This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft File: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft (raw, json) Hash identifier: SiAd4Qb+d4rjX039o/c65Qu5UUXaHShHAOibQ3w2XvU= Subject key identifier: 99:89:05:1E:10:91:7B:0D:19:48:E1:6C:A2:1C:39:29:4D:74:BB:74 Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee Certificate serial: 019B085AAA4BC3CCAE1D1EEA138D8F332C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft Manifest number: 1056 Signing time: Wed 10 Dec 2025 13:01:58 +0000 Manifest this update: Wed 10 Dec 2025 13:01:58 +0000 Manifest next update: Thu 11 Dec 2025 13:01:58 +0000 Files and hashes: 1: 29X24t7NT92aPG0z8RFQ23FS_jI.roa (hash: G93+tglWxysvDK8JilYNm/tTbVtqW4gZHsRQKbZKomk=) 2: 4LblWvnTDGFwBH1_dfOwPBLeDmg.roa (hash: UqeHDqSDeUl+SIcuaYoYz3h3RB7+nyhFcvC7/RvkfVU=) 3: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl (hash: d3q8phZuvjI7hM9cY8cfnXqk9XN0DScNpe/ioOTrbCA=) 4: LHFc9aLVlSCzb4Ljxh_Feoo1cTs.roa (hash: BvDezmkc/DjCeeq5MwTLyFGwqS1thdnCUhhPEQYa+nY=) 5: SW5rOT-I_TKdCQhlQPFGnstXhQU.roa (hash: g9My/qk5ljxZS6oPdcHUARy/Y8teVsqkMfCfq/dyURY=) 6: hnuhuS0YrQGdjTQRIpxs4Wvf2fs.roa (hash: Hp9SysXyt9mq4hm8fSV42S86rV21TF0tL/0ofX/fZL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:aa:4b:c3:cc:ae:1d:1e:ea:13:8d:8f:33:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee Validity Not Before: Dec 10 13:01:58 2025 GMT Not After : Dec 11 13:01:58 2025 GMT Subject: CN=9989051e10917b0d1948e16ca21c39294d74bb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:43:2d:9e:a1:f3:ea:69:5c:c1:01:4b:03:63: 4f:08:3d:3d:12:b9:a5:a9:9b:70:19:d8:a2:f9:a0: e1:61:19:de:03:7d:fc:9d:9a:e6:93:60:15:00:79: 6c:eb:54:24:97:0b:e6:54:20:5e:94:df:ab:2e:16: 3b:f7:ec:d0:d9:92:62:05:e3:c7:e0:74:b4:3b:ca: ab:d6:bb:6c:7b:be:d6:1d:da:e0:32:5a:9b:62:78: 69:49:aa:e0:6c:23:84:3d:3a:a4:b4:7c:be:9a:f5: 30:ac:04:5f:f4:6b:a9:5b:d2:b7:91:76:c6:7c:59: 7d:d0:f9:d2:d9:dc:fb:96:bf:93:73:c6:90:04:1f: 51:8b:11:b0:28:be:a3:5f:bc:6b:6d:cb:5c:c8:04: cb:ce:ba:3b:91:a3:92:41:0e:85:0f:ef:27:35:6c: 2f:89:47:10:14:83:74:ae:4f:91:a5:08:c9:c8:a2: f8:ae:b8:ff:fd:62:bb:1c:c3:df:fe:d5:79:74:72: b6:a7:a6:df:5a:d0:51:f5:dd:3e:0a:89:16:95:0d: b0:92:1e:05:05:17:25:7d:1d:36:f3:3e:79:dc:5d: 25:a3:84:d0:5a:6e:26:88:1d:70:f0:ed:f4:6e:b0: 8b:df:c9:39:83:5a:8f:e6:cf:57:a0:3f:9f:a4:19: 5a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:89:05:1E:10:91:7B:0D:19:48:E1:6C:A2:1C:39:29:4D:74:BB:74 X509v3 Authority Key Identifier: keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:1a:a4:a0:f2:f9:a3:a3:bb:12:7e:fa:de:61:1e:e8:8e:f4: fa:3a:93:8c:77:f3:af:ab:d9:7e:a8:02:16:d0:d1:20:ad:5b: 35:c3:16:89:cf:e3:5b:2a:9e:e2:8c:0d:eb:ff:df:2b:48:cd: a6:a7:b4:9f:c7:0e:b4:83:8b:9b:e6:93:14:25:63:4c:b8:88: 62:c0:19:95:4a:12:2b:bb:0f:47:24:ad:cd:00:64:10:2b:93: 5a:ea:7c:37:cf:e0:11:ee:ba:58:c5:db:41:a7:2a:0e:1a:00: 96:a0:09:65:f1:e7:ef:15:24:c2:1d:45:2d:8b:c2:c2:ba:37: fa:c3:5d:62:71:82:31:d4:8c:d5:88:55:f4:47:c6:67:3e:69: 1c:8a:48:84:9c:03:87:e2:f8:bd:b4:80:97:5a:0c:12:14:e4: aa:7c:36:05:c2:f3:46:b6:07:20:2a:0f:31:61:68:77:a2:3f: 64:ba:33:7c:41:36:6b:e2:5b:ea:0b:64:9e:a4:df:c2:86:42: 91:d7:0b:08:8b:87:e7:82:6c:41:4d:be:51:dc:6c:54:7b:40: 3a:6e:8d:cb:64:7d:c6:79:87:03:a9:3f:0b:32:17:b5:27:d7: 0f:66:0d:95:da:a0:f9:32:1e:7e:ce:ab:e3:4f:f8:d7:58:d5: 16:a3:ed:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWqpLw8yuHR7qE42PMyxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzE2NzJkYmJiZjcxNjVhNmE4M2IzMjI3YTcxMTlmMGQz MWU4ZWUwHhcNMjUxMjEwMTMwMTU4WhcNMjUxMjExMTMwMTU4WjAzMTEwLwYDVQQD Eyg5OTg5MDUxZTEwOTE3YjBkMTk0OGUxNmNhMjFjMzkyOTRkNzRiYjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkMtnqHz6mlcwQFLA2NPCD09Erml qZtwGdii+aDhYRneA338nZrmk2AVAHls61QklwvmVCBelN+rLhY79+zQ2ZJiBePH 4HS0O8qr1rtse77WHdrgMlqbYnhpSargbCOEPTqktHy+mvUwrARf9GupW9K3kXbG fFl90PnS2dz7lr+Tc8aQBB9RixGwKL6jX7xrbctcyATLzro7kaOSQQ6FD+8nNWwv iUcQFIN0rk+RpQjJyKL4rrj//WK7HMPf/tV5dHK2p6bfWtBR9d0+CokWlQ2wkh4F BRclfR028z553F0lo4TQWm4miB1w8O30brCL38k5g1qP5s9XoD+fpBlaTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmJBR4QkXsNGUjhbKIcOSlNdLt0MB8GA1UdIwQY MBaAFCHBZy27v3Flpqg7MienEZ8NMejuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQt MzQ3N2M3ZmNkNGQ5LzEvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQtMzQ3N2M3ZmNkNGQ5 LzEvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzhqkoPL5 o6O7En763mEe6I70+jqTjHfzr6vZfqgCFtDRIK1bNcMWic/jWyqe4owN6//fK0jN pqe0n8cOtIOLm+aTFCVjTLiIYsAZlUoSK7sPRyStzQBkECuTWup8N8/gEe66WMXb QacqDhoAlqAJZfHn7xUkwh1FLYvCwro3+sNdYnGCMdSM1YhV9EfGZz5pHIpIhJwD h+L4vbSAl1oMEhTkqnw2BcLzRrYHICoPMWFod6I/ZLozfEE2a+Jb6gtknqTfwoZC kdcLCIuH54JsQU2+UdxsVHtAOm6Ny2R9xnmHA6k/CzIXtSfXD2YNldqg+TIefs6r 40/411jVFqPtyw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:29:33 2025 by rpki-client