This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft File: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft (raw, json) Hash identifier: k82aQDHc5YGJ3vEYZeEXWo18VFhLTO7xJ3JoqYa8JpE= Subject key identifier: 66:9D:5E:8B:DD:96:BA:DE:D7:82:F7:C5:A7:06:78:EE:09:D2:DB:F6 Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92 Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92 Certificate serial: 019B40C8CBCAA1058EB221C226AD6E583997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft Manifest number: 01F5 Signing time: Sun 21 Dec 2025 12:00:59 +0000 Manifest this update: Sun 21 Dec 2025 12:00:59 +0000 Manifest next update: Mon 22 Dec 2025 12:00:59 +0000 Files and hashes: 1: 51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa (hash: kL30wYXOZY9LJWeAQp8i76XhBLFPrIojNg32/XqLy4o=) 2: IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl (hash: mvqXa826NSPnCtJ1/V1CTUasCqPJqJZqdis1/IMfFik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:cb:ca:a1:05:8e:b2:21:c2:26:ad:6e:58:39:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=225326a0b249d2109f5292961392495071d89c92 Validity Not Before: Dec 21 12:00:59 2025 GMT Not After : Dec 22 12:00:59 2025 GMT Subject: CN=669d5e8bdd96baded782f7c5a70678ee09d2dbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:f5:64:10:50:0a:51:37:7a:90:ae:67:28: 53:1e:70:f6:55:ed:d8:e7:1a:60:a3:0d:bd:03:05: 5c:60:a1:4d:29:32:0d:52:f1:90:76:4a:37:8b:9e: 30:d7:a7:22:c3:c5:13:3b:ac:51:66:3d:a9:67:e0: 6b:c8:23:a6:e4:3c:5f:36:c1:fb:da:9f:59:62:d5: 7d:b9:26:f5:8c:f9:96:21:c6:77:82:a5:50:56:e0: 26:64:ca:36:23:6f:8e:7d:db:55:aa:db:5b:fb:5c: 5b:27:fc:e3:85:c4:9f:44:73:4d:6a:04:fa:96:5f: e7:4f:3c:d1:4a:cf:43:77:65:66:f1:81:c8:29:e9: 2e:79:12:53:0d:80:43:9f:de:b7:1d:ee:e3:1c:b1: 36:80:03:cd:c2:de:fc:35:95:65:ed:3f:f9:5e:e2: cf:5a:64:06:de:69:7a:76:27:4e:f2:8a:a6:85:f8: 92:5f:bf:c4:b2:10:1e:48:f4:4f:b3:78:c1:58:1f: 16:48:74:f5:18:c6:24:ae:c1:24:20:10:4e:7d:31: 58:24:6b:c2:7b:4a:0a:b9:d0:93:74:1f:fc:fe:04: 44:d2:8a:ea:8a:8b:3f:1d:83:fd:66:dc:95:e1:c0: 1d:e7:37:66:64:19:67:56:90:08:d9:da:9c:02:da: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9D:5E:8B:DD:96:BA:DE:D7:82:F7:C5:A7:06:78:EE:09:D2:DB:F6 X509v3 Authority Key Identifier: keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:43:d3:bf:26:d8:97:5d:67:65:e6:1f:4f:fa:11:82:2e:3c: e1:07:f8:ff:76:6f:e2:9c:dc:8d:c0:24:40:55:0d:7c:82:75: 85:93:5c:4e:82:7c:f6:3d:55:bd:e1:07:bb:bf:e2:8d:6e:8b: 67:13:7c:ed:ca:0f:e1:28:d5:04:c0:b0:71:e2:dc:06:33:d0: 29:42:2d:c1:e8:e3:7b:ac:cc:0d:c6:9e:4d:d2:99:2e:c4:8a: 1e:1a:86:0e:e9:fc:89:67:a1:67:4d:f8:83:20:df:fb:18:37: 56:39:ac:d5:8e:ff:8a:40:b1:de:fd:5f:77:31:95:27:4a:4a: f3:60:3e:e1:38:93:12:49:d4:a6:96:70:24:2d:1e:17:82:bb: 01:d7:62:64:ad:37:74:a6:fa:f6:ed:5f:98:7a:80:e5:68:93: b6:4d:8b:16:20:78:46:30:4f:01:c8:93:e1:25:3e:7a:a0:17: c5:26:ca:c3:37:a0:7a:87:d4:55:a5:0b:47:9d:b9:94:09:52: fe:e5:39:27:d8:d5:3d:b4:b8:b4:55:d5:a5:9a:f8:7f:b3:6e: 66:7a:04:2a:dc:8f:ed:ed:96:ca:1c:11:f8:00:ff:f2:d2:86: e2:ce:c0:2c:d5:e9:1a:a8:81:a5:fd:68:55:5d:63:e3:cc:71: f7:8d:60:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyMvKoQWOsiHCJq1uWDmXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNTMyNmEwYjI0OWQyMTA5ZjUyOTI5NjEzOTI0OTUwNzFk ODljOTIwHhcNMjUxMjIxMTIwMDU5WhcNMjUxMjIyMTIwMDU5WjAzMTEwLwYDVQQD Eyg2NjlkNWU4YmRkOTZiYWRlZDc4MmY3YzVhNzA2NzhlZTA5ZDJkYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzT1ZBBQClE3epCuZyhTHnD2Ve3Y 5xpgow29AwVcYKFNKTINUvGQdko3i54w16ciw8UTO6xRZj2pZ+BryCOm5DxfNsH7 2p9ZYtV9uSb1jPmWIcZ3gqVQVuAmZMo2I2+OfdtVqttb+1xbJ/zjhcSfRHNNagT6 ll/nTzzRSs9Dd2Vm8YHIKekueRJTDYBDn963He7jHLE2gAPNwt78NZVl7T/5XuLP WmQG3ml6didO8oqmhfiSX7/EshAeSPRPs3jBWB8WSHT1GMYkrsEkIBBOfTFYJGvC e0oKudCTdB/8/gRE0orqios/HYP9ZtyV4cAd5zdmZBlnVpAI2dqcAtoMeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGadXovdlrre14L3xacGeO4J0tv2MB8GA1UdIwQY MBaAFCJTJqCySdIQn1KSlhOSSVBx2JySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWxNbW9MSkowaENmVXBLV0U1SkpVSEhZbkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yOGMyYzAtZTk4My00NmFlLThiODUt OWZjOTMzZWY2MTI3LzEvSWxNbW9MSkowaENmVXBLV0U1SkpVSEhZbkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yOGMyYzAtZTk4My00NmFlLThiODUtOWZjOTMzZWY2MTI3 LzEvSWxNbW9MSkowaENmVXBLV0U1SkpVSEhZbkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUPTvybY l11nZeYfT/oRgi484Qf4/3Zv4pzcjcAkQFUNfIJ1hZNcToJ89j1VveEHu7/ijW6L ZxN87coP4SjVBMCwceLcBjPQKUItwejje6zMDcaeTdKZLsSKHhqGDun8iWehZ034 gyDf+xg3Vjms1Y7/ikCx3v1fdzGVJ0pK82A+4TiTEknUppZwJC0eF4K7AddiZK03 dKb69u1fmHqA5WiTtk2LFiB4RjBPAciT4SU+eqAXxSbKwzegeofUVaULR525lAlS /uU5J9jVPbS4tFXVpZr4f7NuZnoEKtyP7e2WyhwR+AD/8tKG4s7ALNXpGqiBpf1o VV1j48xx941gSw== -----END CERTIFICATE-----Generated at Sun Dec 21 16:13:33 2025 by rpki-client