This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft File: sICdwHvAd1GY8vMVVBUvNWqD93A.mft (raw, json) Hash identifier: G7hJMGqrhMGw4UjyiE3TK8JS485AceaOlpx2ur8Zq+U= Subject key identifier: FE:CC:6E:0F:36:7D:32:1A:A9:9E:7F:4C:09:D1:68:72:A1:F8:B4:C3 Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70 Certificate issuer: /CN=b0809dc07bc0775198f2f31554152f356a83f770 Certificate serial: 019B5A886BA86DFDAED817A25BADF1D592EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft Manifest number: 172B Signing time: Fri 26 Dec 2025 12:00:48 +0000 Manifest this update: Fri 26 Dec 2025 12:00:48 +0000 Manifest next update: Sat 27 Dec 2025 12:00:48 +0000 Files and hashes: 1: _vqUTJBaKVA__-YzImtaOgUdlPc.roa (hash: WjwzW+i6IqptZA1G2R9oYtf2Xiry6o+GVW/+RmHCnfA=) 2: sICdwHvAd1GY8vMVVBUvNWqD93A.crl (hash: QLyxn4193soHAGsl8q+2qRbLCjrgqlyspJhLZw23e4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:6b:a8:6d:fd:ae:d8:17:a2:5b:ad:f1:d5:92:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770 Validity Not Before: Dec 26 12:00:48 2025 GMT Not After : Dec 27 12:00:48 2025 GMT Subject: CN=fecc6e0f367d321aa99e7f4c09d16872a1f8b4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:65:65:a5:72:73:c9:8d:25:dc:d3:1e:89: fb:0b:6d:4c:e5:52:25:f1:da:8a:52:d5:d0:38:42: 88:71:29:67:8b:69:b9:53:76:9d:75:be:4b:22:7b: df:fb:bb:28:64:1d:ae:a1:1e:f3:58:d0:80:07:8e: db:76:c4:86:1b:da:b0:bd:88:a9:62:65:45:6a:4c: 31:89:58:e2:a9:d6:20:c3:f4:c3:91:ec:0d:18:56: 82:cb:92:ca:60:b0:c9:6a:62:c6:3d:68:da:d7:9f: 8a:bb:3d:6c:b6:54:f6:c2:10:90:9a:08:9a:6a:2d: e6:af:55:b7:4d:77:c8:e5:b4:c3:ca:0a:f3:ec:c2: f1:41:49:66:a2:8c:f8:f9:71:84:9a:64:6e:f8:8d: ac:0c:ee:33:17:8c:db:a6:13:73:86:98:22:22:04: bf:d8:b9:1e:c8:69:66:6d:ab:1a:1c:32:ac:ff:2f: 27:4c:eb:62:68:78:1d:48:71:77:ec:45:4e:f1:89: 03:85:33:02:7d:fe:a8:f9:12:56:c2:ac:b6:1f:89: 37:bd:6c:35:b3:85:ec:17:9d:5c:07:5e:b3:fe:a5: 36:da:32:7e:7e:cd:f8:6f:93:c1:e8:b3:47:f6:d2: 1a:6f:c6:06:fd:dc:db:23:d3:b9:92:10:8a:00:60: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CC:6E:0F:36:7D:32:1A:A9:9E:7F:4C:09:D1:68:72:A1:F8:B4:C3 X509v3 Authority Key Identifier: keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:1e:bb:55:3e:23:bf:bf:56:10:f1:2b:69:9e:4e:9b:34:30: 8a:d9:be:ea:0a:56:04:48:d6:94:6f:8a:2f:cd:4b:a2:65:ca: 2c:9f:4c:5f:c3:94:93:cf:30:0f:a9:f0:2e:51:3b:27:19:b5: 6b:e5:eb:38:2a:a7:73:10:32:a6:56:1b:61:b8:ac:c9:e6:d9: c8:31:80:27:b2:0f:ce:13:9a:7e:df:b6:6c:28:9e:f9:6f:0a: 86:8b:0c:d7:3f:ee:19:af:5a:d6:44:b1:ea:db:de:47:ad:20: 87:9e:ff:d9:a4:53:00:bd:4e:d1:20:e7:98:06:31:bb:f7:f7: 0f:e7:82:c7:4d:14:26:b8:2b:6e:43:c5:c2:ac:2e:9c:eb:8a: df:a5:0b:30:ba:ae:d4:2d:c2:41:29:46:8b:ce:a0:92:a6:86: 0e:d6:7a:f6:21:98:ec:b7:59:3c:37:ed:b6:c8:d8:b9:81:12: f6:0a:57:40:37:80:f8:20:1e:3f:37:6c:5a:d7:9d:ab:aa:8e: e9:bf:96:65:96:94:e3:47:c7:8e:65:3b:35:c5:8c:78:cc:c5: 68:0a:1f:f8:4b:15:37:67:ed:82:58:df:89:f5:4f:cd:49:a3: d1:25:85:3d:c3:98:79:26:ac:19:c6:60:7f:01:da:86:7e:1a: c8:f9:ad:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiGuobf2u2BeiW63x1ZLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwODA5ZGMwN2JjMDc3NTE5OGYyZjMxNTU0MTUyZjM1NmE4 M2Y3NzAwHhcNMjUxMjI2MTIwMDQ4WhcNMjUxMjI3MTIwMDQ4WjAzMTEwLwYDVQQD EyhmZWNjNmUwZjM2N2QzMjFhYTk5ZTdmNGMwOWQxNjg3MmExZjhiNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TBlZaVyc8mNJdzTHon7C21M5VIl 8dqKUtXQOEKIcSlni2m5U3addb5LInvf+7soZB2uoR7zWNCAB47bdsSGG9qwvYip YmVFakwxiVjiqdYgw/TDkewNGFaCy5LKYLDJamLGPWja15+Kuz1stlT2whCQmgia ai3mr1W3TXfI5bTDygrz7MLxQUlmooz4+XGEmmRu+I2sDO4zF4zbphNzhpgiIgS/ 2LkeyGlmbasaHDKs/y8nTOtiaHgdSHF37EVO8YkDhTMCff6o+RJWwqy2H4k3vWw1 s4XsF51cB16z/qU22jJ+fs34b5PB6LNH9tIab8YG/dzbI9O5khCKAGDzDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7Mbg82fTIaqZ5/TAnRaHKh+LTDMB8GA1UdIwQY MBaAFLCAncB7wHdRmPLzFVQVLzVqg/dwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0lDZHdIdkFkMUdZOHZNVlZCVXZOV3FEOTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kYjcyNGEtY2JjYS00ZWQxLTliNzkt OWExYWIxMWFiZGVkLzEvc0lDZHdIdkFkMUdZOHZNVlZCVXZOV3FEOTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9kYjcyNGEtY2JjYS00ZWQxLTliNzktOWExYWIxMWFiZGVk LzEvc0lDZHdIdkFkMUdZOHZNVlZCVXZOV3FEOTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0R67VT4j v79WEPEraZ5OmzQwitm+6gpWBEjWlG+KL81LomXKLJ9MX8OUk88wD6nwLlE7Jxm1 a+XrOCqncxAyplYbYbisyebZyDGAJ7IPzhOaft+2bCie+W8KhosM1z/uGa9a1kSx 6tveR60gh57/2aRTAL1O0SDnmAYxu/f3D+eCx00UJrgrbkPFwqwunOuK36ULMLqu 1C3CQSlGi86gkqaGDtZ69iGY7LdZPDfttsjYuYES9gpXQDeA+CAePzdsWtedq6qO 6b+WZZaU40fHjmU7NcWMeMzFaAof+EsVN2ftgljfifVPzUmj0SWFPcOYeSasGcZg fwHahn4ayPmt7g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:01 2025 by rpki-client