This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft File: icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json) Hash identifier: wHevg/ZFTnS73+F3mglwEULY7b4ZeRr3eg3Ho3iRe7A= Subject key identifier: 5C:29:D6:61:DF:57:9E:B5:5D:AE:8D:1D:5E:15:79:E4:AD:08:78:9C Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a Certificate serial: 019B405BE1BACDA6D74197C2AC7E52C4B87A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 10:02:01 +0000 Manifest this update: Sun 21 Dec 2025 10:02:01 +0000 Manifest next update: Mon 22 Dec 2025 10:02:01 +0000 Files and hashes: 1: LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa (hash: 7V26VUxl5fmzKeu8Z1l4PyuWNrOPpAbh2ctgbcmvfp8=) 2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: jhy0rpYj6wLGnE6vR7Zmz6L5glJ7/U6xnaNwUVasaYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:e1:ba:cd:a6:d7:41:97:c2:ac:7e:52:c4:b8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a Validity Not Before: Dec 21 10:02:01 2025 GMT Not After : Dec 22 10:02:01 2025 GMT Subject: CN=5c29d661df579eb55dae8d1d5e1579e4ad08789c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:b8:ba:c5:40:d6:15:cc:d8:b9:4c:39:ca: 3f:15:2c:97:8b:cc:06:92:cd:53:e1:46:60:77:ea: 3e:f2:8a:c5:8f:2d:50:d9:92:ce:2c:0a:c6:57:ee: f5:c2:26:b1:09:fd:e4:96:18:97:b1:09:42:76:bb: 87:54:23:fe:a4:31:de:b1:bb:99:8b:38:21:4c:d4: c4:3a:64:d9:60:0e:41:0f:97:76:f5:bb:d3:07:e2: a2:2a:39:0d:c6:c0:2f:62:11:2e:04:80:0e:ef:f7: ac:04:70:97:34:53:36:af:ff:e6:9b:b7:ce:da:8a: 55:43:73:31:9f:69:bd:fa:c9:6a:b9:20:52:8c:0e: 56:d4:07:0c:c8:25:7c:3c:da:ec:b0:70:5b:53:3b: d9:14:ed:f5:8e:7d:58:6c:8b:7d:23:d5:70:6a:76: 32:f7:ed:87:e8:a0:6d:67:f1:90:31:af:e9:19:08: e8:27:87:9b:bb:23:61:1c:19:70:3b:b7:e9:85:4a: c2:69:9d:9f:c0:9c:06:b4:fd:4a:94:8c:a9:a6:d3: 87:2e:f6:2f:3f:18:0f:a1:62:bf:ec:b1:a7:c3:21: c9:ba:1b:6c:17:e6:b3:1e:14:2a:05:2d:c2:a2:5d: 16:b3:18:cb:ec:e9:6a:81:8a:59:89:6d:b9:bc:99: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:29:D6:61:DF:57:9E:B5:5D:AE:8D:1D:5E:15:79:E4:AD:08:78:9C X509v3 Authority Key Identifier: keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:6f:09:a9:4e:27:52:ef:7b:c1:ba:97:ee:bc:eb:92:c2:b6: 4d:70:2b:56:bd:b0:f1:ba:ac:3a:a2:e3:1e:b4:24:cf:b9:23: b7:dd:f8:1f:0b:c3:f3:d9:20:ae:5e:e3:16:69:a8:35:97:f1: a9:bf:89:ee:ae:83:eb:c8:44:48:57:b5:3f:93:bb:ec:ef:5b: 43:7e:7e:03:8e:5d:a2:fc:ac:a5:e2:b0:d6:9a:8b:8e:04:05: de:93:22:6b:b4:f4:58:90:1d:4e:17:8c:a5:b1:4d:03:7f:b2: 97:cc:41:53:49:af:6e:23:a1:72:44:82:33:b7:b9:ef:af:00: a9:f8:8f:92:ec:da:6c:07:1f:df:8e:04:51:27:50:f9:83:35: 07:dc:84:7b:29:1f:f2:47:a4:d2:b7:95:62:cf:a2:ce:74:55: 99:2a:13:69:cf:e9:f3:c7:3f:47:31:ce:7b:27:63:7c:8d:a7: b3:40:32:fd:5c:9e:71:4e:34:0c:5a:53:f2:0d:7f:eb:52:cd: bb:4a:55:05:9c:ae:9d:f2:86:90:03:f4:35:51:23:eb:1e:ca: ee:14:b6:37:6f:bd:50:98:ad:57:58:d8:0b:83:67:50:c6:59: 07:1d:39:40:69:3c:b9:7d:c9:08:f2:ae:10:94:8f:f7:48:2c: b3:76:c8:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW+G6zabXQZfCrH5SxLh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YzMxNzcwZGI3Mjk4OTVjNmMzZmQ5MzM3NWU1Y2Q1NjEz ZWYzNmEwHhcNMjUxMjIxMTAwMjAxWhcNMjUxMjIyMTAwMjAxWjAzMTEwLwYDVQQD Eyg1YzI5ZDY2MWRmNTc5ZWI1NWRhZThkMWQ1ZTE1NzllNGFkMDg3ODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBm4usVA1hXM2LlMOco/FSyXi8wG ks1T4UZgd+o+8orFjy1Q2ZLOLArGV+71wiaxCf3klhiXsQlCdruHVCP+pDHesbuZ izghTNTEOmTZYA5BD5d29bvTB+KiKjkNxsAvYhEuBIAO7/esBHCXNFM2r//mm7fO 2opVQ3Mxn2m9+slquSBSjA5W1AcMyCV8PNrssHBbUzvZFO31jn1YbIt9I9VwanYy 9+2H6KBtZ/GQMa/pGQjoJ4ebuyNhHBlwO7fphUrCaZ2fwJwGtP1KlIypptOHLvYv PxgPoWK/7LGnwyHJuhtsF+azHhQqBS3Col0WsxjL7OlqgYpZiW25vJmDqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwp1mHfV561Xa6NHV4VeeStCHicMB8GA1UdIwQY MBaAFInDF3DbcpiVxsP9kzdeXNVhPvNqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWNNWGNOdHltSlhHd18yVE4xNWMxV0UtODJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi81N2I3YTMtYTczOS00MjYyLThiMDEt MGMzZDRlMzFlYmE0LzEvaWNNWGNOdHltSlhHd18yVE4xNWMxV0UtODJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi81N2I3YTMtYTczOS00MjYyLThiMDEtMGMzZDRlMzFlYmE0 LzEvaWNNWGNOdHltSlhHd18yVE4xNWMxV0UtODJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQW8JqU4n Uu97wbqX7rzrksK2TXArVr2w8bqsOqLjHrQkz7kjt934HwvD89kgrl7jFmmoNZfx qb+J7q6D68hESFe1P5O77O9bQ35+A45dovyspeKw1pqLjgQF3pMia7T0WJAdTheM pbFNA3+yl8xBU0mvbiOhckSCM7e5768AqfiPkuzabAcf344EUSdQ+YM1B9yEeykf 8kek0reVYs+iznRVmSoTac/p88c/RzHOeydjfI2ns0Ay/VyecU40DFpT8g1/61LN u0pVBZyunfKGkAP0NVEj6x7K7hS2N2+9UJitV1jYC4NnUMZZBx05QGk8uX3JCPKu EJSP90gss3bIKA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:54:32 2025 by rpki-client