This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json) Hash identifier: S4c94Q7jI//nNI45NHln/IrUd5i+E1HRurXI+VoovdY= Subject key identifier: C9:04:38:BF:53:CF:59:6C:C7:24:80:B3:A6:04:87:CC:63:1B:01:57 Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92 Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92 Certificate serial: 019AF19B76273DC9A0E4C57A2AA2F4376332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: 745x39IaKKbeM9M_OPciAoFxiI4.roa (hash: rIEFd72FIecG2+TT+EkabaQ2rf6+UODC9a0hMUMdVO0=) 2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: B6z3N5vHPiH3tbysSbLQX/5WhVS+q/IFC6jHgUIoIQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:76:27:3d:c9:a0:e4:c5:7a:2a:a2:f4:37:63:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92 Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=c90438bf53cf596cc72480b3a60487cc631b0157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:0f:55:e8:be:71:91:70:12:b4:92:73:3c: 43:4f:68:5a:57:19:5f:0a:73:5c:5c:8d:69:af:5f: b5:2f:4b:d0:7d:31:b5:c2:f4:2d:e2:c3:c1:3c:0e: 50:21:16:8e:b3:54:ef:f5:62:11:aa:22:99:a1:60: 1a:01:b8:19:9b:56:6a:f2:bb:4f:54:ab:8a:d4:29: cc:d0:24:9c:8f:11:db:57:8f:04:be:4a:ea:ac:d7: bb:61:fe:5d:5f:d3:28:ea:05:cd:66:0e:9b:bc:ca: 8d:a4:5f:45:0f:e1:15:6e:c9:a4:84:83:eb:a1:8f: 82:48:df:51:4a:14:8b:06:a7:59:3a:97:94:ba:1e: 4f:3d:69:da:50:e1:74:18:01:67:0f:c0:98:cf:c4: 16:26:8a:80:15:da:a0:d5:94:46:70:bc:0d:0d:ad: 8a:c2:cc:c6:ea:08:35:2f:cc:08:fe:fe:e6:1e:d3: c3:02:04:55:9f:6a:0e:aa:e6:1c:63:f1:6a:80:79: 2b:5b:13:2a:38:87:90:34:ea:b7:f2:b4:8d:7f:d9: c4:48:c1:01:15:54:42:f2:e0:90:9f:ad:49:b2:b2: 21:87:43:c3:0a:bc:7b:b6:ba:20:62:0a:d7:05:55: 96:e2:30:cc:42:82:08:fd:6d:da:cd:4a:50:2b:00: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:04:38:BF:53:CF:59:6C:C7:24:80:B3:A6:04:87:CC:63:1B:01:57 X509v3 Authority Key Identifier: keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:22:99:2b:97:31:94:50:b2:4a:a3:01:52:c9:e7:69:08:3d: 2e:22:8f:4f:a5:68:5f:0e:de:fe:f2:a6:1e:4e:0e:af:11:b9: bd:c1:fb:37:97:53:ed:55:b7:a8:99:8f:10:8e:85:f8:58:2d: 18:2d:76:1f:6c:b2:47:1d:32:51:02:95:c9:4b:97:69:63:98: fa:61:12:3d:69:fb:97:46:a9:07:d5:db:3f:e8:31:19:40:72: 63:74:b4:48:f2:65:e4:e9:93:e2:20:2d:f2:05:a5:63:64:a7: 2e:a0:46:e9:a4:16:66:ab:d7:e8:7b:aa:b1:4d:92:d9:a3:e2: 41:5c:28:a2:5b:c9:15:15:0e:fd:de:91:59:03:87:09:35:a5: f9:fd:67:fc:5c:da:c8:5d:43:d5:38:18:8c:c0:6c:49:fb:77: a1:c1:42:cd:fb:bf:22:88:0f:c7:6f:ba:30:cd:0e:42:89:2a: 46:e2:70:8f:35:8f:b6:a9:46:35:00:b5:e6:27:7b:70:23:cb: 1b:36:2c:e2:40:7b:e7:dd:3e:82:24:3e:10:c9:b1:b5:49:06: 2a:70:1c:b0:af:ad:95:db:78:ca:9e:fc:85:09:ca:c2:d7:c1: 16:b0:55:b5:0f:0c:7a:26:a4:08:ac:2e:f2:b9:1d:04:7b:63: 1c:e7:9b:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3YnPcmg5MV6KqL0N2MyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzczYTVkOGVjNjNiZWQ2NThhMzhmNWMyNmYxOTFmZGQ3 NGRmOTIwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD EyhjOTA0MzhiZjUzY2Y1OTZjYzcyNDgwYjNhNjA0ODdjYzYzMWIwMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfYPVei+cZFwErSSczxDT2haVxlf CnNcXI1pr1+1L0vQfTG1wvQt4sPBPA5QIRaOs1Tv9WIRqiKZoWAaAbgZm1Zq8rtP VKuK1CnM0CScjxHbV48EvkrqrNe7Yf5dX9Mo6gXNZg6bvMqNpF9FD+EVbsmkhIPr oY+CSN9RShSLBqdZOpeUuh5PPWnaUOF0GAFnD8CYz8QWJoqAFdqg1ZRGcLwNDa2K wszG6gg1L8wI/v7mHtPDAgRVn2oOquYcY/FqgHkrWxMqOIeQNOq38rSNf9nESMEB FVRC8uCQn61JsrIhh0PDCrx7trogYgrXBVWW4jDMQoII/W3azUpQKwAF7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkEOL9Tz1lsxySAs6YEh8xjGwFXMB8GA1UdIwQY MBaAFCHHOl2OxjvtZYo49cJvGR/ddN+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGIt ZmQxMjBjMzFkYTcyLzEvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGItZmQxMjBjMzFkYTcy LzEvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQiKZK5cx lFCySqMBUsnnaQg9LiKPT6VoXw7e/vKmHk4OrxG5vcH7N5dT7VW3qJmPEI6F+Fgt GC12H2yyRx0yUQKVyUuXaWOY+mESPWn7l0apB9XbP+gxGUByY3S0SPJl5OmT4iAt 8gWlY2SnLqBG6aQWZqvX6HuqsU2S2aPiQVwoolvJFRUO/d6RWQOHCTWl+f1n/Fza yF1D1TgYjMBsSft3ocFCzfu/IogPx2+6MM0OQokqRuJwjzWPtqlGNQC15id7cCPL GzYs4kB7590+giQ+EMmxtUkGKnAcsK+tldt4yp78hQnKwtfBFrBVtQ8MeiakCKwu 8rkdBHtjHOebKg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:01 2025 by rpki-client