This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json) Hash identifier: zOrxgUJyhUiI71+GfMVlWRX2rojKzunisU9cv7/BzSI= Subject key identifier: DE:DB:E9:A3:69:44:B0:AB:AF:BA:ED:05:5A:59:87:A7:CF:A5:C3:97 Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9 Certificate serial: 019AF0BF24E3DD600C288A4B3B0BB3B29049 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft Manifest number: 083B Signing time: Fri 05 Dec 2025 23:00:49 +0000 Manifest this update: Fri 05 Dec 2025 23:00:49 +0000 Manifest next update: Sat 06 Dec 2025 23:00:49 +0000 Files and hashes: 1: 5lbTUO-rP5txsV_jlKv3vzS10Vc.roa (hash: VgScyBVTOIb/scuSoZmb+259XQHu/6r7pBA0Gc4Wdqs=) 2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: BW9uTHSQKH1l6/trtL0zSo3kwzgpVq+NDEAYUQTKJhU=) 3: RR-wG56YXYGUEbsQFd9GOjHnKvM.roa (hash: eG7mgkU6tN6hBwmEUuDYJD2Lxu/DlOxJUe50nzg9em4=) 4: TdRFPSiE6z0QGX9lW2WUDs-qrvc.roa (hash: uIOA5ClG5A+YjWezToN8AYQViV6aWN3VOQLxA91W/R8=) 5: W9jLQPfJ-gf7W45fE6xy024pvso.roa (hash: myRMJIwFBs9jjITp4SZwdlJzPIPHFfsrLal6I49sinM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:24:e3:dd:60:0c:28:8a:4b:3b:0b:b3:b2:90:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9 Validity Not Before: Dec 5 23:00:49 2025 GMT Not After : Dec 6 23:00:49 2025 GMT Subject: CN=dedbe9a36944b0abafbaed055a5987a7cfa5c397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d9:9b:2a:ea:c1:88:11:b4:6b:ca:60:d0:a8: 00:e9:92:ab:d1:ea:13:e0:b6:32:e8:63:af:8f:b0: bd:57:96:a2:65:ec:01:57:a8:9f:38:d8:b1:26:33: 37:52:dc:db:d4:21:b4:c0:53:50:78:38:34:53:04: cb:51:5b:03:99:e0:f6:03:59:19:a3:a6:6f:f8:ba: 79:ef:6e:ce:20:c6:12:b9:94:cd:75:90:08:49:44: 8e:26:eb:89:85:61:b8:3f:66:7b:02:c8:db:0c:f3: 61:11:c5:65:1b:77:10:3f:58:72:ca:a3:b9:f0:bd: 1f:2c:2c:79:fb:12:62:21:af:92:f2:42:94:2e:0e: 5f:62:ca:b4:9c:99:38:c0:73:fd:cf:a8:7f:28:fd: fa:14:07:d4:bf:e3:ff:5a:3a:21:ff:dd:e6:93:68: 81:5d:66:ee:98:7c:e9:88:65:af:42:af:8a:42:60: 3c:a9:d1:c2:4c:ee:b3:1f:d0:83:12:9c:6b:8a:3c: eb:1b:5e:11:5f:20:9b:8a:f8:88:c7:fb:c6:39:da: 14:d5:ea:b3:5b:f4:5e:14:49:7d:e2:1c:c1:f2:42: 71:2d:80:e5:a5:26:74:85:41:99:35:46:d9:6b:d1: 8e:4d:0e:26:42:4c:20:41:86:c4:b1:cf:14:09:c6: 31:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DB:E9:A3:69:44:B0:AB:AF:BA:ED:05:5A:59:87:A7:CF:A5:C3:97 X509v3 Authority Key Identifier: keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3c:cf:9f:df:d5:7b:ac:02:a4:c0:d9:39:f8:f0:be:be:8f: 76:13:e0:43:72:d0:40:07:7e:ae:d8:05:b7:d3:29:56:d9:f8: 5b:e5:58:07:c3:f9:14:f2:ed:83:5a:c1:7b:76:16:37:61:c2: 49:79:40:00:8f:9e:bd:0d:9c:95:f3:99:33:ad:f8:e3:2f:03: e2:05:e7:8e:3e:6f:af:f9:81:48:50:55:26:9d:5e:29:07:0d: 8e:18:dd:5d:97:eb:3a:42:ea:b1:36:5e:3e:04:a6:0e:88:b3: 90:13:2a:8d:69:7f:40:82:37:b3:e7:58:9a:1c:24:16:80:71: 1c:0f:f1:ce:15:8c:8e:fd:10:5d:79:13:94:e4:cb:a8:8b:a2: e6:41:d3:da:22:29:61:9b:f0:9a:16:9f:57:7e:65:db:13:08: 40:06:aa:8e:3b:61:ff:b7:ef:69:11:8d:b6:f5:e6:d0:cb:7d: 27:47:8a:82:7f:09:94:c0:2a:ec:a3:07:43:27:6f:90:ac:d2: e2:4d:b6:c9:0b:15:74:30:b6:cb:60:52:95:42:d6:53:be:9b: f5:80:d6:0e:f5:8b:4e:3d:07:69:0b:8d:25:ae:a1:bd:c7:0f: 72:c8:97:d4:9c:13:43:7d:ed:6a:55:2c:74:9d:5d:9b:f2:32: a7:62:89:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyTj3WAMKIpLOwuzspBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ODg2MDA3ZGExNzMwYjA3NzBkODYwNGRiNzNkMTJmZDI2 NGYzZjkwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD EyhkZWRiZTlhMzY5NDRiMGFiYWZiYWVkMDU1YTU5ODdhN2NmYTVjMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9mbKurBiBG0a8pg0KgA6ZKr0eoT 4LYy6GOvj7C9V5aiZewBV6ifONixJjM3Utzb1CG0wFNQeDg0UwTLUVsDmeD2A1kZ o6Zv+Lp5727OIMYSuZTNdZAISUSOJuuJhWG4P2Z7AsjbDPNhEcVlG3cQP1hyyqO5 8L0fLCx5+xJiIa+S8kKULg5fYsq0nJk4wHP9z6h/KP36FAfUv+P/Wjoh/93mk2iB XWbumHzpiGWvQq+KQmA8qdHCTO6zH9CDEpxrijzrG14RXyCbiviIx/vGOdoU1eqz W/ReFEl94hzB8kJxLYDlpSZ0hUGZNUbZa9GOTQ4mQkwgQYbEsc8UCcYxAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7b6aNpRLCrr7rtBVpZh6fPpcOXMB8GA1UdIwQY MBaAFBiIYAfaFzCwdw2GBNtz0S/SZPP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEt MTY5YzgzNmJkNmIwLzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEtMTY5YzgzNmJkNmIw LzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTzPn9/V e6wCpMDZOfjwvr6PdhPgQ3LQQAd+rtgFt9MpVtn4W+VYB8P5FPLtg1rBe3YWN2HC SXlAAI+evQ2clfOZM6344y8D4gXnjj5vr/mBSFBVJp1eKQcNjhjdXZfrOkLqsTZe PgSmDoizkBMqjWl/QII3s+dYmhwkFoBxHA/xzhWMjv0QXXkTlOTLqIui5kHT2iIp YZvwmhafV35l2xMIQAaqjjth/7fvaRGNtvXm0Mt9J0eKgn8JlMAq7KMHQydvkKzS 4k22yQsVdDC2y2BSlULWU76b9YDWDvWLTj0HaQuNJa6hvccPcsiX1JwTQ33talUs dJ1dm/Iyp2KJqA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:53 2025 by rpki-client