This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json) Hash identifier: mq/Ih2qaVSgf3sMdjiJCG3vuruICs2wHwoeNPLnG538= Subject key identifier: 69:0B:FD:91:20:9F:E4:17:74:07:EA:F6:40:82:92:B1:C4:51:4E:E1 Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a Certificate serial: 019B1CBC7E2E17F63380F7B4BF5ED5F9610D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft Manifest number: 0115 Signing time: Sun 14 Dec 2025 12:01:13 +0000 Manifest this update: Sun 14 Dec 2025 12:01:13 +0000 Manifest next update: Mon 15 Dec 2025 12:01:13 +0000 Files and hashes: 1: 2VMJ9WQikYFEDlDpOKmAjBWdjSA.roa (hash: KpcckScBja4+tcIOvGVtG8MssUZtxxse3N+i6aa0OUk=) 2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: SEMRRcRCeEa7FMhmsaDp5eGTZ5madmrHFONwsMMcIsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:7e:2e:17:f6:33:80:f7:b4:bf:5e:d5:f9:61:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a Validity Not Before: Dec 14 12:01:13 2025 GMT Not After : Dec 15 12:01:13 2025 GMT Subject: CN=690bfd91209fe4177407eaf6408292b1c4514ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:45:50:67:73:68:50:c9:b3:2e:40:ea:e2:eb: b7:34:ec:cb:90:4b:67:b0:9d:d5:fe:d1:fd:e5:28: 2d:28:3c:d4:71:7f:22:dd:7a:a2:f2:0d:a1:c0:47: 7b:f1:fb:b8:68:ac:55:2d:0c:e5:7a:96:5a:26:75: 3b:08:92:80:c5:d0:72:6a:1e:76:6b:78:68:25:bb: d6:8c:c6:12:54:1f:3c:fb:d5:8e:d2:23:89:84:da: 36:be:88:61:4b:79:20:f0:25:cf:d7:5f:29:ba:51: db:69:28:5d:84:29:8c:c8:4d:af:ca:cd:6b:9e:d1: a3:19:61:16:65:73:99:d7:ab:84:d5:64:7b:71:3c: c1:00:fc:33:cf:bb:ce:95:47:10:44:3f:56:80:81: 41:dc:a5:1f:95:42:06:3c:86:8c:af:86:60:6f:f5: d5:c5:80:06:e5:6d:ab:e0:6f:cb:89:c1:9b:b3:00: 8a:2b:cd:66:90:24:04:7d:b3:cd:aa:fb:bb:0d:eb: 27:c5:ed:01:3b:e3:26:fb:51:fa:03:f0:d5:34:ac: 12:c6:54:51:30:2d:4b:45:cd:fb:95:d8:09:51:06: 6b:5f:c2:36:9b:99:e6:84:96:a2:67:4c:12:17:61: f4:02:4f:b2:cf:3e:68:29:16:01:7a:7d:8a:b0:ad: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0B:FD:91:20:9F:E4:17:74:07:EA:F6:40:82:92:B1:C4:51:4E:E1 X509v3 Authority Key Identifier: keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b7:01:b4:69:59:f4:12:3e:e3:31:50:02:5a:51:2d:62:e3: a6:f3:be:27:45:13:e7:fc:72:15:e8:aa:79:11:00:7d:46:39: fb:5a:d4:f3:e7:14:48:ae:2a:46:06:2d:de:70:32:9f:35:89: f8:fd:76:e1:49:f6:c4:9b:25:6a:f2:8e:93:5a:54:3d:a1:d0: e4:8f:4f:97:c4:8b:17:49:ea:ff:5b:ba:04:ca:3e:46:08:8f: dc:65:39:f8:08:76:dd:4d:4e:79:e3:77:a9:ff:6d:47:05:36: 34:26:76:97:f0:a5:93:95:1a:d9:6a:40:bd:35:1f:92:eb:34: 13:89:6f:df:59:47:d3:9a:29:8d:5a:31:d4:f7:c5:5c:c4:94: c2:3f:a6:4b:95:3e:b7:fd:44:48:c2:4a:6f:b4:9b:f2:d4:bc: 43:16:6b:57:c3:09:37:e6:bb:f6:08:a6:56:f0:cb:aa:9f:08: c7:b6:66:f3:5b:c3:75:01:76:fb:79:bc:d9:49:15:f2:69:1f: 81:0d:bc:39:ec:ab:22:2f:6f:0a:63:28:62:80:22:68:94:41: 72:b3:72:82:63:a3:65:fd:88:41:f6:3f:3f:c3:72:3d:bb:a9: 66:58:16:25:96:49:02:56:85:71:d0:88:e4:e0:de:50:09:5d: 8e:77:3f:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvH4uF/YzgPe0v17V+WENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTNiNDUwYjdlN2RjMWEyZDUzY2Y2OWE1ZWI4OWE1NjVk MzkxM2EwHhcNMjUxMjE0MTIwMTEzWhcNMjUxMjE1MTIwMTEzWjAzMTEwLwYDVQQD Eyg2OTBiZmQ5MTIwOWZlNDE3NzQwN2VhZjY0MDgyOTJiMWM0NTE0ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkVQZ3NoUMmzLkDq4uu3NOzLkEtn sJ3V/tH95SgtKDzUcX8i3Xqi8g2hwEd78fu4aKxVLQzlepZaJnU7CJKAxdByah52 a3hoJbvWjMYSVB88+9WO0iOJhNo2vohhS3kg8CXP118pulHbaShdhCmMyE2vys1r ntGjGWEWZXOZ16uE1WR7cTzBAPwzz7vOlUcQRD9WgIFB3KUflUIGPIaMr4Zgb/XV xYAG5W2r4G/LicGbswCKK81mkCQEfbPNqvu7Desnxe0BO+Mm+1H6A/DVNKwSxlRR MC1LRc37ldgJUQZrX8I2m5nmhJaiZ0wSF2H0Ak+yzz5oKRYBen2KsK2eTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkL/ZEgn+QXdAfq9kCCkrHEUU7hMB8GA1UdIwQY MBaAFIpTtFC359waLVPPaaXriaVl05E6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxPMFVMZm4zQm90VTg5cHBldUpwV1hUa1RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xOWZlM2ItMDk5My00MTc4LThlOTQt OWY2NzM4NjI0OWMyLzEvaWxPMFVMZm4zQm90VTg5cHBldUpwV1hUa1RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xOWZlM2ItMDk5My00MTc4LThlOTQtOWY2NzM4NjI0OWMy LzEvaWxPMFVMZm4zQm90VTg5cHBldUpwV1hUa1RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7cBtGlZ 9BI+4zFQAlpRLWLjpvO+J0UT5/xyFeiqeREAfUY5+1rU8+cUSK4qRgYt3nAynzWJ +P124Un2xJslavKOk1pUPaHQ5I9Pl8SLF0nq/1u6BMo+RgiP3GU5+Ah23U1OeeN3 qf9tRwU2NCZ2l/Clk5Ua2WpAvTUfkus0E4lv31lH05opjVox1PfFXMSUwj+mS5U+ t/1ESMJKb7Sb8tS8QxZrV8MJN+a79gimVvDLqp8Ix7Zm81vDdQF2+3m82UkV8mkf gQ28OeyrIi9vCmMoYoAiaJRBcrNygmOjZf2IQfY/P8NyPbupZlgWJZZJAlaFcdCI 5ODeUAldjnc/gw== -----END CERTIFICATE-----Generated at Sun Dec 14 18:55:37 2025 by rpki-client