This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft File: GI8TycwU9V7iIgtEl2mS0R1d6HE.mft (raw, json) Hash identifier: TuK5ULUUDdtBz2MGe6vJmUCR7LfpqXSWA7gUwCTSf6c= Subject key identifier: FB:B1:E2:70:DF:A7:94:02:66:8C:1E:2B:23:DD:0E:E1:B6:31:D1:92 Authority key identifier: 18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71 Certificate issuer: /CN=188f13c9cc14f55ee2220b44976992d11d5de871 Certificate serial: 019B5A88487C2F69C79D1784F4F2A929AB5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft Manifest number: 8E Signing time: Fri 26 Dec 2025 12:00:39 +0000 Manifest this update: Fri 26 Dec 2025 12:00:39 +0000 Manifest next update: Sat 27 Dec 2025 12:00:39 +0000 Files and hashes: 1: AGfqt0Fez0MZXwHxBwMvHI2laJc.roa (hash: 3flR0vw+7HV07hNU6MM3VzWxFgugACGxcRcbeKB+uUo=) 2: GI8TycwU9V7iIgtEl2mS0R1d6HE.crl (hash: /+4VTtNmceSnbXChfpFAeg1bslufSBWHIEhOF3JqOJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:48:7c:2f:69:c7:9d:17:84:f4:f2:a9:29:ab:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188f13c9cc14f55ee2220b44976992d11d5de871 Validity Not Before: Dec 26 12:00:39 2025 GMT Not After : Dec 27 12:00:39 2025 GMT Subject: CN=fbb1e270dfa79402668c1e2b23dd0ee1b631d192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:18:ee:8d:3e:76:81:ec:1c:9a:d1:51:75:87: fd:51:e7:49:e0:9b:50:6f:23:bf:4d:a1:d7:ea:92: 10:c6:92:be:7d:43:09:62:b3:b3:0d:c8:9f:63:9e: 62:15:60:0c:33:27:0c:3e:71:1f:13:26:f6:62:26: 7d:a5:f9:6e:7b:df:de:46:f2:37:c6:0b:55:2c:9d: 68:a1:8f:e8:5e:62:cf:c2:e4:4f:ec:58:44:f8:d0: 3f:48:bb:c8:f5:75:c4:da:b7:ca:ac:a7:ec:02:c7: 2e:a2:29:d5:73:c4:d2:b6:35:e6:09:74:25:94:a8: fb:dd:28:bb:50:86:59:b5:95:7a:f2:91:ae:0c:1e: 1f:05:17:fe:20:fa:3b:cc:46:4c:ed:11:bd:eb:b7: ab:b8:ad:25:c2:98:48:8b:8e:61:30:b7:c1:42:bd: b6:97:11:63:37:09:05:94:25:6e:49:0b:38:c8:37: 03:80:f1:4e:e6:ad:4c:08:36:59:99:04:93:22:8e: 57:75:db:9b:13:d8:02:5a:db:6b:fc:d7:31:18:bc: 51:df:b7:f2:dc:04:b1:71:6d:32:47:2b:aa:c5:bd: f1:5f:a7:e8:da:5e:2a:26:c8:78:21:03:38:da:c7: 76:0b:15:a3:57:d1:e6:a8:92:a4:bd:31:78:64:b4: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B1:E2:70:DF:A7:94:02:66:8C:1E:2B:23:DD:0E:E1:B6:31:D1:92 X509v3 Authority Key Identifier: keyid:18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9a:bb:5e:a8:fc:c6:b5:09:83:0a:c9:b9:6e:fe:43:03:fb: 5e:41:ce:dd:1e:ba:5e:19:eb:f2:1c:87:62:b2:16:99:64:e7: 12:31:0c:14:53:75:20:72:73:a9:48:d9:b5:6e:6d:8a:34:d3: 91:3a:8b:0c:a3:05:9f:f5:bf:57:f3:f6:30:e4:9c:1a:08:8f: 9f:92:52:b1:34:5f:3f:4a:48:23:b4:2e:85:5e:f1:1a:cf:a8: 12:47:28:11:4c:8e:e9:b5:e0:fc:65:a9:49:0e:71:c6:ef:41: 9a:43:34:c3:dc:3f:0b:2f:33:ba:9f:14:ef:e9:92:58:38:83: f5:d4:e6:bb:e5:5c:b6:f4:07:03:b5:a1:c8:ae:97:59:5e:67: b0:b7:37:7a:f7:d3:94:1e:18:c0:28:dc:85:d5:f0:d7:40:08: 5b:a0:b8:ff:21:be:40:df:3c:25:9f:de:1a:4b:22:03:da:91: 98:dc:63:19:2f:36:a2:03:00:09:b6:0b:f6:47:f7:20:55:96: 60:a9:73:02:ed:50:66:d6:b8:82:9c:1a:b6:8f:7d:da:7c:ba: 37:02:80:48:36:04:be:6d:77:43:72:c5:ed:98:a7:e8:35:31: f4:10:74:4d:4b:a6:55:ea:65:14:f2:56:c1:f6:cc:4e:ea:ef: 09:72:9f:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiEh8L2nHnReE9PKpKatdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OGYxM2M5Y2MxNGY1NWVlMjIyMGI0NDk3Njk5MmQxMWQ1 ZGU4NzEwHhcNMjUxMjI2MTIwMDM5WhcNMjUxMjI3MTIwMDM5WjAzMTEwLwYDVQQD EyhmYmIxZTI3MGRmYTc5NDAyNjY4YzFlMmIyM2RkMGVlMWI2MzFkMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RjujT52gewcmtFRdYf9UedJ4JtQ byO/TaHX6pIQxpK+fUMJYrOzDcifY55iFWAMMycMPnEfEyb2YiZ9pflue9/eRvI3 xgtVLJ1ooY/oXmLPwuRP7FhE+NA/SLvI9XXE2rfKrKfsAscuoinVc8TStjXmCXQl lKj73Si7UIZZtZV68pGuDB4fBRf+IPo7zEZM7RG967eruK0lwphIi45hMLfBQr22 lxFjNwkFlCVuSQs4yDcDgPFO5q1MCDZZmQSTIo5XddubE9gCWttr/NcxGLxR37fy 3ASxcW0yRyuqxb3xX6fo2l4qJsh4IQM42sd2CxWjV9HmqJKkvTF4ZLSaPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPux4nDfp5QCZoweKyPdDuG2MdGSMB8GA1UdIwQY MBaAFBiPE8nMFPVe4iILRJdpktEdXehxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0k4VHljd1U5VjdpSWd0RWwybVMwUjFkNkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmNmNGMtNzhlMi00OWI1LTgwZTct NTdiMGRjZDdlOGFmLzEvR0k4VHljd1U5VjdpSWd0RWwybVMwUjFkNkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jMmNmNGMtNzhlMi00OWI1LTgwZTctNTdiMGRjZDdlOGFm LzEvR0k4VHljd1U5VjdpSWd0RWwybVMwUjFkNkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5q7Xqj8 xrUJgwrJuW7+QwP7XkHO3R66Xhnr8hyHYrIWmWTnEjEMFFN1IHJzqUjZtW5tijTT kTqLDKMFn/W/V/P2MOScGgiPn5JSsTRfP0pII7QuhV7xGs+oEkcoEUyO6bXg/GWp SQ5xxu9BmkM0w9w/Cy8zup8U7+mSWDiD9dTmu+VctvQHA7WhyK6XWV5nsLc3evfT lB4YwCjchdXw10AIW6C4/yG+QN88JZ/eGksiA9qRmNxjGS82ogMACbYL9kf3IFWW YKlzAu1QZta4gpwato992ny6NwKASDYEvm13Q3LF7Zin6DUx9BB0TUumVeplFPJW wfbMTurvCXKfEA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:51 2025 by rpki-client