This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft File: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json) Hash identifier: Knos/dU0TMbGNwKC6xVZcglqcSVR6cT+YRJbraB85jM= Subject key identifier: 0B:8D:D8:AC:FE:F8:55:EC:6A:1D:A1:6D:A3:E8:50:D7:A6:59:E6:01 Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32 Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932 Certificate serial: 019B7F70514B84050B0A0536EED15FAC7FDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft Manifest number: 1680 Signing time: Fri 02 Jan 2026 16:00:25 +0000 Manifest this update: Fri 02 Jan 2026 16:00:25 +0000 Manifest next update: Sat 03 Jan 2026 16:00:25 +0000 Files and hashes: 1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: gf8BSK0hITNzewF9lhNtXRqhwl/s/ZRJ/kg4PGRfW1s=) 2: gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa (hash: TNUN3ffkTS+jn16rGNGRBs19tZhvUdCtK4/zEyf8nb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:70:51:4b:84:05:0b:0a:05:36:ee:d1:5f:ac:7f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932 Validity Not Before: Jan 2 16:00:25 2026 GMT Not After : Jan 3 16:00:25 2026 GMT Subject: CN=0b8dd8acfef855ec6a1da16da3e850d7a659e601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:26:b5:a0:47:4c:8f:ef:28:2f:1f:2a:6e: af:97:6f:4d:fb:52:e0:9c:06:39:9c:7c:e1:68:66: 8b:ea:79:3b:56:69:98:dc:57:6c:19:f2:0c:4f:d7: 67:88:0a:5c:e1:03:e5:db:44:e4:b3:2e:7b:40:19: 79:15:51:21:10:f3:b9:0d:7c:d7:62:e7:7b:2b:7b: 98:b9:e5:20:fd:de:2d:74:56:b0:93:62:e9:83:4d: 39:8b:80:de:a6:9d:10:9d:30:fc:1f:97:18:ad:cb: d0:9e:86:e9:36:36:d8:b2:92:3b:77:21:e3:27:e2: c5:ad:4c:06:d8:0c:70:de:9b:ce:c4:5c:de:a7:27: 62:73:c1:aa:6d:ae:38:a6:7d:6f:52:ab:4a:db:a7: 7b:3b:18:28:0b:92:79:c9:a7:86:17:1f:62:9e:01: af:fd:e7:0d:29:7f:40:ac:65:88:4a:1e:ac:6a:2f: 04:51:99:b4:b9:a9:d0:d3:6d:51:82:3a:64:ea:90: 5d:47:66:a1:58:11:50:f7:e6:88:14:27:44:e4:07: 46:dc:56:b6:7b:70:7d:e4:ef:20:8a:0e:c7:91:5d: 31:73:2c:74:8a:9c:53:64:98:c0:53:a1:47:4b:8b: 49:aa:95:01:7a:74:ad:f8:44:07:2f:cc:6c:ef:a0: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8D:D8:AC:FE:F8:55:EC:6A:1D:A1:6D:A3:E8:50:D7:A6:59:E6:01 X509v3 Authority Key Identifier: keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d7:23:94:95:b7:d8:50:9e:34:96:cc:2e:37:5e:64:19:06: fb:a2:90:cc:03:fb:28:09:cb:7b:fa:1d:b7:f5:20:f7:7e:66: e3:73:a7:9d:43:e5:69:a8:92:c1:5e:d9:94:72:64:23:07:88: fe:de:94:40:be:9e:bc:4b:2a:b3:61:2e:3e:22:54:aa:44:2e: e4:8f:6a:04:d1:33:a7:b6:9b:06:b7:db:74:a6:19:ee:7b:db: ab:cc:47:7e:3d:45:23:29:96:f8:69:80:29:2b:ce:75:19:54: 1f:bd:1b:bc:cf:72:2e:2c:00:97:9c:7d:d2:93:fe:8f:db:8a: 27:5a:91:d0:56:82:ce:a8:9e:66:4d:44:82:77:72:a7:10:da: 13:5e:fb:33:a1:f2:9b:89:30:c2:74:c0:06:d1:b7:e0:51:0d: b2:02:8c:53:1d:39:7f:3f:34:4e:0f:e4:dc:c1:c1:c8:6d:e5: 27:36:d6:4f:03:9a:57:6b:4f:ba:49:63:80:0e:6a:75:9e:1c: e2:a9:c2:91:ab:05:83:64:c0:18:95:b5:29:ae:78:36:74:e0: 52:28:2f:e6:2a:2f:bf:92:d7:5f:55:45:b4:cc:4d:a7:cd:a6: 13:93:07:94:1a:14:33:bc:93:ef:3e:ee:8e:e2:77:92:35:21: 28:4a:7e:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/cFFLhAULCgU27tFfrH/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNWNmMGQzMTcwNGI1OWQ3ZWViMDE4NTQ4MjAyZDNhNTcw ZGE5MzIwHhcNMjYwMTAyMTYwMDI1WhcNMjYwMTAzMTYwMDI1WjAzMTEwLwYDVQQD EygwYjhkZDhhY2ZlZjg1NWVjNmExZGExNmRhM2U4NTBkN2E2NTllNjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV0mtaBHTI/vKC8fKm6vl29N+1Lg nAY5nHzhaGaL6nk7VmmY3FdsGfIMT9dniApc4QPl20Tksy57QBl5FVEhEPO5DXzX Yud7K3uYueUg/d4tdFawk2Lpg005i4Depp0QnTD8H5cYrcvQnobpNjbYspI7dyHj J+LFrUwG2Axw3pvOxFzepydic8Gqba44pn1vUqtK26d7OxgoC5J5yaeGFx9ingGv /ecNKX9ArGWISh6sai8EUZm0uanQ021Rgjpk6pBdR2ahWBFQ9+aIFCdE5AdG3Fa2 e3B95O8gig7HkV0xcyx0ipxTZJjAU6FHS4tJqpUBenSt+EQHL8xs76B4iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuN2Kz++FXsah2hbaPoUNemWeYBMB8GA1UdIwQY MBaAFCJc8NMXBLWdfusBhUggLTpXDakyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQt MDBiYzkwM2QyNjIxLzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQtMDBiYzkwM2QyNjIx LzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtcjlJW3 2FCeNJbMLjdeZBkG+6KQzAP7KAnLe/odt/Ug935m43OnnUPlaaiSwV7ZlHJkIweI /t6UQL6evEsqs2EuPiJUqkQu5I9qBNEzp7abBrfbdKYZ7nvbq8xHfj1FIymW+GmA KSvOdRlUH70bvM9yLiwAl5x90pP+j9uKJ1qR0FaCzqieZk1EgndypxDaE177M6Hy m4kwwnTABtG34FENsgKMUx05fz80Tg/k3MHByG3lJzbWTwOaV2tPukljgA5qdZ4c 4qnCkasFg2TAGJW1Ka54NnTgUigv5iovv5LXX1VFtMxNp82mE5MHlBoUM7yT7z7u juJ3kjUhKEp+8A== -----END CERTIFICATE-----Generated at Sat Jan 3 02:20:55 2026 by rpki-client