This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft File: Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json) Hash identifier: z3kfVz+/FAFE3ds0IEcqIrdzaNl0P+4OnLwwVVyCDvA= Subject key identifier: 6F:66:61:D3:20:C6:64:01:A0:72:C1:51:3B:09:F6:2B:24:43:C1:0A Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92 Certificate issuer: /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92 Certificate serial: 019BABDBA62B5C0A4D5921BC6E4CB5F8EDAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft Manifest number: 17C4 Signing time: Sun 11 Jan 2026 07:00:57 +0000 Manifest this update: Sun 11 Jan 2026 07:00:57 +0000 Manifest next update: Mon 12 Jan 2026 07:00:57 +0000 Files and hashes: 1: Fs_FP0zOdfmc7rvun5ERONpmOgw.roa (hash: TWq1U2RPZO5KpxgW/s1ezL7KUt27fk4vKRxKtkmjh/c=) 2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: mQUPiO37lA2HWZ1PK2zzg4GVGr1/vMrwSBa7G7sTwXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:db:a6:2b:5c:0a:4d:59:21:bc:6e:4c:b5:f8:ed:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92 Validity Not Before: Jan 11 07:00:57 2026 GMT Not After : Jan 12 07:00:57 2026 GMT Subject: CN=6f6661d320c66401a072c1513b09f62b2443c10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:69:8d:b3:d0:94:b7:ac:44:c5:30:4c:b2: 5d:bc:22:d6:8b:75:0f:72:05:6d:82:9a:10:bd:07: e3:f4:18:6e:ce:15:53:8d:5d:2c:c3:0a:e5:77:54: 0c:b9:97:35:ae:de:73:7c:de:e4:14:59:5f:ce:47: 77:80:e4:1b:fa:7b:5a:d7:5d:25:be:99:3d:46:67: 75:d5:dd:0c:11:1d:b3:35:34:a6:34:87:a5:5f:3e: c8:76:6e:3e:cc:ce:d1:54:8f:54:f8:40:72:08:03: 21:0c:9c:5d:38:60:67:25:ad:2b:cc:a7:1e:e1:9d: 85:96:34:95:7e:3b:f4:4f:e0:c6:e8:62:7f:02:50: 7f:49:89:64:b2:ce:cb:63:b6:b3:9b:53:20:56:10: b2:99:78:63:72:55:cc:8c:7e:2e:db:c8:e9:79:ca: 2f:a4:a0:38:51:e4:7a:21:17:2d:6d:c4:22:87:e1: bf:78:ab:c2:d2:8d:18:b0:ff:11:a3:84:7e:cb:ac: 16:99:02:ba:ff:22:5b:f9:69:9f:f6:74:a0:12:e6: da:f2:5b:57:f7:87:7b:c0:53:c6:45:9b:e4:b7:58: 34:fd:b6:df:26:04:7f:fd:ec:5b:62:57:d5:d1:69: 4f:cf:a0:e7:54:76:35:bc:f0:14:65:ac:0a:b3:07: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:66:61:D3:20:C6:64:01:A0:72:C1:51:3B:09:F6:2B:24:43:C1:0A X509v3 Authority Key Identifier: keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:18:e0:cf:bd:c0:19:d5:f8:d4:1d:90:29:02:7f:9e:7b:7c: ab:87:35:99:16:a5:ad:c1:53:e0:31:f4:c4:15:03:e0:c5:ec: 90:44:99:58:86:9e:9e:64:de:a9:f1:12:fb:d3:9a:65:35:56: a3:7e:40:17:5a:87:58:ce:c0:3b:db:e6:30:14:74:25:13:3c: 7a:e2:d3:5c:03:a1:b7:9e:d2:11:1f:ef:1e:9c:b4:4d:1b:26: 58:37:43:b1:8b:ba:22:78:db:69:d7:8d:42:50:3d:12:90:69: f6:2e:dc:16:43:b1:49:46:d6:99:ee:11:f6:70:de:41:2b:f2: fb:3c:c7:cf:b3:54:5c:9b:a4:a2:51:9e:63:bd:e5:10:92:af: d1:9d:37:eb:33:e3:2c:3a:d7:97:78:83:f4:18:29:d4:0f:6f: 62:9f:b7:b2:46:b2:43:b5:a2:04:53:f5:d7:3a:c7:19:c2:80: da:7d:d4:4f:1c:26:f0:39:fb:89:70:18:3a:e5:08:8d:1a:a2: c2:e6:99:68:51:af:b2:60:09:61:41:fb:b3:21:c2:93:cd:21: 97:d2:83:11:c3:41:66:21:94:ea:40:ea:2c:a5:49:db:a8:de: b8:c9:48:df:ad:e4:5b:1c:53:e6:53:04:6b:7e:f1:d0:35:31: a7:b3:82:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZur26YrXApNWSG8bky1+O2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzczYTVkOGVjNjNiZWQ2NThhMzhmNWMyNmYxOTFmZGQ3 NGRmOTIwHhcNMjYwMTExMDcwMDU3WhcNMjYwMTEyMDcwMDU3WjAzMTEwLwYDVQQD Eyg2ZjY2NjFkMzIwYzY2NDAxYTA3MmMxNTEzYjA5ZjYyYjI0NDNjMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBppjbPQlLesRMUwTLJdvCLWi3UP cgVtgpoQvQfj9BhuzhVTjV0swwrld1QMuZc1rt5zfN7kFFlfzkd3gOQb+nta110l vpk9Rmd11d0MER2zNTSmNIelXz7Idm4+zM7RVI9U+EByCAMhDJxdOGBnJa0rzKce 4Z2FljSVfjv0T+DG6GJ/AlB/SYlkss7LY7azm1MgVhCymXhjclXMjH4u28jpecov pKA4UeR6IRctbcQih+G/eKvC0o0YsP8Ro4R+y6wWmQK6/yJb+Wmf9nSgEuba8ltX 94d7wFPGRZvkt1g0/bbfJgR//exbYlfV0WlPz6DnVHY1vPAUZawKswegUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9mYdMgxmQBoHLBUTsJ9iskQ8EKMB8GA1UdIwQY MBaAFCHHOl2OxjvtZYo49cJvGR/ddN+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGIt ZmQxMjBjMzFkYTcyLzEvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9mODUwZWMtOTk1NC00ODVjLWFhMGItZmQxMjBjMzFkYTcy LzEvSWNjNlhZN0dPLTFsaWpqMXdtOFpIOTEwMzVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRjgz73A GdX41B2QKQJ/nnt8q4c1mRalrcFT4DH0xBUD4MXskESZWIaenmTeqfES+9OaZTVW o35AF1qHWM7AO9vmMBR0JRM8euLTXAOht57SER/vHpy0TRsmWDdDsYu6InjbadeN QlA9EpBp9i7cFkOxSUbWme4R9nDeQSvy+zzHz7NUXJukolGeY73lEJKv0Z036zPj LDrXl3iD9Bgp1A9vYp+3skayQ7WiBFP11zrHGcKA2n3UTxwm8Dn7iXAYOuUIjRqi wuaZaFGvsmAJYUH7syHCk80hl9KDEcNBZiGU6kDqLKVJ26jeuMlI363kWxxT5lME a37x0DUxp7OCuQ== -----END CERTIFICATE-----Generated at Sun Jan 11 09:00:40 2026 by rpki-client