This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft File: II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json) Hash identifier: Ix9nJlmRtKGgqmzzSqNtp/sUwmGXYq68A2UBx+tZ+K0= Subject key identifier: 93:94:55:0D:13:9F:79:57:E9:C1:29:A4:60:36:97:31:A8:C4:64:C5 Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0 Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0 Certificate serial: 019B367BE5BE3F01A3218D0912BE5D016FA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft Manifest number: 14C1 Signing time: Fri 19 Dec 2025 12:00:47 +0000 Manifest this update: Fri 19 Dec 2025 12:00:47 +0000 Manifest next update: Sat 20 Dec 2025 12:00:47 +0000 Files and hashes: 1: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: KAFihOz+WT+kpi5SZbuzS9y2HNQRkmDCe173ONg14yk=) 2: XwcmvCdfYih2y5WbBoBCn2IfFV8.roa (hash: f+XB0GSqJ+7PsH+7sWsNx0utGPF06ZO3iKtvMRIKXy4=) 3: o3aC-XC83IX1xlbwuX29XHHjTjY.roa (hash: JUTr5QLU/dwhs9eMYZjtJgqO991h7XFz+S/6EjomRb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:7b:e5:be:3f:01:a3:21:8d:09:12:be:5d:01:6f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0 Validity Not Before: Dec 19 12:00:47 2025 GMT Not After : Dec 20 12:00:47 2025 GMT Subject: CN=9394550d139f7957e9c129a460369731a8c464c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:6b:c6:18:ed:e9:29:22:12:5b:12:da:27: 78:6c:89:fb:aa:5d:42:4c:f5:db:b4:e2:b9:10:06: d2:bf:54:9e:6e:01:82:ad:2a:24:a1:ee:4c:1f:b4: ab:dd:ad:ea:7d:fe:cd:a6:cf:61:9e:61:83:72:f7: 14:7c:6f:e8:3b:e3:7d:6d:a2:37:5d:43:32:10:3e: 97:61:99:27:73:08:94:7f:15:92:cf:45:ee:39:d0: 1e:79:63:b5:7c:6f:0c:08:3f:e9:c2:0b:79:21:74: f3:d4:f5:b2:44:ac:92:c3:4d:46:b0:fe:42:69:3c: b3:90:8b:92:72:c0:ef:1c:35:39:23:70:e8:89:d1: 94:c3:a7:82:3e:4b:16:f4:af:ae:35:75:e7:ee:c6: ad:b0:58:a2:26:30:dc:f6:a7:f2:74:23:6f:2b:e4: 84:7f:57:58:42:95:32:28:7e:5f:fd:8d:16:03:4f: f9:4b:ee:d6:dd:f6:ce:4c:a7:ea:68:b9:5c:77:e8: c8:85:6e:66:73:d8:8e:0f:5c:5d:5f:df:7c:6c:55: e1:e9:ed:f6:f6:9c:19:b4:a4:94:87:63:87:ee:d4: 97:bc:6a:cb:14:e7:71:c2:47:6c:7d:0f:47:da:f7: 15:08:e3:a8:de:6d:a9:46:ae:76:b2:19:c4:30:c7: 4f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:94:55:0D:13:9F:79:57:E9:C1:29:A4:60:36:97:31:A8:C4:64:C5 X509v3 Authority Key Identifier: keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:92:42:4a:f1:76:9c:07:1d:3c:2f:17:f8:a0:ad:b7:47:7f: 67:75:bb:fd:a7:46:88:f0:1c:e7:36:9e:85:f2:b0:5b:b7:03: fa:98:cf:10:82:80:6e:60:b4:e0:6e:c2:47:76:d2:0e:cc:68: ac:6f:1c:1a:37:9f:ca:cc:06:89:94:8f:d6:e0:a6:07:cc:c8: 99:2f:94:de:60:7f:38:a3:ac:e7:7e:b6:15:3b:de:15:74:24: 9f:78:06:78:6e:2c:74:fe:02:36:59:26:cc:72:b7:d4:8a:af: ac:96:5e:50:b1:c4:76:74:b7:8c:70:81:48:c6:79:34:4d:4a: 38:46:1e:ea:0d:a3:d4:79:a4:6e:41:72:d8:27:1e:78:4f:1c: 25:6c:d7:0d:81:7e:02:66:83:10:41:47:1e:21:de:b5:7e:08: de:08:08:44:f3:61:67:be:73:d7:79:ad:bc:e2:6c:50:8b:ac: 49:b3:55:e8:94:99:55:62:8a:e8:1b:25:f7:78:80:ff:a1:0c: ca:fc:b1:e7:72:78:38:58:b7:e3:3e:13:c4:d2:3a:6b:cd:8c: bf:f2:d1:83:35:f4:0e:bf:71:04:cb:56:ff:d3:5f:c7:e5:68: a5:da:6d:9c:7e:98:24:f5:82:aa:68:02:33:da:f8:c2:7d:1c: 3c:fc:5a:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2e+W+PwGjIY0JEr5dAW+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGY4YmY4ZDAxMmEyNWNjY2VlMjEwNjgwM2Q3MDY0MzIw ZWQwZjAwHhcNMjUxMjE5MTIwMDQ3WhcNMjUxMjIwMTIwMDQ3WjAzMTEwLwYDVQQD Eyg5Mzk0NTUwZDEzOWY3OTU3ZTljMTI5YTQ2MDM2OTczMWE4YzQ2NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPtrxhjt6SkiElsS2id4bIn7ql1C TPXbtOK5EAbSv1SebgGCrSokoe5MH7Sr3a3qff7Nps9hnmGDcvcUfG/oO+N9baI3 XUMyED6XYZkncwiUfxWSz0XuOdAeeWO1fG8MCD/pwgt5IXTz1PWyRKySw01GsP5C aTyzkIuScsDvHDU5I3DoidGUw6eCPksW9K+uNXXn7satsFiiJjDc9qfydCNvK+SE f1dYQpUyKH5f/Y0WA0/5S+7W3fbOTKfqaLlcd+jIhW5mc9iOD1xdX998bFXh6e32 9pwZtKSUh2OH7tSXvGrLFOdxwkdsfQ9H2vcVCOOo3m2pRq52shnEMMdPGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOUVQ0Tn3lX6cEppGA2lzGoxGTFMB8GA1UdIwQY MBaAFCCPi/jQEqJczO4hBoA9cGQyDtDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEt ODA1NWVjMTBmZjBhLzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEtODA1NWVjMTBmZjBh LzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspJCSvF2 nAcdPC8X+KCtt0d/Z3W7/adGiPAc5zaehfKwW7cD+pjPEIKAbmC04G7CR3bSDsxo rG8cGjefyswGiZSP1uCmB8zImS+U3mB/OKOs5362FTveFXQkn3gGeG4sdP4CNlkm zHK31IqvrJZeULHEdnS3jHCBSMZ5NE1KOEYe6g2j1HmkbkFy2CceeE8cJWzXDYF+ AmaDEEFHHiHetX4I3ggIRPNhZ75z13mtvOJsUIusSbNV6JSZVWKK6Bsl93iA/6EM yvyx53J4OFi34z4TxNI6a82Mv/LRgzX0Dr9xBMtW/9Nfx+VopdptnH6YJPWCqmgC M9r4wn0cPPxa6w== -----END CERTIFICATE-----Generated at Fri Dec 19 20:25:39 2025 by rpki-client