This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft File: GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft (raw, json) Hash identifier: M/z1P1QZsscBLsk+M62xjgZyi7gDcL3/puRjHOBbb28= Subject key identifier: 7B:7C:A4:0C:A8:28:3E:F3:DE:49:C9:9E:5B:92:1B:6A:BA:04:25:71 Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12 Certificate issuer: /CN=1a228183490ac6b2523dbfcc087c13816f9c2612 Certificate serial: 019AF12D4515C7C8DE1B51C7FEFC7703AA61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:06 +0000 Manifest this update: Sat 06 Dec 2025 01:01:06 +0000 Manifest next update: Sun 07 Dec 2025 01:01:06 +0000 Files and hashes: 1: FpuR0y9APVvFEzZNqfMzupE3ra4.roa (hash: GpOZZgRFNoAGIu1wspT0GzMUn0LG62S5x4bgRa8l/A4=) 2: GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl (hash: 3t/6veDXRruNWlGgUocUM1wqj0MJdCntFfp6PH72Fn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:45:15:c7:c8:de:1b:51:c7:fe:fc:77:03:aa:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612 Validity Not Before: Dec 6 01:01:06 2025 GMT Not After : Dec 7 01:01:06 2025 GMT Subject: CN=7b7ca40ca8283ef3de49c99e5b921b6aba042571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:c5:35:62:86:0c:55:cc:e9:64:b1:75:5e: 90:39:78:56:44:d8:0b:43:32:bc:f1:d8:38:6b:b8: d5:0a:9c:6b:2b:51:87:03:e2:c9:43:52:83:4a:1b: 4a:47:ce:44:46:b5:a5:52:35:8e:0c:e6:e0:3d:0b: b7:c3:58:3e:7d:44:7f:4e:27:85:1f:47:f2:6c:44: f2:71:f9:8e:6f:45:c0:ee:40:ff:8f:92:18:07:8a: ff:6d:d8:50:a9:8f:c8:c3:08:82:66:c0:1c:41:4d: 24:e4:e9:f2:b0:60:30:64:ae:4b:94:3c:ab:eb:9c: b0:86:86:ed:7d:bd:cd:05:45:80:b3:be:cc:c8:e3: 5c:42:83:f4:0f:19:0c:f4:05:33:92:d3:37:b6:b0: 10:58:14:9b:e0:f4:9c:44:db:fd:c4:68:48:37:7e: 95:0e:85:bd:f3:b4:da:19:b1:e6:bd:20:9f:e3:c9: 0c:83:b4:1a:5e:c4:b5:95:5d:d8:e8:2e:ee:55:f3: 66:bb:1f:32:96:ab:c9:9a:a5:73:20:7d:6e:57:ac: c2:09:2e:77:42:05:00:a2:19:69:d6:df:d9:16:64: eb:1f:be:6c:76:9a:be:ff:71:27:e4:b7:f5:aa:c3: 31:16:0b:a2:16:c7:42:c7:a7:0a:4f:5d:c1:12:65: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7C:A4:0C:A8:28:3E:F3:DE:49:C9:9E:5B:92:1B:6A:BA:04:25:71 X509v3 Authority Key Identifier: keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:40:43:31:d7:15:f1:75:f4:7f:54:ce:a0:dc:cf:77:27:ed: 5b:32:9d:05:90:af:36:30:9e:79:4f:bc:ca:0f:57:f3:b0:35: 44:5a:49:07:2f:97:b3:19:5a:fb:71:6a:d7:9c:37:38:19:8d: 86:9d:bb:49:7d:59:14:2a:b7:7d:7d:63:a1:0c:13:6b:3f:89: 16:9d:a1:97:15:54:3b:51:f1:28:72:4e:60:9f:ef:20:2a:b7: fd:89:bb:50:a3:e7:e3:7a:f0:3c:b1:b0:62:1f:b0:9e:85:69: 2f:da:69:e2:d4:e8:09:15:e1:24:6c:5c:ef:3f:09:5a:9e:6d: 73:c4:50:a5:4a:2d:cd:1f:f8:1b:58:f6:1f:4f:db:ac:a3:7f: ce:26:8e:8d:78:85:20:38:48:d5:9a:91:01:09:b8:95:64:53: 32:ce:c3:5a:e5:02:ab:3f:01:3a:80:61:9d:82:cc:1f:4b:4b: c2:50:7f:49:c9:59:2f:79:44:db:f3:dc:fe:a0:0d:6c:3d:f5: f5:06:f0:78:2f:46:50:a7:d0:cd:ee:e4:b3:33:aa:63:a4:ce: fa:0d:da:4a:77:45:9b:09:41:68:84:a8:73:3d:47:5b:a2:81: 0a:fc:d8:94:75:36:c1:36:d0:84:1d:b1:59:7b:d1:5f:d6:15: cf:14:81:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUUVx8jeG1HH/vx3A6phMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMjI4MTgzNDkwYWM2YjI1MjNkYmZjYzA4N2MxMzgxNmY5 YzI2MTIwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD Eyg3YjdjYTQwY2E4MjgzZWYzZGU0OWM5OWU1YjkyMWI2YWJhMDQyNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O/FNWKGDFXM6WSxdV6QOXhWRNgL QzK88dg4a7jVCpxrK1GHA+LJQ1KDShtKR85ERrWlUjWODObgPQu3w1g+fUR/TieF H0fybETycfmOb0XA7kD/j5IYB4r/bdhQqY/IwwiCZsAcQU0k5OnysGAwZK5LlDyr 65ywhobtfb3NBUWAs77MyONcQoP0DxkM9AUzktM3trAQWBSb4PScRNv9xGhIN36V DoW987TaGbHmvSCf48kMg7QaXsS1lV3Y6C7uVfNmux8ylqvJmqVzIH1uV6zCCS53 QgUAohlp1t/ZFmTrH75sdpq+/3En5Lf1qsMxFguiFsdCx6cKT13BEmWFJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHt8pAyoKD7z3knJnluSG2q6BCVxMB8GA1UdIwQY MBaAFBoigYNJCsayUj2/zAh8E4FvnCYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2Mt NjljNGU4NTMzNTIxLzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2MtNjljNGU4NTMzNTIx LzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkBDMdcV 8XX0f1TOoNzPdyftWzKdBZCvNjCeeU+8yg9X87A1RFpJBy+Xsxla+3Fq15w3OBmN hp27SX1ZFCq3fX1joQwTaz+JFp2hlxVUO1HxKHJOYJ/vICq3/Ym7UKPn43rwPLGw Yh+wnoVpL9pp4tToCRXhJGxc7z8JWp5tc8RQpUotzR/4G1j2H0/brKN/ziaOjXiF IDhI1ZqRAQm4lWRTMs7DWuUCqz8BOoBhnYLMH0tLwlB/SclZL3lE2/Pc/qANbD31 9QbweC9GUKfQze7kszOqY6TO+g3aSndFmwlBaISocz1HW6KBCvzYlHU2wTbQhB2x WXvRX9YVzxSBug== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:41 2025 by rpki-client