This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft File: il2GqrTAl08MJ_Q9lo30JvU99dI.mft (raw, json) Hash identifier: 1oeWz4k8JAQzHqagbbhhpbn7ZQmVu+s31ii/pIoKUjM= Subject key identifier: 4D:10:0B:6F:1C:08:19:C2:D6:14:58:EF:0B:3A:13:E3:29:57:51:19 Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2 Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2 Certificate serial: 019AF464BB16A6678E7C2111642BD661BD60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 16:00:33 +0000 Manifest this update: Sat 06 Dec 2025 16:00:33 +0000 Manifest next update: Sun 07 Dec 2025 16:00:33 +0000 Files and hashes: 1: M3KJXsjqIPVIXxYev2SfgVojrU4.roa (hash: Gvsx8H9toLZ4v4VpdY9JPnhwGvrW2p7tLKUQ/kP8+Nc=) 2: il2GqrTAl08MJ_Q9lo30JvU99dI.crl (hash: ZvrCP6QQOqXrkbNrAEh0IKHU1Eyop7XVd5JU1Sbekho=) 3: lyju-WcsfjKzHsY-MgdKzzZhTIw.roa (hash: EiV9Q5uHzoj0xoTRtMoDguUYz6ko8D3bkiYvM3cYUXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:bb:16:a6:67:8e:7c:21:11:64:2b:d6:61:bd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2 Validity Not Before: Dec 6 16:00:33 2025 GMT Not After : Dec 7 16:00:33 2025 GMT Subject: CN=4d100b6f1c0819c2d61458ef0b3a13e329575119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:26:9b:0b:b3:f8:e1:4a:d7:b4:0d:0a:66: 59:21:64:91:8a:71:d2:d6:5d:d4:c8:f6:e3:84:02: 62:fa:e2:77:02:cb:3d:da:71:ed:87:89:1f:26:35: 39:07:88:8d:31:c5:e3:4e:be:b2:31:0b:79:7d:b8: 0a:c2:a9:60:af:77:15:aa:88:a0:f6:de:9e:23:6a: 17:c3:4b:53:37:c3:81:75:4c:31:dd:72:af:b0:73: b7:57:87:16:58:fc:18:a5:bd:1f:59:9b:ab:14:9c: 72:d1:f6:ea:1c:fc:d1:36:76:71:54:b3:3a:1f:13: 78:ad:f5:04:16:08:6c:e7:93:e2:6f:88:8a:1f:97: 22:3b:58:94:a7:dd:eb:1b:30:a9:a6:b6:78:75:a6: 3a:68:32:60:51:7e:01:25:00:68:7a:6a:9c:12:0c: 09:d8:c1:93:41:0b:05:af:91:54:84:ec:4c:a1:c2: d1:98:d7:82:d0:5d:6a:29:40:98:10:fe:c1:55:67: 81:d8:7e:ad:ec:a7:7d:33:d9:0e:af:91:66:36:91: 28:33:8c:7d:ef:c4:af:56:54:4e:45:95:9b:d5:e7: 8f:23:38:8b:55:b2:2e:dc:f1:fa:7e:20:55:09:dc: e8:7b:17:79:4c:97:09:06:d2:34:38:d2:73:fe:6e: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:10:0B:6F:1C:08:19:C2:D6:14:58:EF:0B:3A:13:E3:29:57:51:19 X509v3 Authority Key Identifier: keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f8:49:9f:ca:59:02:a8:85:26:9d:33:ba:51:ad:4d:00:0f: 1d:ef:7a:94:8d:db:e0:94:c6:a7:63:18:8e:b3:18:89:a4:30: 70:18:cf:f3:bc:53:2b:fe:f4:d2:b6:23:f8:76:56:9b:af:fe: a6:c6:0a:83:88:c5:1b:f3:5f:0f:76:84:30:2e:58:6d:1c:be: 69:34:26:50:38:68:70:d6:87:05:69:f2:b6:46:41:fb:d2:49: be:3a:0f:38:df:ee:f2:42:5d:e8:fe:47:e1:95:73:ce:fc:2c: 6f:94:8c:c9:7c:96:11:7c:67:9a:42:bf:5e:be:42:3b:ac:68: 3a:e3:7f:b1:69:49:02:6a:ff:b2:9d:a4:24:20:a5:45:6a:60: 90:fc:b2:10:db:85:cc:a2:a4:1e:8c:2b:69:0b:60:e4:6e:d8: 89:2c:9d:dc:32:0f:a7:d5:d5:44:6c:07:38:cc:a6:3a:f3:59: 42:54:f6:ef:3e:4f:eb:24:a4:53:00:a1:cc:c2:05:54:42:ba: 59:4e:8b:b7:0b:83:13:5a:23:da:3c:85:18:c5:d6:ea:bd:33: a2:f2:46:fa:ec:17:52:5c:0d:52:54:a8:3d:8f:9e:76:4a:f2: 72:c4:ee:38:36:35:81:38:be:7f:bd:5f:64:9a:54:9f:43:d6: 8c:79:7e:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZLsWpmeOfCERZCvWYb1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNWQ4NmFhYjRjMDk3NGYwYzI3ZjQzZDk2OGRmNDI2ZjUz ZGY1ZDIwHhcNMjUxMjA2MTYwMDMzWhcNMjUxMjA3MTYwMDMzWjAzMTEwLwYDVQQD Eyg0ZDEwMGI2ZjFjMDgxOWMyZDYxNDU4ZWYwYjNhMTNlMzI5NTc1MTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs90mmwuz+OFK17QNCmZZIWSRinHS 1l3UyPbjhAJi+uJ3Ass92nHth4kfJjU5B4iNMcXjTr6yMQt5fbgKwqlgr3cVqoig 9t6eI2oXw0tTN8OBdUwx3XKvsHO3V4cWWPwYpb0fWZurFJxy0fbqHPzRNnZxVLM6 HxN4rfUEFghs55Pib4iKH5ciO1iUp93rGzCpprZ4daY6aDJgUX4BJQBoemqcEgwJ 2MGTQQsFr5FUhOxMocLRmNeC0F1qKUCYEP7BVWeB2H6t7Kd9M9kOr5FmNpEoM4x9 78SvVlRORZWb1eePIziLVbIu3PH6fiBVCdzoexd5TJcJBtI0ONJz/m5XZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0QC28cCBnC1hRY7ws6E+MpV1EZMB8GA1UdIwQY MBaAFIpdhqq0wJdPDCf0PZaN9Cb1PfXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80Y2VhNzktMmEwOS00YWU3LWE1MGMt ZjhhODM2ZjAxYjIxLzEvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80Y2VhNzktMmEwOS00YWU3LWE1MGMtZjhhODM2ZjAxYjIx LzEvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfhJn8pZ AqiFJp0zulGtTQAPHe96lI3b4JTGp2MYjrMYiaQwcBjP87xTK/700rYj+HZWm6/+ psYKg4jFG/NfD3aEMC5YbRy+aTQmUDhocNaHBWnytkZB+9JJvjoPON/u8kJd6P5H 4ZVzzvwsb5SMyXyWEXxnmkK/Xr5CO6xoOuN/sWlJAmr/sp2kJCClRWpgkPyyENuF zKKkHowraQtg5G7YiSyd3DIPp9XVRGwHOMymOvNZQlT27z5P6ySkUwChzMIFVEK6 WU6LtwuDE1oj2jyFGMXW6r0zovJG+uwXUlwNUlSoPY+edkrycsTuODY1gTi+f71f ZJpUn0PWjHl+kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:31:27 2025 by rpki-client