This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft File: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json) Hash identifier: hwGSLV/mY5X3IjZ75gPyy0J3gXy5WsC7SUOyiEYKpm0= Subject key identifier: EB:EA:FA:95:AD:0E:26:C4:D4:C5:D9:99:E0:5C:19:04:83:29:03:EF Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79 Certificate issuer: /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79 Certificate serial: 019B3CEBB924D147AC86E3508C1D783A0CF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft Manifest number: 0E6E Signing time: Sat 20 Dec 2025 18:00:39 +0000 Manifest this update: Sat 20 Dec 2025 18:00:39 +0000 Manifest next update: Sun 21 Dec 2025 18:00:39 +0000 Files and hashes: 1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: 1zKxeQMXPpXQBq63txy2f2zN+PMOpTT7eO/77Q5naXE=) 2: sFqvD3DbXn90SlSxedk-_VFVTi4.roa (hash: JtGbnCe8rSKW4mIxvzXo/VN0LsuEsKsi7iRdKw/3Gk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:b9:24:d1:47:ac:86:e3:50:8c:1d:78:3a:0c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79 Validity Not Before: Dec 20 18:00:39 2025 GMT Not After : Dec 21 18:00:39 2025 GMT Subject: CN=ebeafa95ad0e26c4d4c5d999e05c1904832903ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:0e:7b:c0:52:2c:26:93:63:3e:4e:b3:d0: 2d:f5:50:08:9b:73:03:66:a2:8f:d5:32:6c:b3:dc: 7f:62:1e:9f:85:b8:c8:5c:02:d4:af:96:e8:4d:df: dd:90:54:78:1e:6f:e8:37:d4:e0:a0:82:0c:41:ad: d6:1b:1c:bc:58:9a:8b:b0:33:58:60:e6:fe:f0:a3: 10:14:a8:1b:20:b0:73:c0:3b:47:e8:ce:61:27:ea: aa:0d:f8:26:c0:fc:4c:fa:d7:74:c1:86:b6:50:6e: dc:9c:d0:f1:93:8e:7a:f4:9e:96:80:2c:26:57:de: b3:c1:c0:46:3d:e0:33:85:ed:e7:79:42:85:e0:01: c6:0c:e6:15:c4:43:20:b3:b2:79:6e:00:8d:b2:61: 44:71:10:8a:b9:37:4b:31:64:4e:a0:20:23:e5:40: c7:ad:70:fd:13:c2:0f:3d:19:34:aa:22:3a:91:41: 0f:bd:8d:f9:a1:f8:48:c9:e4:9d:5f:b6:f8:4b:50: 48:81:56:e3:8c:c5:2a:61:1a:bf:df:c1:f8:37:e7: 18:5c:67:db:b8:72:ab:68:72:d0:ff:2d:73:28:ee: 12:14:d8:f7:82:cd:b7:15:2f:9a:48:03:68:b7:18: 77:75:40:d0:e3:a5:a1:42:9e:50:96:0c:98:6e:fb: d8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EA:FA:95:AD:0E:26:C4:D4:C5:D9:99:E0:5C:19:04:83:29:03:EF X509v3 Authority Key Identifier: keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:dc:80:d0:e6:b1:c9:3d:7d:0d:b8:6e:96:12:3b:d9:19:ce: fc:cc:8d:92:91:02:77:cb:94:b7:23:f7:38:4f:f7:de:d5:d8: 4a:34:2d:e6:bf:60:16:59:ec:b6:01:82:05:0e:e9:21:db:1d: 04:59:90:68:12:4a:13:3e:ef:52:30:f8:fd:5e:eb:65:cc:fe: c6:aa:e1:e5:45:d7:62:45:c1:6a:21:cc:5c:76:9c:58:c3:73: 40:f5:f5:79:bc:92:57:27:c3:a4:f4:c3:f8:5c:1c:41:69:f6: 44:8b:9a:ac:41:aa:b7:c6:1f:6f:44:c1:a9:38:fb:88:8f:78: 77:ce:4b:03:64:d3:d8:a7:06:3b:1a:c6:93:60:66:2d:c5:31: 44:18:7b:3d:7a:55:d3:92:f0:fd:58:e5:e0:97:db:01:61:5c: 18:2c:a3:40:f6:17:d9:4f:cc:cd:79:16:45:17:26:c4:d6:ac: be:2e:31:56:7b:10:3d:e3:e6:56:25:df:3d:d9:fc:b1:6b:4b: 63:4b:a4:41:5d:92:e8:70:28:53:5f:f3:2d:9c:db:54:a2:5f: 7f:d2:d0:5d:f0:8b:bc:43:64:57:21:48:d1:66:1d:5d:09:7b: 98:39:ab:12:45:c6:86:18:3b:c1:4b:f6:d2:b4:b4:3a:b6:92: a9:36:44:a2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs867kk0UeshuNQjB14Ogz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MThhNWY4Yjk1MTUwMTdjOGQ2NDg4YTlhOTQ3ZDQ4MjBi NmZiNzkwHhcNMjUxMjIwMTgwMDM5WhcNMjUxMjIxMTgwMDM5WjAzMTEwLwYDVQQD EyhlYmVhZmE5NWFkMGUyNmM0ZDRjNWQ5OTllMDVjMTkwNDgzMjkwM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziUOe8BSLCaTYz5Os9At9VAIm3MD ZqKP1TJss9x/Yh6fhbjIXALUr5boTd/dkFR4Hm/oN9TgoIIMQa3WGxy8WJqLsDNY YOb+8KMQFKgbILBzwDtH6M5hJ+qqDfgmwPxM+td0wYa2UG7cnNDxk4569J6WgCwm V96zwcBGPeAzhe3neUKF4AHGDOYVxEMgs7J5bgCNsmFEcRCKuTdLMWROoCAj5UDH rXD9E8IPPRk0qiI6kUEPvY35ofhIyeSdX7b4S1BIgVbjjMUqYRq/38H4N+cYXGfb uHKraHLQ/y1zKO4SFNj3gs23FS+aSANotxh3dUDQ46WhQp5QlgyYbvvYYwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOvq+pWtDibE1MXZmeBcGQSDKQPvMB8GA1UdIwQY MBaAFPkYpfi5UVAXyNZIipqUfUggtvt5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SaWwtTGxSVUJmSTFraUttcFI5U0NDMi0zay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvYjIyZDZlLTRjNGYtNDU5ZC1hMDQ4 LWRkMzQ3NTM3NjgzZS8xLzEtUmlsLUxsUlVCZkkxa2lLbXBSOVNDQzItM2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI3L2IyMmQ2ZS00YzRmLTQ1OWQtYTA0OC1kZDM0NzUzNzY4 M2UvMS8xLVJpbC1MbFJVQmZJMWtpS21wUjlTQ0MyLTNrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9yA 0OaxyT19DbhulhI72RnO/MyNkpECd8uUtyP3OE/33tXYSjQt5r9gFlnstgGCBQ7p IdsdBFmQaBJKEz7vUjD4/V7rZcz+xqrh5UXXYkXBaiHMXHacWMNzQPX1ebySVyfD pPTD+FwcQWn2RIuarEGqt8Yfb0TBqTj7iI94d85LA2TT2KcGOxrGk2BmLcUxRBh7 PXpV05Lw/Vjl4JfbAWFcGCyjQPYX2U/MzXkWRRcmxNasvi4xVnsQPePmViXfPdn8 sWtLY0ukQV2S6HAoU1/zLZzbVKJff9LQXfCLvENkVyFI0WYdXQl7mDmrEkXGhhg7 wUv20rS0OraSqTZEog== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:06 2025 by rpki-client