This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft File: ILDaIC0sNKRzptdq8JPo3gMRuVs.mft (raw, json) Hash identifier: tT6TpPpDhqtuU+9sKka5p2eAKVZn2dAGWRN3huaE5II= Subject key identifier: 31:C8:E7:BD:93:C6:B2:D7:93:C6:3D:41:D0:F9:76:7C:67:0F:98:7C Authority key identifier: 20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B Certificate issuer: /CN=20b0da202d2c34a473a6d76af093e8de0311b95b Certificate serial: 019AF3890304F8175DFE7F9B06E69455FEFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 12:00:33 +0000 Manifest this update: Sat 06 Dec 2025 12:00:33 +0000 Manifest next update: Sun 07 Dec 2025 12:00:33 +0000 Files and hashes: 1: ILDaIC0sNKRzptdq8JPo3gMRuVs.crl (hash: k7nBZ3hE+0uUvrRb3JvSMDaB2SZR17ZLX3UKBGRl0gA=) 2: cznyJUVo486opCfwPRwYW5a-bCI.roa (hash: yeo9giLM4O/29X7azlP3H7yqqKlzXfDMEa/1/AZBMhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:03:04:f8:17:5d:fe:7f:9b:06:e6:94:55:fe:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b0da202d2c34a473a6d76af093e8de0311b95b Validity Not Before: Dec 6 12:00:33 2025 GMT Not After : Dec 7 12:00:33 2025 GMT Subject: CN=31c8e7bd93c6b2d793c63d41d0f9767c670f987c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c5:b2:ec:79:a2:42:63:52:37:dd:97:82:fe: 1b:5d:31:af:bf:1f:5b:ca:07:7e:dd:48:9c:4d:12: d0:86:fa:50:59:48:1b:d7:0e:83:04:42:dd:ed:44: 2c:d7:e3:86:e0:b8:d3:5c:78:b8:80:bf:24:10:36: e6:97:ae:0c:df:12:bd:02:3b:a1:4e:42:bf:b4:eb: cf:15:06:31:fb:90:24:f3:27:57:4b:61:9e:69:e8: a0:1f:45:9b:d4:be:0e:82:17:27:0d:2f:c1:72:5b: 2a:02:d2:47:0b:40:c1:57:56:30:c0:6f:ff:04:4d: 8c:60:60:41:20:58:78:d6:51:59:ec:a4:c0:57:91: 95:6a:df:9e:35:eb:41:9c:61:0d:ad:91:a5:1b:64: 96:67:81:2c:2b:ef:ac:16:35:8b:b0:d2:f6:de:36: ac:67:b4:ab:2f:1c:b9:eb:d4:11:cf:be:4a:a6:13: bc:88:37:1a:9e:0b:ad:6f:86:bb:ce:3b:90:99:90: 6d:9f:b7:76:1a:c7:e0:fb:e1:57:f6:36:a3:94:bc: d3:fe:c9:12:21:62:d6:24:35:12:26:6e:0b:53:23: f0:74:87:aa:7f:24:92:05:c3:d6:19:a3:ad:b9:cd: 99:ac:a5:ae:28:f4:4f:0d:14:54:5b:36:40:8a:69: a7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C8:E7:BD:93:C6:B2:D7:93:C6:3D:41:D0:F9:76:7C:67:0F:98:7C X509v3 Authority Key Identifier: keyid:20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:49:77:60:96:44:2e:63:31:e9:16:19:9d:72:91:60:90:3e: 85:76:df:3f:7f:d1:88:ba:09:14:a8:1e:26:6c:b0:2d:33:28: 48:8c:62:fb:b5:4d:a9:21:40:b4:46:35:c3:f5:5c:22:1c:27: 88:36:2f:95:ea:3b:e3:59:c9:e5:4f:23:4c:56:e9:4d:0d:cc: 49:95:85:33:78:62:37:6e:c1:29:02:4f:5a:e9:e5:66:cf:2e: 76:30:c2:3c:46:17:11:97:f4:31:b0:a6:0e:7b:8d:fe:7d:78: b2:2f:be:f3:13:5e:43:94:69:e2:d9:2d:ce:4e:da:2a:24:1a: fa:eb:ea:f3:b7:86:5c:da:09:82:62:ed:c7:22:79:c3:0c:6e: 43:ce:cb:1a:cc:ba:ad:93:06:13:1c:3b:a5:6f:a1:bc:63:e0: 73:55:fa:07:5d:f5:f9:8a:b1:a3:37:09:fe:e7:50:2a:36:dd: 59:64:7a:fb:35:0b:ce:8c:59:c0:77:13:e7:36:84:6a:67:53: a9:1d:74:0e:f8:a8:1a:4f:5c:61:c3:44:5e:4a:6b:1c:d3:a5: 08:c1:8a:ad:14:c8:84:6f:70:18:70:ff:d9:5b:22:93:7f:1f: 26:3b:c0:a8:39:ca:d0:ea:c4:8a:e1:8f:5d:85:53:80:30:7b: e7:dc:24:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQME+Bdd/n+bBuaUVf7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjBkYTIwMmQyYzM0YTQ3M2E2ZDc2YWYwOTNlOGRlMDMx MWI5NWIwHhcNMjUxMjA2MTIwMDMzWhcNMjUxMjA3MTIwMDMzWjAzMTEwLwYDVQQD EygzMWM4ZTdiZDkzYzZiMmQ3OTNjNjNkNDFkMGY5NzY3YzY3MGY5ODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08Wy7HmiQmNSN92Xgv4bXTGvvx9b ygd+3UicTRLQhvpQWUgb1w6DBELd7UQs1+OG4LjTXHi4gL8kEDbml64M3xK9Ajuh TkK/tOvPFQYx+5Ak8ydXS2GeaeigH0Wb1L4OghcnDS/BclsqAtJHC0DBV1YwwG// BE2MYGBBIFh41lFZ7KTAV5GVat+eNetBnGENrZGlG2SWZ4EsK++sFjWLsNL23jas Z7SrLxy569QRz75KphO8iDcangutb4a7zjuQmZBtn7d2Gsfg++FX9jajlLzT/skS IWLWJDUSJm4LUyPwdIeqfySSBcPWGaOtuc2ZrKWuKPRPDRRUWzZAimmnkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHI572TxrLXk8Y9QdD5dnxnD5h8MB8GA1UdIwQY MBaAFCCw2iAtLDSkc6bXavCT6N4DEblbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxEYUlDMHNOS1J6cHRkcThKUG8zZ01SdVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZWE5NzgtNWRhZS00YzhkLTliMmMt ZDhlZmY1ZDZhNjNiLzEvSUxEYUlDMHNOS1J6cHRkcThKUG8zZ01SdVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kZWE5NzgtNWRhZS00YzhkLTliMmMtZDhlZmY1ZDZhNjNi LzEvSUxEYUlDMHNOS1J6cHRkcThKUG8zZ01SdVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0l3YJZE LmMx6RYZnXKRYJA+hXbfP3/RiLoJFKgeJmywLTMoSIxi+7VNqSFAtEY1w/VcIhwn iDYvleo741nJ5U8jTFbpTQ3MSZWFM3hiN27BKQJPWunlZs8udjDCPEYXEZf0MbCm DnuN/n14si++8xNeQ5Rp4tktzk7aKiQa+uvq87eGXNoJgmLtxyJ5wwxuQ87LGsy6 rZMGExw7pW+hvGPgc1X6B131+YqxozcJ/udQKjbdWWR6+zULzoxZwHcT5zaEamdT qR10DvioGk9cYcNEXkprHNOlCMGKrRTIhG9wGHD/2Vsik38fJjvAqDnK0OrEiuGP XYVTgDB759wkUg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:48:35 2025 by rpki-client