This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json) Hash identifier: aNflwxddakM4bzkUSktS3Ei85J/K48C2vYjZOgMbLiI= Subject key identifier: AB:E9:AE:73:79:A9:5E:F8:9C:10:AB:2A:1E:4E:DA:79:0F:65:1D:64 Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9 Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9 Certificate serial: 019AF19AA4B5FEF1C9FC551AF8AAD00E4869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: FXy87TSnS3zZKpD3cubdEzL9JTI.roa (hash: ev8YOzfcP94Okj6loLdeokLYKFfF9CSd4o8ZPprNj7U=) 2: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: bDAcJ5zKjobVa+tNiMY7m3NO63++CGtc7Fyk5X5PvFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a4:b5:fe:f1:c9:fc:55:1a:f8:aa:d0:0e:48:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9 Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=abe9ae7379a95ef89c10ab2a1e4eda790f651d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:37:b7:3d:6a:a2:7f:bd:ff:30:e1:1a:70:ef: b3:ed:f3:2c:fc:18:eb:6a:36:6f:bb:db:f6:23:b1: 5c:ab:f5:fd:58:8e:87:96:08:33:75:68:ad:9b:88: ce:25:a9:4d:01:4b:6b:d5:3e:96:dd:b8:ee:1b:1f: e6:9f:62:b1:89:23:d0:65:51:7c:cf:91:71:1f:eb: 1f:db:5b:f3:31:7a:16:2b:fe:31:77:f1:a1:a7:a2: a3:15:6b:25:d7:65:36:39:e8:55:1d:ca:c3:95:49: 2e:53:70:3b:af:58:db:d9:9a:01:1b:36:f7:cd:bf: 27:5c:1c:b4:b3:7b:07:76:17:77:9f:f1:9e:7c:3e: e9:a3:1d:3f:b1:f7:ef:67:4e:7d:93:0d:83:57:5b: d1:ab:47:01:8b:ea:4b:eb:11:98:c7:99:40:1b:fd: af:60:df:a9:46:44:21:26:ff:8a:c9:13:4b:8c:94: 44:11:59:11:4c:46:e1:ce:71:b0:20:f3:76:91:3b: 5d:8d:d6:0b:a9:3c:62:d1:04:51:4f:76:34:d3:a4: 76:19:79:f4:23:c8:68:76:0f:36:7e:90:e7:aa:e2: 98:44:74:bf:05:4f:11:00:55:c4:01:b8:59:02:57: 8c:69:bd:8f:92:db:3b:ad:ea:f4:6f:5b:da:40:da: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E9:AE:73:79:A9:5E:F8:9C:10:AB:2A:1E:4E:DA:79:0F:65:1D:64 X509v3 Authority Key Identifier: keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:49:50:8a:de:ff:5e:f7:41:01:24:f0:52:4b:a9:e4:76:56: d2:65:c5:73:52:06:04:44:ea:0b:7c:92:4a:85:49:a3:80:fe: ed:1e:ee:4a:0e:1f:33:32:f8:a8:a4:66:69:d2:ad:ea:3a:01: 9a:07:7c:55:6f:06:75:50:d8:e0:fc:c6:9a:bd:8e:ee:50:b8: 76:36:36:70:fb:37:c7:b0:90:b7:db:e1:59:74:08:5e:b8:6f: 5c:08:1e:cd:f9:bc:99:b9:a5:f3:37:14:47:ad:43:8e:a7:31: a7:2b:74:23:08:e4:a6:3e:b2:c9:a3:cd:02:ba:4d:11:5e:49: 28:f5:a5:66:a2:06:7b:d6:d5:2b:7e:ff:75:d7:c7:4a:bc:80: 04:ae:03:a6:a7:64:f8:45:4b:c3:54:f2:40:a7:ff:22:27:e6: 6c:34:72:94:bf:a9:d1:73:eb:40:0c:61:d5:21:9a:1b:f8:bb: 1f:bf:47:87:79:fa:c0:ec:9a:a4:cd:15:b5:d4:6b:4a:21:e6: 5c:91:5a:3c:db:58:09:e0:43:2c:90:ef:3b:81:2f:e3:76:d6: ab:ff:47:49:17:1a:3a:ab:80:4b:35:4d:d6:8e:88:85:c2:56: ba:4c:50:9f:ed:30:40:d6:22:3e:5c:6c:d6:ee:5e:a2:b5:0a: 22:67:91:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqS1/vHJ/FUa+KrQDkhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMjY0ZDUxYTExMmQwYmMyMmNlYTczMTRjYjA2Y2Y1YTFh ZTMzZTkwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD EyhhYmU5YWU3Mzc5YTk1ZWY4OWMxMGFiMmExZTRlZGE3OTBmNjUxZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhje3PWqif73/MOEacO+z7fMs/Bjr ajZvu9v2I7Fcq/X9WI6HlggzdWitm4jOJalNAUtr1T6W3bjuGx/mn2KxiSPQZVF8 z5FxH+sf21vzMXoWK/4xd/Ghp6KjFWsl12U2OehVHcrDlUkuU3A7r1jb2ZoBGzb3 zb8nXBy0s3sHdhd3n/GefD7pox0/sffvZ059kw2DV1vRq0cBi+pL6xGYx5lAG/2v YN+pRkQhJv+KyRNLjJREEVkRTEbhznGwIPN2kTtdjdYLqTxi0QRRT3Y006R2GXn0 I8hodg82fpDnquKYRHS/BU8RAFXEAbhZAleMab2Pkts7rer0b1vaQNpy6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvprnN5qV74nBCrKh5O2nkPZR1kMB8GA1UdIwQY MBaAFCAmTVGhEtC8Is6nMUywbPWhrjPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAt NjU4MTIwYWU2OGUxLzEvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84ODc4ZDktNGYxYy00MjZiLThhNDAtNjU4MTIwYWU2OGUx LzEvSUNaTlVhRVMwTHdpenFjeFRMQnM5YUd1TS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0lQit7/ XvdBASTwUkup5HZW0mXFc1IGBETqC3ySSoVJo4D+7R7uSg4fMzL4qKRmadKt6joB mgd8VW8GdVDY4PzGmr2O7lC4djY2cPs3x7CQt9vhWXQIXrhvXAgezfm8mbml8zcU R61Djqcxpyt0Iwjkpj6yyaPNArpNEV5JKPWlZqIGe9bVK37/ddfHSryABK4Dpqdk +EVLw1TyQKf/IifmbDRylL+p0XPrQAxh1SGaG/i7H79Hh3n6wOyapM0VtdRrSiHm XJFaPNtYCeBDLJDvO4Ev43bWq/9HSRcaOquASzVN1o6IhcJWukxQn+0wQNYiPlxs 1u5eorUKImeRrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:45 2025 by rpki-client