This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft File: iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json) Hash identifier: D5FL0pBUy8ab0wEibnTKpW90SwaWGu6xDDJVzZXA9Qg= Subject key identifier: 07:22:87:EB:19:8F:9E:FC:77:54:BC:DB:EE:54:04:43:AC:A1:C5:25 Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6 Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6 Certificate serial: 019B717DF1418B34058327FDD939BD16EF84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft Manifest number: 0991 Signing time: Tue 30 Dec 2025 23:00:37 +0000 Manifest this update: Tue 30 Dec 2025 23:00:37 +0000 Manifest next update: Wed 31 Dec 2025 23:00:37 +0000 Files and hashes: 1: Pi79eocSBGgNrprE0qfzuX64cIQ.roa (hash: fvix9xvupl9Rvu5dL1HlRrwLBuvSibe6MgecROtnqvU=) 2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: RHlh0Gp+fzBCeOqtG0gOVz7xoygWCqPodGxBY6ObSuE=) 3: nABMbHLZ29Gz3A9AUv29r1O0nBQ.roa (hash: kVMxflVivv4vP6/qDQ8pl5woFGbgCxvCg26i1ShOIdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:f1:41:8b:34:05:83:27:fd:d9:39:bd:16:ef:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6 Validity Not Before: Dec 30 23:00:37 2025 GMT Not After : Dec 31 23:00:37 2025 GMT Subject: CN=072287eb198f9efc7754bcdbee540443aca1c525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:2a:34:35:ab:a1:6a:d6:3b:21:9e:3c:42: 9a:67:ad:45:05:7e:7a:82:a1:86:c5:f5:b4:06:c9: bd:31:64:cd:b6:53:a9:a5:9c:8e:4d:b0:9e:13:91: 45:12:a0:00:5a:a3:53:ac:11:a2:d2:f3:10:0c:52: 81:fe:e8:b5:dc:92:e0:4d:eb:50:b6:1e:90:14:fd: 14:4c:c3:6c:c8:f9:c3:f3:32:63:5e:81:aa:ec:f3: 5d:ac:49:1c:af:eb:04:e4:10:34:75:46:80:e8:11: be:45:6e:89:76:7b:24:a8:40:6e:24:01:4d:e5:70: 62:ed:83:1f:95:79:ef:7b:c2:92:90:2a:15:8d:3c: 1f:cb:c1:ab:72:56:5b:40:c2:59:11:d8:95:1c:8e: 13:a0:2b:fe:ba:4c:2a:76:61:53:70:b3:cf:0e:bc: 09:f0:23:7e:b3:ae:dd:8b:36:7c:ea:21:7f:18:19: 17:b2:30:9d:a1:e2:98:dd:05:7b:81:07:9a:91:6f: 71:86:90:d1:0b:40:e3:ac:a3:c9:38:21:ed:08:de: de:12:0d:54:f5:14:05:47:9a:d2:5c:40:00:30:dc: 7a:c3:ae:79:f4:60:b4:f0:ad:3b:85:72:26:1e:53: 5c:40:95:65:61:96:29:fb:aa:f2:39:57:0a:52:30: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:22:87:EB:19:8F:9E:FC:77:54:BC:DB:EE:54:04:43:AC:A1:C5:25 X509v3 Authority Key Identifier: keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:13:5d:75:f3:22:0d:98:9e:eb:f0:c9:b7:5f:63:1e:f0:f4: 65:9a:11:9f:56:aa:0b:e3:8e:48:29:9b:3c:21:8c:d8:ad:58: 93:5f:a7:ae:54:97:f6:68:31:41:bb:0b:bb:5f:2c:9e:12:e7: cb:53:f4:33:98:12:21:34:ce:6d:92:e0:68:c5:86:0c:b7:66: 22:64:c8:13:b0:64:83:8c:f9:e5:e3:ea:b0:50:2c:c4:29:04: 74:84:39:29:37:71:bc:0e:ef:83:f4:89:81:4f:37:79:8e:79: 7f:6d:a4:38:1a:29:0c:be:89:16:59:00:e1:01:e2:c0:4c:f2: 02:71:cc:b6:78:38:55:28:d7:a1:1b:30:bd:b3:6b:0f:a1:9f: 7d:22:9c:1e:62:15:81:db:1d:52:f0:fd:5d:6b:ba:98:d3:67: 61:7e:b8:e7:cb:64:a5:9f:78:08:d9:ac:00:23:e9:d5:cb:21: b2:7d:fc:8f:e7:d1:3a:95:34:4d:b3:4a:ab:24:09:6f:7d:26: 27:f7:35:70:e6:f8:b2:51:35:cb:62:9d:23:39:7e:3a:53:1a: fe:d9:fd:fc:af:69:51:b8:a8:25:e1:b8:3f:e7:3b:dc:4f:8d: b7:32:d7:1e:a4:0b:32:61:58:c1:d9:1e:c4:ee:c0:4f:10:4a: 17:f4:60:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxffFBizQFgyf92Tm9Fu+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNWI2MjlhNDY5ODU4ODhmZjE0YmZhOWQ3ZGNiMWViNTI2 NjAwYTYwHhcNMjUxMjMwMjMwMDM3WhcNMjUxMjMxMjMwMDM3WjAzMTEwLwYDVQQD EygwNzIyODdlYjE5OGY5ZWZjNzc1NGJjZGJlZTU0MDQ0M2FjYTFjNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoEqNDWroWrWOyGePEKaZ61FBX56 gqGGxfW0Bsm9MWTNtlOppZyOTbCeE5FFEqAAWqNTrBGi0vMQDFKB/ui13JLgTetQ th6QFP0UTMNsyPnD8zJjXoGq7PNdrEkcr+sE5BA0dUaA6BG+RW6JdnskqEBuJAFN 5XBi7YMflXnve8KSkCoVjTwfy8GrclZbQMJZEdiVHI4ToCv+ukwqdmFTcLPPDrwJ 8CN+s67dizZ86iF/GBkXsjCdoeKY3QV7gQeakW9xhpDRC0DjrKPJOCHtCN7eEg1U 9RQFR5rSXEAAMNx6w6559GC08K07hXImHlNcQJVlYZYp+6ryOVcKUjB9ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcih+sZj578d1S82+5UBEOsocUlMB8GA1UdIwQY MBaAFIpbYppGmFiI/xS/qdfcsetSZgCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAt MmQ3YmFmODgyNjc0LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAtMmQ3YmFmODgyNjc0 LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhNddfMi DZie6/DJt19jHvD0ZZoRn1aqC+OOSCmbPCGM2K1Yk1+nrlSX9mgxQbsLu18snhLn y1P0M5gSITTObZLgaMWGDLdmImTIE7Bkg4z55ePqsFAsxCkEdIQ5KTdxvA7vg/SJ gU83eY55f22kOBopDL6JFlkA4QHiwEzyAnHMtng4VSjXoRswvbNrD6GffSKcHmIV gdsdUvD9XWu6mNNnYX6458tkpZ94CNmsACPp1cshsn38j+fROpU0TbNKqyQJb30m J/c1cOb4slE1y2KdIzl+OlMa/tn9/K9pUbioJeG4P+c73E+NtzLXHqQLMmFYwdke xO7ATxBKF/Rgwg== -----END CERTIFICATE-----Generated at Wed Dec 31 07:59:06 2025 by rpki-client