This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft File: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json) Hash identifier: wDarskUyeo7uVdY2Y9WKhPUxHePk9yIFvLf00kvoZR0= Subject key identifier: 72:94:5F:EF:A3:19:5A:5D:92:39:FA:9B:9C:C3:64:1B:BF:4C:C2:FD Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Certificate serial: 019B38A28149D2447964D3BF04568951EF46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft Manifest number: 178C Signing time: Fri 19 Dec 2025 22:02:12 +0000 Manifest this update: Fri 19 Dec 2025 22:02:12 +0000 Manifest next update: Sat 20 Dec 2025 22:02:12 +0000 Files and hashes: 1: ENddU71AWsbfb-qIFVaxmAFw8qU.roa (hash: XIdLWvH5+lzPfcvEbUgIrNoDUrBQA7L4fLl6rSwliqY=) 2: G7KAYOVH38LzKR-IdVTjVu7lIf8.roa (hash: rqzGBQKFeB6ICiFMYesDYx+/XfxqjQHtzlizZQdtLiE=) 3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: Zi2ZJ+zDTFaq3I1Vqa3ceQXFwxK7pWtTFqX+dWG5/0I=) 4: o7DFQSNSbtxlgxW6FLch62D8QIA.roa (hash: OW5TPqzlu/5OlPd3vdKxLAlylVm0d636/VsxyEnIicU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:81:49:d2:44:79:64:d3:bf:04:56:89:51:ef:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Validity Not Before: Dec 19 22:02:12 2025 GMT Not After : Dec 20 22:02:12 2025 GMT Subject: CN=72945fefa3195a5d9239fa9b9cc3641bbf4cc2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:48:e9:52:bd:ee:43:98:8a:f2:e5:b6:68:f5: 3b:f2:be:ce:3c:95:42:18:10:45:57:e8:45:9d:f0: 78:6f:14:ff:6a:e9:cf:7b:bc:34:44:c8:28:67:50: fb:ea:3d:be:0c:70:db:75:a2:10:79:6a:59:e9:e3: c0:2d:72:85:4e:3b:45:11:cd:75:e5:2a:1e:4a:3c: 2b:5d:46:c2:75:d9:9e:5e:ec:ac:8e:d8:58:e2:22: ee:ce:05:88:d3:c2:35:bb:e7:3c:fb:5c:06:77:f3: 14:d6:92:29:15:c8:7a:47:89:36:9d:9b:0a:59:d7: cb:c5:99:88:29:cb:2a:c9:db:c3:c1:af:a3:4e:4e: 55:0c:dc:54:38:b1:cd:ae:68:b7:dd:0c:8a:5b:22: c0:74:33:97:a8:3b:68:64:a0:8e:cc:7c:db:1f:7a: 93:49:30:91:4a:94:d9:ac:bb:ae:44:55:ad:37:a5: f1:0e:30:82:db:c5:b9:57:9f:13:41:4c:93:49:fa: a5:56:2c:5e:4e:7f:42:9a:fc:37:8e:f3:e1:aa:1c: 03:d2:1b:18:ba:10:08:f3:d4:a5:5e:d4:4e:3e:c8: 4f:4a:ef:a6:6b:4a:92:09:bc:fe:03:1c:c2:74:2f: 9a:bb:4b:d0:e0:74:82:c7:8a:0e:36:dd:41:db:ca: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:94:5F:EF:A3:19:5A:5D:92:39:FA:9B:9C:C3:64:1B:BF:4C:C2:FD X509v3 Authority Key Identifier: keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:b8:0a:44:f2:e4:62:b0:58:5e:50:55:ce:1d:64:8e:49:0f: 44:33:89:e9:d4:ee:a9:8a:9b:4c:87:b6:78:3c:51:21:e9:a5: ac:0f:8f:2f:61:be:7c:ec:3d:3d:1b:c0:d4:99:77:bb:8e:94: 8a:c3:3c:59:6f:db:d8:69:1c:e3:c8:b8:58:0f:de:81:b5:11: e6:d8:e9:2b:89:5e:50:9d:ea:f5:21:1f:dd:20:60:8c:1d:74: 40:bb:18:76:6a:80:c5:87:83:cb:f4:21:2f:d9:4f:2a:8f:16: 90:00:19:f3:5e:96:a4:33:8a:01:ec:5e:ee:20:d3:5a:e7:d1: 50:94:91:ef:f9:c5:a1:c1:d8:fd:72:79:59:7c:06:89:68:46: 63:b2:ac:39:59:94:6b:7c:8c:61:83:00:5a:36:9c:5f:de:23: e7:84:5d:b9:df:36:b3:0f:3b:af:74:d4:a3:76:d0:69:ed:b7: 73:d8:f7:e9:b9:3c:c4:42:b5:ff:d1:4d:6a:8e:34:55:83:97: 87:8e:46:65:4a:26:83:90:f5:a9:c0:7d:c4:8b:14:12:98:68: 0a:fa:d9:39:ba:be:98:5e:a6:fe:a7:2b:17:ef:34:5d:dc:c0: c2:95:d2:66:6f:44:8e:6e:cb:89:29:91:fe:31:f6:70:90:e3: 5b:8c:6e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ooFJ0kR5ZNO/BFaJUe9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx NGM1NzEwHhcNMjUxMjE5MjIwMjEyWhcNMjUxMjIwMjIwMjEyWjAzMTEwLwYDVQQD Eyg3Mjk0NWZlZmEzMTk1YTVkOTIzOWZhOWI5Y2MzNjQxYmJmNGNjMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEjpUr3uQ5iK8uW2aPU78r7OPJVC GBBFV+hFnfB4bxT/aunPe7w0RMgoZ1D76j2+DHDbdaIQeWpZ6ePALXKFTjtFEc11 5SoeSjwrXUbCddmeXuysjthY4iLuzgWI08I1u+c8+1wGd/MU1pIpFch6R4k2nZsK WdfLxZmIKcsqydvDwa+jTk5VDNxUOLHNrmi33QyKWyLAdDOXqDtoZKCOzHzbH3qT STCRSpTZrLuuRFWtN6XxDjCC28W5V58TQUyTSfqlVixeTn9Cmvw3jvPhqhwD0hsY uhAI89SlXtROPshPSu+ma0qSCbz+AxzCdC+au0vQ4HSCx4oONt1B28p35wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKUX++jGVpdkjn6m5zDZBu/TML9MB8GA1UdIwQY MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt OWQzOTJlZWUwZjY2LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2 LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvrgKRPLk YrBYXlBVzh1kjkkPRDOJ6dTuqYqbTIe2eDxRIemlrA+PL2G+fOw9PRvA1Jl3u46U isM8WW/b2Gkc48i4WA/egbUR5tjpK4leUJ3q9SEf3SBgjB10QLsYdmqAxYeDy/Qh L9lPKo8WkAAZ816WpDOKAexe7iDTWufRUJSR7/nFocHY/XJ5WXwGiWhGY7KsOVmU a3yMYYMAWjacX94j54Rdud82sw87r3TUo3bQae23c9j36bk8xEK1/9FNao40VYOX h45GZUomg5D1qcB9xIsUEphoCvrZObq+mF6m/qcrF+80XdzAwpXSZm9Ejm7LiSmR /jH2cJDjW4xuTg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:50:12 2025 by rpki-client