This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json) Hash identifier: fYiDvTVwgsZh1uQ5/hl8LWi6EjYweKT9ytShFyp+Lac= Subject key identifier: 3C:88:09:21:DB:A8:C9:85:48:73:26:B2:58:D0:02:62:2F:3A:F3:F6 Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48 Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48 Certificate serial: 019B3E6D34042C414DEC67FA5ECEDB9E015D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 01:01:42 +0000 Manifest this update: Sun 21 Dec 2025 01:01:42 +0000 Manifest next update: Mon 22 Dec 2025 01:01:42 +0000 Files and hashes: 1: RmCRqlQnRe9rCwX7VMuUVE41d98.roa (hash: /tq1VC9HIJ7jRew5LuuwcJaQrPrPH8vbpHUg/uqU1rE=) 2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: YdhiQ+TW2JTNs+jB5zV3+bf8kuQQayMyR4tHCjD9beA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:34:04:2c:41:4d:ec:67:fa:5e:ce:db:9e:01:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48 Validity Not Before: Dec 21 01:01:42 2025 GMT Not After : Dec 22 01:01:42 2025 GMT Subject: CN=3c880921dba8c985487326b258d002622f3af3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:b1:75:9d:ce:32:eb:28:c8:04:94:6b:cf: 51:bc:dd:61:3e:8a:d7:3c:89:f4:8e:84:e7:92:cb: e0:73:ef:f5:30:68:c1:58:93:41:bc:cb:85:62:f8: ff:72:45:3d:03:ca:fb:70:7f:c3:99:c4:a6:91:57: 4d:fe:ab:6a:08:58:e5:ae:7b:ab:d0:6e:77:43:78: 61:c6:28:0b:b6:fc:e8:a0:ce:4d:fe:82:8c:0c:4b: 2b:d2:5b:46:85:02:03:f8:0b:04:ae:39:56:41:b1: fe:bb:92:08:7d:07:85:61:b1:64:be:fd:5e:82:47: ea:4a:cb:2c:41:8f:3a:7a:3a:48:33:a4:d9:06:19: 77:29:58:8a:23:d9:5d:9d:e9:64:2f:3a:50:07:d3: d5:06:6e:e3:b6:01:72:a1:8a:52:38:05:3a:62:02: 50:86:85:54:98:7c:d9:6e:57:2e:44:44:26:a1:9e: ab:a2:61:4e:06:78:51:b7:a5:73:b4:12:a9:59:6b: 13:c1:1f:49:26:f5:d2:a0:f0:bd:3c:09:d7:7e:d2: 39:5b:88:67:94:7e:24:7c:9c:f7:57:9b:e2:26:a4: c0:c2:cd:b3:a8:63:ec:bb:8c:8f:af:36:df:95:ab: 1e:1c:ef:77:dc:ab:cb:ec:0c:23:f1:13:2e:e4:b3: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:88:09:21:DB:A8:C9:85:48:73:26:B2:58:D0:02:62:2F:3A:F3:F6 X509v3 Authority Key Identifier: keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:85:ab:54:15:43:7a:78:4c:7d:fa:9e:c8:16:bc:60:fa:e5: 39:32:ef:e5:5e:23:c5:24:21:8e:3b:e6:74:1e:ca:b2:59:57: b2:a6:1b:37:fe:78:65:51:93:1e:9c:74:e0:2b:29:62:31:9a: 07:65:79:f6:38:46:32:84:83:aa:64:8c:d7:29:1d:54:8e:0b: 87:21:88:a6:ee:ca:4d:bd:75:b7:e7:04:26:5b:64:3f:13:64: 4d:f2:57:ae:eb:01:1c:2b:64:38:37:3b:2a:b4:bc:17:04:c6: f1:67:80:74:24:15:9f:bc:78:71:aa:66:32:0c:47:b2:b2:4a: b4:9b:2e:eb:15:22:d9:b7:a4:8a:7d:00:28:b7:a0:e9:dc:a7: 48:38:72:98:7a:e5:ce:2c:06:4e:be:2a:86:ad:08:c9:1c:d1: c6:25:13:7a:57:06:2c:4f:4b:fd:cd:95:08:1a:7d:9f:0c:6d: 96:dd:aa:9c:75:4e:61:b5:5a:bf:3c:e4:13:ae:9c:1b:dc:de: 0d:75:49:c3:d2:88:80:dc:ad:01:77:ad:09:55:72:38:e0:6a: 41:de:06:58:d2:28:99:62:d1:07:83:57:67:24:59:59:ab:6b: 5d:97:eb:01:e0:64:4a:4b:50:6c:3f:ac:b3:4b:66:f6:f9:d8: 8d:70:c6:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bTQELEFN7Gf6Xs7bngFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Yjc1YWVlZmU4ZWVhMWFjNWMyMTlkODc1MDVkMmU3YzVm MzJmNDgwHhcNMjUxMjIxMDEwMTQyWhcNMjUxMjIyMDEwMTQyWjAzMTEwLwYDVQQD EygzYzg4MDkyMWRiYThjOTg1NDg3MzI2YjI1OGQwMDI2MjJmM2FmM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd6xdZ3OMusoyASUa89RvN1hPorX PIn0joTnksvgc+/1MGjBWJNBvMuFYvj/ckU9A8r7cH/DmcSmkVdN/qtqCFjlrnur 0G53Q3hhxigLtvzooM5N/oKMDEsr0ltGhQID+AsErjlWQbH+u5IIfQeFYbFkvv1e gkfqSsssQY86ejpIM6TZBhl3KViKI9ldnelkLzpQB9PVBm7jtgFyoYpSOAU6YgJQ hoVUmHzZblcuREQmoZ6romFOBnhRt6VztBKpWWsTwR9JJvXSoPC9PAnXftI5W4hn lH4kfJz3V5viJqTAws2zqGPsu4yPrzbflaseHO933KvL7Awj8RMu5LNicQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyICSHbqMmFSHMmsljQAmIvOvP2MB8GA1UdIwQY MBaAFIi3Wu7+juoaxcIZ2HUF0ufF8y9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEt OWFjMDhjM2VhYWExLzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEtOWFjMDhjM2VhYWEx LzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoWrVBVD enhMffqeyBa8YPrlOTLv5V4jxSQhjjvmdB7KsllXsqYbN/54ZVGTHpx04CspYjGa B2V59jhGMoSDqmSM1ykdVI4LhyGIpu7KTb11t+cEJltkPxNkTfJXrusBHCtkODc7 KrS8FwTG8WeAdCQVn7x4capmMgxHsrJKtJsu6xUi2bekin0AKLeg6dynSDhymHrl ziwGTr4qhq0IyRzRxiUTelcGLE9L/c2VCBp9nwxtlt2qnHVOYbVavzzkE66cG9ze DXVJw9KIgNytAXetCVVyOOBqQd4GWNIomWLRB4NXZyRZWatrXZfrAeBkSktQbD+s s0tm9vnYjXDGjw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:26:33 2025 by rpki-client