This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft File: ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json) Hash identifier: 8RXL48WrXiToMZdN5OMFC84RmErpWNJm5ceug3z81q4= Subject key identifier: 68:26:B5:DC:70:47:BC:97:74:BB:6F:2F:7A:D8:4B:30:64:C0:10:03 Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73 Certificate issuer: /CN=20ba71e46c75916b8e5de193cc7f81069df86f73 Certificate serial: 019B50A9D5FB2EA180E54B4751D63D0F2972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft Manifest number: 1493 Signing time: Wed 24 Dec 2025 14:01:06 +0000 Manifest this update: Wed 24 Dec 2025 14:01:06 +0000 Manifest next update: Thu 25 Dec 2025 14:01:06 +0000 Files and hashes: 1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: vBSE0tc2JUIMiTopXdrbnLO/kmheTJJWUEO2BLN83I4=) 2: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (hash: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:d5:fb:2e:a1:80:e5:4b:47:51:d6:3d:0f:29:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73 Validity Not Before: Dec 24 14:01:06 2025 GMT Not After : Dec 25 14:01:06 2025 GMT Subject: CN=6826b5dc7047bc9774bb6f2f7ad84b3064c01003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:83:4b:d6:66:e9:6d:9c:73:a3:d2:9e:3b:a3: cc:d2:19:1b:c8:ac:b2:2e:b7:76:cd:bc:c7:5f:bd: 7b:c2:b2:ae:52:1b:1f:3f:22:05:13:a3:51:9b:27: ee:18:30:b3:e0:95:b8:45:11:4e:e4:de:7b:b4:e7: 47:ca:fe:84:8f:6c:b2:9b:84:3a:4c:4b:08:61:ee: 66:ca:d0:7d:13:5c:81:2d:7b:f3:e7:35:6c:63:e1: a7:e8:9e:eb:5e:d3:bc:28:6e:5f:38:21:a6:d8:00: c5:ff:c9:b3:43:63:16:90:e1:f1:28:fd:ea:47:ee: 51:87:b4:c7:ae:e9:12:91:84:29:bd:2c:63:8d:a2: 13:74:4e:2f:d7:9d:b3:45:77:48:8a:c5:05:28:a3: f5:a4:37:ad:fa:56:b3:5f:6c:a2:61:6e:9d:af:6b: 99:df:e2:c8:5c:d7:f5:fa:46:8b:5c:0f:48:d4:0c: b6:3b:2f:af:9e:20:56:50:86:17:55:26:8b:68:7f: 51:00:29:01:94:1d:ad:fd:dd:7c:4c:39:52:7a:94: 92:ff:5e:19:03:07:ab:13:20:37:8a:69:e2:34:de: 71:80:d8:2a:8a:26:37:11:bf:62:fd:9b:b8:e4:b6: bb:51:e3:69:9c:43:b2:07:d5:ba:08:d2:dc:9e:c6: 24:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:26:B5:DC:70:47:BC:97:74:BB:6F:2F:7A:D8:4B:30:64:C0:10:03 X509v3 Authority Key Identifier: keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9d:8a:13:29:15:b4:31:01:4b:a5:e0:6a:ec:8e:08:7f:b2: b9:1a:e9:26:ce:34:48:a5:25:83:1c:17:68:65:4a:3a:e8:a3: e7:b4:05:a7:21:71:6b:2b:7a:d0:de:bf:eb:cb:d1:05:e8:f7: b7:ae:82:1a:f3:12:fd:71:45:c4:87:b5:06:75:70:6e:e8:c8: b3:a0:52:92:57:bb:eb:37:88:ea:dd:56:25:62:6c:5f:6c:a5: e9:1f:69:a5:00:07:ac:1b:e8:43:ec:94:66:4d:0a:d3:9a:9d: e5:fc:36:e5:8d:9d:bd:98:b0:ed:85:4e:18:54:c3:db:e1:7d: cb:4b:ed:03:e4:40:01:14:f8:d2:83:f8:8e:dc:66:df:ae:01: 55:5d:d1:93:f1:3c:9d:95:c0:ba:ff:fd:94:99:aa:0c:88:67: 85:bf:3b:7a:41:9d:5a:c8:c5:4f:c9:fb:56:c6:dd:af:01:75: 91:d2:2c:54:33:26:0f:a1:68:0c:47:a9:cb:b1:fa:bf:b3:a4: 2d:96:80:8c:d3:13:31:bf:5f:a3:2b:c8:de:d6:a1:20:30:6b: 32:18:91:43:52:a0:ed:22:05:1b:41:d6:bb:3a:61:05:79:5c: 93:01:a5:a1:05:6a:44:72:92:ee:1c:bc:2e:05:6f:5d:02:5c: 1c:8e:b1:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqdX7LqGA5UtHUdY9DylyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYmE3MWU0NmM3NTkxNmI4ZTVkZTE5M2NjN2Y4MTA2OWRm ODZmNzMwHhcNMjUxMjI0MTQwMTA2WhcNMjUxMjI1MTQwMTA2WjAzMTEwLwYDVQQD Eyg2ODI2YjVkYzcwNDdiYzk3NzRiYjZmMmY3YWQ4NGIzMDY0YzAxMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYNL1mbpbZxzo9KeO6PM0hkbyKyy Lrd2zbzHX717wrKuUhsfPyIFE6NRmyfuGDCz4JW4RRFO5N57tOdHyv6Ej2yym4Q6 TEsIYe5mytB9E1yBLXvz5zVsY+Gn6J7rXtO8KG5fOCGm2ADF/8mzQ2MWkOHxKP3q R+5Rh7THrukSkYQpvSxjjaITdE4v152zRXdIisUFKKP1pDet+lazX2yiYW6dr2uZ 3+LIXNf1+kaLXA9I1Ay2Oy+vniBWUIYXVSaLaH9RACkBlB2t/d18TDlSepSS/14Z AwerEyA3imniNN5xgNgqiiY3Eb9i/Zu45La7UeNpnEOyB9W6CNLcnsYkLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgmtdxwR7yXdLtvL3rYSzBkwBADMB8GA1UdIwQY MBaAFCC6ceRsdZFrjl3hk8x/gQad+G9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEt NDg0NTAwYmNmYjA3LzEvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEtNDg0NTAwYmNmYjA3 LzEvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZ2KEykV tDEBS6XgauyOCH+yuRrpJs40SKUlgxwXaGVKOuij57QFpyFxayt60N6/68vRBej3 t66CGvMS/XFFxIe1BnVwbujIs6BSkle76zeI6t1WJWJsX2yl6R9ppQAHrBvoQ+yU Zk0K05qd5fw25Y2dvZiw7YVOGFTD2+F9y0vtA+RAART40oP4jtxm364BVV3Rk/E8 nZXAuv/9lJmqDIhnhb87ekGdWsjFT8n7VsbdrwF1kdIsVDMmD6FoDEepy7H6v7Ok LZaAjNMTMb9foyvI3tahIDBrMhiRQ1Kg7SIFG0HWuzphBXlckwGloQVqRHKS7hy8 LgVvXQJcHI6xaw== -----END CERTIFICATE-----Generated at Wed Dec 24 15:16:23 2025 by rpki-client