This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json) Hash identifier: cuIfp0GrYQ+4jWYA6FGtO2z6U7xSG0Vsw7Wbuscc4+0= Subject key identifier: 8A:E1:5B:F9:6E:13:67:18:0C:9F:47:C1:9E:43:B5:FB:7A:80:02:BD Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057 Certificate serial: 019AF42E7643A3EC9A44502B2920FE32F780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 15:01:16 +0000 Manifest this update: Sat 06 Dec 2025 15:01:16 +0000 Manifest next update: Sun 07 Dec 2025 15:01:16 +0000 Files and hashes: 1: 1YWYnMlB7bNjXZ-mR2gEvtLN3Bc.roa (hash: iv4yYaqxX9/BpncOJNi6FP4hgIeS1SbHKqiyIfxcth4=) 2: 4CDjeVRMh18gOoZFQB0kG87F3Ac.roa (hash: iS2zUZpr0OcJtSkJuXKr1ZglVEc7UdAcxQ+F6PuEqkI=) 3: CDG-7PWVVdm5Z7h-n4Ap6W6lHRg.roa (hash: 7yd+Jrhn2cJ3wJGfKqF6or4RqCKrwJRg13HNF9MQpQc=) 4: Kr-1FkX8isznu7LNjpkGbo9RXAQ.roa (hash: Nkup561eSF2a1lVSMy8ZbGKlbupLimNEQbbUAaz0DIc=) 5: Qxvf4dambUM4wGGmpG65pgeoc3M.roa (hash: dkmpKTZscpBI0IsTqLbisMD9yO7kEmJGfj1/YKPtkuc=) 6: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (hash: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=) 7: SkASK4zN7bPehdagCz89JkwUfsA.roa (hash: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=) 8: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: wNv3A712dxf1seUF/2n6KOA6IGLeb1P6dRr0A2Y0xD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:76:43:a3:ec:9a:44:50:2b:29:20:fe:32:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057 Validity Not Before: Dec 6 15:01:16 2025 GMT Not After : Dec 7 15:01:16 2025 GMT Subject: CN=8ae15bf96e1367180c9f47c19e43b5fb7a8002bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:09:dd:5f:ce:4b:42:62:36:fc:e5:d2:56: 39:2d:9a:a9:ad:7b:a9:f1:e5:3b:3c:8a:58:94:15: 44:dd:1e:4c:36:78:73:8b:2a:2e:58:4b:fd:b0:91: 36:36:27:84:f5:78:54:1f:12:e5:f7:6c:bc:c5:5e: bd:47:e3:0d:eb:3e:98:14:65:34:44:c9:03:87:d6: 75:be:3e:57:44:27:68:b8:e4:1b:0c:90:6a:a5:18: af:99:0f:af:9a:9e:5c:54:dd:44:69:71:aa:80:8a: 97:45:cb:a6:d2:e3:e5:cb:65:3c:5e:71:5a:b4:41: 92:d0:36:55:fe:22:a3:87:dc:e2:f4:b2:9e:33:84: 62:87:5c:34:28:b6:a3:06:e9:10:2f:f5:77:31:b7: 10:38:0f:59:a2:70:97:03:a6:3a:39:bf:f4:b6:4b: 24:80:bc:9b:19:3a:86:ee:61:0e:eb:34:7b:31:bc: 14:52:60:fe:8a:83:cf:40:39:e9:31:c9:e0:ea:8d: 0e:91:dc:f1:83:e5:de:f9:89:a0:97:54:f4:79:a9: 50:5c:02:f5:90:0d:5e:76:eb:ac:12:36:75:70:af: 38:b6:35:10:b3:9f:a1:ac:28:31:32:ad:eb:e0:b0: d2:4d:61:fd:0f:1e:5f:bd:a8:4f:04:ac:91:8a:73: d3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E1:5B:F9:6E:13:67:18:0C:9F:47:C1:9E:43:B5:FB:7A:80:02:BD X509v3 Authority Key Identifier: keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e2:bf:a4:e0:52:c7:5a:f6:74:cd:24:23:89:49:40:db:ed: db:c0:e1:15:22:11:b2:33:54:87:82:ce:ab:f8:de:42:39:d4: 20:5b:49:32:66:06:b0:07:36:ea:4c:49:09:73:20:e8:c5:c7: 6e:dc:52:7d:4e:1f:0b:07:e2:dd:a3:89:cb:58:fc:2d:91:92: 66:5d:da:d1:69:00:df:98:f3:67:8c:f7:d0:ae:6a:f4:49:f9: b9:00:ac:eb:61:b6:62:2c:75:cc:b7:db:96:a7:a2:fd:dd:7a: 0e:8f:f5:be:c2:42:f3:f4:22:a6:83:f6:17:01:58:72:34:a9: 84:53:25:83:7a:11:b5:21:57:f3:d6:a6:1b:35:ca:ea:02:9b: 7f:46:cf:9f:a3:71:c9:6f:cb:6f:f5:a9:01:e2:4b:61:1e:fc: ea:df:e2:67:43:eb:13:0a:e6:92:00:86:71:b0:45:2a:dc:a3: 60:63:f6:a8:4f:e5:4f:19:ef:34:3f:6a:39:ee:b7:f9:a4:46: 6a:01:cb:8c:1b:a4:fb:18:92:d0:dd:d3:82:b3:78:4c:70:3d: 24:f7:49:32:af:9e:e6:cf:aa:89:66:94:28:0a:8f:58:cb:a4: 15:86:35:d8:c2:4c:0e:5e:04:60:ea:28:a1:31:ed:02:b0:ea: 86:7c:e9:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LnZDo+yaRFArKSD+MveAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli NTMwNTcwHhcNMjUxMjA2MTUwMTE2WhcNMjUxMjA3MTUwMTE2WjAzMTEwLwYDVQQD Eyg4YWUxNWJmOTZlMTM2NzE4MGM5ZjQ3YzE5ZTQzYjVmYjdhODAwMmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8QJ3V/OS0JiNvzl0lY5LZqprXup 8eU7PIpYlBVE3R5MNnhziyouWEv9sJE2NieE9XhUHxLl92y8xV69R+MN6z6YFGU0 RMkDh9Z1vj5XRCdouOQbDJBqpRivmQ+vmp5cVN1EaXGqgIqXRcum0uPly2U8XnFa tEGS0DZV/iKjh9zi9LKeM4Rih1w0KLajBukQL/V3MbcQOA9ZonCXA6Y6Ob/0tksk gLybGTqG7mEO6zR7MbwUUmD+ioPPQDnpMcng6o0Okdzxg+Xe+Ymgl1T0ealQXAL1 kA1eduusEjZ1cK84tjUQs5+hrCgxMq3r4LDSTWH9Dx5fvahPBKyRinPTpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrhW/luE2cYDJ9HwZ5Dtft6gAK9MB8GA1UdIwQY MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt YzQzYWM0MjllNTNmLzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeK/pOBS x1r2dM0kI4lJQNvt28DhFSIRsjNUh4LOq/jeQjnUIFtJMmYGsAc26kxJCXMg6MXH btxSfU4fCwfi3aOJy1j8LZGSZl3a0WkA35jzZ4z30K5q9En5uQCs62G2Yix1zLfb lqei/d16Do/1vsJC8/QipoP2FwFYcjSphFMlg3oRtSFX89amGzXK6gKbf0bPn6Nx yW/Lb/WpAeJLYR786t/iZ0PrEwrmkgCGcbBFKtyjYGP2qE/lTxnvND9qOe63+aRG agHLjBuk+xiS0N3TgrN4THA9JPdJMq+e5s+qiWaUKAqPWMukFYY12MJMDl4EYOoo oTHtArDqhnzprw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:30 2025 by rpki-client