This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft File: iLFUzheYuaxTDyB_LasGo606KWY.mft (raw, json) Hash identifier: jrbeW27VP0QQpObyCsU9XYpzpTVOyL9lWKea0LjtHVA= Subject key identifier: 8B:99:62:6E:BF:D9:62:C3:FF:DD:E5:D5:4F:B2:75:B7:26:71:6B:94 Authority key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66 Certificate issuer: /CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966 Certificate serial: 019AF19AACC5B684762AD975BE6F5666304D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft Manifest number: 016A Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: iLFUzheYuaxTDyB_LasGo606KWY.crl (hash: 8eSSjISzPfrcoUVbNxrJIIagypUw8xaDFDl/1jM+Kx0=) 2: uiqUmBv1k_uKYh_cj-a4QIhQlX4.roa (hash: HVtBzgdEAqEsdJNBkXbZl0/YnvdMRPK6u/IdD/XaEXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ac:c5:b6:84:76:2a:d9:75:be:6f:56:66:30:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966 Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=8b99626ebfd962c3ffdde5d54fb275b726716b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e3:e6:5b:92:48:7a:3a:b4:a8:f2:71:99:28: 20:89:81:e7:46:b5:8c:68:ff:27:02:d2:88:7d:7f: 3f:0e:fb:2a:86:24:f1:c4:e5:c4:04:ae:1e:1c:94: 82:8a:39:69:5c:b2:f6:16:c9:00:43:6a:64:36:b3: 4f:0a:f9:e2:9d:e6:6f:07:91:42:bb:79:57:f1:68: 63:bb:73:40:d4:d3:75:49:a6:19:6b:74:f9:f4:01: 32:2f:32:18:86:1b:0c:85:26:b2:03:ba:d8:7d:16: 2c:62:c8:17:39:f1:24:5c:f3:f3:32:d6:fb:d0:f3: 52:e1:72:bb:44:82:db:a0:a1:a3:53:f6:9e:a7:cf: ea:d6:13:c1:c4:5a:d1:4b:21:8d:a2:41:d1:03:ee: 65:25:53:5d:fa:6f:16:ae:78:50:7a:52:0e:fb:25: 23:56:9f:d7:3b:61:cf:6e:fd:42:7b:1f:93:fd:6c: 72:ff:1e:1e:c4:65:6d:dd:b8:5c:a6:aa:ef:a2:94: 02:6a:45:dc:23:41:69:ec:46:cd:35:d3:18:fd:7f: 7f:54:67:25:69:1e:21:2c:d3:f7:14:75:f1:98:22: 9b:d6:2f:81:4d:40:68:a8:45:3d:33:bc:cb:7f:9b: 38:ee:4d:28:09:e5:78:d0:51:f9:28:2f:1e:ca:af: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:99:62:6E:BF:D9:62:C3:FF:DD:E5:D5:4F:B2:75:B7:26:71:6B:94 X509v3 Authority Key Identifier: keyid:88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:14:b6:0a:c2:19:5a:5a:53:9f:f4:b0:04:06:8c:b9:35:f3: 19:99:d6:60:ed:7b:ca:09:5f:23:15:b0:22:3e:6e:c1:74:94: bb:3b:48:bd:42:2f:66:51:1f:14:83:c1:f7:7c:e6:36:0d:7e: 93:00:a6:61:97:76:c2:22:a6:e3:df:ec:71:9d:a2:ea:be:11: 06:5a:3b:c3:6a:5e:ec:8b:c7:5d:9a:ac:e5:33:85:fd:0e:ca: 35:13:a1:17:58:4a:4b:31:de:9c:84:d2:1b:7a:8a:2a:37:90: 36:b7:e0:eb:e4:06:78:58:ac:6e:4c:fe:c8:0c:71:5a:0a:6b: 76:10:24:bc:1d:e8:d1:66:21:50:e6:0f:47:ca:13:a9:70:02: 1a:c2:9e:55:c1:64:11:f8:5e:85:ca:5b:d1:1e:37:31:dd:e3: d1:24:27:87:ef:db:09:60:71:7c:8a:02:16:11:25:26:bd:53: ce:77:15:34:ae:a6:6a:af:42:c0:9d:63:53:a1:53:ad:48:8a: 1a:ee:5a:a1:09:8f:80:71:ca:b8:16:82:0b:ed:68:e4:1b:a2: 6e:d8:88:50:09:ce:66:3b:29:93:bf:6a:9b:5a:0c:e7:98:f5: 23:c9:de:ac:8e:77:79:2d:ac:33:a1:aa:f2:b3:1a:81:d2:da: 6b:1e:06:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqzFtoR2Ktl1vm9WZjBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YjE1NGNlMTc5OGI5YWM1MzBmMjA3ZjJkYWIwNmEzYWQz YTI5NjYwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD Eyg4Yjk5NjI2ZWJmZDk2MmMzZmZkZGU1ZDU0ZmIyNzViNzI2NzE2Yjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOPmW5JIejq0qPJxmSggiYHnRrWM aP8nAtKIfX8/DvsqhiTxxOXEBK4eHJSCijlpXLL2FskAQ2pkNrNPCvnineZvB5FC u3lX8Whju3NA1NN1SaYZa3T59AEyLzIYhhsMhSayA7rYfRYsYsgXOfEkXPPzMtb7 0PNS4XK7RILboKGjU/aep8/q1hPBxFrRSyGNokHRA+5lJVNd+m8WrnhQelIO+yUj Vp/XO2HPbv1Cex+T/Wxy/x4exGVt3bhcpqrvopQCakXcI0Fp7EbNNdMY/X9/VGcl aR4hLNP3FHXxmCKb1i+BTUBoqEU9M7zLf5s47k0oCeV40FH5KC8eyq+rcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuZYm6/2WLD/93l1U+ydbcmcWuUMB8GA1UdIwQY MBaAFIixVM4XmLmsUw8gfy2rBqOtOilmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUt YWI0M2MwMDg1NDdmLzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iMjMyMDMtN2Q4OS00YmY0LWI2YjUtYWI0M2MwMDg1NDdm LzEvaUxGVXpoZVl1YXhURHlCX0xhc0dvNjA2S1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRS2CsIZ WlpTn/SwBAaMuTXzGZnWYO17yglfIxWwIj5uwXSUuztIvUIvZlEfFIPB93zmNg1+ kwCmYZd2wiKm49/scZ2i6r4RBlo7w2pe7IvHXZqs5TOF/Q7KNROhF1hKSzHenITS G3qKKjeQNrfg6+QGeFisbkz+yAxxWgprdhAkvB3o0WYhUOYPR8oTqXACGsKeVcFk Efhehcpb0R43Md3j0SQnh+/bCWBxfIoCFhElJr1TzncVNK6maq9CwJ1jU6FTrUiK Gu5aoQmPgHHKuBaCC+1o5BuibtiIUAnOZjspk79qm1oM55j1I8nerI53eS2sM6Gq 8rMagdLaax4GIw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:06 2025 by rpki-client