbXDvVr1+hs/bUrg1iieHHf1Xp4SaOiNnvuT5 DjcSu7o4kt+PgASAisCsNGkC9LPxJUUOhocAAma4O6W8uWukezUfNIwae50plJpG 1Ve5XhvrKvnxa+Hok6A1iow0d7SZJOzRR+vfPUQjWMEHQzVerDZmFwXhb3oIeQeT bI4xJ/6usfKeQE+0ME8gUb92+lByGKL4BER84RUwKEDgwVgWP+GqvdGXWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGG4ltqMJjDiVO0NVbUxocVm5tuwMB8GA1UdIwQY MBaAFCC4MIM4eLbIYSaaDipFg3qpSFvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYt MTU2NDk3YmZlOTNmLzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYtMTU2NDk3YmZlOTNm LzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKG+zhlDy myonN62bsf4XJkd9BXBwFBfC8BpPQ5Gu42R5ScA6qbuxqHJl6u/krfqUgvvM5TOS Rhknvj2LiuFNrlQh+3jlUqr0JESK+Mu5mjbJJjqblJB9GYfular+143W0y2sDMg3 bZw9157wJLz5gk+sxrMlCmDNUC78BwYgRJyjF7aaOMntdfuyNFJaBbyAKnaqqeoL Cfw/Hyii5y7r2PqlnUkopSqz5GJGjf/Rm0jPH03ZqDKUXflhfwmHJ22HgsvVwrR0 X2sPZkjoK3t9QeYaN6TWad7KC9Vga9DWtkcPE3taiHeBtwwb/dugyIjsZuIYNlyp K04K3duxmi2tww== -----END CERTIFICATE-----Generated at Tue Dec 23 06:45:00 2025 by rpki-client