This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json) Hash identifier: 5C1j7mMdPZog+PpTX92EX2pOgwcZKnEdvRPAIP6z1FQ= Subject key identifier: 2E:D0:7D:8D:C9:7C:EB:D2:26:BB:10:A5:99:3C:A9:66:97:7B:74:B7 Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1 Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1 Certificate serial: 019AF389E6F89BB264BCEDBB58A40583026E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft Manifest number: 0792 Signing time: Sat 06 Dec 2025 12:01:32 +0000 Manifest this update: Sat 06 Dec 2025 12:01:32 +0000 Manifest next update: Sun 07 Dec 2025 12:01:32 +0000 Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: r6QGGQPBoeFBRldDMNQcSHI+Sj4ngRBYa6HAx4UKx18=) 2: KM2VT3L9ZMXwTHPYv5ODDxzONBw.roa (hash: bksDGAxzNsshB1aRuaWU81TLlTV46EhoUgnARWy0HJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:e6:f8:9b:b2:64:bc:ed:bb:58:a4:05:83:02:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1 Validity Not Before: Dec 6 12:01:32 2025 GMT Not After : Dec 7 12:01:32 2025 GMT Subject: CN=2ed07d8dc97cebd226bb10a5993ca966977b74b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:82:6a:08:5f:ef:46:f3:29:79:46:d2:d3:c4: 00:95:a1:b1:f6:2e:11:29:31:e7:32:07:57:a8:bd: 74:f6:16:48:39:59:39:d3:ec:f4:ee:c1:ba:1b:3a: ec:67:cd:54:16:47:7b:5b:b7:b4:6d:8f:52:53:89: 21:6f:97:bf:86:ae:e9:76:29:1b:1c:bd:bd:63:62: c5:e7:78:49:99:8f:61:9f:0e:b9:4e:7c:10:9b:d8: 0a:51:0a:af:db:41:7c:d6:82:0a:de:c6:2d:06:84: 1b:20:3d:ef:2c:c7:28:1b:24:71:74:8f:25:5b:3c: af:c8:f9:3e:ed:ac:8f:73:9b:d0:fc:60:c0:fc:89: 11:fe:f6:db:b5:e4:86:62:8b:4c:3d:3a:6d:3c:17: 06:ed:a4:97:2d:60:fc:e6:cf:83:6d:d5:b0:bb:65: 41:7e:e8:9f:07:28:c8:9d:da:81:a1:11:7b:4b:15: e6:50:31:cf:fc:53:8e:74:d6:5e:20:7e:16:ab:66: d3:bb:59:5c:23:69:14:2d:6c:99:2b:a9:a2:3e:13: 5d:22:d7:e8:a0:f3:aa:de:d2:35:92:be:4a:1f:8a: d0:6d:93:39:13:1a:aa:e6:68:0e:38:0a:19:22:2d: e2:0f:d4:bf:5f:01:d2:e6:3d:95:32:77:0c:77:4e: 7c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D0:7D:8D:C9:7C:EB:D2:26:BB:10:A5:99:3C:A9:66:97:7B:74:B7 X509v3 Authority Key Identifier: keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:59:cc:ec:81:25:cf:d5:ac:eb:96:c3:56:e6:96:a2:35:e1: 49:14:6a:ac:88:f1:a9:90:bb:62:f9:45:5e:28:b4:17:7a:99: 0d:b1:da:42:f4:c1:01:8a:ac:56:47:4a:b9:39:1f:60:bd:b7: f4:97:5c:4e:18:8c:84:a9:d0:e3:16:3a:66:42:c9:ef:74:dd: ab:de:99:e9:1f:28:9f:25:8b:76:8f:fb:12:1e:e8:59:14:9f: 1e:0d:fd:9e:29:aa:3c:7b:fa:eb:0b:c5:71:96:dc:73:a2:d4: 3b:5f:36:c5:e5:22:48:2a:13:8a:fb:8e:43:1e:b7:44:54:46: 6e:a3:57:ad:34:9b:c1:a7:35:4b:1f:8d:b9:b1:63:50:b8:0b: 59:8c:e4:f0:c0:e9:4e:38:2c:18:5c:c8:be:8b:89:ee:84:f6: 1a:9c:18:07:e1:21:c7:24:61:98:2e:8e:0d:9a:72:1c:b2:2e: 7e:cc:0a:a5:48:7d:06:b9:30:b3:2f:e1:6c:e9:f6:56:fc:03: 80:2c:83:bd:56:3b:1c:81:3b:f6:fc:df:05:ce:41:8f:8e:72: 37:56:16:12:8c:b0:6f:13:cf:9b:b5:af:43:54:d7:69:de:89: 00:50:a0:04:90:ca:d8:fa:3f:65:2c:f8:fd:e9:b7:ea:a0:8d: 9a:4d:0c:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzieb4m7JkvO27WKQFgwJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjgzMDgzMzg3OGI2Yzg2MTI2OWEwZTJhNDU4MzdhYTk0 ODViZTEwHhcNMjUxMjA2MTIwMTMyWhcNMjUxMjA3MTIwMTMyWjAzMTEwLwYDVQQD EygyZWQwN2Q4ZGM5N2NlYmQyMjZiYjEwYTU5OTNjYTk2Njk3N2I3NGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoJqCF/vRvMpeUbS08QAlaGx9i4R KTHnMgdXqL109hZIOVk50+z07sG6GzrsZ81UFkd7W7e0bY9SU4khb5e/hq7pdikb HL29Y2LF53hJmY9hnw65TnwQm9gKUQqv20F81oIK3sYtBoQbID3vLMcoGyRxdI8l WzyvyPk+7ayPc5vQ/GDA/IkR/vbbteSGYotMPTptPBcG7aSXLWD85s+DbdWwu2VB fuifByjIndqBoRF7SxXmUDHP/FOOdNZeIH4Wq2bTu1lcI2kULWyZK6miPhNdItfo oPOq3tI1kr5KH4rQbZM5Exqq5mgOOAoZIi3iD9S/XwHS5j2VMncMd058+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7QfY3JfOvSJrsQpZk8qWaXe3S3MB8GA1UdIwQY MBaAFCC4MIM4eLbIYSaaDipFg3qpSFvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYt MTU2NDk3YmZlOTNmLzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NGZmMGYtZTM1Ni00OGIzLTgzMGYtMTU2NDk3YmZlOTNm LzEvSUxnd2d6aDR0c2hoSnBvT0trV0RlcWxJVy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlnM7IEl z9Ws65bDVuaWojXhSRRqrIjxqZC7YvlFXii0F3qZDbHaQvTBAYqsVkdKuTkfYL23 9JdcThiMhKnQ4xY6ZkLJ73Tdq96Z6R8onyWLdo/7Eh7oWRSfHg39nimqPHv66wvF cZbcc6LUO182xeUiSCoTivuOQx63RFRGbqNXrTSbwac1Sx+NubFjULgLWYzk8MDp TjgsGFzIvouJ7oT2GpwYB+EhxyRhmC6ODZpyHLIufswKpUh9Brkwsy/hbOn2VvwD gCyDvVY7HIE79vzfBc5Bj45yN1YWEoywbxPPm7WvQ1TXad6JAFCgBJDK2Po/ZSz4 /em36qCNmk0MwA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:14 2025 by rpki-client