This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json) Hash identifier: BcBgt3Z2zngdEh9/pJWit0+DN7PQPLqX08krkHtvPrw= Subject key identifier: 91:81:10:B7:53:DE:29:66:5D:B7:5C:2C:14:83:5D:21:77:AA:AE:E5 Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b Certificate serial: 019AF19B33892D31F24F2BDE7BF027CB5541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft Manifest number: 1736 Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=) 2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: /U2vVKZlkjpgeBUbMs+hB1AkrxLW/4jEd3QdGcXqYFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:33:89:2d:31:f2:4f:2b:de:7b:f0:27:cb:55:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=918110b753de29665db75c2c14835d2177aaaee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:3d:8e:2b:7e:8d:80:69:7f:36:b2:88:7c: 07:3a:d5:a7:a7:ec:13:97:63:b6:2c:d2:62:fd:d8: 4c:aa:a0:82:fd:e2:44:18:cb:8e:bb:a1:54:96:dd: 17:42:d3:ca:b0:bc:cd:5c:75:6b:29:01:b5:65:27: b7:e0:52:e7:99:dc:10:67:95:36:be:ad:99:6c:d3: ef:e6:0a:66:ae:d6:a0:e3:66:80:6a:1f:61:50:02: 3e:3a:2d:ca:71:2c:eb:dd:67:0c:f9:22:9c:8d:25: f9:a2:24:b7:01:89:07:a9:23:db:ce:e9:db:1e:9f: f4:b0:d9:36:7e:d3:fd:7b:80:e4:36:b4:df:1c:c0: c9:e0:3b:3d:39:a2:38:f9:cf:ab:8b:c4:52:93:02: d5:3d:27:bb:03:d3:8d:26:f7:53:33:5c:90:6c:6d: 81:d7:ff:de:99:5d:9a:6e:24:a4:a3:07:67:3a:65: c2:69:fa:1e:e9:89:e8:63:08:c0:3e:24:b7:6b:35: f6:e9:48:4a:5b:c2:cd:8b:d2:39:44:c6:62:20:dc: dc:d3:cb:c4:b2:0b:ef:e4:c7:fc:82:ac:96:a0:64: 31:c0:b0:ec:ab:ef:3c:8d:c1:0b:23:1a:e2:ca:ce: 6a:8d:33:e9:ed:e9:64:6d:f4:52:cc:68:05:8f:b4: f9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:81:10:B7:53:DE:29:66:5D:B7:5C:2C:14:83:5D:21:77:AA:AE:E5 X509v3 Authority Key Identifier: keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:62:e4:16:37:e0:56:82:81:39:3c:52:de:8a:40:f7:35:d8: d3:56:15:a7:b9:f4:d0:b3:57:6b:88:ad:a8:2b:cb:82:14:f1: ae:60:5a:11:bd:e0:9d:51:13:87:0d:26:d2:95:ca:43:99:d3: b4:01:ee:87:d7:80:ba:f3:f3:81:8b:5a:e9:a5:5b:f6:5e:9b: 08:39:fa:e7:6d:ab:e2:53:9f:d6:be:96:93:90:73:2a:35:53: 76:0e:06:f2:19:3e:bd:1a:9f:ee:22:a4:0e:2d:a6:08:fe:bc: a0:b1:2d:f7:42:0f:d5:11:88:c0:49:80:b3:a8:8c:f1:b2:78: 1b:97:e3:28:d8:c5:26:ae:e6:d6:ef:be:59:93:3f:e5:93:78: 41:c9:a6:5a:5d:86:7b:75:5b:b2:88:1f:7b:f3:47:b1:ae:61: 1e:6a:7e:c3:6b:e9:d9:18:d7:4b:64:5b:91:84:33:37:92:82: 06:08:02:1e:72:bb:6a:18:b7:af:ef:96:35:4a:67:35:02:30: b2:81:64:b8:4d:1d:b5:56:a8:0e:20:8f:7b:93:b3:96:42:2a: e9:a5:1a:12:27:77:b9:07:15:c2:9c:c8:1a:64:4f:96:35:7e: ba:4c:b8:6c:1a:6c:d4:2f:24:b8:5d:b1:03:bc:45:01:84:6a: 09:95:16:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzOJLTHyTyvee/Any1VBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NWYzYzMzZmIwMTEzYjQ1ZDQ1OTI5YTRjMDZmMjhjNzE0 ZGNhNGIwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD Eyg5MTgxMTBiNzUzZGUyOTY2NWRiNzVjMmMxNDgzNWQyMTc3YWFhZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbg9jit+jYBpfzayiHwHOtWnp+wT l2O2LNJi/dhMqqCC/eJEGMuOu6FUlt0XQtPKsLzNXHVrKQG1ZSe34FLnmdwQZ5U2 vq2ZbNPv5gpmrtag42aAah9hUAI+Oi3KcSzr3WcM+SKcjSX5oiS3AYkHqSPbzunb Hp/0sNk2ftP9e4DkNrTfHMDJ4Ds9OaI4+c+ri8RSkwLVPSe7A9ONJvdTM1yQbG2B 1//emV2abiSkowdnOmXCafoe6YnoYwjAPiS3azX26UhKW8LNi9I5RMZiINzc08vE sgvv5Mf8gqyWoGQxwLDsq+88jcELIxriys5qjTPp7elkbfRSzGgFj7T5YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGBELdT3ilmXbdcLBSDXSF3qq7lMB8GA1UdIwQY MBaAFBhfPDP7ARO0XUWSmkwG8oxxTcpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWIt NzYzYWJhYjk3MTAxLzEvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWItNzYzYWJhYjk3MTAx LzEvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImLkFjfg VoKBOTxS3opA9zXY01YVp7n00LNXa4itqCvLghTxrmBaEb3gnVEThw0m0pXKQ5nT tAHuh9eAuvPzgYta6aVb9l6bCDn6522r4lOf1r6Wk5BzKjVTdg4G8hk+vRqf7iKk Di2mCP68oLEt90IP1RGIwEmAs6iM8bJ4G5fjKNjFJq7m1u++WZM/5ZN4QcmmWl2G e3Vbsogfe/NHsa5hHmp+w2vp2RjXS2RbkYQzN5KCBggCHnK7ahi3r++WNUpnNQIw soFkuE0dtVaoDiCPe5OzlkIq6aUaEid3uQcVwpzIGmRPljV+uky4bBps1C8kuF2x A7xFAYRqCZUWkw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:42:32 2025 by rpki-client