This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft File: ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json) Hash identifier: iSmz3ecaIGUK8VD6PVXQhkNDbQeYYFKNpA8P8NuNPAY= Subject key identifier: 21:34:C4:E8:40:09:83:0D:0F:F1:D4:7B:A2:5A:E7:66:40:0F:58:9A Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c Certificate serial: 019AF42E7681F3AA933423C344F3DB6937DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 15:01:16 +0000 Manifest this update: Sat 06 Dec 2025 15:01:16 +0000 Manifest next update: Sun 07 Dec 2025 15:01:16 +0000 Files and hashes: 1: Lb8vbukOa5hlTRoTkAdj0qnnj8o.roa (hash: gDIkSUwNSGV5eKv6/1wqJs7MzcoYqV9u1fGfL9hM0j0=) 2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: 8jq8g7qp+G7t5YUF2UaoYH3kKThFZt4vssHJ0+u21qE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:76:81:f3:aa:93:34:23:c3:44:f3:db:69:37:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c Validity Not Before: Dec 6 15:01:16 2025 GMT Not After : Dec 7 15:01:16 2025 GMT Subject: CN=2134c4e84009830d0ff1d47ba25ae766400f589a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:45:05:d5:44:a4:78:46:33:5d:66:10:c9: 80:b5:25:0f:b8:b9:f2:51:7c:77:55:92:fe:75:f0: a7:3c:d6:68:08:d9:b4:46:4c:34:81:35:ec:93:19: 5f:89:6a:3a:40:5c:a0:00:1c:df:1b:d7:a3:d2:d5: c9:b7:72:af:8e:32:16:2c:b6:72:0e:0e:da:ed:ab: 71:80:97:72:62:fa:33:49:3e:ce:c0:51:ce:21:49: 7d:8a:93:df:46:45:5f:ef:37:11:13:da:a5:2f:df: c5:f1:dd:fb:5f:49:12:4e:0d:3b:e2:6c:d9:94:63: b0:27:63:33:a2:3c:8c:3f:d0:99:64:8d:97:3b:b2: 62:96:07:51:13:a6:53:ca:46:d5:d6:ad:ab:f7:96: b2:bc:30:d6:e9:79:22:65:98:c5:68:12:c2:65:3c: d0:ca:ea:d4:8c:55:f2:c1:8e:4a:25:c8:08:96:74: 37:1d:96:a9:b3:c2:0f:83:1a:5b:2b:7f:36:03:6a: 28:36:38:06:6b:5c:9d:1f:9c:a7:b4:ee:11:f9:eb: e6:55:70:4a:2a:47:b6:26:b3:9c:59:33:90:32:e3: 22:c3:de:49:79:e8:f7:67:41:e0:2e:b2:f5:16:15: 24:b9:0f:0d:9a:9a:3c:ee:b2:08:2e:71:88:62:1b: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:34:C4:E8:40:09:83:0D:0F:F1:D4:7B:A2:5A:E7:66:40:0F:58:9A X509v3 Authority Key Identifier: keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ae:73:34:e1:76:96:03:45:79:e7:86:7c:5e:31:f4:a4:db: 4d:02:bb:d8:c0:c4:2d:c8:36:2a:82:6a:26:df:d2:99:c4:52: 21:38:4b:b5:ac:b8:34:a3:27:05:e8:33:43:95:c0:1f:67:ca: ba:7a:67:d5:08:a8:c0:eb:ac:f5:ec:af:35:dd:34:9f:a1:c0: 3b:5b:d1:a1:92:29:37:93:e1:c6:62:33:36:b4:c3:40:3b:c6: c8:44:b0:4b:ed:f4:fd:15:b2:c9:21:10:a8:e8:ae:c2:ba:91: 71:17:4f:13:3e:66:5d:75:6a:c3:1f:a3:f3:10:24:46:31:b7: b6:51:6a:6f:d0:b3:fd:76:3a:b9:27:da:93:88:1b:53:fe:e5: a4:ff:35:9d:ed:8e:54:27:ff:bd:3a:93:fe:23:28:ac:62:f3: 47:1e:af:c2:67:fe:de:ee:c8:65:74:d4:1f:2f:09:32:9e:c0: 36:44:fd:bb:5e:f8:b5:b7:59:7d:fb:10:70:87:e9:36:41:db: 30:52:41:3c:23:7f:02:84:c2:7f:6c:37:fe:fb:e7:05:4a:e3: 29:73:51:19:ac:e0:b0:72:f4:bc:43:e8:5c:98:2e:09:79:4e: 37:bc:2d:bc:d2:59:02:57:1a:5d:d8:69:90:f5:3a:17:09:bc: c2:44:7a:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LnaB86qTNCPDRPPbaTfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTY2ODg1YTFkNmQ1NTQ0NTQ2Y2QyODVkODZjNGVmZmVh YTNjMmMwHhcNMjUxMjA2MTUwMTE2WhcNMjUxMjA3MTUwMTE2WjAzMTEwLwYDVQQD EygyMTM0YzRlODQwMDk4MzBkMGZmMWQ0N2JhMjVhZTc2NjQwMGY1ODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxphFBdVEpHhGM11mEMmAtSUPuLny UXx3VZL+dfCnPNZoCNm0Rkw0gTXskxlfiWo6QFygABzfG9ej0tXJt3KvjjIWLLZy Dg7a7atxgJdyYvozST7OwFHOIUl9ipPfRkVf7zcRE9qlL9/F8d37X0kSTg074mzZ lGOwJ2MzojyMP9CZZI2XO7JilgdRE6ZTykbV1q2r95ayvDDW6XkiZZjFaBLCZTzQ yurUjFXywY5KJcgIlnQ3HZaps8IPgxpbK382A2ooNjgGa1ydH5yntO4R+evmVXBK Kke2JrOcWTOQMuMiw95Jeej3Z0HgLrL1FhUkuQ8Nmpo87rIILnGIYhsFpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE0xOhACYMND/HUe6Ja52ZAD1iaMB8GA1UdIwQY MBaAFIpWaIWh1tVURUbNKF2GxO/+qjwsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxab2hhSFcxVlJGUnMwb1hZYkU3XzZxUEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9kY2ZiYzctNjRiOC00YzkxLTg5YTAt MWFmMDVhMjIzN2MzLzEvaWxab2hhSFcxVlJGUnMwb1hZYkU3XzZxUEN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9kY2ZiYzctNjRiOC00YzkxLTg5YTAtMWFmMDVhMjIzN2Mz LzEvaWxab2hhSFcxVlJGUnMwb1hZYkU3XzZxUEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMK5zNOF2 lgNFeeeGfF4x9KTbTQK72MDELcg2KoJqJt/SmcRSIThLtay4NKMnBegzQ5XAH2fK unpn1QiowOus9eyvNd00n6HAO1vRoZIpN5PhxmIzNrTDQDvGyESwS+30/RWyySEQ qOiuwrqRcRdPEz5mXXVqwx+j8xAkRjG3tlFqb9Cz/XY6uSfak4gbU/7lpP81ne2O VCf/vTqT/iMorGLzRx6vwmf+3u7IZXTUHy8JMp7ANkT9u174tbdZffsQcIfpNkHb MFJBPCN/AoTCf2w3/vvnBUrjKXNRGazgsHL0vEPoXJguCXlON7wtvNJZAlcaXdhp kPU6Fwm8wkR6ig== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:18 2025 by rpki-client