This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json) Hash identifier: XSNUtrXDe4VlmmzjhpkZRvtH7v3mOe6zhj025Ec7qBw= Subject key identifier: F5:EB:80:AB:A6:70:86:3A:EC:B6:2E:07:67:15:81:C0:EF:62:69:0E Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33 Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233 Certificate serial: 019B2FD58001A0AF3439014D12FD7CB74E63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft Manifest number: 0AF5 Signing time: Thu 18 Dec 2025 05:01:19 +0000 Manifest this update: Thu 18 Dec 2025 05:01:19 +0000 Manifest next update: Fri 19 Dec 2025 05:01:19 +0000 Files and hashes: 1: RKmtjmx8dGmZLS6fAJiBKQnORQs.roa (hash: uAM4Z/WN2c7W0xTj1SOSxZNG72uS1HvTkZghAtYIMtE=) 2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: zJEOagqd1T/3ANMB34+GQqunTNF154kRh2CB7tmF7Ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:80:01:a0:af:34:39:01:4d:12:fd:7c:b7:4e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233 Validity Not Before: Dec 18 05:01:19 2025 GMT Not After : Dec 19 05:01:19 2025 GMT Subject: CN=f5eb80aba670863aecb62e07671581c0ef62690e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a2:32:a3:87:06:da:9e:60:30:19:26:ee:6d: d2:65:d4:b9:78:35:f6:81:2e:53:6b:f0:9a:5b:d9: 13:52:2f:f9:75:77:37:c4:05:9a:68:39:33:79:de: 10:b4:76:27:70:ad:65:73:ef:a2:6b:09:1d:4a:b0: 56:2e:cf:a6:67:cf:1e:ce:17:c2:45:78:1c:ec:32: 4e:9d:60:a6:ec:1b:40:40:b9:0d:67:a5:11:e5:73: 9c:f8:94:11:e5:c3:91:ea:28:7f:7c:25:16:1f:3e: e8:44:ea:44:b8:29:6f:b1:cc:ac:5a:8f:26:4a:cc: 2d:ef:d0:67:79:8f:55:aa:7e:5b:ba:d0:cf:b9:7e: 7a:4c:54:2b:78:d2:c0:e3:55:ed:d0:e4:79:37:bf: 29:a4:f0:50:2e:e4:73:f8:9b:19:92:f6:18:d3:98: e7:73:02:b6:ad:14:70:75:6e:77:d5:87:82:a3:ff: 2a:13:44:b9:75:ea:cd:99:ab:d9:5f:4f:b6:df:30: f4:4f:80:9c:ad:4d:1e:1d:03:06:93:a1:76:2f:9e: 10:12:4d:62:6f:1c:5c:84:e9:e4:50:b3:4a:61:d2: 2b:e6:9a:4e:15:75:35:c6:ac:e8:c2:f0:56:73:b2: 2d:e2:b9:6c:e3:49:1c:38:bf:e9:5d:89:f8:9d:23: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EB:80:AB:A6:70:86:3A:EC:B6:2E:07:67:15:81:C0:EF:62:69:0E X509v3 Authority Key Identifier: keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ed:05:53:de:f8:72:7f:39:bc:4d:75:f3:71:98:4f:f9:d2: c7:ce:1a:4b:83:91:6e:62:fd:04:b5:84:a6:ae:ea:c9:ad:39: ed:48:a6:08:45:d9:59:cd:99:f2:21:4e:ba:be:eb:41:02:a4: dc:63:a0:6f:f1:34:dd:4a:bc:b9:af:c9:b7:b6:e1:91:60:e3: 22:7d:57:d5:99:fc:6b:d3:78:52:39:ae:2c:3c:42:c9:61:dd: 4c:3e:71:96:e9:18:d3:a1:48:5e:1e:5a:ce:2c:91:98:97:e9: 61:a5:77:29:9a:53:81:10:c8:d9:5c:39:c2:33:f3:35:7b:c2: 5d:97:44:58:88:2d:72:15:1c:6f:5d:ec:50:d9:f3:21:02:dd: 2c:68:57:9b:94:0d:b1:a3:d2:6d:8c:84:52:0b:be:af:e9:8c: 89:b5:70:f3:e5:88:c3:50:d5:01:a6:21:f0:5b:1f:1d:f2:07: c3:04:7a:81:cf:37:fe:10:47:fa:ab:2d:b8:24:4e:60:a1:55: 71:54:a3:df:bc:0e:c0:73:04:1b:78:bb:84:eb:00:c3:f2:91: 9f:ac:f7:94:57:31:f3:97:7d:e4:3d:82:24:57:ef:f1:47:d3: fb:c1:99:6d:dc:99:85:f2:b6:ec:b6:77:5e:ad:3f:65:d1:d9: 22:38:a0:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1YABoK80OQFNEv18t05jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjFhNDJiZjIyNjRjYjVlYmNlYzZlMTkwZDAyYTZkNTUz YjYyMzMwHhcNMjUxMjE4MDUwMTE5WhcNMjUxMjE5MDUwMTE5WjAzMTEwLwYDVQQD EyhmNWViODBhYmE2NzA4NjNhZWNiNjJlMDc2NzE1ODFjMGVmNjI2OTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Iyo4cG2p5gMBkm7m3SZdS5eDX2 gS5Ta/CaW9kTUi/5dXc3xAWaaDkzed4QtHYncK1lc++iawkdSrBWLs+mZ88ezhfC RXgc7DJOnWCm7BtAQLkNZ6UR5XOc+JQR5cOR6ih/fCUWHz7oROpEuClvscysWo8m Sswt79BneY9Vqn5butDPuX56TFQreNLA41Xt0OR5N78ppPBQLuRz+JsZkvYY05jn cwK2rRRwdW531YeCo/8qE0S5derNmavZX0+23zD0T4CcrU0eHQMGk6F2L54QEk1i bxxchOnkULNKYdIr5ppOFXU1xqzowvBWc7It4rls40kcOL/pXYn4nSPYLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXrgKumcIY67LYuB2cVgcDvYmkOMB8GA1UdIwQY MBaAFIJhpCvyJky1687G4ZDQKm1VO2IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYt ZGNhZTcwZjFjOTNiLzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYtZGNhZTcwZjFjOTNi LzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJu0FU974 cn85vE1183GYT/nSx84aS4ORbmL9BLWEpq7qya057UimCEXZWc2Z8iFOur7rQQKk 3GOgb/E03Uq8ua/Jt7bhkWDjIn1X1Zn8a9N4UjmuLDxCyWHdTD5xlukY06FIXh5a ziyRmJfpYaV3KZpTgRDI2Vw5wjPzNXvCXZdEWIgtchUcb13sUNnzIQLdLGhXm5QN saPSbYyEUgu+r+mMibVw8+WIw1DVAaYh8FsfHfIHwwR6gc83/hBH+qstuCROYKFV cVSj37wOwHMEG3i7hOsAw/KRn6z3lFcx85d95D2CJFfv8UfT+8GZbdyZhfK27LZ3 Xq0/ZdHZIjig0A== -----END CERTIFICATE-----Generated at Thu Dec 18 09:58:01 2025 by rpki-client