This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json) Hash identifier: UO0miGJZBgBnZbZyCqsYjuTbSKo+4j+YcTA3smuET6U= Subject key identifier: 53:0E:75:A1:0C:19:23:34:83:C0:CF:EC:46:7B:A9:A6:D3:65:CE:22 Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a Certificate serial: 019AF42E87772DE9F9105553C7F0764B9B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft Manifest number: 0100 Signing time: Sat 06 Dec 2025 15:01:21 +0000 Manifest this update: Sat 06 Dec 2025 15:01:21 +0000 Manifest next update: Sun 07 Dec 2025 15:01:21 +0000 Files and hashes: 1: 2VMJ9WQikYFEDlDpOKmAjBWdjSA.roa (hash: KpcckScBja4+tcIOvGVtG8MssUZtxxse3N+i6aa0OUk=) 2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: Ri8Prp3LQEnRtZ8hY22kxZ1qdeuKw5goxdqaKa1uZbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:87:77:2d:e9:f9:10:55:53:c7:f0:76:4b:9b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a Validity Not Before: Dec 6 15:01:21 2025 GMT Not After : Dec 7 15:01:21 2025 GMT Subject: CN=530e75a10c19233483c0cfec467ba9a6d365ce22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:42:2a:d6:1f:7a:02:aa:6d:ad:ef:3a:68: 05:8e:ef:57:7b:c9:33:58:d9:a0:a7:ea:52:49:fb: d6:5d:04:2e:4f:22:3b:44:40:08:a2:23:5b:41:8e: e2:c7:59:ea:49:da:37:7a:8b:bc:bb:62:e9:80:36: 9b:ee:3e:f8:6f:f7:fe:56:51:96:30:0b:48:48:15: 83:a6:95:0b:32:9f:df:40:07:3c:8c:27:3f:4b:f9: d5:d6:4f:a7:dc:38:b9:9e:1d:f8:dc:4c:bf:9a:86: ae:a0:53:cd:e1:76:54:6c:52:74:6f:de:44:1f:77: a9:ff:7d:fc:d2:d8:ed:9a:53:c0:ba:da:6b:e4:2b: 1d:b2:dd:5c:c9:95:67:7f:cb:e9:92:55:1d:1d:99: 7c:53:8c:ce:a5:02:ab:ea:99:46:76:1f:8b:86:25: e7:e6:5b:d4:72:6f:f2:ad:f2:c4:05:89:a8:21:84: 3a:a6:89:93:59:3c:c5:46:10:f7:d5:3a:f2:2b:17: 54:ee:a2:ba:8a:b4:75:db:61:58:c2:30:5c:fb:a1: 3a:e0:31:8a:ad:ca:3a:c6:1c:25:f5:34:aa:b5:8b: 14:77:91:b3:88:52:49:9f:0d:24:91:00:70:e6:0e: 14:63:59:32:a5:cb:49:06:0e:98:f5:b3:3c:03:00: 63:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0E:75:A1:0C:19:23:34:83:C0:CF:EC:46:7B:A9:A6:D3:65:CE:22 X509v3 Authority Key Identifier: keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d2:9d:6e:ba:91:05:5e:68:7a:d7:58:76:f5:92:12:f0:f2: dc:a3:24:8f:92:50:61:1c:2a:24:a9:91:0f:90:24:c5:fa:62: 06:d2:bd:c8:d8:e7:b7:a3:67:f4:11:c5:a5:6f:8e:7e:92:d1: 7d:81:8c:b8:7e:ee:4a:d9:78:86:87:c3:2a:6f:82:a1:33:85: 0d:92:3f:44:65:34:63:68:40:d7:ab:7e:4e:f6:cd:41:21:eb: cb:f0:7a:27:af:20:44:12:ba:45:78:c1:23:a6:a1:90:81:48: ef:69:01:60:17:d3:dc:f9:79:30:f9:1b:03:97:70:f0:73:8d: 3f:68:a8:90:ca:37:50:5e:4f:63:0f:35:00:3f:fc:ec:7f:08: 78:f7:0b:d3:87:f6:05:ec:c1:15:e1:cc:f4:98:de:91:b6:e7: c4:3f:33:de:d3:bc:f3:6b:42:56:fe:5f:13:32:04:28:ee:c5: b1:1e:db:e7:fa:b0:2e:61:c2:e1:b9:e4:98:ae:67:2f:2d:a2: a3:05:a8:e9:a7:de:2f:09:9e:e5:dc:7d:1f:e4:30:d6:b2:67: f2:54:6b:c7:87:9c:22:a7:16:02:88:da:f8:e0:41:8e:49:58: ca:0e:17:04:70:fd:01:49:d0:95:30:57:04:7b:a6:56:08:ea: 2f:91:72:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lod3Len5EFVTx/B2S5s/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTNiNDUwYjdlN2RjMWEyZDUzY2Y2OWE1ZWI4OWE1NjVk MzkxM2EwHhcNMjUxMjA2MTUwMTIxWhcNMjUxMjA3MTUwMTIxWjAzMTEwLwYDVQQD Eyg1MzBlNzVhMTBjMTkyMzM0ODNjMGNmZWM0NjdiYTlhNmQzNjVjZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC9CKtYfegKqba3vOmgFju9Xe8kz WNmgp+pSSfvWXQQuTyI7REAIoiNbQY7ix1nqSdo3eou8u2LpgDab7j74b/f+VlGW MAtISBWDppULMp/fQAc8jCc/S/nV1k+n3Di5nh343Ey/moauoFPN4XZUbFJ0b95E H3ep/3380tjtmlPAutpr5Csdst1cyZVnf8vpklUdHZl8U4zOpQKr6plGdh+LhiXn 5lvUcm/yrfLEBYmoIYQ6pomTWTzFRhD31TryKxdU7qK6irR122FYwjBc+6E64DGK rco6xhwl9TSqtYsUd5GziFJJnw0kkQBw5g4UY1kypctJBg6Y9bM8AwBjmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMOdaEMGSM0g8DP7EZ7qabTZc4iMB8GA1UdIwQY MBaAFIpTtFC359waLVPPaaXriaVl05E6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxPMFVMZm4zQm90VTg5cHBldUpwV1hUa1RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xOWZlM2ItMDk5My00MTc4LThlOTQt OWY2NzM4NjI0OWMyLzEvaWxPMFVMZm4zQm90VTg5cHBldUpwV1hUa1RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xOWZlM2ItMDk5My00MTc4LThlOTQtOWY2NzM4NjI0OWMy LzEvaWxPMFVMZm4zQm90VTg5cHBldUpwV1hUa1RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNKdbrqR BV5oetdYdvWSEvDy3KMkj5JQYRwqJKmRD5AkxfpiBtK9yNjnt6Nn9BHFpW+OfpLR fYGMuH7uStl4hofDKm+CoTOFDZI/RGU0Y2hA16t+TvbNQSHry/B6J68gRBK6RXjB I6ahkIFI72kBYBfT3Pl5MPkbA5dw8HONP2iokMo3UF5PYw81AD/87H8IePcL04f2 BezBFeHM9JjekbbnxD8z3tO882tCVv5fEzIEKO7FsR7b5/qwLmHC4bnkmK5nLy2i owWo6afeLwme5dx9H+Qw1rJn8lRrx4ecIqcWAoja+OBBjklYyg4XBHD9AUnQlTBX BHumVgjqL5FyVA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:03 2025 by rpki-client