This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft File: GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft (raw, json) Hash identifier: H8bVuWbg90Pr/0QCHWfLPCyLbiRY837DCtHc6acwwkU= Subject key identifier: FA:99:9C:5E:EB:B4:2D:82:CE:F3:8F:E3:86:44:D0:B3:4E:A9:50:F8 Authority key identifier: 18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F Certificate issuer: /CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f Certificate serial: 019B59E3F16D8EA23AC56F8E9334224D46C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft Manifest number: 19 Signing time: Fri 26 Dec 2025 09:01:09 +0000 Manifest this update: Fri 26 Dec 2025 09:01:09 +0000 Manifest next update: Sat 27 Dec 2025 09:01:09 +0000 Files and hashes: 1: GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl (hash: WLu4cOvlOInQJzHYRwxuGhdX+kiSlk0YxumqHWzAZac=) 2: dKUSVy6IdXXRjgtpigNGU0J9jeU.asa (hash: CejzruUkEWq9zLEaoAabqikLpPGhjf75ZRntC5aAVpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:f1:6d:8e:a2:3a:c5:6f:8e:93:34:22:4d:46:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f Validity Not Before: Dec 26 09:01:09 2025 GMT Not After : Dec 27 09:01:09 2025 GMT Subject: CN=fa999c5eebb42d82cef38fe38644d0b34ea950f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6f:45:03:57:41:d3:41:36:cc:f4:54:d5:64: 18:85:2d:6d:60:15:a4:63:8f:bb:51:f5:26:40:66: 5a:f3:51:f4:e8:a8:75:68:1b:9f:62:39:38:cd:2b: 73:d3:7d:af:77:71:88:41:d9:a0:c9:bd:d6:4c:65: 7c:25:66:84:e5:19:53:38:68:2a:a2:7d:8a:4a:ab: c3:a9:60:aa:e8:96:68:62:1d:77:dc:e1:9f:7a:06: 0f:d1:ec:5f:04:c6:87:4f:09:95:ca:57:4f:ed:d9: 6e:1a:8f:60:49:26:5d:c1:94:74:74:c4:9f:28:fc: 91:56:65:b2:98:45:53:10:f1:d4:f5:5c:f4:a4:a4: 2d:b4:43:af:86:ba:01:55:b7:ad:47:39:8d:ad:37: 37:1e:0c:ce:2f:25:e7:26:19:ad:06:94:d5:4d:0c: ca:45:38:1a:4e:26:9d:20:d8:a6:38:7a:a2:09:fd: 7b:31:cb:12:bf:bc:e3:c4:e9:6c:5f:12:11:91:45: 1f:60:1c:61:d4:79:b7:78:f3:2f:c1:fb:5f:7c:d3: 25:77:ab:16:9c:a7:a3:5f:16:d6:f4:0b:51:27:1d: e9:35:06:47:e7:1a:3d:2c:fb:a8:43:1e:db:d2:63: 10:ba:d4:cb:cf:54:8c:7c:4d:4c:54:42:a1:68:87: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:99:9C:5E:EB:B4:2D:82:CE:F3:8F:E3:86:44:D0:B3:4E:A9:50:F8 X509v3 Authority Key Identifier: keyid:18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c0:eb:35:92:e5:92:8c:c2:b2:e9:cb:7a:98:4e:bb:28:13: 0f:d6:fc:bb:8f:e4:2e:0a:13:26:a6:1d:09:01:e6:5d:dc:74: 7a:1f:12:c0:bc:8a:b6:06:79:4f:5a:fc:1f:35:f7:67:00:7c: f6:7b:e5:10:cf:a4:ba:a8:e1:fd:6a:53:f5:f9:4d:61:3b:d0: d2:7a:8b:7a:b8:9f:5d:ea:1f:d2:d9:f5:6e:0e:fc:c7:d3:56: 89:61:79:81:ad:ad:89:a8:2f:4b:ca:01:12:99:57:9d:1c:25: b2:f9:71:c5:e2:8d:90:52:01:e1:88:0e:07:25:43:41:d6:fa: 89:8a:16:de:e7:97:9a:49:b4:91:dc:4e:22:f2:11:b5:f9:cd: f6:ef:c0:9f:a8:05:7c:a1:37:dc:90:af:c4:80:9b:4d:df:a3: 07:ef:a0:55:3f:f4:3f:b8:81:15:b4:e0:5c:f0:dc:ae:92:c7: 89:13:c4:ca:86:3a:9a:40:fb:59:35:e6:6c:48:c8:bf:d9:4c: 6b:74:d1:8a:7f:d9:af:b4:ca:7d:ab:f9:ae:65:c7:60:61:c9: 76:76:4a:88:f9:95:a2:1a:f2:2f:b6:4e:ba:56:17:01:04:3a: 4d:0e:3b:c8:97:45:85:53:da:54:23:5a:c9:8d:08:54:b1:85: 45:5a:aa:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/FtjqI6xW+OkzQiTUbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OGE4N2FiNzkxMDE5Mzc5M2I4YWE2YzNjMWVlNjZiZGIw NmE3MWYwHhcNMjUxMjI2MDkwMTA5WhcNMjUxMjI3MDkwMTA5WjAzMTEwLwYDVQQD EyhmYTk5OWM1ZWViYjQyZDgyY2VmMzhmZTM4NjQ0ZDBiMzRlYTk1MGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm9FA1dB00E2zPRU1WQYhS1tYBWk Y4+7UfUmQGZa81H06Kh1aBufYjk4zStz032vd3GIQdmgyb3WTGV8JWaE5RlTOGgq on2KSqvDqWCq6JZoYh133OGfegYP0exfBMaHTwmVyldP7dluGo9gSSZdwZR0dMSf KPyRVmWymEVTEPHU9Vz0pKQttEOvhroBVbetRzmNrTc3HgzOLyXnJhmtBpTVTQzK RTgaTiadINimOHqiCf17McsSv7zjxOlsXxIRkUUfYBxh1Hm3ePMvwftffNMld6sW nKejXxbW9AtRJx3pNQZH5xo9LPuoQx7b0mMQutTLz1SMfE1MVEKhaIectwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqZnF7rtC2CzvOP44ZE0LNOqVD4MB8GA1UdIwQY MBaAFBiKh6t5EBk3k7iqbDwe5mvbBqcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0lxSHEza1FHVGVUdUtwc1BCN21hOXNHcHg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hZjExMjYtMWZjNy00MTMxLTkwZWYt NjQ4NGYyYTQzN2RlLzEvR0lxSHEza1FHVGVUdUtwc1BCN21hOXNHcHg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9hZjExMjYtMWZjNy00MTMxLTkwZWYtNjQ4NGYyYTQzN2Rl LzEvR0lxSHEza1FHVGVUdUtwc1BCN21hOXNHcHg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcDrNZLl kozCsunLephOuygTD9b8u4/kLgoTJqYdCQHmXdx0eh8SwLyKtgZ5T1r8HzX3ZwB8 9nvlEM+kuqjh/WpT9flNYTvQ0nqLerifXeof0tn1bg78x9NWiWF5ga2tiagvS8oB EplXnRwlsvlxxeKNkFIB4YgOByVDQdb6iYoW3ueXmkm0kdxOIvIRtfnN9u/An6gF fKE33JCvxICbTd+jB++gVT/0P7iBFbTgXPDcrpLHiRPEyoY6mkD7WTXmbEjIv9lM a3TRin/Zr7TKfav5rmXHYGHJdnZKiPmVohryL7ZOulYXAQQ6TQ47yJdFhVPaVCNa yY0IVLGFRVqqNw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:13 2025 by rpki-client