This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft File: ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json) Hash identifier: qZffYmH5gsFXxBueL9rSW6GCZWQCpF2NU6bK+HwO5Nw= Subject key identifier: 5A:4A:CC:35:76:64:12:F2:9B:6F:78:79:A6:53:BE:8B:D7:9E:C3:76 Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE Certificate issuer: /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee Certificate serial: 019B661F27D9611ABB0CFF7E7A5D8484E82D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 18:01:16 +0000 Manifest this update: Sun 28 Dec 2025 18:01:16 +0000 Manifest next update: Mon 29 Dec 2025 18:01:16 +0000 Files and hashes: 1: gx1SCX17EN8yNFFOaZKqHyy38bg.roa (hash: y86l006aIRQbh6g6sMv1/V04L9sTmUKHfB0xrZAQk4Q=) 2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: juyjuD/AQxHjfeHRm0Xr2jyhPdRLiktCsn73aOxEyVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1f:27:d9:61:1a:bb:0c:ff:7e:7a:5d:84:84:e8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee Validity Not Before: Dec 28 18:01:16 2025 GMT Not After : Dec 29 18:01:16 2025 GMT Subject: CN=5a4acc35766412f29b6f7879a653be8bd79ec376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:17:88:9f:7a:8b:84:21:f6:23:a2:11:93: 73:78:4c:87:4c:8e:a9:c5:0b:67:9e:c0:6d:50:5d: eb:28:42:50:9e:dc:fa:d0:de:44:ef:aa:41:61:44: 6f:e7:24:b0:e7:50:8e:44:ac:0f:15:e3:b9:fb:1a: 14:21:18:fb:f4:e5:24:f4:a8:2c:a0:c2:0e:c2:94: 4e:70:5e:c8:32:81:28:ba:92:b2:e8:e7:88:1e:0c: dc:76:4e:64:ba:eb:4a:8d:b2:0a:84:f0:19:3d:14: 94:9f:49:57:29:97:f5:ca:93:11:bd:d7:37:a9:32: a9:1b:5a:6d:8d:1c:e7:11:22:b7:fe:ba:07:78:e4: c3:fd:d3:6c:40:05:b4:b4:b4:6a:6d:e9:95:91:0c: b1:be:1b:54:e1:cf:ac:97:f4:cf:06:df:7c:68:3c: d0:47:3f:83:75:40:65:0b:cc:92:ec:6a:60:28:ff: 36:ea:99:79:f0:36:1c:e5:65:4d:bf:bf:ef:3d:d7: c5:4d:54:82:c5:80:ba:94:69:78:e2:eb:96:c2:80: a9:19:72:9f:ab:2c:63:03:06:3c:43:59:af:76:42: 1a:b9:b7:8a:5c:aa:b7:86:a5:54:25:44:f0:56:3d: 16:d2:e5:0c:87:35:c0:21:00:e5:13:aa:12:8b:be: f1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4A:CC:35:76:64:12:F2:9B:6F:78:79:A6:53:BE:8B:D7:9E:C3:76 X509v3 Authority Key Identifier: keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:1a:8a:ee:9d:1c:d2:1d:be:ac:c5:32:b2:4a:b8:b9:51:a8: f7:7b:da:0c:5e:06:1d:cc:19:8d:ef:ae:f6:f2:fc:d9:1e:77: 4b:ca:0e:a3:29:85:df:6a:73:5d:8f:83:29:22:a7:b5:6d:04: ed:69:1e:db:db:b2:3c:58:66:30:0d:a4:79:26:b0:ec:7f:54: 65:fa:8a:13:5f:d7:fc:f7:74:26:bb:1e:58:0d:9f:4f:05:57: 6e:b5:5f:1b:46:6a:48:e0:f3:69:62:d2:ad:b5:71:38:24:6b: f5:1e:82:74:47:83:7b:a6:70:97:73:13:58:e6:9e:e8:8a:97: 18:ce:a1:fb:a3:ba:15:99:17:1f:0b:57:2a:cc:80:b4:2a:d2: d6:8c:60:9e:8b:2b:d5:cb:61:81:3b:16:ee:05:b8:2a:42:d9: 12:70:61:35:04:1a:9b:af:cb:64:06:f1:23:24:e0:f0:e5:79: 51:11:80:59:0d:9f:86:00:48:7d:a9:f0:7c:0c:c9:e1:74:97: 0a:df:dc:5a:fe:9c:8d:1e:e8:a9:fa:3f:4d:50:21:ab:c0:be: 92:6b:86:cf:97:ec:69:0d:6c:64:f5:86:9d:ee:e8:6d:ac:0c: e3:68:c1:6f:fa:8c:f8:e4:6c:cc:61:68:e9:94:be:c0:02:09: ff:f3:4f:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHyfZYRq7DP9+el2EhOgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTUyYTg2ZTMxYjY5ZTVkNTMyMGVkZTgxZDM0YmIxMjhh NDVjZWUwHhcNMjUxMjI4MTgwMTE2WhcNMjUxMjI5MTgwMTE2WjAzMTEwLwYDVQQD Eyg1YTRhY2MzNTc2NjQxMmYyOWI2Zjc4NzlhNjUzYmU4YmQ3OWVjMzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwoXiJ96i4Qh9iOiEZNzeEyHTI6p xQtnnsBtUF3rKEJQntz60N5E76pBYURv5ySw51CORKwPFeO5+xoUIRj79OUk9Kgs oMIOwpROcF7IMoEoupKy6OeIHgzcdk5kuutKjbIKhPAZPRSUn0lXKZf1ypMRvdc3 qTKpG1ptjRznESK3/roHeOTD/dNsQAW0tLRqbemVkQyxvhtU4c+sl/TPBt98aDzQ Rz+DdUBlC8yS7GpgKP826pl58DYc5WVNv7/vPdfFTVSCxYC6lGl44uuWwoCpGXKf qyxjAwY8Q1mvdkIaubeKXKq3hqVUJUTwVj0W0uUMhzXAIQDlE6oSi77xFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpKzDV2ZBLym294eaZTvovXnsN2MB8GA1UdIwQY MBaAFIpVKobjG2nl1TIO3oHTS7EopFzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lOTU0YjktODczOC00NDk2LTg5YWQt NzhhMTI2YmYwYWRjLzEvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lOTU0YjktODczOC00NDk2LTg5YWQtNzhhMTI2YmYwYWRj LzEvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxqK7p0c 0h2+rMUyskq4uVGo93vaDF4GHcwZje+u9vL82R53S8oOoymF32pzXY+DKSKntW0E 7Wke29uyPFhmMA2keSaw7H9UZfqKE1/X/Pd0JrseWA2fTwVXbrVfG0ZqSODzaWLS rbVxOCRr9R6CdEeDe6Zwl3MTWOae6IqXGM6h+6O6FZkXHwtXKsyAtCrS1oxgnosr 1cthgTsW7gW4KkLZEnBhNQQam6/LZAbxIyTg8OV5URGAWQ2fhgBIfanwfAzJ4XSX Ct/cWv6cjR7oqfo/TVAhq8C+kmuGz5fsaQ1sZPWGne7obawM42jBb/qM+ORszGFo 6ZS+wAIJ//NP+g== -----END CERTIFICATE-----Generated at Mon Dec 29 01:09:04 2025 by rpki-client