This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json) Hash identifier: bEHL8sX1tAezd+H7evhhJEbgCflp8/JE6AAXmccZfyQ= Subject key identifier: 86:D8:52:20:06:A1:7B:77:CF:AF:C5:F0:8E:B0:7B:AD:FD:F5:52:8C Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6 Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6 Certificate serial: 019B4701DEA0082029B7682DBCFD242EF462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft Manifest number: 097B Signing time: Mon 22 Dec 2025 17:01:03 +0000 Manifest this update: Mon 22 Dec 2025 17:01:03 +0000 Manifest next update: Tue 23 Dec 2025 17:01:03 +0000 Files and hashes: 1: Pi79eocSBGgNrprE0qfzuX64cIQ.roa (hash: fvix9xvupl9Rvu5dL1HlRrwLBuvSibe6MgecROtnqvU=) 2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: zGiL/W8eYRgOf1m7vTbLAiTH4/4VLS5LaYaUZvXB2FA=) 3: nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa (hash: kVMxflVivv4vP6/qDQ8pl5woFGbgCxvCg26i1ShOIdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:de:a0:08:20:29:b7:68:2d:bc:fd:24:2e:f4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6 Validity Not Before: Dec 22 17:01:03 2025 GMT Not After : Dec 23 17:01:03 2025 GMT Subject: CN=86d8522006a17b77cfafc5f08eb07badfdf5528c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6a:4f:fa:21:85:9f:5f:2c:29:b0:85:36:2c: 8a:89:c0:76:bc:5f:30:84:9f:b6:07:f8:20:de:ba: 3a:e6:fa:6d:8c:2d:ec:6c:83:1b:32:ca:dd:70:a4: 30:90:76:e4:3b:3b:82:99:4a:a9:dc:4c:75:bc:be: e8:8b:2d:ff:52:38:83:ee:76:b5:6b:bb:70:56:3b: e7:2d:8e:77:7b:b8:25:a3:6c:9b:db:b1:35:4e:9b: ea:d3:0a:4f:31:84:10:0d:ec:2e:33:8b:ce:10:76: 7c:1f:55:70:7c:9a:d4:cc:c7:49:9a:76:44:96:ff: 34:1b:d7:4d:92:13:98:1a:af:0a:e3:ae:97:12:a2: bb:68:e0:16:65:f5:12:18:be:15:61:99:0a:b8:42: 13:22:d8:78:61:17:c4:32:f0:b1:b1:05:94:72:ad: d6:74:1c:02:49:57:5f:dc:2e:61:32:82:21:31:29: e9:06:33:08:20:2a:ac:28:10:ad:d8:2c:a5:c3:87: 7b:c5:6c:71:59:25:cc:e1:f7:0f:74:7e:02:75:90: 73:81:74:f1:8e:55:1c:aa:6f:2a:dc:f6:8c:2a:81: dc:0d:cf:b7:b1:ea:3b:e2:49:17:43:53:cf:b0:47: 43:9a:2d:4e:a6:b6:bb:83:dd:1b:78:17:2e:dc:98: 5c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D8:52:20:06:A1:7B:77:CF:AF:C5:F0:8E:B0:7B:AD:FD:F5:52:8C X509v3 Authority Key Identifier: keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:2c:4a:8a:f5:80:ea:f3:e3:23:5a:d3:14:45:9c:02:cb:2e: f1:22:5e:e0:8d:44:c0:91:92:d4:97:8f:eb:1e:08:6b:d1:fe: af:ca:ae:07:7d:3b:61:f0:5b:93:de:f9:8b:51:03:f3:4b:14: 74:c1:b0:f9:41:e1:66:e8:34:c1:f5:06:18:95:23:80:6c:96: 26:3d:60:d2:59:de:e4:af:63:6c:f1:5a:ca:44:a2:bc:c1:98: 18:f3:02:ab:a4:f7:eb:e8:f6:f4:fe:53:be:e9:c2:3c:6d:e5: a7:30:07:3f:97:dd:6d:e0:3e:ae:8d:c4:bc:92:3e:ac:cc:9d: 30:08:90:03:91:de:63:c9:c1:59:63:0a:89:69:59:63:b8:bf: 8c:d9:1a:85:14:1a:d8:6b:39:d8:20:f0:77:b5:47:c3:79:dc: da:54:f9:ad:ae:60:66:8f:ba:07:fc:e3:06:3c:69:3f:a6:08: d0:82:3d:12:53:e1:9e:5c:be:56:2b:a9:c0:9f:26:9f:af:a8: b1:97:0a:2f:d5:31:e6:b7:e8:cd:01:72:a5:0c:54:d5:3f:5a: 4d:a7:77:51:7e:2c:2c:70:fb:2a:62:3d:fa:17:5b:88:cc:89: 78:81:32:0c:e2:16:55:d8:67:ff:8d:59:bf:e3:90:bd:dc:c6: 60:66:8c:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAd6gCCApt2gtvP0kLvRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNWI2MjlhNDY5ODU4ODhmZjE0YmZhOWQ3ZGNiMWViNTI2 NjAwYTYwHhcNMjUxMjIyMTcwMTAzWhcNMjUxMjIzMTcwMTAzWjAzMTEwLwYDVQQD Eyg4NmQ4NTIyMDA2YTE3Yjc3Y2ZhZmM1ZjA4ZWIwN2JhZGZkZjU1MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmpP+iGFn18sKbCFNiyKicB2vF8w hJ+2B/gg3ro65vptjC3sbIMbMsrdcKQwkHbkOzuCmUqp3Ex1vL7oiy3/UjiD7na1 a7twVjvnLY53e7glo2yb27E1Tpvq0wpPMYQQDewuM4vOEHZ8H1VwfJrUzMdJmnZE lv80G9dNkhOYGq8K466XEqK7aOAWZfUSGL4VYZkKuEITIth4YRfEMvCxsQWUcq3W dBwCSVdf3C5hMoIhMSnpBjMIICqsKBCt2Cylw4d7xWxxWSXM4fcPdH4CdZBzgXTx jlUcqm8q3PaMKoHcDc+3seo74kkXQ1PPsEdDmi1Opra7g90beBcu3Jhc4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbYUiAGoXt3z6/F8I6we6399VKMMB8GA1UdIwQY MBaAFIpbYppGmFiI/xS/qdfcsetSZgCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAt MmQ3YmFmODgyNjc0LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAtMmQ3YmFmODgyNjc0 LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESxKivWA 6vPjI1rTFEWcAssu8SJe4I1EwJGS1JeP6x4Ia9H+r8quB307YfBbk975i1ED80sU dMGw+UHhZug0wfUGGJUjgGyWJj1g0lne5K9jbPFaykSivMGYGPMCq6T36+j29P5T vunCPG3lpzAHP5fdbeA+ro3EvJI+rMydMAiQA5HeY8nBWWMKiWlZY7i/jNkahRQa 2Gs52CDwd7VHw3nc2lT5ra5gZo+6B/zjBjxpP6YI0II9ElPhnly+ViupwJ8mn6+o sZcKL9Ux5rfozQFypQxU1T9aTad3UX4sLHD7KmI9+hdbiMyJeIEyDOIWVdhn/41Z v+OQvdzGYGaMZQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:31:15 2025 by rpki-client