This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft File: IlS8wDKT460OGaej_Rsc-9NMCZA.mft (raw, json) Hash identifier: lsZqoz/aU5FrBNgUyrdfj3FUnbdfbxKZqIyK/eZeojc= Subject key identifier: B2:D2:AD:74:28:9B:79:0C:FB:2C:FD:30:16:0C:76:BD:6E:22:5A:B9 Authority key identifier: 22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90 Certificate issuer: /CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990 Certificate serial: 019B54BD47684708A98663E7C49EEF6FAE31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft Manifest number: 1536 Signing time: Thu 25 Dec 2025 09:00:49 +0000 Manifest this update: Thu 25 Dec 2025 09:00:49 +0000 Manifest next update: Fri 26 Dec 2025 09:00:49 +0000 Files and hashes: 1: IlS8wDKT460OGaej_Rsc-9NMCZA.crl (hash: 77JjUKXyoqHM7qBOkkfqUT73P41s2A/rArbT+S4VmRY=) 2: iYAJK9Z1vSabwblAeb2bbovBgWQ.roa (hash: UwR7QsThfF3C52K+v8ctdTEGP4PnZH+tKi6tWCBxuy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:47:68:47:08:a9:86:63:e7:c4:9e:ef:6f:ae:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2254bcc03293e3ad0e19a7a3fd1b1cfbd34c0990 Validity Not Before: Dec 25 09:00:49 2025 GMT Not After : Dec 26 09:00:49 2025 GMT Subject: CN=b2d2ad74289b790cfb2cfd30160c76bd6e225ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fa:6d:94:41:eb:9c:61:91:60:10:d5:6a:e6: 5a:31:50:28:aa:ff:61:61:1b:7f:33:a3:33:14:25: b2:43:81:95:4a:8a:87:5b:04:49:af:62:4c:78:b9: 27:20:b6:93:e6:3e:55:d8:58:ac:8e:f1:c2:6e:34: 83:e0:bf:79:4a:20:9f:be:bf:87:46:41:b6:29:97: f2:3a:87:f1:1c:64:07:e1:cd:b2:97:26:86:c4:88: 53:50:92:4f:c0:54:f2:67:77:5e:26:b0:d1:30:7d: 77:1a:94:03:46:bb:f2:35:8a:b6:d6:75:ca:30:38: c7:0c:ba:8d:57:20:27:65:51:77:42:04:b1:9b:df: 29:38:e0:4e:62:c0:f5:ed:dc:aa:02:bf:25:33:60: ea:e8:ad:f6:38:9b:83:e7:5d:1c:8f:5d:2d:c6:d8: 22:29:26:12:98:9d:4e:b5:f0:96:24:55:61:c8:d1: 90:bd:42:5c:54:6c:e2:84:7f:5f:f5:6e:f9:12:1e: 16:5e:29:64:cd:13:40:ba:e7:72:c1:d2:a6:4d:8e: f8:8a:5b:49:77:7b:a2:a2:c6:5b:f7:d3:b0:f8:53: 21:d7:6b:e7:07:c8:ba:bf:05:19:83:ec:73:5f:26: 08:fa:d9:61:64:cc:f0:7f:0e:a9:50:b9:e2:d4:bb: 14:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D2:AD:74:28:9B:79:0C:FB:2C:FD:30:16:0C:76:BD:6E:22:5A:B9 X509v3 Authority Key Identifier: keyid:22:54:BC:C0:32:93:E3:AD:0E:19:A7:A3:FD:1B:1C:FB:D3:4C:09:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlS8wDKT460OGaej_Rsc-9NMCZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a3a530-25aa-4023-9a80-4e347d551c3f/1/IlS8wDKT460OGaej_Rsc-9NMCZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f5:3f:af:94:a8:8d:31:2b:93:5b:f8:d2:69:19:5b:f7:24: ce:23:e9:1c:5b:4d:d7:19:ef:4a:50:d2:1d:d9:99:de:53:53: ea:c7:5a:e5:1f:77:49:5c:bd:99:06:75:ee:d5:b8:2a:5c:ca: 55:0e:25:c5:d3:e5:fd:55:0b:ce:b2:5a:65:8f:ea:b7:20:a5: fa:24:42:90:a8:f5:a2:c6:9b:22:c3:50:09:76:d7:8c:ad:db: 23:4b:cd:46:e9:3f:98:94:40:7f:fc:53:b1:dd:5d:1c:8e:55: af:aa:ce:e4:48:56:7a:35:71:55:99:51:c7:dd:96:93:e5:7e: fa:53:25:d1:85:42:15:b7:94:5e:66:8c:a0:52:c8:35:cd:ee: de:2c:2e:37:06:f1:5d:38:04:df:a4:14:eb:24:88:dc:45:30: f5:c0:05:86:b9:74:6e:1a:bd:4b:0c:e9:b6:ff:ca:4b:e9:06: 23:d8:ad:42:25:ac:be:3a:43:16:9b:65:99:1a:f7:dc:b8:83: 15:fe:83:4b:1d:ed:d7:50:b4:d9:60:08:fa:36:09:a5:22:02: 38:8c:23:28:6f:ab:59:b4:62:aa:9a:d0:e4:61:ac:f4:43:a1: 46:36:f3:9e:9a:41:e2:08:09:8f:5d:d7:f9:03:04:2e:dc:78: 72:9d:ce:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvUdoRwiphmPnxJ7vb64xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNTRiY2MwMzI5M2UzYWQwZTE5YTdhM2ZkMWIxY2ZiZDM0 YzA5OTAwHhcNMjUxMjI1MDkwMDQ5WhcNMjUxMjI2MDkwMDQ5WjAzMTEwLwYDVQQD EyhiMmQyYWQ3NDI4OWI3OTBjZmIyY2ZkMzAxNjBjNzZiZDZlMjI1YWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/ptlEHrnGGRYBDVauZaMVAoqv9h YRt/M6MzFCWyQ4GVSoqHWwRJr2JMeLknILaT5j5V2FisjvHCbjSD4L95SiCfvr+H RkG2KZfyOofxHGQH4c2ylyaGxIhTUJJPwFTyZ3deJrDRMH13GpQDRrvyNYq21nXK MDjHDLqNVyAnZVF3QgSxm98pOOBOYsD17dyqAr8lM2Dq6K32OJuD510cj10txtgi KSYSmJ1OtfCWJFVhyNGQvUJcVGzihH9f9W75Eh4WXilkzRNAuudywdKmTY74iltJ d3uiosZb99Ow+FMh12vnB8i6vwUZg+xzXyYI+tlhZMzwfw6pULni1LsU3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLSrXQom3kM+yz9MBYMdr1uIlq5MB8GA1UdIwQY MBaAFCJUvMAyk+OtDhmno/0bHPvTTAmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hM2E1MzAtMjVhYS00MDIzLTlhODAt NGUzNDdkNTUxYzNmLzEvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hM2E1MzAtMjVhYS00MDIzLTlhODAtNGUzNDdkNTUxYzNm LzEvSWxTOHdES1Q0NjBPR2Flal9Sc2MtOU5NQ1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPU/r5So jTErk1v40mkZW/ckziPpHFtN1xnvSlDSHdmZ3lNT6sda5R93SVy9mQZ17tW4KlzK VQ4lxdPl/VULzrJaZY/qtyCl+iRCkKj1osabIsNQCXbXjK3bI0vNRuk/mJRAf/xT sd1dHI5Vr6rO5EhWejVxVZlRx92Wk+V++lMl0YVCFbeUXmaMoFLINc3u3iwuNwbx XTgE36QU6ySI3EUw9cAFhrl0bhq9Swzptv/KS+kGI9itQiWsvjpDFptlmRr33LiD Ff6DSx3t11C02WAI+jYJpSICOIwjKG+rWbRiqprQ5GGs9EOhRjbznppB4ggJj13X +QMELtx4cp3ONw== -----END CERTIFICATE-----Generated at Thu Dec 25 12:30:34 2025 by rpki-client