This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft File: 5IL9B-INQG6kFS5JKwAOVU6_zIA.mft (raw, json) Hash identifier: Ko6AdNGQ/REhPZu9sfQsCyEFqI6r7Jk41qXxHIU+oCY= Subject key identifier: BF:37:86:63:4C:69:98:62:34:CF:0E:69:3B:B2:F4:A1:CC:16:5F:8F Authority key identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80 Certificate issuer: /CN=e482fd07e20d406ea4152e492b000e554ebfcc80 Certificate serial: 019AF3899A5E41691FD4F55CE2FBBEEA6132 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft Manifest number: 143D Signing time: Sat 06 Dec 2025 12:01:12 +0000 Manifest this update: Sat 06 Dec 2025 12:01:12 +0000 Manifest next update: Sun 07 Dec 2025 12:01:12 +0000 Files and hashes: 1: 5IL9B-INQG6kFS5JKwAOVU6_zIA.crl (hash: DbQxZAX//FeNTGuZP/XHNMaRFHsxDowjBUVfixkO018=) 2: 8n8zo5rtakZ1whW9-uc5uUrGQWs.roa (hash: aqUj+0Ybl2fHs4Ve+OniwJ/DSH+hH1A2s4EAgpbtDzc=) 3: gvC7ao5sxrnrTpKAU7Z6Kxl3n4w.roa (hash: 6Il2DCAKJW2GDXUMq30h38NoaFgqqtmGFfPCqtO+DUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:9a:5e:41:69:1f:d4:f5:5c:e2:fb:be:ea:61:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e482fd07e20d406ea4152e492b000e554ebfcc80 Validity Not Before: Dec 6 12:01:12 2025 GMT Not After : Dec 7 12:01:12 2025 GMT Subject: CN=bf3786634c69986234cf0e693bb2f4a1cc165f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:e7:61:74:20:e9:4d:f7:44:a0:cb:7d:08: 74:e6:88:eb:29:b1:9f:91:65:10:14:1c:f5:39:85: 47:c8:0c:0b:cf:46:e6:ea:fd:b3:f3:bd:0f:ef:7a: 13:db:fb:af:94:7f:ea:15:b3:e7:31:a2:79:b8:ef: 71:7f:fb:fb:0e:5f:74:d7:38:06:55:e9:eb:dd:db: 2d:36:fe:7c:f8:70:4b:7a:23:0a:83:ad:a5:9e:cd: 2a:2a:c1:18:45:f0:64:18:94:70:30:d3:12:c5:c1: c7:96:d6:bc:f5:40:d2:92:70:5d:22:b5:b1:d7:74: a4:f9:d3:a3:84:82:0d:ca:67:a5:45:2d:9f:d8:fb: f4:c6:0b:01:ba:a8:1b:b3:bd:98:5f:b6:8e:3f:a9: a9:3a:32:2a:39:0e:4f:5f:f3:a4:d9:ec:08:28:1a: fd:a0:e4:7c:49:6b:5c:4f:ba:72:7d:88:ad:63:9a: 83:7a:21:8b:d2:55:60:d3:d3:99:17:92:b5:c0:dc: 4d:7f:1f:94:16:44:25:2f:6d:e8:92:6b:d4:fc:5a: 0b:96:00:d7:92:64:7c:f9:77:12:5f:cb:5f:7e:a3: 43:b7:f0:24:9e:d4:50:25:e7:02:c7:21:5d:0b:ad: e9:3c:32:f4:c8:f2:f5:35:26:b2:90:85:c3:fb:73: 8b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:37:86:63:4C:69:98:62:34:CF:0E:69:3B:B2:F4:A1:CC:16:5F:8F X509v3 Authority Key Identifier: keyid:E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:30:61:e8:4c:bb:fa:a7:a1:1a:c4:3b:24:b9:5e:5e:60:95: e9:5c:52:34:68:66:3f:c9:f0:72:1e:f8:f0:fd:d1:e4:df:49: 57:35:de:62:5c:ab:8d:3f:eb:b2:f2:f0:17:84:3e:8b:d3:52: 9e:af:6e:ca:8d:29:e1:56:ff:72:82:3a:cf:60:ba:9e:ed:10: 0a:1e:c6:48:9e:dd:07:0d:64:39:ad:3f:a0:7e:b0:dc:4b:09: a2:f9:df:27:a0:2a:c3:41:be:25:80:02:09:54:62:bb:2a:e6: b6:38:9e:39:3f:7d:30:21:59:96:e6:ec:ca:92:7e:ba:ad:0a: d7:ab:e7:d3:3e:bb:4a:58:e6:36:dd:94:4a:c8:b5:ed:99:97: 9b:fc:2f:4a:69:1b:93:a4:71:10:4e:d2:9e:cf:64:7f:c6:8f: 9f:7e:35:d0:47:6f:24:a3:78:8a:3f:2b:b1:e0:63:d7:c6:03: ad:35:a4:af:3c:2d:e1:a3:d1:c8:5f:ae:bc:31:24:b9:59:9f: 1a:89:59:b4:01:df:b1:8a:64:4f:2e:2b:fb:8e:52:34:c1:9b: 13:70:97:5c:a1:b9:9a:04:91:8b:a1:76:37:b4:f7:0e:af:6b: 8d:94:5f:19:f2:b3:2c:d6:5b:38:f7:bf:6f:8a:2b:64:b8:74: 91:0f:e7:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZpeQWkf1PVc4vu+6mEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODJmZDA3ZTIwZDQwNmVhNDE1MmU0OTJiMDAwZTU1NGVi ZmNjODAwHhcNMjUxMjA2MTIwMTEyWhcNMjUxMjA3MTIwMTEyWjAzMTEwLwYDVQQD EyhiZjM3ODY2MzRjNjk5ODYyMzRjZjBlNjkzYmIyZjRhMWNjMTY1ZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyijnYXQg6U33RKDLfQh05ojrKbGf kWUQFBz1OYVHyAwLz0bm6v2z870P73oT2/uvlH/qFbPnMaJ5uO9xf/v7Dl901zgG Venr3dstNv58+HBLeiMKg62lns0qKsEYRfBkGJRwMNMSxcHHlta89UDSknBdIrWx 13Sk+dOjhIINymelRS2f2Pv0xgsBuqgbs72YX7aOP6mpOjIqOQ5PX/Ok2ewIKBr9 oOR8SWtcT7pyfYitY5qDeiGL0lVg09OZF5K1wNxNfx+UFkQlL23okmvU/FoLlgDX kmR8+XcSX8tffqNDt/AkntRQJecCxyFdC63pPDL0yPL1NSaykIXD+3OLMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL83hmNMaZhiNM8OaTuy9KHMFl+PMB8GA1UdIwQY MBaAFOSC/QfiDUBupBUuSSsADlVOv8yAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUlMOUItSU5RRzZrRlM1Skt3QU9WVTZfeklBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mN2E4N2EtYzE4NC00OTA0LTk0ZTMt MjY4NTk4NmY2ZDAxLzEvNUlMOUItSU5RRzZrRlM1Skt3QU9WVTZfeklBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9mN2E4N2EtYzE4NC00OTA0LTk0ZTMtMjY4NTk4NmY2ZDAx LzEvNUlMOUItSU5RRzZrRlM1Skt3QU9WVTZfeklBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjBh6Ey7 +qehGsQ7JLleXmCV6VxSNGhmP8nwch748P3R5N9JVzXeYlyrjT/rsvLwF4Q+i9NS nq9uyo0p4Vb/coI6z2C6nu0QCh7GSJ7dBw1kOa0/oH6w3EsJovnfJ6Aqw0G+JYAC CVRiuyrmtjieOT99MCFZlubsypJ+uq0K16vn0z67SljmNt2USsi17ZmXm/wvSmkb k6RxEE7Sns9kf8aPn3410EdvJKN4ij8rseBj18YDrTWkrzwt4aPRyF+uvDEkuVmf GolZtAHfsYpkTy4r+45SNMGbE3CXXKG5mgSRi6F2N7T3Dq9rjZRfGfKzLNZbOPe/ b4orZLh0kQ/npg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:08 2025 by rpki-client