This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft File: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json) Hash identifier: mhWnhiqrQFMmaYvljbCbM15gej4FixP8nC8HNxV33WU= Subject key identifier: 52:C0:F2:41:57:3A:62:FD:9C:CC:13:93:70:13:9A:C3:99:FE:EF:BB Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Certificate serial: 019AF2091CEBA3B5C70AAF6880F4422C783A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft Manifest number: 0EE7 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: 1aXSgr_gUgovXfJiITFePiXzxSk.roa (hash: jkxbT1LZqZ8DIR9TrEhNrVWEu3vyrY3VEx/71A/Vpxo=) 2: 9bZMaVRDUPty_7efLT2YpkpIYcM.roa (hash: CtsPPucmvohErAHToYEeV/HheWSPpHxQEHc0Z1mOfCU=) 3: AtctRtEqNWKPB5rlQKlPqC6yWDs.roa (hash: 05XetyyHEDIPnW6uLoBtl5Z9uPB/DAO88wvWzPJ/MPs=) 4: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: AQ6UH3qzTOI3WW+7tw4s/9juOqdDvuYg5uTNHPDjUK8=) 5: PSBx1Ap1dSVwu4S3zItuhXFXT84.roa (hash: BJW2moxRlz3fWDKj7aaF6fzBur3RzPQUthWd7EvMjfQ=) 6: Yv5Vb1UYXxXLpSQFLwUNvoBL1uk.roa (hash: zQenlhAbszJDRqh2xIFTp2RhN0nwTs4w2oT1T/Kp9dM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1c:eb:a3:b5:c7:0a:af:68:80:f4:42:2c:78:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=52c0f241573a62fd9ccc139370139ac399feefbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:92:a6:8a:34:17:aa:60:83:17:da:3f:f2: 1f:28:a6:aa:b8:d5:84:48:6a:37:19:6d:11:42:eb: 60:47:3d:05:81:19:48:d6:ba:67:6b:92:e6:ec:94: b7:cb:a3:cd:d9:b8:8b:db:b7:7f:df:f6:b5:bf:f9: 4f:59:a7:8e:f2:61:bf:21:ce:a5:a2:71:c3:e5:a4: f9:12:bd:fc:46:82:7e:10:73:7f:80:df:5e:2b:0d: 1c:9c:58:b4:39:64:ce:bc:a1:ba:89:3c:d7:83:44: fc:af:20:33:82:37:89:95:97:3d:c5:bb:7d:69:cd: 17:41:80:5e:6c:80:56:aa:39:00:58:1d:ba:73:11: 30:6d:fd:31:a6:16:31:f0:e1:68:34:9d:f0:bc:a9: 10:88:64:fb:1d:b3:39:96:e7:61:96:c8:28:d8:7b: 7d:21:90:73:00:b8:71:05:f3:f2:0b:69:42:8f:9b: ef:5a:6f:c3:07:d4:44:42:1b:09:df:0d:c8:d0:a3: fa:66:89:24:29:2e:e6:91:34:b5:83:fa:8f:5e:01: c5:88:ef:cf:aa:6a:57:c0:16:2e:82:17:13:05:df: a2:c6:74:75:7e:47:37:2e:a9:2c:15:9b:43:e9:10: e7:be:b3:98:e2:85:0a:5d:2b:bf:f6:72:72:8c:67: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C0:F2:41:57:3A:62:FD:9C:CC:13:93:70:13:9A:C3:99:FE:EF:BB X509v3 Authority Key Identifier: keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ed:0a:6d:f7:a2:5e:38:d6:54:cd:34:b6:0a:1f:23:6c:37: f2:57:95:12:7f:c8:c9:c3:ce:62:a5:cc:33:0e:64:7a:c9:1d: fa:54:14:a5:56:d0:3c:67:1a:17:6c:c2:f8:5c:fb:04:a8:e7: de:26:06:d7:af:f4:bd:75:c4:e8:49:3d:55:61:97:22:a8:11: 17:97:90:0d:9c:0c:0a:86:66:78:5e:cb:1f:b7:f7:c0:b9:5e: 74:05:e0:5f:b8:4e:ab:3a:06:c0:7a:52:a8:17:ef:f7:81:8e: a4:56:fe:a2:9d:6c:83:5b:b4:68:86:a7:ab:6d:18:f2:82:48: 32:a5:9c:57:69:86:41:7e:9d:af:00:0b:d0:4d:a0:bf:1b:9a: 79:0e:f2:f8:ef:38:25:33:5d:fc:bc:81:dd:2e:66:0f:92:96: d0:0d:0c:ba:a4:84:2e:c6:d9:d8:5f:21:4f:b8:b8:50:09:94: 16:3d:c5:55:05:ff:b5:4b:e3:3f:ae:20:55:99:1f:0b:29:24: af:cf:8f:87:28:3e:71:72:0d:d0:f5:04:e9:54:f1:1e:27:9b: 2d:be:f4:00:a5:21:64:93:d8:d0:45:29:6f:7a:7a:b8:38:22: 16:94:06:98:27:df:90:ca:4b:5b:b5:13:87:36:66:9a:ae:d1: 92:cc:38:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRzro7XHCq9ogPRCLHg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxY2IyYWMzNzdmYzYwM2Y5NWZhZWNjNTRhYzdkNTkwZjJj YzMxOWQwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD Eyg1MmMwZjI0MTU3M2E2MmZkOWNjYzEzOTM3MDEzOWFjMzk5ZmVlZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7CSpoo0F6pggxfaP/IfKKaquNWE SGo3GW0RQutgRz0FgRlI1rpna5Lm7JS3y6PN2biL27d/3/a1v/lPWaeO8mG/Ic6l onHD5aT5Er38RoJ+EHN/gN9eKw0cnFi0OWTOvKG6iTzXg0T8ryAzgjeJlZc9xbt9 ac0XQYBebIBWqjkAWB26cxEwbf0xphYx8OFoNJ3wvKkQiGT7HbM5ludhlsgo2Ht9 IZBzALhxBfPyC2lCj5vvWm/DB9REQhsJ3w3I0KP6ZokkKS7mkTS1g/qPXgHFiO/P qmpXwBYughcTBd+ixnR1fkc3LqksFZtD6RDnvrOY4oUKXSu/9nJyjGcRTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLA8kFXOmL9nMwTk3ATmsOZ/u+7MB8GA1UdIwQY MBaAFCHLKsN3/GA/lfrsxUrH1ZDyzDGdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUt ZmI0MGQ2ZGEyNDY4LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUtZmI0MGQ2ZGEyNDY4 LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOu0Kbfei XjjWVM00tgofI2w38leVEn/IycPOYqXMMw5keskd+lQUpVbQPGcaF2zC+Fz7BKjn 3iYG16/0vXXE6Ek9VWGXIqgRF5eQDZwMCoZmeF7LH7f3wLledAXgX7hOqzoGwHpS qBfv94GOpFb+op1sg1u0aIanq20Y8oJIMqWcV2mGQX6drwAL0E2gvxuaeQ7y+O84 JTNd/LyB3S5mD5KW0A0MuqSELsbZ2F8hT7i4UAmUFj3FVQX/tUvjP64gVZkfCykk r8+Phyg+cXIN0PUE6VTxHiebLb70AKUhZJPY0EUpb3p6uDgiFpQGmCffkMpLW7UT hzZmmq7Rksw43g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:30 2025 by rpki-client