This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft File: icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json) Hash identifier: 8PQnoJvf8geHV1enKsY21iDUd3NSZN0YvxogaW7W0FM= Subject key identifier: 62:F1:9E:2E:A0:35:CA:18:5E:8A:4B:EB:D4:2F:F4:33:F4:B4:1C:D8 Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a Certificate serial: 019AF12D7ADB99543DA7A6C73B5D463EBFBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:20 +0000 Manifest this update: Sat 06 Dec 2025 01:01:20 +0000 Manifest next update: Sun 07 Dec 2025 01:01:20 +0000 Files and hashes: 1: LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa (hash: 7V26VUxl5fmzKeu8Z1l4PyuWNrOPpAbh2ctgbcmvfp8=) 2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: oJQMGJIgdXpqTvY+H3OjW2MjZziYXITsBRJsVi9GvzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7a:db:99:54:3d:a7:a6:c7:3b:5d:46:3e:bf:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a Validity Not Before: Dec 6 01:01:20 2025 GMT Not After : Dec 7 01:01:20 2025 GMT Subject: CN=62f19e2ea035ca185e8a4bebd42ff433f4b41cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a5:0a:2b:3b:1c:03:cd:20:c1:84:44:ec:89: 58:03:1f:24:03:47:bc:2a:fe:50:30:67:7b:0c:7b: 68:d0:48:df:f1:99:22:04:38:bf:35:fc:df:20:06: ae:68:dd:b4:94:7b:63:c9:83:c4:0d:19:1d:7b:f1: 46:94:d5:b5:94:ad:22:26:b0:1b:e6:0c:de:c7:8d: 9a:30:14:bf:e1:78:fa:72:66:6c:b6:ef:60:7f:0c: 45:51:31:ac:42:9f:9b:61:9e:f1:8e:29:16:22:de: e3:62:d0:3c:ad:d9:6e:04:bd:08:1e:31:f6:e6:d4: cc:12:cc:d6:b2:8e:a8:7f:2d:6a:d7:d3:2d:58:ca: f2:6d:37:fa:37:8f:91:59:9c:f3:3c:c8:8e:41:42: b4:44:c2:23:3e:82:49:aa:22:30:23:ec:44:a8:58: da:9c:5a:5d:cd:e1:59:3f:48:02:8d:b6:c1:1a:17: cb:62:c1:c8:a1:fb:da:da:fe:17:fc:66:b8:e5:1e: 1e:af:c1:db:a7:9b:7e:9d:29:a9:25:06:33:c7:e0: b0:46:2c:94:ee:5d:ea:c8:9a:de:57:46:a5:d6:0c: 75:aa:84:ca:94:e4:e4:0b:9a:3d:d2:40:a7:2d:5e: c3:a3:50:4f:8b:59:09:31:b0:98:f1:7e:23:14:32: 90:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F1:9E:2E:A0:35:CA:18:5E:8A:4B:EB:D4:2F:F4:33:F4:B4:1C:D8 X509v3 Authority Key Identifier: keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:82:4d:19:60:3a:82:89:ae:3e:a6:59:0d:a0:ce:75:86:0b: b2:57:a4:89:45:37:17:4e:bb:b8:41:7f:bd:14:2e:f1:05:71: 36:79:7d:85:78:b5:54:bb:4b:e9:2e:55:f8:1e:bd:c0:93:53: c4:62:98:e1:96:83:65:bd:e7:a4:b5:4b:16:38:0f:1f:7c:40: 1d:f1:64:94:80:e8:2e:08:07:77:1c:97:11:26:99:f9:1b:58: 97:96:1d:27:34:64:13:02:a3:31:a5:d6:9c:c0:d9:a1:fe:84: 10:1c:bc:63:7d:2e:93:72:85:42:5a:94:fd:6b:df:54:aa:4a: 5a:25:d3:43:1f:55:5e:8c:69:97:6e:df:c5:bb:5a:75:a2:9d: f1:ec:3d:eb:d3:7b:48:b2:83:48:0b:30:88:1f:3d:b1:9f:4b: 96:48:3e:c8:f6:d8:72:12:25:f6:e4:30:3e:d0:a9:81:6f:35: 92:57:0d:ea:2f:af:8a:0a:78:b5:7d:15:2c:6a:11:ef:57:b3: 89:3c:4d:30:e1:8c:52:d6:25:3f:4f:29:a0:79:88:60:e9:6c: fb:a6:a3:28:99:b4:c2:cc:55:5b:f8:b4:8c:b9:5e:60:5d:46: 29:84:cc:94:8a:25:2b:81:b8:5c:92:a5:80:4d:e2:06:4f:3d: c1:5c:4e:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXrbmVQ9p6bHO11GPr+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YzMxNzcwZGI3Mjk4OTVjNmMzZmQ5MzM3NWU1Y2Q1NjEz ZWYzNmEwHhcNMjUxMjA2MDEwMTIwWhcNMjUxMjA3MDEwMTIwWjAzMTEwLwYDVQQD Eyg2MmYxOWUyZWEwMzVjYTE4NWU4YTRiZWJkNDJmZjQzM2Y0YjQxY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qUKKzscA80gwYRE7IlYAx8kA0e8 Kv5QMGd7DHto0Ejf8ZkiBDi/NfzfIAauaN20lHtjyYPEDRkde/FGlNW1lK0iJrAb 5gzex42aMBS/4Xj6cmZstu9gfwxFUTGsQp+bYZ7xjikWIt7jYtA8rdluBL0IHjH2 5tTMEszWso6ofy1q19MtWMrybTf6N4+RWZzzPMiOQUK0RMIjPoJJqiIwI+xEqFja nFpdzeFZP0gCjbbBGhfLYsHIofva2v4X/Ga45R4er8Hbp5t+nSmpJQYzx+CwRiyU 7l3qyJreV0al1gx1qoTKlOTkC5o90kCnLV7Do1BPi1kJMbCY8X4jFDKQgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLxni6gNcoYXopL69Qv9DP0tBzYMB8GA1UdIwQY MBaAFInDF3DbcpiVxsP9kzdeXNVhPvNqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWNNWGNOdHltSlhHd18yVE4xNWMxV0UtODJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi81N2I3YTMtYTczOS00MjYyLThiMDEt MGMzZDRlMzFlYmE0LzEvaWNNWGNOdHltSlhHd18yVE4xNWMxV0UtODJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi81N2I3YTMtYTczOS00MjYyLThiMDEtMGMzZDRlMzFlYmE0 LzEvaWNNWGNOdHltSlhHd18yVE4xNWMxV0UtODJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoJNGWA6 gomuPqZZDaDOdYYLslekiUU3F067uEF/vRQu8QVxNnl9hXi1VLtL6S5V+B69wJNT xGKY4ZaDZb3npLVLFjgPH3xAHfFklIDoLggHdxyXESaZ+RtYl5YdJzRkEwKjMaXW nMDZof6EEBy8Y30uk3KFQlqU/WvfVKpKWiXTQx9VXoxpl27fxbtadaKd8ew969N7 SLKDSAswiB89sZ9Llkg+yPbYchIl9uQwPtCpgW81klcN6i+vigp4tX0VLGoR71ez iTxNMOGMUtYlP08poHmIYOls+6ajKJm0wsxVW/i0jLleYF1GKYTMlIolK4G4XJKl gE3iBk89wVxO1g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:03 2025 by rpki-client