This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json) Hash identifier: v2lvDpu0Wp7TnHZhJ+kwYDFhD4SX0m5UrFQx878AE3o= Subject key identifier: 9C:E0:DD:58:79:25:85:CC:F4:0E:69:9D:1E:5E:D5:62:D5:B2:C8:27 Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6 Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6 Certificate serial: 019B3B6B532EE8B0B6744AD56393B319E0EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft Manifest number: 0975 Signing time: Sat 20 Dec 2025 11:00:47 +0000 Manifest this update: Sat 20 Dec 2025 11:00:47 +0000 Manifest next update: Sun 21 Dec 2025 11:00:47 +0000 Files and hashes: 1: Pi79eocSBGgNrprE0qfzuX64cIQ.roa (hash: fvix9xvupl9Rvu5dL1HlRrwLBuvSibe6MgecROtnqvU=) 2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: FmRkA7TbY11PHjmH4wYlOjcrMh7ryzS1Qj3kFktlXUA=) 3: nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa (hash: kVMxflVivv4vP6/qDQ8pl5woFGbgCxvCg26i1ShOIdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:53:2e:e8:b0:b6:74:4a:d5:63:93:b3:19:e0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6 Validity Not Before: Dec 20 11:00:47 2025 GMT Not After : Dec 21 11:00:47 2025 GMT Subject: CN=9ce0dd58792585ccf40e699d1e5ed562d5b2c827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:27:95:a8:26:5c:5c:b8:b4:5a:1b:8b:8d: 34:28:c2:65:77:5a:6f:42:5a:e9:9d:37:6f:51:a2: 37:a1:a3:52:48:cc:02:0d:c5:4f:a0:cf:50:ee:71: fd:f8:d5:1b:ba:a9:28:d3:4a:25:22:ab:dd:32:04: 9b:92:c8:2a:ca:a8:f1:0f:48:74:28:d6:78:af:9e: c3:89:82:6c:2e:8a:4e:64:d4:1d:98:f4:1e:c2:1a: f8:74:3e:79:30:ca:7e:e8:ae:a6:cb:db:f3:3d:87: ca:6d:37:e5:50:92:da:d6:e3:5e:41:e9:4a:c4:29: 19:77:57:0b:1c:75:1e:6d:cd:9f:36:7d:e2:05:01: 29:88:33:b0:5e:89:28:b1:95:e5:c6:95:9a:35:15: a0:be:7f:54:6b:3f:56:ba:37:3b:ab:c8:d6:c5:d9: 98:b5:39:02:90:f0:f6:d5:c0:3a:25:2b:10:c0:b2: 90:64:da:dd:2a:3d:67:e5:aa:c9:da:95:aa:62:82: e2:ba:45:a1:79:b1:83:22:e7:47:a7:78:c6:33:be: a2:61:92:93:73:d4:76:a6:c0:0e:72:06:59:be:0b: 47:73:88:e3:8a:65:e3:ca:93:31:30:2d:31:42:86: 33:d9:66:17:cd:21:c4:a8:19:a8:a9:1c:7c:c0:b3: 12:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E0:DD:58:79:25:85:CC:F4:0E:69:9D:1E:5E:D5:62:D5:B2:C8:27 X509v3 Authority Key Identifier: keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fb:9b:9b:3d:8b:49:35:a5:e6:b1:48:a2:be:3d:1d:9c:00: 30:8d:8b:da:fc:2e:c0:26:23:c7:a1:92:88:06:44:1d:e0:bf: cb:a1:e7:09:27:9e:2e:94:58:e3:48:bf:24:d3:b0:4b:86:78: 7f:5b:74:14:cd:2e:4c:ab:2c:11:4d:89:40:d7:62:0b:a7:ad: 05:c4:5e:8d:57:f2:0b:4d:79:64:e0:db:46:57:82:6c:90:3e: c6:01:a2:9e:2f:dc:c3:80:d6:86:1a:ab:68:6c:74:54:3e:b5: a5:01:b4:c8:e7:61:4b:25:4a:77:61:73:1c:37:9b:f9:fc:2d: 12:10:e9:0e:47:3c:5e:de:ff:89:d0:d1:c3:41:3b:1b:ed:35: d7:c6:b3:bc:22:b2:6e:c2:54:8c:48:2e:37:0c:1f:be:21:f4: 13:20:6a:ae:bc:b9:2c:84:36:c4:00:90:57:c8:a9:5e:41:bc: 76:27:4e:f3:b7:79:42:ef:2f:5b:5c:f6:42:d5:77:d6:01:9c: a7:56:95:74:b6:68:6c:da:bf:1e:51:13:27:50:2a:49:8c:84: 6b:a4:d6:2a:07:f5:45:09:35:c2:ec:f7:a8:cb:05:bb:cc:9c: 38:c5:bd:84:4b:d3:0d:b8:4b:c0:49:98:3c:e8:84:da:5b:82: e9:2f:9a:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a1Mu6LC2dErVY5OzGeDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNWI2MjlhNDY5ODU4ODhmZjE0YmZhOWQ3ZGNiMWViNTI2 NjAwYTYwHhcNMjUxMjIwMTEwMDQ3WhcNMjUxMjIxMTEwMDQ3WjAzMTEwLwYDVQQD Eyg5Y2UwZGQ1ODc5MjU4NWNjZjQwZTY5OWQxZTVlZDU2MmQ1YjJjODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4QnlagmXFy4tFobi400KMJld1pv QlrpnTdvUaI3oaNSSMwCDcVPoM9Q7nH9+NUbuqko00olIqvdMgSbksgqyqjxD0h0 KNZ4r57DiYJsLopOZNQdmPQewhr4dD55MMp+6K6my9vzPYfKbTflUJLa1uNeQelK xCkZd1cLHHUebc2fNn3iBQEpiDOwXokosZXlxpWaNRWgvn9Uaz9Wujc7q8jWxdmY tTkCkPD21cA6JSsQwLKQZNrdKj1n5arJ2pWqYoLiukWhebGDIudHp3jGM76iYZKT c9R2psAOcgZZvgtHc4jjimXjypMxMC0xQoYz2WYXzSHEqBmoqRx8wLMSzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzg3Vh5JYXM9A5pnR5e1WLVssgnMB8GA1UdIwQY MBaAFIpbYppGmFiI/xS/qdfcsetSZgCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAt MmQ3YmFmODgyNjc0LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAtMmQ3YmFmODgyNjc0 LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvubmz2L STWl5rFIor49HZwAMI2L2vwuwCYjx6GSiAZEHeC/y6HnCSeeLpRY40i/JNOwS4Z4 f1t0FM0uTKssEU2JQNdiC6etBcRejVfyC015ZODbRleCbJA+xgGini/cw4DWhhqr aGx0VD61pQG0yOdhSyVKd2FzHDeb+fwtEhDpDkc8Xt7/idDRw0E7G+0118azvCKy bsJUjEguNwwfviH0EyBqrry5LIQ2xACQV8ipXkG8didO87d5Qu8vW1z2QtV31gGc p1aVdLZobNq/HlETJ1AqSYyEa6TWKgf1RQk1wuz3qMsFu8ycOMW9hEvTDbhLwEmY POiE2luC6S+anA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:23:52 2025 by rpki-client