This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json) Hash identifier: 73PidlcAwYWzvPub9xYTXpfqBe0m6gW0AySTX9Er6bE= Subject key identifier: 34:53:B9:91:09:D6:56:CC:81:3E:06:7F:A2:BF:10:3F:AD:C0:8D:86 Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Certificate serial: 019B6053B94375E0E85BC6D70F36182FE3D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft Manifest number: 0FF4 Signing time: Sat 27 Dec 2025 15:00:58 +0000 Manifest this update: Sat 27 Dec 2025 15:00:58 +0000 Manifest next update: Sun 28 Dec 2025 15:00:58 +0000 Files and hashes: 1: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: 2zNaWJ/wVxCXzbFEiyhjrU3PAt9CKkMfdibggAznGes=) 2: Kot_9W-z5W9clQssyO_RwTkY8os.roa (hash: RiAmjKyPe+jYgz0emcbcNd9sovJ3TU3wuyEDxRv4KU8=) 3: O6HR6_Zj_J8JouXxKJzEpG_J9iY.roa (hash: zkyPGN71itUBurBDFCf1AgW9vMBDOWpYZJYvI+GyxrU=) 4: T8wfyMdVYO2pjTxLu-sXHav7xb4.roa (hash: wl6nwJQYbPdR2wx0aUH8mDWuK+w6c/DDvIQ/E5ZhcW8=) 5: f1RZXAhEg31a-K2NYzsPeQqdHwI.roa (hash: 08m92bP9sI2GbA9p2mUsOu1DMSTzd+WdkX5Gq/lzuNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:53:b9:43:75:e0:e8:5b:c6:d7:0f:36:18:2f:e3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Validity Not Before: Dec 27 15:00:58 2025 GMT Not After : Dec 28 15:00:58 2025 GMT Subject: CN=3453b99109d656cc813e067fa2bf103fadc08d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:89:76:8a:e1:35:bf:a4:3d:04:fa:87:fe:82: a2:1f:50:66:89:c3:d0:cb:4d:b8:5c:c6:2f:4e:c1: 7b:35:ba:b8:ad:2a:25:f0:eb:82:da:38:fc:82:5a: a8:d4:1f:bc:93:78:1b:91:84:c6:0c:ef:88:18:63: a8:5c:00:b1:47:55:f5:33:6a:ff:65:18:68:2d:f6: 27:d5:60:43:f7:f4:4a:9a:09:69:6b:cb:d6:08:87: 1c:12:e6:aa:33:94:8b:a9:68:9b:60:8f:fa:00:34: f7:52:b1:13:05:be:aa:be:77:0d:75:43:f3:97:2b: f3:f1:c8:2f:64:79:2f:a9:f0:78:ea:a0:51:dc:8b: b1:fa:52:c1:19:9c:b8:ba:28:a5:ae:59:2f:78:ab: 32:5c:7d:9c:1e:c9:2f:92:bc:4e:90:d2:f7:9f:e5: bc:d5:7c:70:7b:ff:45:14:e8:4f:85:df:05:68:e2: c5:69:03:4a:2e:85:5b:a5:5f:43:89:77:57:15:e3: 02:fb:bb:a5:7b:75:09:4b:f7:d2:fb:22:a2:f5:df: 93:1e:8a:48:bc:d0:79:95:b5:b2:6f:da:82:67:7a: dd:cb:a4:03:69:05:c1:8b:10:b5:37:c7:2b:bd:fe: 3d:a0:e9:24:0d:14:cb:d9:b8:27:a8:78:09:2e:70: ab:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:53:B9:91:09:D6:56:CC:81:3E:06:7F:A2:BF:10:3F:AD:C0:8D:86 X509v3 Authority Key Identifier: keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:09:9c:17:07:b2:a1:4b:cd:30:55:a0:ac:35:31:96:50:14: 71:91:5a:30:f7:f3:1f:c3:9e:3d:bf:48:a9:72:da:1f:60:53: 7c:35:fd:3f:49:f6:9f:e3:ee:dc:fc:2f:b5:a1:a4:65:07:12: 5e:fc:91:3b:fd:e7:56:eb:11:ab:ca:b0:81:05:c8:9d:17:8b: f0:51:f4:0c:24:48:62:2c:eb:1e:8b:49:a9:6e:2e:1f:7d:5d: 0f:d9:3b:85:89:0b:ef:0c:b3:c7:34:df:80:ae:46:d9:16:7d: 58:0d:dc:4b:8c:bf:92:97:e1:f9:84:ef:87:70:fd:a7:76:d0: ff:7e:4c:9d:da:10:26:9e:29:d8:54:e1:db:d1:57:07:34:f9: 97:45:b5:ef:1f:db:e9:0c:82:22:9b:c3:dc:30:86:fd:95:a6: 58:0c:00:02:99:05:81:28:d7:59:f6:2a:fb:c2:88:2f:94:8a: 8c:da:f2:9b:ab:6b:28:52:d1:a2:01:eb:56:55:11:a9:aa:8f: f4:30:21:85:88:9c:af:ec:06:d4:92:49:1c:1e:38:76:ab:0f: e1:ec:09:55:b8:9c:14:c2:af:48:e3:9f:ed:f8:fa:a1:8d:d8: 7b:cd:43:20:e5:a2:35:6d:8a:1c:19:a4:6f:3f:1e:a5:91:a4: e8:39:4e:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgU7lDdeDoW8bXDzYYL+PTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4 ODBiZTAwHhcNMjUxMjI3MTUwMDU4WhcNMjUxMjI4MTUwMDU4WjAzMTEwLwYDVQQD EygzNDUzYjk5MTA5ZDY1NmNjODEzZTA2N2ZhMmJmMTAzZmFkYzA4ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Il2iuE1v6Q9BPqH/oKiH1BmicPQ y024XMYvTsF7Nbq4rSol8OuC2jj8glqo1B+8k3gbkYTGDO+IGGOoXACxR1X1M2r/ ZRhoLfYn1WBD9/RKmglpa8vWCIccEuaqM5SLqWibYI/6ADT3UrETBb6qvncNdUPz lyvz8cgvZHkvqfB46qBR3Iux+lLBGZy4uiilrlkveKsyXH2cHskvkrxOkNL3n+W8 1Xxwe/9FFOhPhd8FaOLFaQNKLoVbpV9DiXdXFeMC+7ule3UJS/fS+yKi9d+THopI vNB5lbWyb9qCZ3rdy6QDaQXBixC1N8crvf49oOkkDRTL2bgnqHgJLnCr6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRTuZEJ1lbMgT4Gf6K/ED+twI2GMB8GA1UdIwQY MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt ODdmNWI2NDc5ZDFlLzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQmcFwey oUvNMFWgrDUxllAUcZFaMPfzH8OePb9IqXLaH2BTfDX9P0n2n+Pu3PwvtaGkZQcS XvyRO/3nVusRq8qwgQXInReL8FH0DCRIYizrHotJqW4uH31dD9k7hYkL7wyzxzTf gK5G2RZ9WA3cS4y/kpfh+YTvh3D9p3bQ/35MndoQJp4p2FTh29FXBzT5l0W17x/b 6QyCIpvD3DCG/ZWmWAwAApkFgSjXWfYq+8KIL5SKjNrym6trKFLRogHrVlURqaqP 9DAhhYicr+wG1JJJHB44dqsP4ewJVbicFMKvSOOf7fj6oY3Ye81DIOWiNW2KHBmk bz8epZGk6DlOiA== -----END CERTIFICATE-----Generated at Sat Dec 27 18:28:47 2025 by rpki-client