This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft File: ilX0iZwkbRdUoWiC0OdoB-uOK14.mft (raw, json) Hash identifier: 591oW3qpKP3op0Ls+MKYByA7J17ATzocZ6OfsA5i1nE= Subject key identifier: 71:F1:C5:78:F4:F8:88:7D:3B:AF:61:44:8B:3F:3A:12:F7:0B:67:3D Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e Certificate serial: 019AF31CD14576233D2E445107F6F98F0962 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 10:02:23 +0000 Manifest this update: Sat 06 Dec 2025 10:02:23 +0000 Manifest next update: Sun 07 Dec 2025 10:02:23 +0000 Files and hashes: 1: ilX0iZwkbRdUoWiC0OdoB-uOK14.crl (hash: DG5mwiiheriPF6BAU4Bm4eq33CC4CNGEVo5i0mIZ1cM=) 2: yZL-h7CMMZ_jCkqOUWXzTNR83Ls.roa (hash: 6I7n0xCvQ3FC2MV2Pqk6KjdQE1M7SQrxGUU9YrmgwbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d1:45:76:23:3d:2e:44:51:07:f6:f9:8f:09:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e Validity Not Before: Dec 6 10:02:23 2025 GMT Not After : Dec 7 10:02:23 2025 GMT Subject: CN=71f1c578f4f8887d3baf61448b3f3a12f70b673d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:48:a7:e0:36:08:dc:56:33:9a:1b:b8:3d:9f: 91:7b:ae:eb:f4:56:68:cd:2b:7a:13:bd:cd:46:df: f8:9d:06:ab:0e:ba:3f:81:31:94:85:6b:e5:bb:c4: a5:99:a7:f2:8d:53:a3:80:5f:8d:fb:29:6c:54:34: ac:f8:40:c1:dc:36:28:cc:fa:b1:80:58:aa:d3:dc: d4:c4:88:68:98:3b:63:b0:a0:26:91:f4:f3:b1:a5: d2:0d:95:3c:e7:14:84:53:ef:18:c0:86:e2:49:f2: 98:a4:4a:88:3d:ba:c2:71:45:48:e3:1d:a5:94:1a: e1:b5:36:ef:f0:e6:0b:bc:a8:b2:ff:c1:15:23:08: 2a:7d:de:97:22:44:27:68:6a:e6:ae:25:9f:a2:f5: a1:17:6e:31:15:0b:c0:e4:23:e1:15:e9:28:5e:6f: 1b:dd:4d:8e:7f:10:dd:36:60:4a:31:f5:e4:09:32: 1a:93:c5:48:50:67:2f:ae:1e:82:94:1c:8f:85:be: c5:c2:1f:88:cf:5e:d9:6c:ff:1d:55:ce:d8:0b:6e: 0d:bc:7d:86:62:8a:4c:d4:b2:d9:80:5f:6c:74:5d: fd:9c:ec:27:fc:0b:2f:ce:7f:af:ec:cf:d1:ae:b9: d5:59:aa:33:3f:08:39:18:06:3d:51:6c:ab:7c:37: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F1:C5:78:F4:F8:88:7D:3B:AF:61:44:8B:3F:3A:12:F7:0B:67:3D X509v3 Authority Key Identifier: keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:55:3d:b9:ad:11:bd:0c:45:d5:11:37:53:55:7f:97:1d:7c: 0b:71:68:fb:d9:71:e9:28:32:30:f3:36:38:cb:87:ff:e1:45: c2:73:2d:a7:b8:c7:b7:e4:8d:8a:c6:f2:3f:f2:15:56:02:4e: a6:06:c4:b0:e1:7e:78:23:25:ac:fc:78:32:98:92:6a:cf:2d: d8:50:8a:d6:8a:17:da:0b:66:49:42:ce:5e:ad:79:cf:02:37: ac:78:32:b8:1f:16:87:db:62:b7:b5:91:32:b6:2e:d0:28:05: 58:62:f3:8e:ec:92:e4:f9:37:b8:95:44:90:62:3a:b7:27:59: fc:78:9b:47:a5:32:d5:0a:94:4e:c9:1c:f3:53:f9:86:b2:ea: 1a:f2:19:cb:61:5e:6a:e1:17:34:0c:46:aa:25:ee:5a:06:8b: f7:3b:31:05:7f:e5:82:d7:2f:43:b0:93:39:75:44:59:e6:96: 36:ac:03:df:c1:cf:91:d3:50:84:2a:8c:e1:36:32:3b:1b:4a: 17:39:ea:42:37:a5:df:8f:b2:b6:fc:72:74:e9:eb:39:c8:95: 16:f7:25:b9:19:52:93:85:95:63:4f:e0:42:bb:50:4e:a2:cf: d9:a0:97:24:6b:07:9e:5c:3a:2c:8a:20:f2:d6:95:20:79:ec: 04:5f:50:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNFFdiM9LkRRB/b5jwliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTVmNDg5OWMyNDZkMTc1NGExNjg4MmQwZTc2ODA3ZWI4 ZTJiNWUwHhcNMjUxMjA2MTAwMjIzWhcNMjUxMjA3MTAwMjIzWjAzMTEwLwYDVQQD Eyg3MWYxYzU3OGY0Zjg4ODdkM2JhZjYxNDQ4YjNmM2ExMmY3MGI2NzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10in4DYI3FYzmhu4PZ+Re67r9FZo zSt6E73NRt/4nQarDro/gTGUhWvlu8SlmafyjVOjgF+N+ylsVDSs+EDB3DYozPqx gFiq09zUxIhomDtjsKAmkfTzsaXSDZU85xSEU+8YwIbiSfKYpEqIPbrCcUVI4x2l lBrhtTbv8OYLvKiy/8EVIwgqfd6XIkQnaGrmriWfovWhF24xFQvA5CPhFekoXm8b 3U2OfxDdNmBKMfXkCTIak8VIUGcvrh6ClByPhb7Fwh+Iz17ZbP8dVc7YC24NvH2G YopM1LLZgF9sdF39nOwn/Asvzn+v7M/RrrnVWaozPwg5GAY9UWyrfDdrLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHxxXj0+Ih9O69hRIs/OhL3C2c9MB8GA1UdIwQY MBaAFIpV9ImcJG0XVKFogtDnaAfrjiteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAt YmVkYWZiMDkyMmRkLzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi84NjRmZTItMDQ3OC00MzgxLTgzMjAtYmVkYWZiMDkyMmRk LzEvaWxYMGlad2tiUmRVb1dpQzBPZG9CLXVPSzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlU9ua0R vQxF1RE3U1V/lx18C3Fo+9lx6SgyMPM2OMuH/+FFwnMtp7jHt+SNisbyP/IVVgJO pgbEsOF+eCMlrPx4MpiSas8t2FCK1ooX2gtmSULOXq15zwI3rHgyuB8Wh9tit7WR MrYu0CgFWGLzjuyS5Pk3uJVEkGI6tydZ/HibR6Uy1QqUTskc81P5hrLqGvIZy2Fe auEXNAxGqiXuWgaL9zsxBX/lgtcvQ7CTOXVEWeaWNqwD38HPkdNQhCqM4TYyOxtK FznqQjel34+ytvxydOnrOciVFvcluRlSk4WVY0/gQrtQTqLP2aCXJGsHnlw6LIog 8taVIHnsBF9Qdw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:26 2025 by rpki-client