This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json) Hash identifier: QVfaka2kdjyQVCIwTKQY6+vu5km99+HXjr3iE5cNN+o= Subject key identifier: F2:6F:C3:99:5C:8C:21:23:43:F4:0E:82:01:52:F1:7B:28:D4:BE:E1 Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23 Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423 Certificate serial: 019AF5098A26E4503FBF32988EEB5D899611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 19:00:34 +0000 Manifest this update: Sat 06 Dec 2025 19:00:34 +0000 Manifest next update: Sun 07 Dec 2025 19:00:34 +0000 Files and hashes: 1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: jEl5B7V1XzrJq8Jb1jugYs+dRXBoXNHgeAKmv4S6SLU=) 2: n3bBKfncJSw0BedT5BmrufOi-w4.roa (hash: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8a:26:e4:50:3f:bf:32:98:8e:eb:5d:89:96:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423 Validity Not Before: Dec 6 19:00:34 2025 GMT Not After : Dec 7 19:00:34 2025 GMT Subject: CN=f26fc3995c8c212343f40e820152f17b28d4bee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:58:65:d7:2d:32:9e:af:76:92:a0:75:34: b9:30:4a:8f:2b:f6:ce:03:b1:e6:4b:5c:00:59:4e: 5a:4b:89:9f:e3:ad:ef:e4:2f:e3:0d:56:cf:3c:a1: 9c:63:25:e6:7f:99:11:8c:34:8e:b1:d7:b1:9c:ce: 42:41:c0:74:e9:52:3a:34:06:2a:4d:fb:87:f7:18: 67:de:4c:e6:df:85:50:5d:49:53:08:07:d1:7b:90: 94:22:c4:6d:0c:f7:3f:55:3f:94:21:45:7d:33:dc: 14:fa:58:32:74:64:62:b5:b3:e6:54:a4:1e:47:82: c9:0b:7d:94:e8:dd:25:10:08:54:f9:f7:6b:7a:5c: 12:b9:cb:10:fd:41:fa:2f:59:f2:d4:a4:27:9f:6d: 42:c4:af:ea:d3:c9:52:41:5b:b1:5c:d9:8c:48:60: dd:24:e7:c4:85:75:9c:87:2e:67:29:90:d4:a3:c5: 66:f5:dd:8c:8c:3c:84:4e:e7:70:4f:0f:b4:93:ed: a5:e7:88:d9:4d:b9:5d:75:24:56:ab:8a:77:0f:d9: 8c:af:ae:42:25:18:f8:22:10:36:6f:13:fd:de:b1: 34:03:80:b4:ec:d1:f3:8a:3f:ca:e4:7f:2b:6f:56: 63:60:c4:fc:9f:97:f3:b0:87:b8:57:44:79:54:df: 9b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6F:C3:99:5C:8C:21:23:43:F4:0E:82:01:52:F1:7B:28:D4:BE:E1 X509v3 Authority Key Identifier: keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:22:c8:20:8c:00:22:48:8c:18:c2:f9:c3:be:0b:7f:c3:95: b2:38:a8:48:50:79:f0:dd:f1:54:04:ef:f8:3f:4d:ca:57:53: ee:f0:95:19:9a:15:a2:b2:b6:d1:a7:3c:e7:64:75:52:c2:02: 8d:7a:d3:7c:2c:f3:6f:18:4b:75:cc:4d:74:86:f5:da:35:45: 18:09:72:5e:13:de:e9:88:29:34:9a:aa:a7:4d:84:f0:4c:05: d6:92:31:a6:f1:4f:a3:61:ac:aa:b4:16:4f:a0:02:29:2b:7b: 4b:56:65:0d:89:b2:cf:76:d0:2b:2e:c2:7a:ab:34:33:35:72: 2d:7b:a5:dd:22:49:0f:4c:87:31:fc:9d:8c:6a:42:da:9c:4d: 4b:21:ee:17:9c:ae:84:c9:7a:28:c7:5d:1b:73:5b:b5:5d:51: 82:59:3d:57:3d:03:b2:53:06:4c:f6:38:31:19:c5:95:38:f1: 46:4d:99:31:67:34:e0:1f:bd:91:94:25:bf:28:5b:ad:2a:15: 75:f5:e4:05:a5:7d:5c:0d:6c:ca:c3:44:f4:b1:c7:52:a4:9b: f8:bd:93:11:07:48:0a:d2:c2:a7:bc:4f:cc:b1:41:ba:ee:0f: fb:4d:9d:58:21:f8:c4:bd:9c:84:f4:8c:2f:63:de:e3:42:5b: 50:5b:fb:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYom5FA/vzKYjutdiZYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OGVkNDg4NGYxMTE5MzljYTZjN2YwZjM0YjI3OTJiMzli OTM0MjMwHhcNMjUxMjA2MTkwMDM0WhcNMjUxMjA3MTkwMDM0WjAzMTEwLwYDVQQD EyhmMjZmYzM5OTVjOGMyMTIzNDNmNDBlODIwMTUyZjE3YjI4ZDRiZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwRYZdctMp6vdpKgdTS5MEqPK/bO A7HmS1wAWU5aS4mf463v5C/jDVbPPKGcYyXmf5kRjDSOsdexnM5CQcB06VI6NAYq TfuH9xhn3kzm34VQXUlTCAfRe5CUIsRtDPc/VT+UIUV9M9wU+lgydGRitbPmVKQe R4LJC32U6N0lEAhU+fdrelwSucsQ/UH6L1ny1KQnn21CxK/q08lSQVuxXNmMSGDd JOfEhXWchy5nKZDUo8Vm9d2MjDyETudwTw+0k+2l54jZTblddSRWq4p3D9mMr65C JRj4IhA2bxP93rE0A4C07NHzij/K5H8rb1ZjYMT8n5fzsIe4V0R5VN+buwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJvw5lcjCEjQ/QOggFS8Xso1L7hMB8GA1UdIwQY MBaAFBiO1IhPERk5ymx/DzSyeSs5uTQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQt NWUwNzc3YjA0MDQ5LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQtNWUwNzc3YjA0MDQ5 LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSLIIIwA IkiMGML5w74Lf8OVsjioSFB58N3xVATv+D9NyldT7vCVGZoVorK20ac852R1UsIC jXrTfCzzbxhLdcxNdIb12jVFGAlyXhPe6YgpNJqqp02E8EwF1pIxpvFPo2GsqrQW T6ACKSt7S1ZlDYmyz3bQKy7Ceqs0MzVyLXul3SJJD0yHMfydjGpC2pxNSyHuF5yu hMl6KMddG3NbtV1Rglk9Vz0DslMGTPY4MRnFlTjxRk2ZMWc04B+9kZQlvyhbrSoV dfXkBaV9XA1sysNE9LHHUqSb+L2TEQdICtLCp7xPzLFBuu4P+02dWCH4xL2chPSM L2Pe40JbUFv7Lg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:43 2025 by rpki-client