This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft File: ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json) Hash identifier: iIiHPFChdUF+WGPs8+0+VZRPeY3m0P5WzKCaYVIvduw= Subject key identifier: 7D:EA:66:1A:3E:AF:CC:EB:8C:91:47:43:64:73:D5:E7:61:C6:8F:49 Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73 Certificate issuer: /CN=20ba71e46c75916b8e5de193cc7f81069df86f73 Certificate serial: 019B620AC9A4FEF0D5C89E88072B5A3617C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft Manifest number: 149C Signing time: Sat 27 Dec 2025 23:00:32 +0000 Manifest this update: Sat 27 Dec 2025 23:00:32 +0000 Manifest next update: Sun 28 Dec 2025 23:00:32 +0000 Files and hashes: 1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: S4EWeQG4pNK56QgNCvvhpSS8hSx49s/6XBkFndDt4bI=) 2: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (hash: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0a:c9:a4:fe:f0:d5:c8:9e:88:07:2b:5a:36:17:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73 Validity Not Before: Dec 27 23:00:32 2025 GMT Not After : Dec 28 23:00:32 2025 GMT Subject: CN=7dea661a3eafcceb8c9147436473d5e761c68f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:ae:65:52:03:1b:48:ab:fa:b0:d4:22:c5: 94:05:96:7d:df:97:00:41:ed:a5:3c:39:ae:3a:10: 7b:20:96:be:c0:61:d5:9f:d8:ac:ec:fc:bd:b4:c0: 33:59:a0:0e:a5:62:de:d4:27:4a:b8:7c:63:9d:34: 9a:42:26:1f:46:29:66:83:03:c1:54:fe:9d:55:e3: 8f:9d:06:36:52:34:5a:08:08:5c:8e:c0:63:f4:9b: ab:ef:43:50:bc:a5:0d:11:b7:77:4e:a9:a8:29:e1: cc:d7:ee:66:64:f2:c6:cb:7c:d1:c5:e8:ad:9f:dc: 8a:9b:63:d9:fa:15:c2:13:33:7c:13:af:d0:f1:20: 3f:06:ff:9b:cb:97:f1:cf:4a:7d:30:34:0e:58:6b: e9:e3:da:0e:27:12:1d:f2:61:8f:fd:5b:2b:36:3d: d4:7e:f5:bb:0c:6e:74:60:58:f7:47:b1:69:10:94: c3:a7:1f:83:53:80:1a:27:27:4e:5e:60:57:f5:7b: 49:65:fa:13:8f:a9:30:2c:a1:71:40:a8:26:e8:d8: 28:78:d9:9d:0a:a1:34:84:24:23:81:00:89:da:d4: cb:ab:ef:c3:1f:d7:64:2d:0b:46:f5:9f:ca:67:f1: 37:9c:8f:61:e8:61:bc:da:4a:bd:7f:c0:1a:49:84: ac:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EA:66:1A:3E:AF:CC:EB:8C:91:47:43:64:73:D5:E7:61:C6:8F:49 X509v3 Authority Key Identifier: keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:63:e4:91:8b:c2:6f:60:6b:ee:66:b1:d9:ff:d3:fa:da:85: 59:f5:60:23:23:8c:26:3e:cf:e0:80:e1:f4:b1:73:57:eb:4c: 2b:46:d7:fe:be:83:03:84:1d:9b:9d:a2:79:5e:57:34:9b:68: 1e:8d:5e:6f:c5:02:54:6e:15:89:95:0b:05:8f:1a:65:f5:ce: 27:c8:74:48:13:15:f0:fd:f3:73:9e:9e:c4:4c:96:45:d1:ba: 5e:39:59:6b:da:86:cc:14:50:35:21:cf:0b:4b:2c:f9:4e:d0: 9b:46:bc:56:23:3e:96:71:d8:07:5c:8e:1b:83:25:66:30:fd: 36:de:7a:49:af:32:cf:18:fc:8f:33:53:8d:f0:37:28:69:1a: f5:c9:53:6e:f6:88:de:0f:27:44:64:73:5c:87:ea:4c:e2:0a: 50:91:f8:35:08:67:09:60:a5:f1:91:8f:02:3e:80:19:57:69: ea:04:6e:4f:f6:8f:50:95:90:37:2c:32:02:41:f7:4b:93:b6: 2a:66:6f:0a:8d:f1:21:e8:89:f6:25:14:19:bb:bf:1c:c9:7d: 65:19:c7:cc:6f:04:d4:34:74:45:c3:bc:48:b4:72:b6:44:48: 00:44:2d:18:23:b9:39:66:22:67:57:88:12:22:15:ea:0d:6a: 09:5c:2a:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCsmk/vDVyJ6IBytaNhfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYmE3MWU0NmM3NTkxNmI4ZTVkZTE5M2NjN2Y4MTA2OWRm ODZmNzMwHhcNMjUxMjI3MjMwMDMyWhcNMjUxMjI4MjMwMDMyWjAzMTEwLwYDVQQD Eyg3ZGVhNjYxYTNlYWZjY2ViOGM5MTQ3NDM2NDczZDVlNzYxYzY4ZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj6uZVIDG0ir+rDUIsWUBZZ935cA Qe2lPDmuOhB7IJa+wGHVn9is7Py9tMAzWaAOpWLe1CdKuHxjnTSaQiYfRilmgwPB VP6dVeOPnQY2UjRaCAhcjsBj9Jur70NQvKUNEbd3TqmoKeHM1+5mZPLGy3zRxeit n9yKm2PZ+hXCEzN8E6/Q8SA/Bv+by5fxz0p9MDQOWGvp49oOJxId8mGP/VsrNj3U fvW7DG50YFj3R7FpEJTDpx+DU4AaJydOXmBX9XtJZfoTj6kwLKFxQKgm6NgoeNmd CqE0hCQjgQCJ2tTLq+/DH9dkLQtG9Z/KZ/E3nI9h6GG82kq9f8AaSYSs6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3qZho+r8zrjJFHQ2Rz1edhxo9JMB8GA1UdIwQY MBaAFCC6ceRsdZFrjl3hk8x/gQad+G9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEt NDg0NTAwYmNmYjA3LzEvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEtNDg0NTAwYmNmYjA3 LzEvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2PkkYvC b2Br7max2f/T+tqFWfVgIyOMJj7P4IDh9LFzV+tMK0bX/r6DA4Qdm52ieV5XNJto Ho1eb8UCVG4ViZULBY8aZfXOJ8h0SBMV8P3zc56exEyWRdG6XjlZa9qGzBRQNSHP C0ss+U7Qm0a8ViM+lnHYB1yOG4MlZjD9Nt56Sa8yzxj8jzNTjfA3KGka9clTbvaI 3g8nRGRzXIfqTOIKUJH4NQhnCWCl8ZGPAj6AGVdp6gRuT/aPUJWQNywyAkH3S5O2 KmZvCo3xIeiJ9iUUGbu/HMl9ZRnHzG8E1DR0RcO8SLRytkRIAEQtGCO5OWYiZ1eI EiIV6g1qCVwqKg== -----END CERTIFICATE-----Generated at Sun Dec 28 08:05:21 2025 by rpki-client