This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft File: iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json) Hash identifier: C7Q72SEgxt+8x04ZHFTLt9UqTfmhy6YS+zqFyuZ4DrM= Subject key identifier: 96:EE:D2:0C:2D:5A:85:B6:56:4D:B9:A7:AF:4A:3F:88:10:DB:85:63 Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6 Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6 Certificate serial: 019AAB700432B6A7052B8F02685AFC0623CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft Manifest number: 1460 Signing time: Sat 22 Nov 2025 12:00:36 +0000 Manifest this update: Sat 22 Nov 2025 12:00:36 +0000 Manifest next update: Sun 23 Nov 2025 12:00:36 +0000 Files and hashes: 1: Rtf3Ok46m4V-jUnqVqrnK78wScU.roa (hash: 5UDxCVwkQxutl6l/6ucW6O+828gQteGd8WnS/oyBd0U=) 2: WYkwsfl1LrYxcZc4hOn_dwqrnKU.roa (hash: OFI3Jc8HI7chg6jym9Pd2h5sq7FHfkNT1WJbvujMSAY=) 3: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: 8WT+JVEH/bMw5Lg6Hi6GEGrE3PN7SJkyUUMij6OiCYw=) 4: jzZ4tYbzqiuSSftAW3fppDa1Wqc.roa (hash: hnzQ/ndmvGoDKQ41tJpQwJMDQ2yQeCPQibsiuKB0+OU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:70:04:32:b6:a7:05:2b:8f:02:68:5a:fc:06:23:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6 Validity Not Before: Nov 22 12:00:36 2025 GMT Not After : Nov 23 12:00:36 2025 GMT Subject: CN=96eed20c2d5a85b6564db9a7af4a3f8810db8563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e4:4e:ef:74:c2:7a:78:c6:32:21:6d:98:a3: a3:f2:a2:09:04:f6:55:54:54:d3:02:5b:2e:71:2d: c1:33:6a:0b:b7:fe:70:e4:7b:1a:bb:82:1f:c3:78: 2e:5c:22:96:d7:ac:66:63:a1:48:34:fb:55:bc:51: 32:d1:27:61:32:15:61:ee:83:c3:9e:14:22:cf:af: d0:35:ef:45:35:e9:df:16:b2:59:9a:12:38:af:85: 33:c7:79:fe:08:0e:52:5c:98:af:fc:c4:00:08:14: 2d:35:2c:9c:79:34:bc:90:1f:11:63:0b:0c:8b:f2: 4a:c5:8f:84:af:cd:13:30:69:c7:63:69:eb:26:57: e6:d9:90:bc:4e:eb:76:cf:38:14:57:c8:6b:9b:d3: 62:76:58:3d:8c:c9:0b:32:5c:73:a3:0a:48:33:a3: 61:40:3b:81:03:fd:f1:8e:ec:cd:57:60:cb:3d:97: 01:8f:4d:72:e7:f4:9f:6c:9f:e4:90:b8:0b:1f:57: 19:dd:5c:5a:b8:a2:c7:3e:90:40:bd:e7:e8:02:60: a6:1d:13:31:a3:91:d4:88:08:d7:03:18:57:e5:dc: 48:ba:ee:5f:28:2c:75:47:02:c4:2e:9c:f6:ce:cd: 58:fc:48:df:91:7f:ed:f2:67:7d:68:40:2d:e6:7d: f7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EE:D2:0C:2D:5A:85:B6:56:4D:B9:A7:AF:4A:3F:88:10:DB:85:63 X509v3 Authority Key Identifier: keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c5:11:e0:30:af:95:cc:e9:cd:1a:7a:54:78:6c:93:f1:ef: 79:c7:c1:3a:d0:7e:0e:be:43:e7:03:75:e5:f8:56:d4:08:05: 3a:b6:46:08:c8:18:c6:7c:f6:b7:9f:9f:ae:c5:f0:84:b9:22: 1f:06:da:1b:89:56:8a:81:a8:ee:1a:fa:40:1a:c6:19:44:8a: 37:98:d9:09:f8:98:df:9b:be:b1:fc:03:34:92:dd:a2:75:bb: c4:04:0d:28:aa:69:57:b0:08:e9:37:5c:2b:92:55:05:cb:14: 31:77:76:b9:3c:2d:28:8b:cd:02:4b:cb:9b:26:2f:3a:69:1d: 21:40:ef:72:95:49:f8:d7:2b:9c:35:36:0a:97:5e:ca:7f:c0: 9d:b7:78:39:63:80:de:7e:10:45:94:a6:71:0f:bb:21:85:b0: 77:ac:c4:19:a3:b1:98:7c:b8:0c:90:38:4b:44:ba:84:76:a1: 7f:09:98:ed:b0:1a:a1:00:83:7a:5a:d3:0d:c0:b4:46:c2:05: 86:a6:19:7b:64:81:fc:90:56:81:3e:03:4e:62:c6:68:fd:e1: b8:24:d7:c9:ca:7c:b9:c8:ed:15:7c:49:a2:fb:bc:c6:2d:a0: 88:17:a7:43:46:11:77:50:a1:47:e7:c0:e5:f1:9d:19:78:aa: 12:10:ac:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrcAQytqcFK48CaFr8BiPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MjFhMzlhZWQ5ZGE0ZWUzYWI2NjM5ZDI0NDUwOGZhMWU4 ZDIwZjYwHhcNMjUxMTIyMTIwMDM2WhcNMjUxMTIzMTIwMDM2WjAzMTEwLwYDVQQD Eyg5NmVlZDIwYzJkNWE4NWI2NTY0ZGI5YTdhZjRhM2Y4ODEwZGI4NTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9eRO73TCenjGMiFtmKOj8qIJBPZV VFTTAlsucS3BM2oLt/5w5Hsau4Ifw3guXCKW16xmY6FINPtVvFEy0SdhMhVh7oPD nhQiz6/QNe9FNenfFrJZmhI4r4Uzx3n+CA5SXJiv/MQACBQtNSyceTS8kB8RYwsM i/JKxY+Er80TMGnHY2nrJlfm2ZC8Tut2zzgUV8hrm9Nidlg9jMkLMlxzowpIM6Nh QDuBA/3xjuzNV2DLPZcBj01y5/SfbJ/kkLgLH1cZ3VxauKLHPpBAvefoAmCmHRMx o5HUiAjXAxhX5dxIuu5fKCx1RwLELpz2zs1Y/EjfkX/t8md9aEAt5n33pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbu0gwtWoW2Vk25p69KP4gQ24VjMB8GA1UdIwQY MBaAFIgho5rtnaTuOrZjnSRFCPoejSD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAt ZjYwZDZmNzE4MmExLzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAtZjYwZDZmNzE4MmEx LzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcUR4DCv lczpzRp6VHhsk/HvecfBOtB+Dr5D5wN15fhW1AgFOrZGCMgYxnz2t5+frsXwhLki HwbaG4lWioGo7hr6QBrGGUSKN5jZCfiY35u+sfwDNJLdonW7xAQNKKppV7AI6Tdc K5JVBcsUMXd2uTwtKIvNAkvLmyYvOmkdIUDvcpVJ+NcrnDU2Cpdeyn/Anbd4OWOA 3n4QRZSmcQ+7IYWwd6zEGaOxmHy4DJA4S0S6hHahfwmY7bAaoQCDelrTDcC0RsIF hqYZe2SB/JBWgT4DTmLGaP3huCTXycp8ucjtFXxJovu8xi2giBenQ0YRd1ChR+fA 5fGdGXiqEhCs8w== -----END CERTIFICATE-----Generated at Sat Nov 22 20:55:21 2025 by rpki-client