This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json) Hash identifier: lmxv7cYOOp9uu7xHORfhOU/DASuy6Wk5C7jRWvwd29g= Subject key identifier: B9:48:09:14:DD:91:67:54:F8:10:E8:1E:17:2D:F2:BB:EE:0C:7C:AE Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90 Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90 Certificate serial: 019B32313183389BE00F8657787F0056A71E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft Manifest number: 13F5 Signing time: Thu 18 Dec 2025 16:00:43 +0000 Manifest this update: Thu 18 Dec 2025 16:00:43 +0000 Manifest next update: Fri 19 Dec 2025 16:00:43 +0000 Files and hashes: 1: 2dVxZZZj6zlHLdxhcm5JjXaDenM.roa (hash: rbawjEq/xe3wCEVClyA8U6kAU84cJfL3aa5STA3091s=) 2: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: hEkAbUTDcwWYBEEe9Ji4MWNbWYSpXUnOP9HGieWoCKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:31:83:38:9b:e0:0f:86:57:78:7f:00:56:a7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90 Validity Not Before: Dec 18 16:00:43 2025 GMT Not After : Dec 19 16:00:43 2025 GMT Subject: CN=b9480914dd916754f810e81e172df2bbee0c7cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:23:cb:fc:40:6e:3c:75:71:b1:26:77:cf:00: 8f:c9:2e:99:50:5a:aa:f5:c4:4c:b6:11:6a:91:d2: 16:b8:cd:24:83:eb:30:fa:20:d8:21:05:66:ca:c8: 37:35:74:27:46:1d:d1:d3:5d:25:9c:88:07:c1:e7: 04:a6:b6:81:74:53:17:60:af:e8:b8:a4:01:b0:e3: 84:74:69:05:76:38:e7:88:17:5f:0a:9e:46:37:dd: 0a:4e:33:01:2c:89:58:f6:e0:bc:c3:cc:f3:a2:a4: 53:fc:ad:4e:83:63:e3:04:3a:27:88:cf:c2:5d:7b: e1:8d:63:46:f2:86:f4:ec:54:98:79:57:09:97:30: 1a:a1:fe:c5:5e:0a:56:87:4a:70:ad:28:60:20:61: ba:2e:a4:9c:eb:48:87:19:fa:f1:ff:22:ce:52:c6: eb:8a:17:b5:2e:b3:69:8a:4e:31:44:50:bc:55:73: 85:7c:ac:92:18:16:77:9b:bb:4f:2f:fb:32:84:c4: 5e:a4:da:92:c9:0a:79:4e:01:88:02:d3:8b:6d:14: 37:20:5f:08:31:7e:1d:e6:9a:51:b7:25:89:4e:03: 88:95:a5:b9:6a:9c:92:da:67:11:d6:2d:3a:ff:4d: 07:9d:a5:22:6d:31:ce:2e:2b:6a:35:d2:3d:c9:34: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:48:09:14:DD:91:67:54:F8:10:E8:1E:17:2D:F2:BB:EE:0C:7C:AE X509v3 Authority Key Identifier: keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:df:0e:7d:d3:1d:29:19:9a:9f:e4:01:b7:a7:c8:4b:38:c9: 1b:02:83:be:b0:1d:f1:ec:d4:83:e6:aa:77:28:4e:8b:06:73: 1d:8e:8a:9f:fb:d1:b3:f5:70:35:5f:1d:0d:a5:fa:84:1a:d2: 4f:52:dd:10:be:77:72:e0:51:cc:01:b5:85:a6:b7:01:2d:c3: 0d:1c:71:af:3e:b9:24:fa:ef:d8:42:14:d2:c0:b0:0e:9d:8e: 3d:8e:4b:0a:d1:e2:fc:90:a8:e3:63:74:f0:d6:f0:f5:3b:d9: b7:eb:bc:07:56:f0:9e:ed:b5:be:59:a2:4a:61:ac:10:88:d9: e9:6f:9f:d8:fe:a2:23:f4:8a:28:64:ed:c5:44:c1:29:b5:f2: 96:6b:51:cf:90:e4:18:2f:31:3f:1d:e9:79:71:79:00:07:2c: 7e:0d:ce:b2:e7:18:e5:c2:b4:0d:a5:79:45:36:91:48:9f:80: 08:c3:8b:1d:ec:07:4c:3a:3d:e8:81:2a:a6:52:8d:52:e8:b2: 25:86:f7:0f:f9:07:27:f0:30:11:13:ac:0c:4c:aa:31:7c:e0: ed:ba:a7:6f:7f:a9:90:2d:bd:9d:a2:f3:40:2b:45:0b:43:e2: d1:c4:aa:ee:5b:bd:8a:bc:81:a4:bd:8f:32:e9:0f:7e:09:0a: b2:ed:bc:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMTGDOJvgD4ZXeH8AVqceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OGZiMDk4NWUzNjBjMzhmODY1OGQ1NjY4N2NhODYyZDk0 MDhkOTAwHhcNMjUxMjE4MTYwMDQzWhcNMjUxMjE5MTYwMDQzWjAzMTEwLwYDVQQD EyhiOTQ4MDkxNGRkOTE2NzU0ZjgxMGU4MWUxNzJkZjJiYmVlMGM3Y2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iPL/EBuPHVxsSZ3zwCPyS6ZUFqq 9cRMthFqkdIWuM0kg+sw+iDYIQVmysg3NXQnRh3R010lnIgHwecEpraBdFMXYK/o uKQBsOOEdGkFdjjniBdfCp5GN90KTjMBLIlY9uC8w8zzoqRT/K1Og2PjBDoniM/C XXvhjWNG8ob07FSYeVcJlzAaof7FXgpWh0pwrShgIGG6LqSc60iHGfrx/yLOUsbr ihe1LrNpik4xRFC8VXOFfKySGBZ3m7tPL/syhMRepNqSyQp5TgGIAtOLbRQ3IF8I MX4d5ppRtyWJTgOIlaW5apyS2mcR1i06/00HnaUibTHOLitqNdI9yTR2PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlICRTdkWdU+BDoHhct8rvuDHyuMB8GA1UdIwQY MBaAFBiPsJheNgw4+GWNVmh8qGLZQI2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAt ZDA3OTA2YTg0YjFkLzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAtZDA3OTA2YTg0YjFk LzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAut8OfdMd KRman+QBt6fISzjJGwKDvrAd8ezUg+aqdyhOiwZzHY6Kn/vRs/VwNV8dDaX6hBrS T1LdEL53cuBRzAG1haa3AS3DDRxxrz65JPrv2EIU0sCwDp2OPY5LCtHi/JCo42N0 8Nbw9TvZt+u8B1bwnu21vlmiSmGsEIjZ6W+f2P6iI/SKKGTtxUTBKbXylmtRz5Dk GC8xPx3peXF5AAcsfg3OsucY5cK0DaV5RTaRSJ+ACMOLHewHTDo96IEqplKNUuiy JYb3D/kHJ/AwEROsDEyqMXzg7bqnb3+pkC29naLzQCtFC0Pi0cSq7lu9iryBpL2P MukPfgkKsu28Hg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:52:55 2025 by rpki-client