This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json) Hash identifier: I85ARux089y20qPj037qzPKQCgAnAXNHONOfUiuBdFE= Subject key identifier: FB:EE:D2:F8:5A:DD:9D:9A:87:64:42:FA:B8:97:77:D7:D0:2C:AE:F6 Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb Certificate serial: 019B2399DA68ACA0BB972EA220FB6F24DA06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft Manifest number: 0CD3 Signing time: Mon 15 Dec 2025 20:00:44 +0000 Manifest this update: Mon 15 Dec 2025 20:00:44 +0000 Manifest next update: Tue 16 Dec 2025 20:00:44 +0000 Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: CZqkddmhecFpXLKnGN78YvkfPSwdlCg0eSWAsIQLXHs=) 2: ITkDnxBUCa7czYpTJZyNVLNjyA0.roa (hash: jfV0oxUpYfbneBe41fxD2D9b2Qocc8MoRl7L2nQ2juk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:da:68:ac:a0:bb:97:2e:a2:20:fb:6f:24:da:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb Validity Not Before: Dec 15 20:00:44 2025 GMT Not After : Dec 16 20:00:44 2025 GMT Subject: CN=fbeed2f85add9d9a876442fab89777d7d02caef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:63:bd:3b:3c:9a:45:15:1d:c8:58:d4:99: b7:28:28:7d:34:a7:c7:6f:83:65:76:0f:a3:b7:ad: 02:87:d1:4a:79:1d:82:4f:5c:10:0a:f6:d6:69:05: 97:d2:c2:06:66:0e:59:27:9f:d7:c4:95:40:82:54: ab:60:5d:5c:75:02:d6:b7:d2:60:b4:b3:f9:98:f8: c1:1c:68:4f:99:33:30:ca:97:fe:5e:ec:6d:e8:0f: f4:18:36:1c:9a:06:49:f5:55:f2:c7:c7:bb:28:82: b5:d5:13:0d:2c:ea:5d:32:39:05:ce:44:04:ae:e5: 31:87:cd:8b:27:a9:a7:08:fd:7d:94:f1:e7:6f:cf: d9:37:51:ed:ec:df:ea:ee:f3:88:57:b2:f7:4f:a5: cd:c3:03:11:aa:05:d9:12:9d:8f:1c:11:cc:46:86: 35:d2:7f:51:b3:2f:40:b0:4d:b1:5a:b8:98:0e:1d: 8f:44:1f:ad:95:0a:56:62:fc:10:70:b9:d9:ad:d2: c9:04:5d:9b:1d:3f:06:f0:46:43:b7:cb:8e:8b:df: f8:e4:f3:1a:26:9c:54:8f:f8:fe:6d:f8:56:41:86: e5:1f:0e:8e:17:24:62:5f:2a:58:a0:c5:92:3e:67: e7:11:da:8f:f2:0d:07:fb:a5:e0:d2:be:dc:42:e8: a8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EE:D2:F8:5A:DD:9D:9A:87:64:42:FA:B8:97:77:D7:D0:2C:AE:F6 X509v3 Authority Key Identifier: keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7b:16:52:59:fb:79:14:06:05:76:93:61:a6:df:0d:53:45: 6f:74:3c:09:73:fe:26:a1:1f:b6:fd:3b:df:2e:53:52:51:2a: 42:45:8c:64:c8:56:34:ad:1b:7a:0b:e1:76:59:b2:d6:18:ba: cd:88:d3:81:a3:3e:59:e5:aa:08:7a:71:a7:2a:23:e3:17:fa: 44:28:e6:2c:5b:75:90:0f:d4:a3:92:ca:9f:c5:15:74:a7:78: 39:7f:b9:bc:24:5f:ff:c5:5f:12:10:22:61:92:60:10:3b:9e: 60:d6:f1:e0:6a:17:e5:8e:60:52:2a:15:25:32:88:5c:ec:84: 59:96:2f:1a:00:03:10:8d:68:34:f5:0a:f7:1a:58:fc:80:af: 1c:09:23:64:78:fc:e2:8d:de:71:23:68:00:c8:42:97:5c:11: 9d:8e:23:5b:fa:91:8a:2e:c6:65:74:36:ee:7b:09:b9:a0:7f: 32:64:5d:0a:3a:42:ec:14:36:91:bd:e2:bf:80:a5:53:b4:9e: 92:2d:a8:8f:3e:7e:3b:e5:0e:f9:0f:16:14:6f:e6:67:99:be: 76:61:27:67:3c:51:57:ba:93:af:32:cc:e3:76:3f:65:f9:57: c4:a6:01:d2:79:8b:c4:4b:99:7c:c8:dd:11:88:2b:5d:86:03: dd:aa:28:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmdporKC7ly6iIPtvJNoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYmQ3MDJkZDc4MDBiNjFjOTZjNTBmNDJhNDZiNjk0OWIy MjhkYmIwHhcNMjUxMjE1MjAwMDQ0WhcNMjUxMjE2MjAwMDQ0WjAzMTEwLwYDVQQD EyhmYmVlZDJmODVhZGQ5ZDlhODc2NDQyZmFiODk3NzdkN2QwMmNhZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiBjvTs8mkUVHchY1Jm3KCh9NKfH b4Nldg+jt60Ch9FKeR2CT1wQCvbWaQWX0sIGZg5ZJ5/XxJVAglSrYF1cdQLWt9Jg tLP5mPjBHGhPmTMwypf+Xuxt6A/0GDYcmgZJ9VXyx8e7KIK11RMNLOpdMjkFzkQE ruUxh82LJ6mnCP19lPHnb8/ZN1Ht7N/q7vOIV7L3T6XNwwMRqgXZEp2PHBHMRoY1 0n9Rsy9AsE2xWriYDh2PRB+tlQpWYvwQcLnZrdLJBF2bHT8G8EZDt8uOi9/45PMa JpxUj/j+bfhWQYblHw6OFyRiXypYoMWSPmfnEdqP8g0H+6Xg0r7cQuiorQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvu0vha3Z2ah2RC+riXd9fQLK72MB8GA1UdIwQY MBaAFCC9cC3XgAthyWxQ9CpGtpSbIo27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2Et N2ZhNWViY2Y1NzRlLzEvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2EtN2ZhNWViY2Y1NzRl LzEvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3sWUln7 eRQGBXaTYabfDVNFb3Q8CXP+JqEftv073y5TUlEqQkWMZMhWNK0begvhdlmy1hi6 zYjTgaM+WeWqCHpxpyoj4xf6RCjmLFt1kA/Uo5LKn8UVdKd4OX+5vCRf/8VfEhAi YZJgEDueYNbx4GoX5Y5gUioVJTKIXOyEWZYvGgADEI1oNPUK9xpY/ICvHAkjZHj8 4o3ecSNoAMhCl1wRnY4jW/qRii7GZXQ27nsJuaB/MmRdCjpC7BQ2kb3iv4ClU7Se ki2ojz5+O+UO+Q8WFG/mZ5m+dmEnZzxRV7qTrzLM43Y/ZflXxKYB0nmLxEuZfMjd EYgrXYYD3aoofw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:31:36 2025 by rpki-client