This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json) Hash identifier: FSaxsR6HV3Y03ieo7tCCKV/ZW4wdBg1YnFpbSf1HIC8= Subject key identifier: 4E:AA:73:64:17:E9:92:43:88:59:4F:8A:A7:84:00:E0:0D:AC:CE:7B Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96 Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696 Certificate serial: 019AF3C008C59AFDFBE71795168EFA98A778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft Manifest number: 036B Signing time: Sat 06 Dec 2025 13:00:39 +0000 Manifest this update: Sat 06 Dec 2025 13:00:39 +0000 Manifest next update: Sun 07 Dec 2025 13:00:39 +0000 Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: MGYGoScmcfpS81drd+irz/13EH9kwSdx8FvEm72avN0=) 2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:08:c5:9a:fd:fb:e7:17:95:16:8e:fa:98:a7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696 Validity Not Before: Dec 6 13:00:39 2025 GMT Not After : Dec 7 13:00:39 2025 GMT Subject: CN=4eaa736417e9924388594f8aa78400e00dacce7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:bc:ee:a9:93:59:fc:5d:cc:76:8e:13:6c: 2e:fa:91:cc:da:ce:56:b2:40:f3:ca:1e:f1:c7:90: 0e:a2:7c:e0:e2:67:fe:da:f4:4f:63:81:54:37:73: 81:08:08:54:14:09:ef:15:a9:52:42:46:81:a9:86: 01:40:85:7e:35:2b:e2:ad:b0:53:f1:75:d0:6c:3c: 5a:4f:1d:eb:89:19:72:58:d4:57:ec:2d:03:9b:85: a9:c5:02:7c:0f:4a:09:16:8c:58:15:7c:45:8e:a0: 3e:d5:17:a2:37:05:be:d8:a3:c4:e7:86:16:9a:61: 67:3e:d0:d1:0a:ae:ff:bc:2d:40:9d:e8:81:58:0a: 7c:d9:23:ad:1d:ba:b3:2e:16:74:5b:bd:75:46:11: f5:ad:03:71:ee:53:42:12:ae:10:3a:55:35:30:1d: aa:d2:85:19:9a:46:bd:60:9c:fd:8f:37:f0:f1:dc: 37:87:05:76:1f:d5:78:ab:6b:b8:9d:5f:5e:cc:ae: 9e:a6:e9:09:b8:67:f9:43:2c:ce:b0:83:60:2c:7d: aa:fb:59:33:04:ed:c0:d3:1f:c0:0d:20:4b:1d:f0: e8:e3:59:b6:2b:c6:0a:f3:7e:1e:7c:c4:28:ca:58: ff:23:94:36:dc:78:89:54:49:9c:44:0b:d0:de:81: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AA:73:64:17:E9:92:43:88:59:4F:8A:A7:84:00:E0:0D:AC:CE:7B X509v3 Authority Key Identifier: keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b2:37:9b:94:af:4c:5c:b5:80:f1:ff:74:23:d2:a2:d7:4b: 35:0f:d8:1d:36:b8:69:94:a4:a1:2a:cf:01:c9:68:4d:c2:9a: 96:e0:3c:e2:69:74:37:ec:55:2d:99:31:e8:96:37:a6:a0:c5: 2c:97:dc:e5:fe:62:b6:db:2e:8c:47:fb:0d:0c:37:63:0d:30: ea:f8:4f:e2:e6:51:c6:fc:c9:64:6a:ae:82:41:e8:6e:61:4f: 93:dc:78:e5:07:bf:ad:81:4d:a5:ef:2a:a5:4c:72:81:e9:c6: fe:ce:ea:22:b6:f8:3b:de:ce:c1:b3:eb:ea:7c:e1:56:60:fb: 08:9b:57:44:63:96:57:d4:f2:f0:7e:86:d5:87:0a:44:94:cc: 01:43:55:21:25:8e:4d:15:59:85:8b:db:e8:85:61:fd:fd:52: 44:7e:e4:6c:c8:ea:3d:5c:e0:4c:ed:34:4d:5e:c4:45:8a:44: 6d:e1:21:31:d3:9d:65:34:c2:3a:ed:19:4f:48:dd:e1:a9:7a: 51:6d:51:b1:4d:88:34:7c:47:53:7a:bb:68:cc:5e:35:73:0a: 9e:04:84:27:5b:b9:56:77:c3:bc:6e:0f:f7:58:a9:a5:9c:bb: c7:19:3c:29:55:54:56:d6:c7:f6:e6:7c:e2:da:8a:af:1d:5f: 4f:6e:4c:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAjFmv375xeVFo76mKd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjEzOTEwYzFmOTg3MzVlNDAxNjUwYjFkMzRiZjhiNmEw YTA2OTYwHhcNMjUxMjA2MTMwMDM5WhcNMjUxMjA3MTMwMDM5WjAzMTEwLwYDVQQD Eyg0ZWFhNzM2NDE3ZTk5MjQzODg1OTRmOGFhNzg0MDBlMDBkYWNjZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbe87qmTWfxdzHaOE2wu+pHM2s5W skDzyh7xx5AOonzg4mf+2vRPY4FUN3OBCAhUFAnvFalSQkaBqYYBQIV+NSvirbBT 8XXQbDxaTx3riRlyWNRX7C0Dm4WpxQJ8D0oJFoxYFXxFjqA+1ReiNwW+2KPE54YW mmFnPtDRCq7/vC1AneiBWAp82SOtHbqzLhZ0W711RhH1rQNx7lNCEq4QOlU1MB2q 0oUZmka9YJz9jzfw8dw3hwV2H9V4q2u4nV9ezK6epukJuGf5QyzOsINgLH2q+1kz BO3A0x/ADSBLHfDo41m2K8YK834efMQoylj/I5Q23HiJVEmcRAvQ3oEyPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6qc2QX6ZJDiFlPiqeEAOANrM57MB8GA1UdIwQY MBaAFCCxORDB+Yc15AFlCx00v4tqCgaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxFNUVNSDVoelhrQVdVTEhUU19pMm9LQnBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85Y2VkMjYtNDdiMC00MjdhLTg4MWUt ZjcxM2FkNTE2MTg1LzEvSUxFNUVNSDVoelhrQVdVTEhUU19pMm9LQnBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85Y2VkMjYtNDdiMC00MjdhLTg4MWUtZjcxM2FkNTE2MTg1 LzEvSUxFNUVNSDVoelhrQVdVTEhUU19pMm9LQnBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLI3m5Sv TFy1gPH/dCPSotdLNQ/YHTa4aZSkoSrPAcloTcKaluA84ml0N+xVLZkx6JY3pqDF LJfc5f5ittsujEf7DQw3Yw0w6vhP4uZRxvzJZGqugkHobmFPk9x45Qe/rYFNpe8q pUxygenG/s7qIrb4O97OwbPr6nzhVmD7CJtXRGOWV9Ty8H6G1YcKRJTMAUNVISWO TRVZhYvb6IVh/f1SRH7kbMjqPVzgTO00TV7ERYpEbeEhMdOdZTTCOu0ZT0jd4al6 UW1RsU2INHxHU3q7aMxeNXMKngSEJ1u5VnfDvG4P91ippZy7xxk8KVVUVtbH9uZ8 4tqKrx1fT25MZg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:31:29 2025 by rpki-client