This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft File: il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json) Hash identifier: 5Pa45OhKW1mON2AkqneZAnqR+7Bwsk2PX7xt8Bi+2Sw= Subject key identifier: 0D:FF:F3:9E:E3:49:0E:E9:06:8C:80:B5:A9:62:6D:D9:1D:E5:C5:43 Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95 Certificate issuer: /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695 Certificate serial: 019B2FD4FA763B3A203D1BA96816F53F8520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft Manifest number: 0F82 Signing time: Thu 18 Dec 2025 05:00:45 +0000 Manifest this update: Thu 18 Dec 2025 05:00:45 +0000 Manifest next update: Fri 19 Dec 2025 05:00:45 +0000 Files and hashes: 1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: uxMYzgTTSBsdUv7P/cfJCMWaionRrx3mo8pFj/Ccdss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:fa:76:3b:3a:20:3d:1b:a9:68:16:f5:3f:85:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695 Validity Not Before: Dec 18 05:00:45 2025 GMT Not After : Dec 19 05:00:45 2025 GMT Subject: CN=0dfff39ee3490ee9068c80b5a9626dd91de5c543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:8d:1e:bb:80:07:24:86:cd:da:fe:82:23: 60:43:79:6d:a5:3f:f7:5e:1a:fc:d5:13:85:8d:30: 8d:eb:14:49:23:22:0b:6d:be:41:e5:a7:26:1b:73: 91:0a:53:b9:53:ba:42:8d:e3:6d:55:a5:65:5f:06: f5:53:56:48:93:85:b1:11:72:f0:8c:90:e8:24:03: d9:36:80:9c:ae:71:c9:17:86:1b:a1:d2:36:af:0d: cc:83:7c:6d:b3:03:09:1a:e7:05:71:c0:7e:1a:24: 6e:45:1c:4d:03:78:40:b3:23:24:5e:92:7b:b6:c7: ce:7d:12:46:2f:1f:66:e0:9c:aa:1d:03:1c:0a:c4: 1e:93:64:09:b4:12:62:25:ae:f5:de:56:6d:de:f2: b8:c2:8b:ec:35:af:8a:d3:65:05:cf:ed:3f:9b:42: af:42:9e:f8:7a:c4:48:93:76:6e:a5:b8:4b:74:45: 9e:3f:00:66:6c:95:7f:87:c7:d8:88:73:9f:d4:ec: d7:6d:66:39:af:b9:0d:db:77:d8:c4:9a:89:f9:37: 07:3a:02:ca:6a:99:a2:b0:53:86:54:b0:9e:d5:3b: 24:c6:2e:ea:6e:c4:6d:f1:76:f8:99:32:99:8c:f1: 0a:e2:9f:5d:47:fe:91:10:33:b4:7a:cc:2c:1a:3b: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FF:F3:9E:E3:49:0E:E9:06:8C:80:B5:A9:62:6D:D9:1D:E5:C5:43 X509v3 Authority Key Identifier: keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b4:f0:0d:f3:a2:a6:66:97:de:c0:3f:20:6c:af:6e:69:90: 45:9e:a2:33:8c:be:6f:09:a8:60:46:7b:a6:fd:fc:b6:ff:bc: 43:44:81:99:b4:0d:f9:af:60:36:b3:2e:5e:f0:65:9f:c8:d1: 08:72:ad:60:7b:14:dd:08:13:5e:d1:f2:c6:f5:a0:36:6c:ec: 53:75:9f:db:6c:01:9c:b5:ba:2d:1f:18:0c:9f:d2:89:ac:ac: 49:18:ec:02:e4:fa:22:fe:e3:bd:e7:93:d8:a0:25:2b:94:13: b8:18:7b:6f:c8:15:2c:a9:bc:f2:e2:c5:5b:84:92:9d:f3:25: f0:7f:c2:d7:e9:7a:5b:39:f3:64:2b:54:25:1f:c0:75:88:36: de:4d:93:ec:45:91:fa:d4:9c:07:5a:40:74:56:d0:8e:35:91: 8e:e9:33:ce:77:55:fb:4a:b5:78:86:e7:38:58:4c:e7:e0:e3: 0d:17:07:85:61:c8:5b:ee:87:3a:c9:62:02:fd:f1:bb:0d:c1: 45:93:28:0d:0e:6e:28:8f:80:56:51:10:28:4a:04:4d:72:64: 23:6c:43:25:0c:72:ba:ca:4d:c6:f0:47:82:68:0a:05:de:ab: 84:35:b3:29:11:e2:09:7b:7a:54:3c:f7:87:f9:9a:af:28:98: 8d:0c:5d:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1Pp2OzogPRupaBb1P4UgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNWQ0NWE0YzE3M2FhZWIyMzZjYmVhMDlkMmU4YWZjODA0 NTE2OTUwHhcNMjUxMjE4MDUwMDQ1WhcNMjUxMjE5MDUwMDQ1WjAzMTEwLwYDVQQD EygwZGZmZjM5ZWUzNDkwZWU5MDY4YzgwYjVhOTYyNmRkOTFkZTVjNTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQGNHruABySGzdr+giNgQ3ltpT/3 Xhr81ROFjTCN6xRJIyILbb5B5acmG3ORClO5U7pCjeNtVaVlXwb1U1ZIk4WxEXLw jJDoJAPZNoCcrnHJF4YbodI2rw3Mg3xtswMJGucFccB+GiRuRRxNA3hAsyMkXpJ7 tsfOfRJGLx9m4JyqHQMcCsQek2QJtBJiJa713lZt3vK4wovsNa+K02UFz+0/m0Kv Qp74esRIk3ZupbhLdEWePwBmbJV/h8fYiHOf1OzXbWY5r7kN23fYxJqJ+TcHOgLK apmisFOGVLCe1Tskxi7qbsRt8Xb4mTKZjPEK4p9dR/6REDO0eswsGjvYtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3/857jSQ7pBoyAtalibdkd5cVDMB8GA1UdIwQY MBaAFIpdRaTBc6rrI2y+oJ0uivyARRaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81Yzg4Y2MtYmQwNi00YzNmLTkzNTYt ZTA2YjIwNGFjNDk0LzEvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy81Yzg4Y2MtYmQwNi00YzNmLTkzNTYtZTA2YjIwNGFjNDk0 LzEvaWwxRnBNRnpxdXNqYkw2Z25TNktfSUJGRnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7TwDfOi pmaX3sA/IGyvbmmQRZ6iM4y+bwmoYEZ7pv38tv+8Q0SBmbQN+a9gNrMuXvBln8jR CHKtYHsU3QgTXtHyxvWgNmzsU3Wf22wBnLW6LR8YDJ/SiaysSRjsAuT6Iv7jveeT 2KAlK5QTuBh7b8gVLKm88uLFW4SSnfMl8H/C1+l6WznzZCtUJR/AdYg23k2T7EWR +tScB1pAdFbQjjWRjukzzndV+0q1eIbnOFhM5+DjDRcHhWHIW+6HOsliAv3xuw3B RZMoDQ5uKI+AVlEQKEoETXJkI2xDJQxyuspNxvBHgmgKBd6rhDWzKRHiCXt6VDz3 h/maryiYjQxd/A== -----END CERTIFICATE-----Generated at Thu Dec 18 11:16:03 2025 by rpki-client