This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft File: ILSHOEKpBPGmlyATk-e6YmhC9K8.mft (raw, json) Hash identifier: xXtA7on3fDs106aRnSdobkiRHgl38FCpiLxqVQjP/+Y= Subject key identifier: 01:5B:C7:7D:3F:A8:49:F3:EA:B3:F4:48:B3:9B:B9:5C:2C:44:F9:08 Authority key identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF Certificate issuer: /CN=20b4873842a904f1a697201393e7ba626842f4af Certificate serial: 019B48B914768FC2C2A2D6EA562FE9FB77BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft Manifest number: 02AC Signing time: Tue 23 Dec 2025 01:00:47 +0000 Manifest this update: Tue 23 Dec 2025 01:00:47 +0000 Manifest next update: Wed 24 Dec 2025 01:00:47 +0000 Files and hashes: 1: ILSHOEKpBPGmlyATk-e6YmhC9K8.crl (hash: 0B9LMYRQEVZap3NR/L7H6+/viAIwCWKzQG/9Ozv9KEw=) 2: ikBv5b5jvUgLHCzEElZRpG0xhaQ.roa (hash: gqu/sWjZphbSMNC/g5mms3lw1LEITcFb3ZdY4tecg1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:14:76:8f:c2:c2:a2:d6:ea:56:2f:e9:fb:77:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20b4873842a904f1a697201393e7ba626842f4af Validity Not Before: Dec 23 01:00:47 2025 GMT Not After : Dec 24 01:00:47 2025 GMT Subject: CN=015bc77d3fa849f3eab3f448b39bb95c2c44f908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:5f:99:1d:68:74:2c:99:e5:70:db:15:99: 68:4e:45:97:02:29:02:59:3e:12:cc:46:8c:3b:84: 2e:06:57:e2:2c:d7:92:d3:53:bc:12:c7:f5:34:bd: 3b:b1:3d:43:db:d4:e2:7c:e9:55:92:02:84:f7:b0: 16:72:d5:5b:d7:68:e6:7d:62:c8:eb:76:4e:90:a0: c5:de:03:b3:d6:a2:f0:bc:07:08:65:01:a0:f4:a3: 09:a3:51:5e:e2:7b:54:1f:85:ad:58:80:0d:80:7d: 56:23:06:5d:fa:d4:1d:55:a9:21:88:84:f0:92:74: c0:b7:64:3b:83:3f:98:4b:37:fb:88:e6:ab:4e:08: 8d:85:27:ed:1a:cd:5a:14:3c:89:e6:2e:24:2d:06: fa:dc:89:ac:98:64:cb:f4:c5:b1:94:cf:5d:f2:8f: 43:fa:0d:ba:f6:ca:09:86:34:ef:ae:5c:d9:fc:5d: dc:29:72:41:b3:7b:f2:6f:5f:7e:22:0f:8a:f5:58: c1:fd:0a:93:ab:7c:5a:ba:fa:62:ba:7d:99:63:12: cf:09:48:79:ef:c7:3a:51:b2:84:7b:25:1f:0d:f3: 50:6e:1b:ba:48:73:ab:c4:68:df:c9:b7:0d:62:33: a1:23:86:7d:b7:a6:25:28:50:95:5d:4e:3b:1d:ce: 4e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5B:C7:7D:3F:A8:49:F3:EA:B3:F4:48:B3:9B:B9:5C:2C:44:F9:08 X509v3 Authority Key Identifier: keyid:20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:df:be:35:16:21:8f:f1:22:47:e5:d0:ef:b2:8f:09:25:85: 27:26:4f:b8:2c:39:34:75:9f:29:e6:da:5a:08:e2:81:d2:58: 36:68:c3:29:cd:0d:c0:eb:d8:3e:4d:40:5f:53:b6:7b:87:be: d1:f2:2f:60:75:7c:7a:21:42:20:1d:2a:df:eb:b0:55:1c:eb: 05:f5:92:08:4c:ed:d7:aa:a9:84:32:e2:95:09:c0:b9:eb:32: c9:8f:f8:8f:15:58:0f:f1:24:09:f5:49:4f:26:0c:4a:f9:03: 6c:36:57:22:43:1a:93:a9:e6:57:21:46:4e:6b:ac:66:a4:4f: cd:f3:f1:a1:48:90:78:64:06:20:8e:94:18:83:03:06:53:8a: db:35:53:c0:df:57:54:e6:ea:2e:bc:72:d2:dd:b7:00:df:06: 22:c3:71:a6:01:ac:2b:5d:8f:35:02:19:f0:28:66:13:f0:ca: f0:30:de:0b:8c:31:6e:fe:48:51:1d:7c:4a:2a:c8:19:bb:35: 69:70:5e:2a:f7:33:91:79:39:6e:d3:44:ef:47:d6:d2:58:e2: 01:03:0a:b9:5d:6f:c3:f4:ff:3c:74:47:95:2b:75:08:81:b2: eb:9b:3c:21:61:59:1b:3a:73:95:0b:30:7e:d9:c9:d7:ef:e9: 71:2b:48:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuRR2j8LCotbqVi/p+3e+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYjQ4NzM4NDJhOTA0ZjFhNjk3MjAxMzkzZTdiYTYyNjg0 MmY0YWYwHhcNMjUxMjIzMDEwMDQ3WhcNMjUxMjI0MDEwMDQ3WjAzMTEwLwYDVQQD EygwMTViYzc3ZDNmYTg0OWYzZWFiM2Y0NDhiMzliYjk1YzJjNDRmOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbtfmR1odCyZ5XDbFZloTkWXAikC WT4SzEaMO4QuBlfiLNeS01O8Esf1NL07sT1D29TifOlVkgKE97AWctVb12jmfWLI 63ZOkKDF3gOz1qLwvAcIZQGg9KMJo1Fe4ntUH4WtWIANgH1WIwZd+tQdVakhiITw knTAt2Q7gz+YSzf7iOarTgiNhSftGs1aFDyJ5i4kLQb63ImsmGTL9MWxlM9d8o9D +g269soJhjTvrlzZ/F3cKXJBs3vyb19+Ig+K9VjB/QqTq3xauvpiun2ZYxLPCUh5 78c6UbKEeyUfDfNQbhu6SHOrxGjfybcNYjOhI4Z9t6YlKFCVXU47Hc5OKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFbx30/qEnz6rP0SLObuVwsRPkIMB8GA1UdIwQY MBaAFCC0hzhCqQTxppcgE5PnumJoQvSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxTSE9FS3BCUEdtbHlBVGstZTZZbWhDOUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84ZTI5MWEtYjY1NS00NmU0LWJkYzMt ZWY1YmE1NGFkYjU5LzEvSUxTSE9FS3BCUEdtbHlBVGstZTZZbWhDOUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS84ZTI5MWEtYjY1NS00NmU0LWJkYzMtZWY1YmE1NGFkYjU5 LzEvSUxTSE9FS3BCUEdtbHlBVGstZTZZbWhDOUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABN++NRYh j/EiR+XQ77KPCSWFJyZPuCw5NHWfKebaWgjigdJYNmjDKc0NwOvYPk1AX1O2e4e+ 0fIvYHV8eiFCIB0q3+uwVRzrBfWSCEzt16qphDLilQnAuesyyY/4jxVYD/EkCfVJ TyYMSvkDbDZXIkMak6nmVyFGTmusZqRPzfPxoUiQeGQGII6UGIMDBlOK2zVTwN9X VObqLrxy0t23AN8GIsNxpgGsK12PNQIZ8ChmE/DK8DDeC4wxbv5IUR18SirIGbs1 aXBeKvczkXk5btNE70fW0ljiAQMKuV1vw/T/PHRHlSt1CIGy65s8IWFZGzpzlQsw ftnJ1+/pcStIRQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:06:40 2025 by rpki-client