This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft File: giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json) Hash identifier: j7uwZooTy1DzY7fnUKhFiW4MephXvcLyVPksyI2ItNs= Subject key identifier: 68:1D:2E:17:9C:0C:43:71:3C:96:47:85:39:19:0D:F1:90:0B:85:A8 Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8 Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8 Certificate serial: 019B32313FA500FAABCA0A29C020A30D2BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 16:00:46 +0000 Manifest this update: Thu 18 Dec 2025 16:00:46 +0000 Manifest next update: Fri 19 Dec 2025 16:00:46 +0000 Files and hashes: 1: GpgJajGCbSNl3e4aO7PdAchg1ng.roa (hash: JjeUV08MlhBjZNwlusZZDt6ugsqaNAcVm8lYJFEKoLw=) 2: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: fs225nVt2PbS/hj6P3Ekg21FF8c3TzkCdQxaxpruTiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:3f:a5:00:fa:ab:ca:0a:29:c0:20:a3:0d:2b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8 Validity Not Before: Dec 18 16:00:46 2025 GMT Not After : Dec 19 16:00:46 2025 GMT Subject: CN=681d2e179c0c43713c96478539190df1900b85a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:4a:61:b8:8c:a1:62:6b:90:ab:71:4f:5b: 63:b7:49:1c:98:27:fb:e8:05:df:fa:08:1e:8c:da: 38:f3:82:fa:b0:61:d6:5a:56:dd:9a:67:df:a2:f4: 36:6b:b7:38:93:e4:bd:27:9a:74:31:8a:ec:b8:aa: 6c:3e:6b:79:46:62:f4:44:99:58:9d:48:b1:74:45: d9:9b:83:e3:23:34:8c:47:4b:e2:04:be:00:05:33: 42:24:a4:36:e5:e7:f8:68:b8:e9:64:fb:be:3d:e1: e5:5e:32:50:17:b5:01:c9:d5:95:c3:03:86:0d:f2: 00:a3:0a:94:67:9f:39:fa:ae:97:8b:58:bc:fc:d3: 23:74:aa:de:9c:00:04:21:25:79:7a:fe:c8:72:d7: d2:97:e7:5f:04:27:fd:5e:99:14:37:59:f8:8e:73: fd:6e:f8:aa:5d:0f:c6:be:d0:c3:cf:46:7a:15:64: 10:6a:28:59:3c:7f:20:ce:51:d6:e7:f3:ee:68:4c: 44:7c:ee:73:87:b5:e3:48:4f:82:d6:59:53:3c:08: 17:ac:cb:9e:02:73:96:ca:55:d8:b7:f7:83:29:f9: 18:b5:45:83:b1:41:aa:f7:e9:8e:a1:19:3e:e1:5d: e6:f6:c5:1b:94:0f:33:e7:54:38:67:6b:77:2a:6e: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1D:2E:17:9C:0C:43:71:3C:96:47:85:39:19:0D:F1:90:0B:85:A8 X509v3 Authority Key Identifier: keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:97:30:af:4b:a1:f7:57:98:8b:18:f9:d0:bd:fd:39:39:5b: a4:cd:81:6b:ae:3d:f6:eb:7b:49:1d:2c:26:8e:37:0f:61:4e: ef:62:e4:fb:9c:d4:7d:68:03:d4:a3:c8:7d:de:4c:89:68:e7: 28:ff:c3:dc:5a:90:bc:f7:05:3a:ea:5e:25:a8:17:f3:89:8c: 15:8b:1e:b5:92:b3:4b:9d:f5:dd:d5:33:df:10:77:52:30:56: 9c:4c:50:62:1f:ca:bc:a9:fd:6c:f7:80:ad:c3:2d:32:84:18: 02:fb:28:d6:9d:42:1b:ac:ba:8e:da:7c:d1:cd:94:64:a3:61: 49:88:bc:81:57:2f:eb:c4:db:91:77:7f:d0:73:87:7f:1e:73: 72:c9:55:06:80:01:41:5d:51:e4:1f:d4:e1:dc:08:66:a1:77: ab:38:03:94:13:b1:4e:12:04:f2:65:c6:dd:6d:db:0d:83:08: f0:2a:87:0a:63:f6:81:65:78:fb:df:4f:d5:0d:9b:ec:b6:cc: 58:ae:25:26:e8:62:43:03:45:b8:4c:61:e0:19:e3:13:ce:49: 63:1a:88:a9:cf:b1:f7:5a:fd:9e:69:95:99:7f:dd:c0:d1:1d: 8c:5f:51:0c:05:2a:cc:75:f1:7d:eb:c0:75:c1:8b:94:ec:4f: dc:19:34:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMT+lAPqrygopwCCjDSuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMjQ4YjVlMDg4NTg5NjRiYTJiNTQ3MzE1MjAxNWZkNTk5 MWZkZjgwHhcNMjUxMjE4MTYwMDQ2WhcNMjUxMjE5MTYwMDQ2WjAzMTEwLwYDVQQD Eyg2ODFkMmUxNzljMGM0MzcxM2M5NjQ3ODUzOTE5MGRmMTkwMGI4NWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7pKYbiMoWJrkKtxT1tjt0kcmCf7 6AXf+ggejNo484L6sGHWWlbdmmffovQ2a7c4k+S9J5p0MYrsuKpsPmt5RmL0RJlY nUixdEXZm4PjIzSMR0viBL4ABTNCJKQ25ef4aLjpZPu+PeHlXjJQF7UBydWVwwOG DfIAowqUZ585+q6Xi1i8/NMjdKrenAAEISV5ev7IctfSl+dfBCf9XpkUN1n4jnP9 bviqXQ/GvtDDz0Z6FWQQaihZPH8gzlHW5/PuaExEfO5zh7XjSE+C1llTPAgXrMue AnOWylXYt/eDKfkYtUWDsUGq9+mOoRk+4V3m9sUblA8z51Q4Z2t3Km6QXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgdLhecDENxPJZHhTkZDfGQC4WoMB8GA1UdIwQY MBaAFIIki14IhYlkuitUcxUgFf1Zkf34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYt YWU2NDY5YWIzZjQwLzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYtYWU2NDY5YWIzZjQw LzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZcwr0uh 91eYixj50L39OTlbpM2Ba6499ut7SR0sJo43D2FO72Lk+5zUfWgD1KPIfd5MiWjn KP/D3FqQvPcFOupeJagX84mMFYsetZKzS5313dUz3xB3UjBWnExQYh/KvKn9bPeA rcMtMoQYAvso1p1CG6y6jtp80c2UZKNhSYi8gVcv68TbkXd/0HOHfx5zcslVBoAB QV1R5B/U4dwIZqF3qzgDlBOxThIE8mXG3W3bDYMI8CqHCmP2gWV4+99P1Q2b7LbM WK4lJuhiQwNFuExh4BnjE85JYxqIqc+x91r9nmmVmX/dwNEdjF9RDAUqzHXxfevA dcGLlOxP3Bk0bg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:50:59 2025 by rpki-client