This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json) Hash identifier: bEy8RRF6gYPqMhtWf5yIYTy2UogyogcUbIiOJ3VMnD8= Subject key identifier: 26:B4:B0:AA:C4:F8:85:6A:B9:94:0B:BF:E5:D6:93:DB:67:77:DC:DC Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90 Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90 Certificate serial: 019B360DF32223F76FDDD48EBFE9963FF94B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft Manifest number: 13F7 Signing time: Fri 19 Dec 2025 10:00:42 +0000 Manifest this update: Fri 19 Dec 2025 10:00:42 +0000 Manifest next update: Sat 20 Dec 2025 10:00:42 +0000 Files and hashes: 1: 2dVxZZZj6zlHLdxhcm5JjXaDenM.roa (hash: rbawjEq/xe3wCEVClyA8U6kAU84cJfL3aa5STA3091s=) 2: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: sswl+hgVCU1zpa/lVtsd2ghvbY6UIp1ezQVDeuWxUJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0d:f3:22:23:f7:6f:dd:d4:8e:bf:e9:96:3f:f9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90 Validity Not Before: Dec 19 10:00:42 2025 GMT Not After : Dec 20 10:00:42 2025 GMT Subject: CN=26b4b0aac4f8856ab9940bbfe5d693db6777dcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:61:7f:05:70:8d:c4:94:1b:aa:78:f7:ab: 75:bf:3e:c8:b9:c5:2c:d7:27:17:50:12:74:04:56: 60:ce:c4:4d:13:57:b0:f5:56:4c:af:78:df:12:ca: 7b:fc:11:8b:bb:0c:42:e5:0d:a0:c3:47:95:3a:37: 18:c7:01:a1:84:88:34:59:79:43:90:dc:f5:af:08: 46:8f:aa:7a:27:d9:73:b2:3d:0e:b1:1e:3e:45:19: 74:48:72:2d:03:58:d5:e4:aa:e8:2c:c5:d5:b9:91: 9f:58:8f:f0:cd:1f:be:5d:60:e2:a4:43:7c:42:de: a8:92:28:ad:1d:13:aa:0c:33:b8:5d:15:2d:9e:02: 76:5c:11:11:e0:bb:97:23:41:a8:97:08:aa:b1:ab: 69:0b:ce:ae:7f:19:32:1f:42:b3:bd:29:12:50:de: 68:54:81:47:9c:2b:e6:cd:e4:73:5f:2f:28:9a:f7: a4:ea:4e:d2:fd:41:bd:79:4b:82:ea:7e:c7:7f:65: b3:ea:72:cc:2c:ac:88:cf:a4:4d:8a:b6:3a:ae:c1: 54:d0:da:c4:e1:a4:86:0c:05:84:da:d2:0c:c5:ca: 00:ea:1e:18:34:3b:e9:e8:86:2d:c8:4e:4e:99:74: 86:b9:19:07:67:9b:f6:31:82:e1:af:72:76:7a:d5: 3f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B4:B0:AA:C4:F8:85:6A:B9:94:0B:BF:E5:D6:93:DB:67:77:DC:DC X509v3 Authority Key Identifier: keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:09:5b:08:2a:e4:35:07:31:d0:5f:9e:6d:39:6a:b8:f1:89: 89:3f:15:3e:94:c0:c1:fc:08:90:75:3f:bf:23:99:6e:39:9d: 12:16:e1:60:5f:ab:d9:d2:3d:4d:7a:1e:76:5c:e6:b0:f8:8b: d7:c0:53:e1:7b:14:60:69:b6:09:15:d9:33:11:5f:9f:89:3e: 48:53:86:c5:ec:ec:28:00:1f:42:0a:56:4c:35:36:63:b6:19: 5a:b2:d7:e0:a9:15:de:37:37:b3:d3:35:46:10:d0:0c:8b:ce: 81:70:95:c3:82:77:99:86:91:75:b4:84:4e:65:0b:7c:4a:ce: b3:4e:e0:c5:18:96:b9:64:59:dd:cc:6e:f6:3f:fd:ab:57:67: 4a:f5:d9:2a:ba:1d:49:6a:e6:b1:5e:c7:e7:c2:db:07:c3:15: 9a:25:b5:c1:64:72:f0:ae:05:d6:0f:62:12:6f:30:f0:c9:bf: 4c:c4:db:ff:38:8e:55:5d:a4:82:3a:7d:c1:e3:69:c8:0f:28: 92:dc:90:8e:32:98:e3:b7:84:2a:2e:c9:fa:b1:ca:90:71:cf: 2d:b0:4f:3b:67:03:84:b6:22:aa:5b:17:c5:e1:9c:2b:da:80: b6:c0:94:77:86:3b:0b:bb:2f:85:29:2e:be:02:02:5e:ef:e7: 0d:60:02:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DfMiI/dv3dSOv+mWP/lLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OGZiMDk4NWUzNjBjMzhmODY1OGQ1NjY4N2NhODYyZDk0 MDhkOTAwHhcNMjUxMjE5MTAwMDQyWhcNMjUxMjIwMTAwMDQyWjAzMTEwLwYDVQQD EygyNmI0YjBhYWM0Zjg4NTZhYjk5NDBiYmZlNWQ2OTNkYjY3NzdkY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/thfwVwjcSUG6p496t1vz7IucUs 1ycXUBJ0BFZgzsRNE1ew9VZMr3jfEsp7/BGLuwxC5Q2gw0eVOjcYxwGhhIg0WXlD kNz1rwhGj6p6J9lzsj0OsR4+RRl0SHItA1jV5KroLMXVuZGfWI/wzR++XWDipEN8 Qt6okiitHROqDDO4XRUtngJ2XBER4LuXI0GolwiqsatpC86ufxkyH0KzvSkSUN5o VIFHnCvmzeRzXy8omvek6k7S/UG9eUuC6n7Hf2Wz6nLMLKyIz6RNirY6rsFU0NrE 4aSGDAWE2tIMxcoA6h4YNDvp6IYtyE5OmXSGuRkHZ5v2MYLhr3J2etU/rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCa0sKrE+IVquZQLv+XWk9tnd9zcMB8GA1UdIwQY MBaAFBiPsJheNgw4+GWNVmh8qGLZQI2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAt ZDA3OTA2YTg0YjFkLzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAtZDA3OTA2YTg0YjFk LzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwlbCCrk NQcx0F+ebTlquPGJiT8VPpTAwfwIkHU/vyOZbjmdEhbhYF+r2dI9TXoedlzmsPiL 18BT4XsUYGm2CRXZMxFfn4k+SFOGxezsKAAfQgpWTDU2Y7YZWrLX4KkV3jc3s9M1 RhDQDIvOgXCVw4J3mYaRdbSETmULfErOs07gxRiWuWRZ3cxu9j/9q1dnSvXZKrod SWrmsV7H58LbB8MVmiW1wWRy8K4F1g9iEm8w8Mm/TMTb/ziOVV2kgjp9weNpyA8o ktyQjjKY47eEKi7J+rHKkHHPLbBPO2cDhLYiqlsXxeGcK9qAtsCUd4Y7C7svhSku vgICXu/nDWACVg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:32 2025 by rpki-client