This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft File: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json) Hash identifier: SWZ3lGpAYSNKcr0a1g5Gr8QcgLGwzG55f73CN2qrs2I= Subject key identifier: A9:92:23:13:6E:7D:F4:9F:9B:E1:A1:20:8E:D9:7E:4D:B6:D4:A1:EE Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Certificate serial: 019B3B6B34DCA4A6353221775384611C62A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft Manifest number: 0F0D Signing time: Sat 20 Dec 2025 11:00:40 +0000 Manifest this update: Sat 20 Dec 2025 11:00:40 +0000 Manifest next update: Sun 21 Dec 2025 11:00:40 +0000 Files and hashes: 1: 1aXSgr_gUgovXfJiITFePiXzxSk.roa (hash: jkxbT1LZqZ8DIR9TrEhNrVWEu3vyrY3VEx/71A/Vpxo=) 2: 9bZMaVRDUPty_7efLT2YpkpIYcM.roa (hash: CtsPPucmvohErAHToYEeV/HheWSPpHxQEHc0Z1mOfCU=) 3: AtctRtEqNWKPB5rlQKlPqC6yWDs.roa (hash: 05XetyyHEDIPnW6uLoBtl5Z9uPB/DAO88wvWzPJ/MPs=) 4: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: AIGCxSV6bEUqnH0nd3KqoLA85Jbu3WXAP85kiSs9qWE=) 5: PSBx1Ap1dSVwu4S3zItuhXFXT84.roa (hash: BJW2moxRlz3fWDKj7aaF6fzBur3RzPQUthWd7EvMjfQ=) 6: Yv5Vb1UYXxXLpSQFLwUNvoBL1uk.roa (hash: zQenlhAbszJDRqh2xIFTp2RhN0nwTs4w2oT1T/Kp9dM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:34:dc:a4:a6:35:32:21:77:53:84:61:1c:62:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d Validity Not Before: Dec 20 11:00:40 2025 GMT Not After : Dec 21 11:00:40 2025 GMT Subject: CN=a99223136e7df49f9be1a1208ed97e4db6d4a1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3d:82:92:d8:9c:e8:b6:58:2b:21:c7:78:ac: b8:a5:47:9d:98:10:1f:ca:84:a3:49:9c:d2:10:2d: 89:27:ad:62:f9:be:f9:3c:e4:39:f4:d1:4d:d7:84: 6d:e9:2c:fc:05:35:aa:e7:0d:de:e2:10:d0:98:1a: dd:3a:28:74:1f:12:9e:13:d8:3c:fa:ca:9e:a1:31: 49:87:ba:65:7c:86:91:70:c4:43:ca:22:f5:38:f5: 60:97:fb:70:8c:2b:2e:a4:fb:9d:98:29:83:81:b2: 42:15:9a:9b:11:5d:4a:75:bb:58:b9:b0:f0:f2:1b: 05:dd:4a:5d:76:fd:e8:e6:32:7b:42:85:af:ef:1d: fb:45:aa:78:b4:6e:fa:cb:7d:ad:bc:71:28:58:18: 4b:b8:f5:6d:59:9b:6b:30:64:f1:32:f4:57:72:14: d2:a6:1c:48:c1:58:c4:89:c2:24:7a:76:4d:24:51: 18:78:2e:5f:05:80:91:4c:98:5e:45:b7:05:3f:fe: 1f:0d:eb:59:3d:a6:0f:99:69:ca:fe:d3:d2:0f:e4: bb:6f:8a:9b:45:fe:63:91:a2:5b:a1:0a:35:49:34: 61:3c:1b:0c:df:0d:d2:02:29:00:10:7f:47:ba:b4: 32:08:27:ff:5d:d0:99:67:03:b3:a5:9d:41:11:0b: 59:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:92:23:13:6E:7D:F4:9F:9B:E1:A1:20:8E:D9:7E:4D:B6:D4:A1:EE X509v3 Authority Key Identifier: keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:49:a5:7b:ca:de:ee:af:4f:ed:dc:3e:26:66:43:e7:b9:1a: 27:eb:f1:3d:c1:be:c4:e8:ce:91:d1:26:10:bd:d9:fe:c5:55: d0:4e:f1:1d:9e:00:94:76:c1:83:ed:a5:e2:1b:67:37:e2:ef: 50:ff:35:42:c3:8f:da:dc:b0:df:89:b7:ad:e3:2b:1c:ac:85: 95:60:e4:78:54:9f:6d:e4:92:22:d3:69:e3:71:a6:9b:f6:1e: 7d:a1:59:84:a0:63:33:5d:2e:07:40:ae:cd:85:41:e2:1c:19: 22:66:8b:0f:3f:f4:40:41:05:fb:ea:18:8a:08:44:a0:1a:45: 53:ec:a5:dc:64:29:fa:de:fe:e0:43:9e:00:dc:a9:60:66:06: 4e:c3:d9:03:93:c9:c9:e0:96:f6:2d:2a:e2:a3:34:fb:23:f9: ba:65:60:e9:cf:3c:50:64:04:42:82:cf:6b:f6:e2:a6:a7:b7: 40:4e:6f:92:bb:e9:86:f8:d7:dd:62:35:5a:ff:94:db:9e:56: 80:bd:e2:65:9d:96:73:18:90:69:a4:6a:66:f4:82:41:b3:6e: b0:28:12:0f:28:99:41:4e:dd:82:8f:67:5a:f2:2e:a4:70:49: d1:91:a0:da:fe:4c:7e:68:92:a7:28:e1:77:a4:a6:f2:93:d5: c2:39:13:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7azTcpKY1MiF3U4RhHGKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxY2IyYWMzNzdmYzYwM2Y5NWZhZWNjNTRhYzdkNTkwZjJj YzMxOWQwHhcNMjUxMjIwMTEwMDQwWhcNMjUxMjIxMTEwMDQwWjAzMTEwLwYDVQQD EyhhOTkyMjMxMzZlN2RmNDlmOWJlMWExMjA4ZWQ5N2U0ZGI2ZDRhMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT2Cktic6LZYKyHHeKy4pUedmBAf yoSjSZzSEC2JJ61i+b75POQ59NFN14Rt6Sz8BTWq5w3e4hDQmBrdOih0HxKeE9g8 +sqeoTFJh7plfIaRcMRDyiL1OPVgl/twjCsupPudmCmDgbJCFZqbEV1KdbtYubDw 8hsF3Upddv3o5jJ7QoWv7x37Rap4tG76y32tvHEoWBhLuPVtWZtrMGTxMvRXchTS phxIwVjEicIkenZNJFEYeC5fBYCRTJheRbcFP/4fDetZPaYPmWnK/tPSD+S7b4qb Rf5jkaJboQo1STRhPBsM3w3SAikAEH9HurQyCCf/XdCZZwOzpZ1BEQtZBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmSIxNuffSfm+GhII7Zfk221KHuMB8GA1UdIwQY MBaAFCHLKsN3/GA/lfrsxUrH1ZDyzDGdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUt ZmI0MGQ2ZGEyNDY4LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUtZmI0MGQ2ZGEyNDY4 LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEmle8re 7q9P7dw+JmZD57kaJ+vxPcG+xOjOkdEmEL3Z/sVV0E7xHZ4AlHbBg+2l4htnN+Lv UP81QsOP2tyw34m3reMrHKyFlWDkeFSfbeSSItNp43Gmm/YefaFZhKBjM10uB0Cu zYVB4hwZImaLDz/0QEEF++oYighEoBpFU+yl3GQp+t7+4EOeANypYGYGTsPZA5PJ yeCW9i0q4qM0+yP5umVg6c88UGQEQoLPa/bipqe3QE5vkrvphvjX3WI1Wv+U255W gL3iZZ2WcxiQaaRqZvSCQbNusCgSDyiZQU7dgo9nWvIupHBJ0ZGg2v5MfmiSpyjh d6Sm8pPVwjkTMg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:48:30 2025 by rpki-client