This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json) Hash identifier: sT56Qqle3IvQKCWo4Ev6LVn2Dvjc6pWwgUZJUVR25wg= Subject key identifier: 56:BC:5A:E5:DC:B1:BE:45:3D:89:BC:CD:79:6F:52:67:DB:EE:33:B3 Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057 Certificate serial: 019AF61CF7D47B7ACA324E1DBFE4BD14BACC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 00:01:24 +0000 Manifest this update: Sun 07 Dec 2025 00:01:24 +0000 Manifest next update: Mon 08 Dec 2025 00:01:24 +0000 Files and hashes: 1: 1YWYnMlB7bNjXZ-mR2gEvtLN3Bc.roa (hash: iv4yYaqxX9/BpncOJNi6FP4hgIeS1SbHKqiyIfxcth4=) 2: 4CDjeVRMh18gOoZFQB0kG87F3Ac.roa (hash: iS2zUZpr0OcJtSkJuXKr1ZglVEc7UdAcxQ+F6PuEqkI=) 3: CDG-7PWVVdm5Z7h-n4Ap6W6lHRg.roa (hash: 7yd+Jrhn2cJ3wJGfKqF6or4RqCKrwJRg13HNF9MQpQc=) 4: Kr-1FkX8isznu7LNjpkGbo9RXAQ.roa (hash: Nkup561eSF2a1lVSMy8ZbGKlbupLimNEQbbUAaz0DIc=) 5: Qxvf4dambUM4wGGmpG65pgeoc3M.roa (hash: dkmpKTZscpBI0IsTqLbisMD9yO7kEmJGfj1/YKPtkuc=) 6: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (hash: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=) 7: SkASK4zN7bPehdagCz89JkwUfsA.roa (hash: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=) 8: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: SVow4+E8kacMewcrvvUq930l4HyOAwcATbC41EkNFoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:f7:d4:7b:7a:ca:32:4e:1d:bf:e4:bd:14:ba:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057 Validity Not Before: Dec 7 00:01:24 2025 GMT Not After : Dec 8 00:01:24 2025 GMT Subject: CN=56bc5ae5dcb1be453d89bccd796f5267dbee33b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:96:ba:0c:a6:99:61:68:d8:24:2b:02:dc: 40:69:bf:7f:4d:1f:c4:ba:7d:8d:da:1e:75:c4:12: f1:8c:4a:1e:1f:df:ea:d0:87:fd:87:83:35:24:83: 9d:6e:cf:7b:80:be:d4:a5:e9:30:e8:a4:f5:98:bc: df:bf:82:c3:e5:c1:eb:6d:93:a5:b9:d6:e2:d4:36: a7:4b:47:ae:4c:33:2a:94:56:42:77:b7:a5:9a:51: 92:98:9a:ac:f7:f2:dd:ae:dc:44:f4:33:a3:31:10: bd:35:80:f3:1a:67:5f:60:81:04:b9:1f:36:8d:6a: 18:94:65:ec:47:1e:5b:c2:08:13:41:67:d8:d8:d4: 1a:6f:d4:34:fc:2f:36:ba:8f:fe:54:3d:d9:00:24: 16:8d:38:96:ec:66:25:87:c2:66:63:0e:ae:ce:84: 79:ab:84:86:92:6d:e0:2c:d2:60:44:08:0b:91:45: 18:5b:22:07:54:4a:56:ed:2c:29:cd:4e:a5:bf:73: f4:c7:d0:98:c2:25:3f:d5:da:77:a6:64:bf:03:0c: 1a:ca:e6:9b:59:bb:8a:a6:7e:04:e3:fe:43:66:c7: a4:16:17:05:32:8b:16:8a:9c:12:67:39:82:2d:82: 35:8f:28:c6:fb:2e:dd:80:e2:06:06:0f:dd:80:e2: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BC:5A:E5:DC:B1:BE:45:3D:89:BC:CD:79:6F:52:67:DB:EE:33:B3 X509v3 Authority Key Identifier: keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ff:c3:e6:f2:b8:5e:8d:f9:bc:1e:3c:69:4f:d3:b7:90:28: 33:c5:9e:fd:f9:25:dd:33:08:21:79:d7:40:8a:92:52:21:24: d3:80:47:98:9e:47:0a:67:ef:12:df:d3:ed:6f:fa:4e:e3:d7: db:8e:b5:40:d1:27:f1:cf:f2:70:21:46:b5:88:63:f7:11:aa: 0f:b3:5a:60:ad:9c:17:43:92:bb:41:ee:38:b0:37:84:c8:1e: 91:32:f0:bc:c4:b6:ab:91:ab:19:17:19:57:63:63:a2:d0:52: 1a:cb:17:3e:db:6c:57:15:0f:30:e9:23:2a:2e:cc:10:25:28: 2d:59:d1:8a:f2:3c:1d:40:0b:00:4b:fe:12:7e:29:a0:fe:a4: 52:c8:4b:6a:a3:bc:c8:30:db:8f:05:6f:d4:c2:e5:11:44:c5: 71:8b:b3:b0:9b:d4:e1:8d:4e:89:3c:77:e2:da:66:5a:ce:4d: c6:f2:86:09:de:d5:2d:c9:75:b0:30:9d:7a:47:48:0b:31:47: bc:eb:ba:2a:cf:7a:32:62:15:2d:1c:42:82:f1:28:b0:d1:01: 75:f6:6f:88:2e:aa:9d:9a:aa:fe:6b:2e:17:9c:a9:b8:67:c0: 95:81:e8:3f:50:25:2b:9b:f7:cb:27:78:28:dd:6f:0c:d1:53: 8f:91:5e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HPfUe3rKMk4dv+S9FLrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli NTMwNTcwHhcNMjUxMjA3MDAwMTI0WhcNMjUxMjA4MDAwMTI0WjAzMTEwLwYDVQQD Eyg1NmJjNWFlNWRjYjFiZTQ1M2Q4OWJjY2Q3OTZmNTI2N2RiZWUzM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkaWugymmWFo2CQrAtxAab9/TR/E un2N2h51xBLxjEoeH9/q0If9h4M1JIOdbs97gL7Upekw6KT1mLzfv4LD5cHrbZOl udbi1DanS0euTDMqlFZCd7elmlGSmJqs9/LdrtxE9DOjMRC9NYDzGmdfYIEEuR82 jWoYlGXsRx5bwggTQWfY2NQab9Q0/C82uo/+VD3ZACQWjTiW7GYlh8JmYw6uzoR5 q4SGkm3gLNJgRAgLkUUYWyIHVEpW7SwpzU6lv3P0x9CYwiU/1dp3pmS/Awwayuab WbuKpn4E4/5DZsekFhcFMosWipwSZzmCLYI1jyjG+y7dgOIGBg/dgOIdiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFa8WuXcsb5FPYm8zXlvUmfb7jOzMB8GA1UdIwQY MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt YzQzYWM0MjllNTNmLzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArv/D5vK4 Xo35vB48aU/Tt5AoM8We/fkl3TMIIXnXQIqSUiEk04BHmJ5HCmfvEt/T7W/6TuPX 2461QNEn8c/ycCFGtYhj9xGqD7NaYK2cF0OSu0HuOLA3hMgekTLwvMS2q5GrGRcZ V2NjotBSGssXPttsVxUPMOkjKi7MECUoLVnRivI8HUALAEv+En4poP6kUshLaqO8 yDDbjwVv1MLlEUTFcYuzsJvU4Y1OiTx34tpmWs5NxvKGCd7VLcl1sDCdekdICzFH vOu6Ks96MmIVLRxCgvEosNEBdfZviC6qnZqq/msuF5ypuGfAlYHoP1AlK5v3yyd4 KN1vDNFTj5FeUQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:02:55 2025 by rpki-client