This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json) Hash identifier: WU941l8Gejm4v9k0JfIZn+qKdgnn8Wz5A7dMIO70Bp0= Subject key identifier: 6D:11:2F:80:11:25:DF:C1:04:F8:20:E5:6C:82:6A:ED:8F:52:48:E0 Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92 Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92 Certificate serial: 019AB99A2A6EBD51B73BEC003790A0860D69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft Manifest number: 1746 Signing time: Tue 25 Nov 2025 06:01:19 +0000 Manifest this update: Tue 25 Nov 2025 06:01:19 +0000 Manifest next update: Wed 26 Nov 2025 06:01:19 +0000 Files and hashes: 1: 745x39IaKKbeM9M_OPciAoFxiI4.roa (hash: rIEFd72FIecG2+TT+EkabaQ2rf6+UODC9a0hMUMdVO0=) 2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: WAS7D7KMH2ynuZcGRtQTKOMU9fV6fXXqIj5J7YwOxTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 01:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:9a:2a:6e:bd:51:b7:3b:ec:00:37:90:a0:86:0d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92 Validity Not Before: Nov 25 06:01:19 2025 GMT Not After : Nov 26 06:01:19 2025 GMT Subject: CN=6d112f801125dfc104f820e56c826aed8f5248e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:29:b4:2b:78:1e:d2:23:fc:c1:1a:87:4b: a9:9b:2c:9e:31:54:53:94:46:fb:1f:f9:9b:54:d5: 25:ee:bc:67:c1:3c:00:cf:31:8d:1e:ca:1f:6b:2f: 17:31:f9:de:62:d6:9a:93:55:1c:65:f7:19:b5:d2: 3a:d8:c3:d0:09:79:27:68:bb:70:d2:59:3a:58:c1: 42:ec:36:72:50:5e:e7:b8:70:4a:72:f2:68:17:46: db:44:f7:27:9b:e4:ae:cc:73:a2:08:7e:45:9a:ae: 1c:f4:e7:d7:53:ae:69:58:40:b6:80:ed:1a:6e:44: ae:34:95:76:ae:5a:5c:23:16:ac:aa:56:57:de:91: 82:b8:47:ce:16:c8:6b:68:83:8f:de:76:14:d9:60: e3:8f:11:f1:49:c6:5d:a6:f7:1c:a8:47:bd:6a:6c: 92:d0:91:d5:67:ed:a5:93:bd:27:3e:e4:ad:dc:ef: dd:ab:7d:98:f9:fb:43:5a:b3:07:a7:33:aa:b1:96: df:05:c6:fd:de:56:a6:cb:41:a8:d0:4d:3d:6e:84: da:fb:a6:35:aa:29:47:81:2e:93:d3:44:8b:9c:7b: 92:ab:8d:1b:4f:74:5d:65:21:ed:67:bf:64:26:de: be:7a:1c:4e:41:73:32:64:98:0e:48:77:9d:3e:ec: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:11:2F:80:11:25:DF:C1:04:F8:20:E5:6C:82:6A:ED:8F:52:48:E0 X509v3 Authority Key Identifier: keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8a:ab:5b:6e:47:2b:13:8f:2b:67:f9:cc:23:54:76:bf:73: 0f:75:f0:e1:25:55:94:c7:40:eb:17:cd:ad:29:e3:08:6f:ef: 53:f7:17:5f:b5:ad:8a:0e:3c:57:d8:c4:87:d3:d0:64:99:19: a6:2b:65:1f:be:41:26:68:0f:a5:42:a4:59:5d:54:d1:22:c7: 11:75:d1:f2:bf:3d:6b:b2:fc:1a:78:e9:0b:4b:0b:4e:ec:7a: aa:7f:1e:c4:6e:09:06:0c:8c:20:ea:02:b0:14:33:1f:44:9d: 12:48:6b:f3:04:a5:b7:35:ef:8f:7c:08:75:00:86:df:39:29: 9b:a4:db:f8:42:e5:75:ad:f1:61:04:0d:1c:22:9f:53:1f:4b: d7:fd:b2:78:d1:02:05:af:8a:c7:ef:74:cd:50:83:86:8c:c2: 95:e8:f8:1f:ec:08:25:53:aa:b9:e3:4f:85:8e:7d:4d:4e:6e: bb:a9:b8:9b:9c:71:80:38:1f:e6:59:8a:58:00:d7:21:7d:25: 77:59:40:bb:79:9a:50:07:e1:63:04:55:5f:a7:7b:ae:65:63: eb:08:56:5e:a0:d2:af:a6:14:7a:fc:19:75:58:4b:e0:3a:0a: ab:58:07:78:61:65:04:2a:0d:a2:53:09:dd:56:9b:38:11:27: ef:4e:d3:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq5mipuvVG3O+wAN5Cghg1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzczYTVkOGVjNjNiZWQ2NThhMzhmNWMyNmYxOTFmZGQ3 NGRmOTIwHhcNMjUxMTI1MDYwMTE5WhcNMjUxMTI2MDYwMTE5WjAzMTEwLwYDVQQD Eyg2ZDExMmY4MDExMjVkZmMxMDRmODIwZTU2YzgyNmFlZDhmNTI0OGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/sptCt4HtIj/MEah0upmyyeMVRT lEb7H/mbVNUl7rxnwTwAzzGNHsofay8XMfneYtaak1UcZfcZtdI62MPQCXknaLtw 0lk6WMFC7DZyUF7nuHBKcvJoF0bbRPcnm+SuzHOiCH5Fmq4c9OfXU65pWEC2gO0a bkSuNJV2rlpcIxasqlZX3pGCuEfOFshraIOP3nYU2WDjjxHxScZdpvccqEe9amyS 0JHVZ+2lk70nPuSt3O/dq32Y+ftDWrMHpzOqsZbfBcb93lamy0Go0E09boTa+6Y1 qilHgS6T00SLnHuSq40bT3RdZSHtZ79kJt6+ehxOQXMyZJgOSHedPuz1LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0RL4ARJd/BBPgg5WyCau2PUkjgMB8GA1UdIwQY MBaAFCHHOl2OxjvtZYo49cJvGR/ddN+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGIt ZmQxMjBjMzFkYTcyLzEvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGItZmQxMjBjMzFkYTcy LzEvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYqrW25H KxOPK2f5zCNUdr9zD3Xw4SVVlMdA6xfNrSnjCG/vU/cXX7Wtig48V9jEh9PQZJkZ pitlH75BJmgPpUKkWV1U0SLHEXXR8r89a7L8GnjpC0sLTux6qn8exG4JBgyMIOoC sBQzH0SdEkhr8wSltzXvj3wIdQCG3zkpm6Tb+ELlda3xYQQNHCKfUx9L1/2yeNEC Ba+Kx+90zVCDhozClej4H+wIJVOqueNPhY59TU5uu6m4m5xxgDgf5lmKWADXIX0l d1lAu3maUAfhYwRVX6d7rmVj6whWXqDSr6YUevwZdVhL4DoKq1gHeGFlBCoNolMJ 3VabOBEn707T7A== -----END CERTIFICATE-----Generated at Tue Nov 25 09:56:01 2025 by rpki-client