This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json) Hash identifier: T5wtWhYRw4KY3QvFGimyxVZC1rZdOqSK4j8J+R5mUE0= Subject key identifier: 47:63:BF:0D:A9:A4:DC:2C:89:9B:1E:64:AB:0F:42:A7:D8:3C:6F:0E Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04 Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04 Certificate serial: 019AF3C02088FB26FC77311C8E940E19FC69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft Manifest number: 0BF3 Signing time: Sat 06 Dec 2025 13:00:45 +0000 Manifest this update: Sat 06 Dec 2025 13:00:45 +0000 Manifest next update: Sun 07 Dec 2025 13:00:45 +0000 Files and hashes: 1: 0WfJoxMemQt8nwlwlbf0-N5ZBgI.roa (hash: lHb75yOft9Kv2xRvC1d+Vx96c+J/4+jIL8gOSIRqeFs=) 2: 5RlzUCtoZ32Oa93A2fEfoYArcWM.roa (hash: iA8YpgMYI54//mfKtXnw0NA6/nJYpojDOe0q+RA30ZU=) 3: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: Sdo9M6bzNqNIhHKQzkPVF7+lfLsWjRpo0UnirXU8Vig=) 4: zmJ9lE5vi4Jqc9Z9iVsq8OjO3sw.roa (hash: b4eeLp19myrQzh9AuX2bzcABMyXzCxCR666FaiLOLYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:20:88:fb:26:fc:77:31:1c:8e:94:0e:19:fc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04 Validity Not Before: Dec 6 13:00:45 2025 GMT Not After : Dec 7 13:00:45 2025 GMT Subject: CN=4763bf0da9a4dc2c899b1e64ab0f42a7d83c6f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2d:88:c7:82:12:7c:79:b5:fa:8c:e2:03:b8: dc:98:71:18:5f:81:d7:56:93:43:64:c1:71:6c:73: 53:7e:24:cf:f9:30:6b:5e:2b:91:31:58:21:fe:ae: c1:70:5b:c4:a1:a9:7a:e2:2f:02:72:cd:ef:d3:fd: ee:8d:5e:5e:97:02:c6:39:d1:dd:15:8c:3c:59:d1: b8:ab:eb:10:63:67:4d:fc:a1:f6:a5:c1:4e:f8:2c: 81:fe:bc:1a:9b:33:d1:c5:ba:e2:3a:63:a0:e5:a1: 46:56:a7:47:75:bc:70:84:c7:a7:d2:17:fd:dd:89: e7:22:50:14:3c:e8:97:97:50:be:26:2e:81:99:03: 8d:7a:0a:3a:71:cc:34:0e:6e:ee:ca:c1:1c:c0:c3: 17:54:fe:e5:84:3b:95:da:d0:39:50:5d:3d:bf:79: 9f:ea:32:ab:8b:b5:66:23:0d:88:c0:98:b7:21:fc: aa:95:f2:06:f4:b5:9f:50:45:f5:53:d7:30:fd:9b: 31:bc:97:55:b7:26:c9:b0:78:0a:0e:69:c8:b4:93: bb:cc:61:b8:44:bb:0d:e1:f1:c1:70:9f:5f:1e:16: b3:80:56:93:4c:75:3b:db:f6:c4:e0:7c:c7:77:f7: a9:1c:cf:a8:3d:04:8c:3d:58:bd:7a:76:be:9d:2d: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:63:BF:0D:A9:A4:DC:2C:89:9B:1E:64:AB:0F:42:A7:D8:3C:6F:0E X509v3 Authority Key Identifier: keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f1:34:94:0a:14:8b:84:0f:03:38:88:6d:62:af:33:fe:1a: 30:fc:bf:9d:4c:1e:0f:90:e0:70:de:94:21:5f:60:a9:12:33: 97:66:a5:47:32:4c:d9:d2:cb:82:d0:af:9f:70:36:d3:29:67: bb:97:a9:cf:9d:28:7f:29:5a:ce:8f:38:9f:41:fa:33:8e:cd: 7e:8c:83:b1:3c:56:33:ad:38:91:fa:4b:89:64:99:8c:c5:63: 13:b9:b2:da:e1:58:57:ea:73:83:ec:fc:7d:b8:c9:2d:41:02: ef:3a:81:5a:75:0d:e6:d1:1d:70:da:17:f8:93:7b:c1:eb:85: 0e:0f:35:1e:99:fc:87:f1:46:77:d0:18:dc:28:23:18:ab:ac: 8d:0d:92:63:e8:f6:19:dc:b7:38:db:02:e2:87:33:00:d3:68: 72:67:c1:7d:c7:e8:8b:33:60:52:aa:08:91:6e:ba:c6:5a:35: 3a:67:8f:67:e2:65:45:b0:da:4c:a8:4f:1e:28:7c:70:26:b0: be:9c:e2:93:d1:ba:c6:ad:ac:61:77:25:36:e9:2a:c5:b1:88: 42:18:c0:d2:d6:13:62:88:e4:b0:7b:58:f9:49:7e:0b:01:af: 90:2d:6d:3e:ba:04:d8:e1:6b:29:ba:73:e0:a2:4d:ab:07:f8: 0e:a0:b6:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwCCI+yb8dzEcjpQOGfxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2 YzJhMDQwHhcNMjUxMjA2MTMwMDQ1WhcNMjUxMjA3MTMwMDQ1WjAzMTEwLwYDVQQD Eyg0NzYzYmYwZGE5YTRkYzJjODk5YjFlNjRhYjBmNDJhN2Q4M2M2ZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny2Ix4ISfHm1+oziA7jcmHEYX4HX VpNDZMFxbHNTfiTP+TBrXiuRMVgh/q7BcFvEoal64i8Ccs3v0/3ujV5elwLGOdHd FYw8WdG4q+sQY2dN/KH2pcFO+CyB/rwamzPRxbriOmOg5aFGVqdHdbxwhMen0hf9 3YnnIlAUPOiXl1C+Ji6BmQONego6ccw0Dm7uysEcwMMXVP7lhDuV2tA5UF09v3mf 6jKri7VmIw2IwJi3IfyqlfIG9LWfUEX1U9cw/ZsxvJdVtybJsHgKDmnItJO7zGG4 RLsN4fHBcJ9fHhazgFaTTHU72/bE4HzHd/epHM+oPQSMPVi9ena+nS0EiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdjvw2ppNwsiZseZKsPQqfYPG8OMB8GA1UdIwQY MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefE0lAoU i4QPAziIbWKvM/4aMPy/nUweD5DgcN6UIV9gqRIzl2alRzJM2dLLgtCvn3A20yln u5epz50ofylazo84n0H6M47NfoyDsTxWM604kfpLiWSZjMVjE7my2uFYV+pzg+z8 fbjJLUEC7zqBWnUN5tEdcNoX+JN7weuFDg81Hpn8h/FGd9AY3CgjGKusjQ2SY+j2 Gdy3ONsC4oczANNocmfBfcfoizNgUqoIkW66xlo1OmePZ+JlRbDaTKhPHih8cCaw vpzik9G6xq2sYXclNukqxbGIQhjA0tYTYojksHtY+Ul+CwGvkC1tProE2OFrKbpz 4KJNqwf4DqC2Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:51 2025 by rpki-client