This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft File: GI8TycwU9V7iIgtEl2mS0R1d6HE.mft (raw, json) Hash identifier: gdwp18mAAO4DAV7zxkIUurvEGJb/kY1OODYW/ZKZfwo= Subject key identifier: 2E:92:7A:AA:7A:17:53:86:33:D7:BE:60:D5:FB:0B:85:04:5F:0E:B4 Authority key identifier: 18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71 Certificate issuer: /CN=188f13c9cc14f55ee2220b44976992d11d5de871 Certificate serial: 019AF2401EBC44C752A4C3E78439AA985342 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft Manifest number: 58 Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: AGfqt0Fez0MZXwHxBwMvHI2laJc.roa (hash: 3flR0vw+7HV07hNU6MM3VzWxFgugACGxcRcbeKB+uUo=) 2: GI8TycwU9V7iIgtEl2mS0R1d6HE.crl (hash: t+Q2oMES23e7s1AuH5pShscKgEdWtMw5Am0cRHgVVKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1e:bc:44:c7:52:a4:c3:e7:84:39:aa:98:53:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188f13c9cc14f55ee2220b44976992d11d5de871 Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=2e927aaa7a17538633d7be60d5fb0b85045f0eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1e:5b:43:71:a2:be:ad:ad:52:4c:4d:60:86: 83:81:6f:35:82:09:73:5b:c9:a9:45:23:fe:4a:3c: e0:65:bb:b2:f0:69:1e:48:07:3d:10:cf:3a:df:dd: 8c:a3:c8:6a:2d:28:a2:de:1c:58:5a:7f:b2:b8:69: 4c:8f:d0:4b:2e:72:12:56:64:91:f5:0d:84:29:d1: e3:62:f9:49:74:3e:ae:a7:28:55:fb:a1:77:1c:97: fa:71:4c:a8:f8:09:a0:b9:4b:5f:13:64:4b:09:b7: 99:a3:1c:d0:c1:ff:91:c0:af:6c:77:1a:be:6b:53: 89:20:fb:ff:d6:26:96:46:60:ca:b5:fe:9d:c9:1c: 07:62:08:25:63:fa:ad:ef:3c:52:b0:6d:ea:32:37: c8:c2:6b:41:d9:2f:64:95:a4:43:e6:bd:3a:bb:7f: 39:da:e8:63:54:8e:b9:f4:da:27:93:91:76:bd:b0: 4a:cf:0a:cd:7e:d7:26:4b:28:ef:1d:98:18:9a:2f: f2:18:a2:ae:5d:39:bc:53:71:67:16:f4:1e:49:a1: b4:17:36:52:e3:5e:3a:8f:5c:68:40:06:8d:8d:eb: be:2f:4a:9b:09:4f:99:ae:66:1d:ad:10:49:b9:3a: c2:aa:2b:38:eb:0e:43:3d:c1:dd:59:4b:86:b4:e2: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:92:7A:AA:7A:17:53:86:33:D7:BE:60:D5:FB:0B:85:04:5F:0E:B4 X509v3 Authority Key Identifier: keyid:18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:61:60:9a:b0:0f:22:f9:d3:2d:91:f5:6c:fb:5c:8d:cc:f7: 2c:6d:ca:ba:47:91:37:cf:cf:39:b2:fa:8c:08:29:ab:fc:b2: fb:fa:8d:92:09:3d:c2:83:2d:01:9c:d2:2f:80:fb:f1:50:f2: 7c:94:33:1d:c0:9f:d7:39:c5:0e:81:f1:60:4f:c1:bc:ce:42: 08:62:b5:63:19:16:b2:f8:31:c4:3f:65:ad:28:38:03:81:3d: a1:82:51:4e:67:aa:0d:94:44:86:39:6e:78:2c:93:85:54:8d: 05:50:7c:74:73:08:58:23:8a:42:b5:67:46:f1:81:a3:ec:d7: 0b:2c:53:fd:53:70:69:df:c3:b9:55:de:5c:b0:cb:66:32:2a: 17:1f:f9:b3:13:1a:03:8d:35:35:3d:5f:f8:a6:38:63:2a:a8: 91:22:c3:5b:2c:f3:b8:0d:15:d0:82:9a:11:b7:cf:b4:21:98: dd:75:81:37:fc:33:56:e1:1c:c2:a0:d0:a0:85:2d:70:7c:59: bd:01:d2:2f:02:0f:a8:72:3a:d4:15:61:a0:56:13:ca:d3:35: c7:53:c4:82:4b:5f:9e:3a:83:ad:1b:0b:c6:64:e5:f4:50:b9: eb:84:62:27:2d:21:1d:97:ed:c9:07:04:a9:48:28:b8:0b:58: 79:ee:14:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQB68RMdSpMPnhDmqmFNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OGYxM2M5Y2MxNGY1NWVlMjIyMGI0NDk3Njk5MmQxMWQ1 ZGU4NzEwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD EygyZTkyN2FhYTdhMTc1Mzg2MzNkN2JlNjBkNWZiMGI4NTA0NWYwZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR5bQ3Givq2tUkxNYIaDgW81gglz W8mpRSP+SjzgZbuy8GkeSAc9EM86392Mo8hqLSii3hxYWn+yuGlMj9BLLnISVmSR 9Q2EKdHjYvlJdD6upyhV+6F3HJf6cUyo+AmguUtfE2RLCbeZoxzQwf+RwK9sdxq+ a1OJIPv/1iaWRmDKtf6dyRwHYgglY/qt7zxSsG3qMjfIwmtB2S9klaRD5r06u385 2uhjVI659Nonk5F2vbBKzwrNftcmSyjvHZgYmi/yGKKuXTm8U3FnFvQeSaG0FzZS 4146j1xoQAaNjeu+L0qbCU+ZrmYdrRBJuTrCqis46w5DPcHdWUuGtOJ4tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6Seqp6F1OGM9e+YNX7C4UEXw60MB8GA1UdIwQY MBaAFBiPE8nMFPVe4iILRJdpktEdXehxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0k4VHljd1U5VjdpSWd0RWwybVMwUjFkNkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmNmNGMtNzhlMi00OWI1LTgwZTct NTdiMGRjZDdlOGFmLzEvR0k4VHljd1U5VjdpSWd0RWwybVMwUjFkNkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jMmNmNGMtNzhlMi00OWI1LTgwZTctNTdiMGRjZDdlOGFm LzEvR0k4VHljd1U5VjdpSWd0RWwybVMwUjFkNkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3GFgmrAP IvnTLZH1bPtcjcz3LG3KukeRN8/PObL6jAgpq/yy+/qNkgk9woMtAZzSL4D78VDy fJQzHcCf1znFDoHxYE/BvM5CCGK1YxkWsvgxxD9lrSg4A4E9oYJRTmeqDZREhjlu eCyThVSNBVB8dHMIWCOKQrVnRvGBo+zXCyxT/VNwad/DuVXeXLDLZjIqFx/5sxMa A401NT1f+KY4YyqokSLDWyzzuA0V0IKaEbfPtCGY3XWBN/wzVuEcwqDQoIUtcHxZ vQHSLwIPqHI61BVhoFYTytM1x1PEgktfnjqDrRsLxmTl9FC564RiJy0hHZftyQcE qUgouAtYee4Ufg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:04 2025 by rpki-client