This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json) Hash identifier: nnCbZhdCgDrs+Ap6gDSnYk/PMMCABk7+xhGPxEy6h2g= Subject key identifier: 0A:35:41:FB:56:BE:59:9E:C5:2E:AB:27:97:10:B3:96:B2:84:70:63 Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9 Certificate serial: 019B1F18630546D345512FE68F78A6635F1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft Manifest number: 0853 Signing time: Sun 14 Dec 2025 23:00:50 +0000 Manifest this update: Sun 14 Dec 2025 23:00:50 +0000 Manifest next update: Mon 15 Dec 2025 23:00:50 +0000 Files and hashes: 1: 5lbTUO-rP5txsV_jlKv3vzS10Vc.roa (hash: VgScyBVTOIb/scuSoZmb+259XQHu/6r7pBA0Gc4Wdqs=) 2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: 1j93RKPxO53+Yt943GNDe5HupX3ijm15oEFCdV+5rFk=) 3: RR-wG56YXYGUEbsQFd9GOjHnKvM.roa (hash: eG7mgkU6tN6hBwmEUuDYJD2Lxu/DlOxJUe50nzg9em4=) 4: TdRFPSiE6z0QGX9lW2WUDs-qrvc.roa (hash: uIOA5ClG5A+YjWezToN8AYQViV6aWN3VOQLxA91W/R8=) 5: W9jLQPfJ-gf7W45fE6xy024pvso.roa (hash: myRMJIwFBs9jjITp4SZwdlJzPIPHFfsrLal6I49sinM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:18:63:05:46:d3:45:51:2f:e6:8f:78:a6:63:5f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9 Validity Not Before: Dec 14 23:00:50 2025 GMT Not After : Dec 15 23:00:50 2025 GMT Subject: CN=0a3541fb56be599ec52eab279710b396b2847063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:68:1c:eb:55:49:b6:7b:b2:01:18:29:40: be:e3:f4:08:32:68:ec:46:2d:1c:e5:14:24:39:58: d6:3f:7a:f7:d1:23:f4:e7:ca:46:31:7c:58:1b:c7: 9f:c8:3e:7a:d6:19:5c:ff:cd:65:0d:c7:7b:62:01: 88:df:6f:e9:90:da:25:e9:92:01:ed:b4:04:25:0d: ad:3e:89:87:29:db:ad:75:64:df:58:16:77:d3:49: 58:8b:13:8f:c5:a0:c6:60:0e:9f:a5:74:f2:70:0d: 70:8e:1b:ce:e2:b1:5c:24:dd:3e:c6:6e:32:7f:12: db:b1:15:82:5a:5b:05:29:ef:e7:c1:61:a9:d8:20: 7f:9a:08:e0:d6:81:56:a3:bc:12:08:c1:1d:46:34: 66:55:8f:9e:22:4d:e8:b2:99:5c:a4:0c:0d:ee:19: b0:d5:45:c4:e8:21:ab:d0:4e:51:1d:ea:0d:9b:6c: 6e:eb:03:71:4c:a9:bb:c3:e9:29:75:9e:76:43:ea: 4a:e2:83:e2:a7:b1:97:70:a4:57:ee:7d:62:c3:4d: 7f:86:bd:3c:fa:34:99:91:91:0d:e0:ee:08:ff:75: cd:bc:f5:da:85:e6:0b:3d:82:75:b9:3a:4d:8f:91: 0b:ba:20:1b:09:c5:46:ea:f2:21:fa:2f:49:4c:91: 07:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:35:41:FB:56:BE:59:9E:C5:2E:AB:27:97:10:B3:96:B2:84:70:63 X509v3 Authority Key Identifier: keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:44:6e:a5:b9:c2:8f:5e:1d:c6:44:4e:26:f8:5b:71:04:29: e9:b6:bc:7f:1f:d7:bb:d6:61:93:8e:5d:a3:90:4a:40:06:26: ef:c0:09:d7:45:36:b1:e7:85:c4:6b:54:7b:0b:cc:d3:2c:ff: d1:7f:36:66:d3:3b:49:4d:47:c2:8f:ef:51:20:0a:a6:fb:2f: 3e:a6:2c:88:99:a7:e1:d7:63:ef:e7:0c:61:40:16:aa:39:de: a9:1b:72:d6:97:ac:3e:75:d5:92:ca:8e:7f:a4:e2:f0:f8:58: 6d:fd:35:bf:5f:a2:70:0e:fb:c6:df:81:94:4d:a3:fc:c1:de: 2a:2d:ee:56:22:d1:42:5a:22:c1:8b:bf:d8:2e:7d:d4:fa:a5: 8a:4d:b0:b7:5d:ca:c0:38:5d:0d:46:65:e0:2a:a8:6a:ce:e5: 54:e2:d8:41:62:ec:82:30:ab:de:9c:c8:58:a4:38:0f:ce:40: 00:55:23:80:2b:b8:5d:7d:1f:ed:94:b6:ad:55:59:58:15:67: d7:fb:83:cf:f3:f4:a2:41:8e:3b:26:19:27:76:00:37:34:fa: 95:b9:0f:02:0c:c0:92:50:98:ac:0b:6e:6d:0a:72:a6:94:8a: c5:8c:0c:5e:88:17:dc:68:06:78:09:20:cb:11:8e:46:e3:ca: 41:c5:66:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfGGMFRtNFUS/mj3imY18fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ODg2MDA3ZGExNzMwYjA3NzBkODYwNGRiNzNkMTJmZDI2 NGYzZjkwHhcNMjUxMjE0MjMwMDUwWhcNMjUxMjE1MjMwMDUwWjAzMTEwLwYDVQQD EygwYTM1NDFmYjU2YmU1OTllYzUyZWFiMjc5NzEwYjM5NmIyODQ3MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLxoHOtVSbZ7sgEYKUC+4/QIMmjs Ri0c5RQkOVjWP3r30SP058pGMXxYG8efyD561hlc/81lDcd7YgGI32/pkNol6ZIB 7bQEJQ2tPomHKdutdWTfWBZ300lYixOPxaDGYA6fpXTycA1wjhvO4rFcJN0+xm4y fxLbsRWCWlsFKe/nwWGp2CB/mgjg1oFWo7wSCMEdRjRmVY+eIk3osplcpAwN7hmw 1UXE6CGr0E5RHeoNm2xu6wNxTKm7w+kpdZ52Q+pK4oPip7GXcKRX7n1iw01/hr08 +jSZkZEN4O4I/3XNvPXaheYLPYJ1uTpNj5ELuiAbCcVG6vIh+i9JTJEHwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo1QftWvlmexS6rJ5cQs5ayhHBjMB8GA1UdIwQY MBaAFBiIYAfaFzCwdw2GBNtz0S/SZPP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEt MTY5YzgzNmJkNmIwLzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEtMTY5YzgzNmJkNmIw LzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAERupbnC j14dxkROJvhbcQQp6ba8fx/Xu9Zhk45do5BKQAYm78AJ10U2seeFxGtUewvM0yz/ 0X82ZtM7SU1Hwo/vUSAKpvsvPqYsiJmn4ddj7+cMYUAWqjneqRty1pesPnXVksqO f6Ti8PhYbf01v1+icA77xt+BlE2j/MHeKi3uViLRQloiwYu/2C591Pqlik2wt13K wDhdDUZl4Cqoas7lVOLYQWLsgjCr3pzIWKQ4D85AAFUjgCu4XX0f7ZS2rVVZWBVn 1/uDz/P0okGOOyYZJ3YANzT6lbkPAgzAklCYrAtubQpyppSKxYwMXogX3GgGeAkg yxGORuPKQcVmCA== -----END CERTIFICATE-----Generated at Mon Dec 15 06:31:34 2025 by rpki-client