This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json) Hash identifier: BiS4jyQ0AYqT7fo9GkIta9JMyQoNBXQoMB9N3GXTO+Y= Subject key identifier: 0E:AC:9F:86:43:91:61:1E:77:0D:85:F7:A8:59:AC:C6:D3:1A:4E:1B Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Certificate serial: 019AF23FD333BBA7BA2E563CE0A986DE4594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft Manifest number: 0FBB Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: yl7XzIdgj3qsEZvNiIFw1ocpg2LhpdSouRWPw7OFa8k=) 2: Kot_9W-z5W9clQssyO_RwTkY8os.roa (hash: RiAmjKyPe+jYgz0emcbcNd9sovJ3TU3wuyEDxRv4KU8=) 3: O6HR6_Zj_J8JouXxKJzEpG_J9iY.roa (hash: zkyPGN71itUBurBDFCf1AgW9vMBDOWpYZJYvI+GyxrU=) 4: T8wfyMdVYO2pjTxLu-sXHav7xb4.roa (hash: wl6nwJQYbPdR2wx0aUH8mDWuK+w6c/DDvIQ/E5ZhcW8=) 5: f1RZXAhEg31a-K2NYzsPeQqdHwI.roa (hash: 08m92bP9sI2GbA9p2mUsOu1DMSTzd+WdkX5Gq/lzuNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d3:33:bb:a7:ba:2e:56:3c:e0:a9:86:de:45:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=0eac9f864391611e770d85f7a859acc6d31a4e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:c7:83:5c:a4:68:90:8d:27:4f:bf:05:73: 09:36:d3:fc:31:25:2f:0c:24:74:d3:79:4a:75:83: b8:94:07:f8:17:d6:9b:e5:bd:2b:03:9c:bc:06:65: 11:0b:60:66:5a:17:62:07:96:53:f9:88:82:3e:da: 9c:97:c2:7e:16:dc:ed:22:23:20:c1:97:da:50:04: 4d:a4:7b:7b:69:03:6e:93:ad:cb:6a:8f:a4:54:bb: 87:7c:15:0a:e9:a0:46:0d:d7:37:64:5c:4b:b2:d5: 07:38:14:97:73:66:98:18:de:ac:95:cb:e2:94:78: 50:ca:83:ea:b5:10:a9:b0:38:90:e7:f6:8e:4c:91: 88:ca:a9:9c:87:17:22:1a:f5:3d:fe:5b:fb:a7:f9: b3:7b:5c:38:da:bf:f0:2f:54:15:4b:a8:aa:35:c9: 32:4b:5f:74:20:8c:60:77:18:72:e7:6c:ff:45:ae: eb:28:df:7d:1a:f3:17:fb:84:4a:d3:ba:83:f0:89: bc:86:6a:28:ff:82:75:6e:5b:1a:e0:43:2e:95:79: 53:27:4b:da:9b:55:a2:b2:c8:65:46:a8:29:c3:83: f0:f0:d9:ec:b6:38:e5:d7:a8:11:74:04:2b:8f:90: cb:3d:d2:86:81:d4:cc:4a:62:82:02:e1:d8:ea:1c: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AC:9F:86:43:91:61:1E:77:0D:85:F7:A8:59:AC:C6:D3:1A:4E:1B X509v3 Authority Key Identifier: keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a0:ef:9d:00:e2:2e:9b:ac:3c:7b:56:51:a7:5b:38:88:7a: 24:8e:1c:e4:fd:75:de:17:0c:af:88:1e:d6:78:3c:3b:05:98: f9:3e:79:3e:2c:cf:b3:68:23:59:48:83:02:d2:80:08:e2:2b: 44:8f:48:bf:8d:c4:1a:79:89:76:1a:23:a8:45:97:b0:d1:73: e3:98:5c:a1:74:b0:70:45:16:e8:18:d0:3e:8c:1f:e1:ba:74: d6:6f:f0:5e:9b:d8:b3:42:07:0d:3f:9a:a7:0d:da:e0:0a:7c: c7:81:be:96:93:6e:7b:7c:e3:14:06:8d:85:29:01:c2:d1:73: bf:3c:1a:c9:2f:fd:c2:d7:08:ca:fa:24:09:3d:03:52:51:be: 13:eb:4c:24:0f:d8:3b:03:40:99:69:9d:f3:47:75:47:5c:b1: 43:20:29:c5:67:e0:55:83:fb:51:51:ce:8a:c0:0d:4b:03:0f: 28:c5:cc:51:3a:22:54:15:92:47:e9:c6:93:6c:b7:15:29:4d: 54:e3:a9:b3:51:8f:10:0d:12:0a:1b:e4:8a:c7:cd:fa:0e:b2: 96:d8:24:f7:f6:f6:bf:14:a1:f3:76:b3:76:24:b3:65:00:b7: c6:e7:1c:a2:3c:ab:52:10:c7:67:f7:4a:70:c9:54:98:35:11: d8:49:66:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9Mzu6e6LlY84KmG3kWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4 ODBiZTAwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EygwZWFjOWY4NjQzOTE2MTFlNzcwZDg1ZjdhODU5YWNjNmQzMWE0ZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bnHg1ykaJCNJ0+/BXMJNtP8MSUv DCR003lKdYO4lAf4F9ab5b0rA5y8BmURC2BmWhdiB5ZT+YiCPtqcl8J+FtztIiMg wZfaUARNpHt7aQNuk63Lao+kVLuHfBUK6aBGDdc3ZFxLstUHOBSXc2aYGN6slcvi lHhQyoPqtRCpsDiQ5/aOTJGIyqmchxciGvU9/lv7p/mze1w42r/wL1QVS6iqNcky S190IIxgdxhy52z/Ra7rKN99GvMX+4RK07qD8Im8hmoo/4J1blsa4EMulXlTJ0va m1WisshlRqgpw4Pw8Nnstjjl16gRdAQrj5DLPdKGgdTMSmKCAuHY6hyYKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6sn4ZDkWEedw2F96hZrMbTGk4bMB8GA1UdIwQY MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt ODdmNWI2NDc5ZDFlLzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6DvnQDi LpusPHtWUadbOIh6JI4c5P113hcMr4ge1ng8OwWY+T55PizPs2gjWUiDAtKACOIr RI9Iv43EGnmJdhojqEWXsNFz45hcoXSwcEUW6BjQPowf4bp01m/wXpvYs0IHDT+a pw3a4Ap8x4G+lpNue3zjFAaNhSkBwtFzvzwayS/9wtcIyvokCT0DUlG+E+tMJA/Y OwNAmWmd80d1R1yxQyApxWfgVYP7UVHOisANSwMPKMXMUToiVBWSR+nGk2y3FSlN VOOps1GPEA0SChvkisfN+g6yltgk9/b2vxSh83azdiSzZQC3xuccojyrUhDHZ/dK cMlUmDUR2Elmhg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:42 2025 by rpki-client