This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft File: ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json) Hash identifier: RTzQefRL3kskQ3xeXtJhaM1jPmLO4ckg8q78SEK7o4s= Subject key identifier: D7:E4:D6:E7:1B:24:BD:66:F0:BC:6F:69:E6:F4:8B:C1:9B:23:A4:54 Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04 Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04 Certificate serial: 019B6B7C6E9F9E2826543A752400C8D5F206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft Manifest number: 0C31 Signing time: Mon 29 Dec 2025 19:01:15 +0000 Manifest this update: Mon 29 Dec 2025 19:01:15 +0000 Manifest next update: Tue 30 Dec 2025 19:01:15 +0000 Files and hashes: 1: 0WfJoxMemQt8nwlwlbf0-N5ZBgI.roa (hash: lHb75yOft9Kv2xRvC1d+Vx96c+J/4+jIL8gOSIRqeFs=) 2: 5RlzUCtoZ32Oa93A2fEfoYArcWM.roa (hash: iA8YpgMYI54//mfKtXnw0NA6/nJYpojDOe0q+RA30ZU=) 3: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: SZEHgUQKdGMzPR1QgXDoydq1yU6//+43+V10Y2bHLo8=) 4: zmJ9lE5vi4Jqc9Z9iVsq8OjO3sw.roa (hash: b4eeLp19myrQzh9AuX2bzcABMyXzCxCR666FaiLOLYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:7c:6e:9f:9e:28:26:54:3a:75:24:00:c8:d5:f2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04 Validity Not Before: Dec 29 19:01:15 2025 GMT Not After : Dec 30 19:01:15 2025 GMT Subject: CN=d7e4d6e71b24bd66f0bc6f69e6f48bc19b23a454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:92:73:2b:07:bd:24:23:95:aa:a4:44:5a: 05:1d:30:ec:a2:90:85:f3:8b:d0:a6:a6:e8:9d:b9: e8:16:fd:52:d0:4f:87:53:0c:69:0e:50:f2:5d:b2: 55:bb:10:ce:03:7c:f1:4b:04:47:73:2e:fb:a2:9a: 00:67:a8:cb:1f:70:3b:68:9d:19:e8:92:3e:c0:5c: 17:84:1d:40:aa:9a:a5:7e:62:51:46:e4:75:35:50: 38:f0:e0:b6:22:95:1f:1f:f0:6b:80:79:8f:6f:b3: da:ca:91:99:9f:ac:a4:43:2a:b6:b9:14:23:08:30: 41:f1:f2:39:19:81:12:32:94:b2:c1:c9:de:09:0b: 3e:f0:a0:d3:10:d8:7d:53:fc:d3:1c:05:72:78:aa: 57:9f:75:5d:fa:01:5b:e3:b7:81:d3:c8:e8:29:cd: 8f:d0:7d:ff:2d:08:41:3f:70:e2:0a:2f:a8:b6:ae: c5:b0:4c:14:7c:4c:10:15:93:55:82:ae:37:e7:85: 62:c5:04:82:f6:9d:1b:91:ee:0d:e8:e2:b2:fe:cb: c3:aa:46:01:bf:17:c6:e0:36:7e:80:69:e9:39:4d: 9f:68:70:43:34:22:bd:7d:be:5d:1f:e9:9f:ab:7d: c4:27:78:fb:83:0f:d2:9c:6e:65:3e:e9:a7:af:f4: 13:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E4:D6:E7:1B:24:BD:66:F0:BC:6F:69:E6:F4:8B:C1:9B:23:A4:54 X509v3 Authority Key Identifier: keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d9:71:49:88:bb:66:6a:e4:88:6c:f2:5c:03:24:1d:7a:c5: 9d:8b:61:4a:a1:07:78:1d:2b:1a:db:70:7f:c3:38:24:3c:5c: 9d:41:40:91:a3:d2:dc:a2:0a:13:23:ef:17:a3:f9:db:cc:d7: ec:ea:d7:3f:51:85:ba:2f:28:2e:57:20:af:43:45:eb:14:d8: 7d:16:06:7a:20:1b:f1:97:55:c5:a0:8c:8b:37:38:69:09:98: ea:a2:6d:fc:fc:1a:88:35:27:40:6c:a4:59:83:ec:70:e1:b7: d9:71:ce:5a:49:34:10:e7:cf:a2:cc:98:e3:19:03:b7:a2:80: ac:0d:86:fe:30:00:9c:3b:3a:35:8b:da:4a:4b:20:f4:28:55: 08:6a:2e:99:de:3d:8b:c8:2e:d7:4a:27:da:11:40:d5:6c:c8: ed:ed:57:71:64:dd:59:ce:6e:2d:cf:f5:3f:72:ac:43:3b:e2: 0d:08:6b:64:1c:93:4c:1e:01:c8:38:78:d7:d7:64:24:d3:d1: e2:89:f8:55:07:01:e9:7d:80:37:43:70:b2:4e:e4:35:c0:c2: c5:27:c8:a3:73:25:e3:0a:d1:03:f1:95:5a:0c:0d:49:1b:6d: 9b:1b:a6:69:97:06:6b:97:67:6c:8a:b0:5a:67:9d:c0:08:64: b2:ae:01:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrfG6fnigmVDp1JADI1fIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2 YzJhMDQwHhcNMjUxMjI5MTkwMTE1WhcNMjUxMjMwMTkwMTE1WjAzMTEwLwYDVQQD EyhkN2U0ZDZlNzFiMjRiZDY2ZjBiYzZmNjllNmY0OGJjMTliMjNhNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVqScysHvSQjlaqkRFoFHTDsopCF 84vQpqbonbnoFv1S0E+HUwxpDlDyXbJVuxDOA3zxSwRHcy77opoAZ6jLH3A7aJ0Z 6JI+wFwXhB1AqpqlfmJRRuR1NVA48OC2IpUfH/BrgHmPb7PaypGZn6ykQyq2uRQj CDBB8fI5GYESMpSywcneCQs+8KDTENh9U/zTHAVyeKpXn3Vd+gFb47eB08joKc2P 0H3/LQhBP3DiCi+otq7FsEwUfEwQFZNVgq4354VixQSC9p0bke4N6OKy/svDqkYB vxfG4DZ+gGnpOU2faHBDNCK9fb5dH+mfq33EJ3j7gw/SnG5lPumnr/QTQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfk1ucbJL1m8Lxvaeb0i8GbI6RUMB8GA1UdIwQY MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNlxSYi7 ZmrkiGzyXAMkHXrFnYthSqEHeB0rGttwf8M4JDxcnUFAkaPS3KIKEyPvF6P528zX 7OrXP1GFui8oLlcgr0NF6xTYfRYGeiAb8ZdVxaCMizc4aQmY6qJt/PwaiDUnQGyk WYPscOG32XHOWkk0EOfPosyY4xkDt6KArA2G/jAAnDs6NYvaSksg9ChVCGoumd49 i8gu10on2hFA1WzI7e1XcWTdWc5uLc/1P3KsQzviDQhrZByTTB4ByDh419dkJNPR 4on4VQcB6X2AN0Nwsk7kNcDCxSfIo3Ml4wrRA/GVWgwNSRttmxumaZcGa5dnbIqw WmedwAhksq4B4A== -----END CERTIFICATE-----Generated at Tue Dec 30 01:34:06 2025 by rpki-client