This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft File: giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json) Hash identifier: 0Iy69ErzYvM2vB2cfF+VLabLKr2InmQUrsinKjKXsao= Subject key identifier: C7:21:9B:5B:93:9D:A2:9A:34:9C:9F:51:E7:66:7E:48:32:98:8D:C2 Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8 Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8 Certificate serial: 019AF0887F5C7F18BFDABD21C38F4E02AC5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft Manifest number: 16F1 Signing time: Fri 05 Dec 2025 22:01:08 +0000 Manifest this update: Fri 05 Dec 2025 22:01:08 +0000 Manifest next update: Sat 06 Dec 2025 22:01:08 +0000 Files and hashes: 1: GpgJajGCbSNl3e4aO7PdAchg1ng.roa (hash: JjeUV08MlhBjZNwlusZZDt6ugsqaNAcVm8lYJFEKoLw=) 2: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: 05X5qeX2+Fm/+7p4bhE4Fb+zXn5wtA5bMRqCVHspEDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:7f:5c:7f:18:bf:da:bd:21:c3:8f:4e:02:ac:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8 Validity Not Before: Dec 5 22:01:08 2025 GMT Not After : Dec 6 22:01:08 2025 GMT Subject: CN=c7219b5b939da29a349c9f51e7667e4832988dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:d4:49:f3:d3:4b:a9:5b:13:40:b1:d2:81: e4:96:86:ea:f5:07:11:00:9b:ac:45:b3:4e:9d:db: bc:7a:8b:a0:3d:24:b5:e6:8a:29:92:34:f6:82:06: b2:7c:ad:6b:b8:55:8d:ad:54:8b:0f:69:80:38:7e: f7:eb:88:15:da:71:99:ea:87:f1:1f:b4:9f:87:bc: 56:c0:7c:e2:9e:33:0f:bc:91:59:57:b2:4a:f6:ab: 84:c8:07:33:46:3e:74:70:d4:6b:b4:00:b1:16:5c: 92:b1:c0:7a:b6:f3:7b:e0:ad:e4:e2:6d:45:ab:39: 23:00:cd:12:d1:ef:91:ca:af:53:d2:7d:a7:8d:b9: 45:2d:4b:9b:6b:9a:68:47:f5:ba:e4:80:55:11:d8: e5:7f:90:a3:6f:d0:1c:75:16:d4:66:c4:7e:ef:51: ca:5e:6f:8b:bc:f2:97:75:37:32:b7:fd:4c:85:9f: 98:f5:74:f0:71:48:11:05:8d:bb:a4:4a:a8:ae:66: 69:12:4a:41:c6:e7:fd:0f:ef:ad:46:7c:f3:6a:ba: 7a:34:41:2a:62:7b:1f:62:37:c5:dc:a1:ea:af:4d: ba:60:cb:dc:ae:e8:a4:58:73:08:bf:9f:5f:28:b0: 0f:82:aa:45:17:fe:4e:87:9f:f3:91:b6:f0:d9:3f: 41:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:21:9B:5B:93:9D:A2:9A:34:9C:9F:51:E7:66:7E:48:32:98:8D:C2 X509v3 Authority Key Identifier: keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ee:08:92:b1:3c:54:0d:ee:75:77:56:79:3e:3f:f9:dc:ca: 3c:ac:18:cc:6a:85:d6:62:90:d8:c0:58:8e:87:8a:e8:ee:34: 4a:89:38:12:a4:64:85:79:4c:48:2d:f0:10:12:f0:6f:51:a7: ba:a3:2f:9c:bd:75:ce:88:2f:dc:e0:3b:27:0d:a2:4f:62:9a: f1:b5:1b:e7:6d:06:d5:54:cc:71:66:8e:bf:4e:cf:e2:0f:62: 80:f8:fb:a6:11:11:4d:53:29:c0:f3:d0:2c:46:a7:b7:6d:d8: 61:35:bd:6f:b1:64:bb:f9:d9:bd:45:ba:73:b0:13:60:c5:55: 7b:82:44:74:da:c2:c7:99:a2:13:bd:4d:9e:21:46:71:34:a6: 34:d8:b1:a7:32:65:d4:e6:a4:58:f8:9f:6e:d8:3b:64:de:3c: 19:58:31:13:eb:fa:38:a1:47:53:39:f2:14:58:62:24:be:30: b5:53:7c:2a:9c:bb:1f:f4:d1:ab:07:81:83:a1:5e:11:8c:27: 1e:57:2f:a4:61:43:e0:c9:e8:5f:8a:ad:44:6e:0a:72:16:76: c1:7a:ac:33:6e:8e:7e:fc:cd:b9:ed:40:f9:35:25:42:47:99: c3:4b:82:dd:71:9a:3c:f8:e2:1c:ab:da:c9:e3:b5:40:ad:88: 4a:28:ee:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiH9cfxi/2r0hw49OAqxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMjQ4YjVlMDg4NTg5NjRiYTJiNTQ3MzE1MjAxNWZkNTk5 MWZkZjgwHhcNMjUxMjA1MjIwMTA4WhcNMjUxMjA2MjIwMTA4WjAzMTEwLwYDVQQD EyhjNzIxOWI1YjkzOWRhMjlhMzQ5YzlmNTFlNzY2N2U0ODMyOTg4ZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbXUSfPTS6lbE0Cx0oHklobq9QcR AJusRbNOndu8eougPSS15oopkjT2ggayfK1ruFWNrVSLD2mAOH7364gV2nGZ6ofx H7Sfh7xWwHzinjMPvJFZV7JK9quEyAczRj50cNRrtACxFlySscB6tvN74K3k4m1F qzkjAM0S0e+Ryq9T0n2njblFLUuba5poR/W65IBVEdjlf5Cjb9AcdRbUZsR+71HK Xm+LvPKXdTcyt/1MhZ+Y9XTwcUgRBY27pEqormZpEkpBxuf9D++tRnzzarp6NEEq YnsfYjfF3KHqr026YMvcruikWHMIv59fKLAPgqpFF/5Oh5/zkbbw2T9BewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMchm1uTnaKaNJyfUedmfkgymI3CMB8GA1UdIwQY MBaAFIIki14IhYlkuitUcxUgFf1Zkf34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYt YWU2NDY5YWIzZjQwLzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYtYWU2NDY5YWIzZjQw LzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAce4IkrE8 VA3udXdWeT4/+dzKPKwYzGqF1mKQ2MBYjoeK6O40Sok4EqRkhXlMSC3wEBLwb1Gn uqMvnL11zogv3OA7Jw2iT2Ka8bUb520G1VTMcWaOv07P4g9igPj7phERTVMpwPPQ LEant23YYTW9b7Fku/nZvUW6c7ATYMVVe4JEdNrCx5miE71NniFGcTSmNNixpzJl 1OakWPifbtg7ZN48GVgxE+v6OKFHUznyFFhiJL4wtVN8Kpy7H/TRqweBg6FeEYwn HlcvpGFD4MnoX4qtRG4KchZ2wXqsM26OfvzNue1A+TUlQkeZw0uC3XGaPPjiHKva yeO1QK2ISijuOw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:47 2025 by rpki-client