This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json) Hash identifier: gqJ6ZDtxETRj++96I6O7h7BbzE9bXE50mC02oE5vjUQ= Subject key identifier: FF:FF:62:DF:E0:46:44:3B:A8:19:88:26:59:97:39:46:50:5E:54:48 Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82 Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82 Certificate serial: 019B2551AB6CD658D4B5DC1DD7FBF45DCED8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft Manifest number: 0B89 Signing time: Tue 16 Dec 2025 04:01:07 +0000 Manifest this update: Tue 16 Dec 2025 04:01:07 +0000 Manifest next update: Wed 17 Dec 2025 04:01:07 +0000 Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: 5sYBAOlr1gm/uNj2/LvMBaji56hq6lk2dXjwtgae3JU=) 2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:ab:6c:d6:58:d4:b5:dc:1d:d7:fb:f4:5d:ce:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82 Validity Not Before: Dec 16 04:01:07 2025 GMT Not After : Dec 17 04:01:07 2025 GMT Subject: CN=ffff62dfe046443ba819882659973946505e5448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:d0:17:62:b9:5f:ec:f1:a3:2c:0c:f9:fe: 02:c5:79:70:e5:09:3a:d1:85:ec:2b:5a:eb:8f:b6: 11:00:e5:6e:15:c5:07:0b:73:4d:87:e6:80:c2:f1: c7:a8:66:06:b8:2d:d7:04:bc:8d:dc:5f:8c:0d:a2: 1f:52:ca:e2:5f:99:7c:ab:6d:eb:16:0a:76:a5:ee: c4:dc:99:08:31:f7:c8:f1:ca:02:f2:70:08:29:bd: 19:f0:88:15:a4:18:9a:e9:12:7e:08:e4:4b:33:ca: ce:2e:c4:35:8f:da:bf:69:4b:f8:1e:80:99:e7:f5: 0c:0c:d7:63:94:e5:91:4f:02:81:98:3b:81:b5:33: de:81:08:59:99:dc:4e:09:91:e1:50:57:3d:c4:79: 2b:1f:c1:1d:74:f6:8d:cb:15:8d:d3:1b:07:7e:91: a7:a6:fb:8c:d5:18:5e:a8:26:7f:52:8d:76:1f:ed: 6c:c3:3c:7c:d0:2c:d9:16:56:a2:da:fe:6a:2c:39: 06:0b:2a:5b:db:ec:76:98:a1:39:59:ca:b0:36:3e: 04:f8:84:01:c6:0a:ff:98:6d:ea:47:ea:db:ef:9d: f1:7a:11:ac:e9:a6:79:89:24:46:b8:82:3f:6d:eb: d2:ea:21:eb:28:3e:07:3b:24:f6:f9:c7:d6:23:76: 2a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FF:62:DF:E0:46:44:3B:A8:19:88:26:59:97:39:46:50:5E:54:48 X509v3 Authority Key Identifier: keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ff:e1:e3:b5:90:b6:ae:88:73:75:be:85:e8:5c:06:15:34: b3:7e:77:94:69:9e:17:b2:bd:e7:4b:bb:aa:fe:49:bf:8a:09: 2e:56:55:c0:d7:61:e6:3a:9d:2d:c6:ba:0e:03:e2:0c:46:5b: a4:73:76:9d:29:4f:69:8f:e1:c1:ab:e4:48:fe:05:4b:ce:ff: 07:ae:8d:7a:63:8f:45:9c:10:b2:0a:b4:52:78:ae:a1:a6:8f: ef:81:d5:a5:5d:8d:3f:05:44:cf:8b:c6:d2:84:38:e9:a1:93: 4b:8f:e7:6e:33:ac:15:36:cb:8e:59:23:7d:8d:8f:ca:94:34: d9:e0:01:ad:d4:df:f1:7d:26:80:26:e9:a1:84:cc:fc:6b:17: ad:7b:a4:e6:82:9a:17:a4:10:cd:9a:16:56:c7:5a:ec:b0:d2: 56:ca:53:e2:0a:55:bf:28:e5:b4:79:80:e4:e4:47:aa:e9:74: c9:32:21:ce:44:b1:29:a8:db:46:7f:70:6d:ec:8d:24:7d:88: 2d:3a:61:47:65:51:f7:67:ac:c7:97:04:ed:fe:a3:28:7b:34: 68:1c:40:88:16:4d:ed:17:f6:98:c8:fb:5b:e1:47:bb:f6:92: 02:9c:c9:ad:c2:fd:28:c4:04:b8:e7:01:85:01:8f:e4:77:00: d1:5b:58:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUats1ljUtdwd1/v0Xc7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YzNjOTJhNGUxZDRmZTg4NTcyYmZhNjhjOTg1YzMxZTMz NjhjODIwHhcNMjUxMjE2MDQwMTA3WhcNMjUxMjE3MDQwMTA3WjAzMTEwLwYDVQQD EyhmZmZmNjJkZmUwNDY0NDNiYTgxOTg4MjY1OTk3Mzk0NjUwNWU1NDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH3QF2K5X+zxoywM+f4CxXlw5Qk6 0YXsK1rrj7YRAOVuFcUHC3NNh+aAwvHHqGYGuC3XBLyN3F+MDaIfUsriX5l8q23r Fgp2pe7E3JkIMffI8coC8nAIKb0Z8IgVpBia6RJ+CORLM8rOLsQ1j9q/aUv4HoCZ 5/UMDNdjlOWRTwKBmDuBtTPegQhZmdxOCZHhUFc9xHkrH8EddPaNyxWN0xsHfpGn pvuM1RheqCZ/Uo12H+1swzx80CzZFlai2v5qLDkGCypb2+x2mKE5WcqwNj4E+IQB xgr/mG3qR+rb753xehGs6aZ5iSRGuII/bevS6iHrKD4HOyT2+cfWI3Yq7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP//Yt/gRkQ7qBmIJlmXOUZQXlRIMB8GA1UdIwQY MBaAFInDySpOHU/ohXK/poyYXDHjNoyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYt ZTkxZmY1ZmU2YzI2LzEvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYtZTkxZmY1ZmU2YzI2 LzEvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP//h47WQ tq6Ic3W+hehcBhU0s353lGmeF7K950u7qv5Jv4oJLlZVwNdh5jqdLca6DgPiDEZb pHN2nSlPaY/hwavkSP4FS87/B66NemOPRZwQsgq0UniuoaaP74HVpV2NPwVEz4vG 0oQ46aGTS4/nbjOsFTbLjlkjfY2PypQ02eABrdTf8X0mgCbpoYTM/GsXrXuk5oKa F6QQzZoWVsda7LDSVspT4gpVvyjltHmA5ORHqul0yTIhzkSxKajbRn9wbeyNJH2I LTphR2VR92esx5cE7f6jKHs0aBxAiBZN7Rf2mMj7W+FHu/aSApzJrcL9KMQEuOcB hQGP5HcA0VtYUg== -----END CERTIFICATE-----Generated at Tue Dec 16 11:05:24 2025 by rpki-client