This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json) Hash identifier: CUnmL2XeezXXVCslSvkUfpaMeu2lq0MldT/OMAtJYww= Subject key identifier: 24:A6:00:6C:FB:02:02:73:FE:41:5A:CE:6F:C6:C2:0C:8E:E6:C9:30 Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90 Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90 Certificate serial: 019B3BD8ECBEDC116B8E78B3C50768387335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft Manifest number: 13FA Signing time: Sat 20 Dec 2025 13:00:30 +0000 Manifest this update: Sat 20 Dec 2025 13:00:30 +0000 Manifest next update: Sun 21 Dec 2025 13:00:30 +0000 Files and hashes: 1: 2dVxZZZj6zlHLdxhcm5JjXaDenM.roa (hash: rbawjEq/xe3wCEVClyA8U6kAU84cJfL3aa5STA3091s=) 2: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: Ey9GkcKvLGbou3s31OEpLU+mPDo5cq70gm3fhRswz9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:ec:be:dc:11:6b:8e:78:b3:c5:07:68:38:73:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90 Validity Not Before: Dec 20 13:00:30 2025 GMT Not After : Dec 21 13:00:30 2025 GMT Subject: CN=24a6006cfb020273fe415ace6fc6c20c8ee6c930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:0e:6a:b6:52:ac:17:bf:75:4e:63:42:78: 31:6d:a4:6a:90:fa:9f:43:19:ec:b1:4b:62:e2:40: e4:5b:4f:84:b3:6c:75:c3:21:28:22:86:cd:96:0f: 03:0b:ae:de:2f:a4:07:61:a8:82:d9:ef:2e:cf:5d: a3:36:bb:b1:5e:4c:02:95:ca:2d:b1:20:d8:25:95: 61:84:4c:cd:9c:47:a4:d6:a2:c8:41:48:70:bb:76: c6:65:8f:5b:80:da:56:dd:2b:8e:b1:44:ee:d4:fb: d1:fc:1f:19:a9:f6:c3:9a:f6:02:59:99:63:19:81: 13:51:01:9e:bb:2e:37:ea:3c:25:84:b1:2c:12:6f: 84:f7:49:b4:01:4a:5d:69:4f:14:7d:18:33:5a:af: e6:0d:e2:37:7c:79:50:2b:5a:06:01:9b:a1:15:42: af:1e:bd:b5:05:57:c2:07:86:1d:02:d1:58:86:af: e8:ad:89:8f:d4:37:07:fe:6a:fe:e0:a9:d0:10:2d: d0:1e:63:de:37:52:fd:81:fd:a3:11:60:8f:1a:1b: 81:4d:d4:89:62:77:97:69:e2:7a:88:22:d1:60:fe: 5f:71:b8:06:32:79:5a:b3:6a:83:08:5d:06:4d:a2: 8c:31:a2:48:16:51:ca:14:fe:f1:7b:d8:91:dd:14: a7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A6:00:6C:FB:02:02:73:FE:41:5A:CE:6F:C6:C2:0C:8E:E6:C9:30 X509v3 Authority Key Identifier: keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2f:6c:89:ce:4a:88:ad:62:37:f4:c8:f6:fe:5f:43:37:44: e7:02:5b:2f:34:96:a0:c4:d0:ae:b2:c3:15:52:97:8f:5a:bd: 9b:55:54:14:69:47:99:a4:64:5c:3f:73:b3:df:48:d7:18:c9: ae:2c:0e:53:18:dc:dd:aa:fa:1a:26:c6:49:b8:0e:96:3a:50: d9:cb:cf:f8:b6:00:35:23:0e:88:dc:8c:20:59:8e:b0:80:5f: 60:58:91:79:8e:b3:65:3a:c3:40:ee:3e:19:2d:25:46:b9:63: 2e:bd:83:fe:14:78:24:ec:62:0b:21:bd:78:e0:fa:e5:c6:cb: cb:d5:eb:c3:ca:27:d2:fb:95:41:69:94:de:c7:86:3a:03:0a: 5f:4a:17:a7:a6:2a:73:f9:57:d5:99:73:e1:dd:56:94:24:9f: ef:b1:e9:d8:8e:f5:89:08:15:17:56:34:64:4f:14:90:8a:fa: 85:15:7d:46:f7:67:a4:d4:8f:95:44:5b:f8:6b:8b:f3:b0:19: 46:f6:56:1e:83:23:2c:80:4a:18:84:3b:04:8c:8d:98:31:f3: 6c:4b:ed:82:d4:4d:af:47:41:6b:1e:48:03:1d:42:e0:40:bc: d9:5a:1a:fc:95:25:36:d1:6e:f7:2f:d5:0a:47:bd:b3:3e:cb: ac:3e:a0:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Oy+3BFrjnizxQdoOHM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OGZiMDk4NWUzNjBjMzhmODY1OGQ1NjY4N2NhODYyZDk0 MDhkOTAwHhcNMjUxMjIwMTMwMDMwWhcNMjUxMjIxMTMwMDMwWjAzMTEwLwYDVQQD EygyNGE2MDA2Y2ZiMDIwMjczZmU0MTVhY2U2ZmM2YzIwYzhlZTZjOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYwOarZSrBe/dU5jQngxbaRqkPqf QxnssUti4kDkW0+Es2x1wyEoIobNlg8DC67eL6QHYaiC2e8uz12jNruxXkwClcot sSDYJZVhhEzNnEek1qLIQUhwu3bGZY9bgNpW3SuOsUTu1PvR/B8ZqfbDmvYCWZlj GYETUQGeuy436jwlhLEsEm+E90m0AUpdaU8UfRgzWq/mDeI3fHlQK1oGAZuhFUKv Hr21BVfCB4YdAtFYhq/orYmP1DcH/mr+4KnQEC3QHmPeN1L9gf2jEWCPGhuBTdSJ YneXaeJ6iCLRYP5fcbgGMnlas2qDCF0GTaKMMaJIFlHKFP7xe9iR3RSnIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSmAGz7AgJz/kFazm/GwgyO5skwMB8GA1UdIwQY MBaAFBiPsJheNgw4+GWNVmh8qGLZQI2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAt ZDA3OTA2YTg0YjFkLzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAtZDA3OTA2YTg0YjFk LzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGC9sic5K iK1iN/TI9v5fQzdE5wJbLzSWoMTQrrLDFVKXj1q9m1VUFGlHmaRkXD9zs99I1xjJ riwOUxjc3ar6GibGSbgOljpQ2cvP+LYANSMOiNyMIFmOsIBfYFiReY6zZTrDQO4+ GS0lRrljLr2D/hR4JOxiCyG9eOD65cbLy9Xrw8on0vuVQWmU3seGOgMKX0oXp6Yq c/lX1Zlz4d1WlCSf77Hp2I71iQgVF1Y0ZE8UkIr6hRV9RvdnpNSPlURb+GuL87AZ RvZWHoMjLIBKGIQ7BIyNmDHzbEvtgtRNr0dBax5IAx1C4EC82Voa/JUlNtFu9y/V Cke9sz7LrD6gyg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:01 2025 by rpki-client