This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json) Hash identifier: DNYa1mz3x9vOKluYIc80+84WOmuAERL/heK90hvsvOA= Subject key identifier: 10:25:7F:C0:87:36:94:CE:F2:28:5C:0B:7C:87:CD:97:81:75:10:ED Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32 Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932 Certificate serial: 019B3D90EF4A180707521DF7BC6D429B1E2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft Manifest number: 165D Signing time: Sat 20 Dec 2025 21:01:07 +0000 Manifest this update: Sat 20 Dec 2025 21:01:07 +0000 Manifest next update: Sun 21 Dec 2025 21:01:07 +0000 Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: Ezv+NSfFhBKjz65UiGAGftdlW4EKx2E4V3g7Ya17tjs=) 2: rRTGMxhiOpV_X766sLDj0H5s3lk.roa (hash: Fk8zZgs5ltomuLpQlhRuRyNBCQpASYJvnVS5AQLwlOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:ef:4a:18:07:07:52:1d:f7:bc:6d:42:9b:1e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932 Validity Not Before: Dec 20 21:01:07 2025 GMT Not After : Dec 21 21:01:07 2025 GMT Subject: CN=10257fc0873694cef2285c0b7c87cd97817510ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1a:06:ce:2a:fb:3f:df:f6:3e:1c:4a:b6:ad: fa:48:3f:f0:68:31:f3:35:96:0b:91:c6:3f:9f:3d: d3:55:f3:31:d5:fb:30:ce:bc:06:74:30:03:6d:46: f5:e8:03:0b:2b:2e:d3:8e:64:64:3f:b6:a6:26:32: 4e:6b:32:61:b3:4a:fe:7f:b2:f9:51:b9:ea:cc:d3: c5:15:65:75:84:47:2c:c7:c0:07:ee:f4:f8:0f:ca: 18:96:62:de:56:87:e6:b7:bc:6c:32:2c:6d:e5:22: 14:15:51:24:e5:a8:ff:d2:f5:4d:2e:59:a9:62:df: 91:9e:f5:12:7d:48:ef:d1:fe:d2:82:af:db:a1:c6: 3a:58:43:51:88:74:52:f6:b1:c4:57:48:63:ec:f2: 5a:5e:10:e1:5b:73:c9:3d:77:2e:de:92:9d:7b:f8: fd:07:76:14:e2:38:ad:21:b3:74:97:9f:b0:81:3a: 6f:fb:a6:5c:ea:32:86:8b:15:44:42:1b:5f:c7:dd: 0f:f2:6d:c4:0c:92:52:18:cc:27:e5:65:29:55:a9: d3:c3:ba:70:6f:d4:01:85:fe:09:87:b1:6d:b2:4a: 99:4b:34:42:85:0e:d3:5a:66:0c:57:a7:11:68:27: 2b:2b:92:06:6a:0b:81:9a:87:61:03:a9:b0:4e:d0: f0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:25:7F:C0:87:36:94:CE:F2:28:5C:0B:7C:87:CD:97:81:75:10:ED X509v3 Authority Key Identifier: keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f0:59:73:3e:74:ed:56:62:81:38:4a:e5:ff:4c:ac:8f:2f: 2d:f2:bb:56:47:b6:15:09:82:81:f1:91:e6:6a:d5:fe:81:b6: b4:35:51:32:9c:c8:06:c9:0c:68:5b:0d:3f:a1:aa:e4:61:28: e1:57:c2:7e:d2:13:7e:33:4a:6e:bc:52:05:93:1b:4a:c6:28: 4b:d0:c1:a3:02:b1:fa:60:3d:cf:7e:e2:43:12:8e:81:a6:8b: 8f:8f:ee:f0:de:7a:d4:b8:af:b9:bd:3c:ee:88:b4:36:b8:e0: d1:38:52:89:b5:53:a1:74:eb:7b:79:11:87:51:78:17:ba:84: 4c:62:f0:3e:7b:ef:af:e0:a0:08:90:cf:32:4d:7d:f3:fc:b8: cb:35:96:98:79:1d:a8:02:84:a6:22:0d:13:48:77:b9:63:03: 06:28:8a:0d:d5:08:bb:14:22:32:fb:25:8e:5c:40:af:22:4e: 18:42:e3:7a:c3:0e:fb:29:ca:b9:35:67:be:15:49:fc:c5:63: 75:0f:ac:0e:7a:b9:67:93:5b:00:ed:89:63:1c:00:fa:e8:72: ba:c2:c0:b3:66:65:56:c3:52:27:79:d0:f7:e9:a7:9d:9f:f2: a5:6c:65:8f:98:e8:93:9d:2d:48:d6:19:85:88:db:3c:69:58: 10:0a:72:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kO9KGAcHUh33vG1Cmx4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNWNmMGQzMTcwNGI1OWQ3ZWViMDE4NTQ4MjAyZDNhNTcw ZGE5MzIwHhcNMjUxMjIwMjEwMTA3WhcNMjUxMjIxMjEwMTA3WjAzMTEwLwYDVQQD EygxMDI1N2ZjMDg3MzY5NGNlZjIyODVjMGI3Yzg3Y2Q5NzgxNzUxMGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BoGzir7P9/2PhxKtq36SD/waDHz NZYLkcY/nz3TVfMx1fswzrwGdDADbUb16AMLKy7TjmRkP7amJjJOazJhs0r+f7L5 UbnqzNPFFWV1hEcsx8AH7vT4D8oYlmLeVofmt7xsMixt5SIUFVEk5aj/0vVNLlmp Yt+RnvUSfUjv0f7Sgq/bocY6WENRiHRS9rHEV0hj7PJaXhDhW3PJPXcu3pKde/j9 B3YU4jitIbN0l5+wgTpv+6Zc6jKGixVEQhtfx90P8m3EDJJSGMwn5WUpVanTw7pw b9QBhf4Jh7FtskqZSzRChQ7TWmYMV6cRaCcrK5IGaguBmodhA6mwTtDwYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAlf8CHNpTO8ihcC3yHzZeBdRDtMB8GA1UdIwQY MBaAFCJc8NMXBLWdfusBhUggLTpXDakyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQt MDBiYzkwM2QyNjIxLzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQtMDBiYzkwM2QyNjIx LzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPBZcz50 7VZigThK5f9MrI8vLfK7Vke2FQmCgfGR5mrV/oG2tDVRMpzIBskMaFsNP6Gq5GEo 4VfCftITfjNKbrxSBZMbSsYoS9DBowKx+mA9z37iQxKOgaaLj4/u8N561Livub08 7oi0Nrjg0ThSibVToXTre3kRh1F4F7qETGLwPnvvr+CgCJDPMk198/y4yzWWmHkd qAKEpiINE0h3uWMDBiiKDdUIuxQiMvsljlxAryJOGELjesMO+ynKuTVnvhVJ/MVj dQ+sDnq5Z5NbAO2JYxwA+uhyusLAs2ZlVsNSJ3nQ9+mnnZ/ypWxlj5jok50tSNYZ hYjbPGlYEApyyA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:45 2025 by rpki-client