This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft File: IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json) Hash identifier: bai2GpOhEBOJFweeL1wY/lyerQ6ifagiqDrKUzUNuPQ= Subject key identifier: 93:CA:53:DA:3F:BE:17:E5:4F:09:3A:14:66:26:D2:04:A2:C2:98:AB Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb Certificate serial: 019B277782DCFDED90308B501EE2EFA9D1F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft Manifest number: 0CD5 Signing time: Tue 16 Dec 2025 14:01:42 +0000 Manifest this update: Tue 16 Dec 2025 14:01:42 +0000 Manifest next update: Wed 17 Dec 2025 14:01:42 +0000 Files and hashes: 1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: pyWri2JHb5oG57Sq4je5ZJUaKyYZrk20O5BNr2sdSSk=) 2: ITkDnxBUCa7czYpTJZyNVLNjyA0.roa (hash: jfV0oxUpYfbneBe41fxD2D9b2Qocc8MoRl7L2nQ2juk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:82:dc:fd:ed:90:30:8b:50:1e:e2:ef:a9:d1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb Validity Not Before: Dec 16 14:01:42 2025 GMT Not After : Dec 17 14:01:42 2025 GMT Subject: CN=93ca53da3fbe17e54f093a146626d204a2c298ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:84:84:c9:06:f5:a9:e9:4f:3e:60:3f:58: 3f:4e:70:0f:44:3e:60:04:4c:3f:ee:8a:4f:60:cf: d5:72:f8:7c:9b:96:38:a5:02:16:a5:13:36:e9:ed: 42:7d:c2:76:e2:7e:f2:07:f3:7e:e9:2b:a1:b5:73: aa:0e:e9:e3:ae:6a:8c:1e:a4:b1:5d:23:cf:60:a9: 50:a8:0b:9e:c9:da:77:fe:37:c3:6e:ff:a2:d6:42: 10:79:d6:f2:8f:d6:41:00:36:c7:03:e0:50:99:52: 3f:5e:98:a2:6a:21:21:c1:f5:b8:f6:18:55:3b:d5: a6:52:02:a5:19:9b:59:20:cf:00:e1:9f:95:f6:91: 70:05:6e:37:e2:1f:6b:cc:9c:56:a0:b1:5a:44:b0: 60:f2:ff:7d:ac:85:82:ef:bd:8e:fc:7f:19:9a:6c: 48:23:5f:f8:d1:59:6e:10:38:8e:fa:87:24:27:50: 6a:88:8f:5d:c1:19:52:83:fe:40:58:ac:31:b2:21: e1:cf:1c:ca:3c:66:62:da:57:cf:2f:1d:84:3f:0a: 4b:f5:b2:15:b3:c8:d0:80:b3:a4:56:61:42:ba:89: 4f:c1:13:ed:ed:21:b0:69:48:4f:5b:d1:d8:b4:50: c7:c3:9a:3d:b8:73:6a:87:14:2f:ab:86:b2:05:8a: 77:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CA:53:DA:3F:BE:17:E5:4F:09:3A:14:66:26:D2:04:A2:C2:98:AB X509v3 Authority Key Identifier: keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:db:b3:04:3b:2b:d0:29:e3:a8:65:19:25:4a:33:9f:ad:bc: 18:18:f6:73:c0:81:19:b9:db:0d:74:65:d6:da:fe:f2:96:93: 40:39:93:b0:68:2a:c3:4b:98:8a:c1:63:ac:85:2f:9a:41:5c: e4:43:fc:85:a5:cb:52:ec:1d:e3:e5:24:bb:7d:6e:4f:1a:9d: d5:00:96:03:71:7f:ad:3a:36:35:3b:a7:c1:ce:13:34:ea:e7: 1f:a7:97:72:52:d0:5c:c9:6b:14:ec:28:88:d3:ab:d6:47:bb: 5d:ab:07:f9:92:02:a3:4d:07:ae:b5:63:fe:90:00:45:6b:ae: c4:b8:78:f7:c4:c6:fe:fb:22:96:d8:8f:84:11:ff:de:39:c9: 0e:87:d5:a1:62:03:fc:58:9d:94:94:08:96:90:cc:a3:84:40: ce:77:51:ba:6b:da:ab:cf:b2:d9:75:bb:22:02:2c:38:19:5d: 15:c6:01:e5:90:af:13:31:db:92:68:8e:6e:b9:42:12:93:bc: 27:f9:64:0a:26:ab:7f:42:ef:1d:8d:1f:a4:04:32:00:70:39: d0:ec:9e:d0:28:e3:02:d8:88:c2:7c:c8:5c:a3:bd:6f:9f:4c: 6a:9c:0f:fb:b6:40:ee:58:eb:6d:1d:fb:7e:24:a3:7a:61:5b: 10:1d:99:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnd4Lc/e2QMItQHuLvqdH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYmQ3MDJkZDc4MDBiNjFjOTZjNTBmNDJhNDZiNjk0OWIy MjhkYmIwHhcNMjUxMjE2MTQwMTQyWhcNMjUxMjE3MTQwMTQyWjAzMTEwLwYDVQQD Eyg5M2NhNTNkYTNmYmUxN2U1NGYwOTNhMTQ2NjI2ZDIwNGEyYzI5OGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI+EhMkG9anpTz5gP1g/TnAPRD5g BEw/7opPYM/Vcvh8m5Y4pQIWpRM26e1CfcJ24n7yB/N+6SuhtXOqDunjrmqMHqSx XSPPYKlQqAueydp3/jfDbv+i1kIQedbyj9ZBADbHA+BQmVI/XpiiaiEhwfW49hhV O9WmUgKlGZtZIM8A4Z+V9pFwBW434h9rzJxWoLFaRLBg8v99rIWC772O/H8ZmmxI I1/40VluEDiO+ockJ1BqiI9dwRlSg/5AWKwxsiHhzxzKPGZi2lfPLx2EPwpL9bIV s8jQgLOkVmFCuolPwRPt7SGwaUhPW9HYtFDHw5o9uHNqhxQvq4ayBYp31QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPKU9o/vhflTwk6FGYm0gSiwpirMB8GA1UdIwQY MBaAFCC9cC3XgAthyWxQ9CpGtpSbIo27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2Et N2ZhNWViY2Y1NzRlLzEvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hY2ViMWQtMjhmNi00MWZhLWFjY2EtN2ZhNWViY2Y1NzRl LzEvSUwxd0xkZUFDMkhKYkZEMEtrYTJsSnNpamJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXduzBDsr 0CnjqGUZJUozn628GBj2c8CBGbnbDXRl1tr+8paTQDmTsGgqw0uYisFjrIUvmkFc 5EP8haXLUuwd4+Uku31uTxqd1QCWA3F/rTo2NTunwc4TNOrnH6eXclLQXMlrFOwo iNOr1ke7XasH+ZICo00HrrVj/pAARWuuxLh498TG/vsiltiPhBH/3jnJDofVoWID /FidlJQIlpDMo4RAzndRumvaq8+y2XW7IgIsOBldFcYB5ZCvEzHbkmiObrlCEpO8 J/lkCiarf0LvHY0fpAQyAHA50Oye0CjjAtiIwnzIXKO9b59MapwP+7ZA7ljrbR37 fiSjemFbEB2ZFA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:41 2025 by rpki-client