This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json) Hash identifier: d6TTDLU/3A85bRxGZAxs9c2sHD+Zg1MFEYIlXRrrwqw= Subject key identifier: BD:99:09:8C:41:D5:48:59:48:98:B5:13:2B:EA:CD:50:19:F8:9C:EB Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b Certificate serial: 019B3CEC56EDE52A98812D28C204808CA7BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft Manifest number: 175D Signing time: Sat 20 Dec 2025 18:01:20 +0000 Manifest this update: Sat 20 Dec 2025 18:01:20 +0000 Manifest next update: Sun 21 Dec 2025 18:01:20 +0000 Files and hashes: 1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=) 2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: AJ1xSmx5wVhSbGdCjC0hV28KA3UZgiHArKCFWxdDCe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:56:ed:e5:2a:98:81:2d:28:c2:04:80:8c:a7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b Validity Not Before: Dec 20 18:01:20 2025 GMT Not After : Dec 21 18:01:20 2025 GMT Subject: CN=bd99098c41d548594898b5132beacd5019f89ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:2a:5f:d0:f3:aa:5c:99:c6:05:00:f7:7c: b4:9b:0a:ae:94:ac:bb:50:0b:c8:e3:5d:3e:05:76: a7:3e:fd:46:29:44:9a:c5:55:3b:81:44:87:a6:7c: 54:cd:6f:38:08:79:13:d2:66:1d:23:62:2a:2d:d3: ef:8b:74:d9:15:5d:0d:65:67:bc:d6:19:8c:3f:e4: b3:55:8e:6f:49:a4:d3:b6:24:86:df:9d:a6:03:e8: 9b:d2:5c:5a:88:36:2d:4d:bf:19:6a:ef:d6:a3:ff: 86:c9:98:76:7d:a6:1f:6d:45:3f:f0:d0:ee:a9:3b: bd:54:79:02:47:f2:f8:ab:e8:72:c3:d0:25:61:da: cb:4d:a0:b6:25:0b:1b:01:5a:97:fe:cb:fd:ea:08: 32:00:ea:20:0d:ff:86:5f:8e:f7:f1:c5:d0:1c:2b: 22:67:2c:05:2f:d4:03:ac:ca:1d:5d:64:1b:e1:ec: 53:59:72:45:ee:f6:68:51:a4:c2:6f:32:cb:51:3e: da:54:76:6f:68:70:5e:9c:8d:76:3b:bb:7d:5e:de: 92:18:d3:3f:40:d6:da:f2:ac:ea:f4:f0:92:ba:8e: 24:73:a4:d5:89:80:18:37:1c:c0:dd:1a:a7:5d:a2: 27:e5:fe:30:7b:d4:99:07:20:26:9d:1d:78:a6:78: d7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:99:09:8C:41:D5:48:59:48:98:B5:13:2B:EA:CD:50:19:F8:9C:EB X509v3 Authority Key Identifier: keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:28:b8:8d:bb:3a:9d:fd:ab:b9:98:96:9d:bb:92:6c:f5:73: c1:9a:fc:c2:a6:ad:c5:4d:a1:fa:b3:99:a0:93:26:cd:8b:07: 26:c8:db:78:d0:ec:6c:e3:70:98:33:98:9f:08:6b:8f:51:e2: 83:d6:14:13:db:d2:d5:8c:a2:6a:65:0e:71:3b:e6:60:47:25: 74:29:b7:2b:c4:74:df:d6:cc:14:ce:d6:82:5f:21:eb:4e:9e: 3c:63:42:da:fa:ed:8a:ef:b0:dc:40:01:bd:36:0f:5a:dc:14: de:1b:44:0b:8e:61:ba:60:20:2b:e0:54:76:6e:b2:c8:85:9d: 35:2b:d4:3f:54:a1:34:af:14:96:b6:0c:41:e3:4d:81:09:23: be:6b:b2:82:04:b0:6e:5b:e2:36:c8:6f:b4:fb:11:aa:00:7f: 59:57:7b:2f:f1:57:bb:4c:64:29:9e:79:ec:9a:b3:cb:92:6b: b2:d7:ec:c2:e7:b4:e6:74:d4:ce:1a:94:ac:9b:bd:fa:f6:6c: af:43:da:ec:d6:74:0f:69:b1:dc:c5:eb:45:da:e0:d9:c1:45: e0:5a:32:da:d7:61:54:e4:15:7b:65:61:28:77:e3:27:04:82: c3:dc:9b:87:0c:0c:bd:6b:88:73:9f:98:d3:76:4b:94:ce:42: 48:32:ac:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Fbt5SqYgS0owgSAjKe/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NWYzYzMzZmIwMTEzYjQ1ZDQ1OTI5YTRjMDZmMjhjNzE0 ZGNhNGIwHhcNMjUxMjIwMTgwMTIwWhcNMjUxMjIxMTgwMTIwWjAzMTEwLwYDVQQD EyhiZDk5MDk4YzQxZDU0ODU5NDg5OGI1MTMyYmVhY2Q1MDE5Zjg5Y2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtIqX9DzqlyZxgUA93y0mwqulKy7 UAvI410+BXanPv1GKUSaxVU7gUSHpnxUzW84CHkT0mYdI2IqLdPvi3TZFV0NZWe8 1hmMP+SzVY5vSaTTtiSG352mA+ib0lxaiDYtTb8Zau/Wo/+GyZh2faYfbUU/8NDu qTu9VHkCR/L4q+hyw9AlYdrLTaC2JQsbAVqX/sv96ggyAOogDf+GX4738cXQHCsi ZywFL9QDrModXWQb4exTWXJF7vZoUaTCbzLLUT7aVHZvaHBenI12O7t9Xt6SGNM/ QNba8qzq9PCSuo4kc6TViYAYNxzA3RqnXaIn5f4we9SZByAmnR14pnjXgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2ZCYxB1UhZSJi1EyvqzVAZ+JzrMB8GA1UdIwQY MBaAFBhfPDP7ARO0XUWSmkwG8oxxTcpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWIt NzYzYWJhYjk3MTAxLzEvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWItNzYzYWJhYjk3MTAx LzEvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOii4jbs6 nf2ruZiWnbuSbPVzwZr8wqatxU2h+rOZoJMmzYsHJsjbeNDsbONwmDOYnwhrj1Hi g9YUE9vS1YyiamUOcTvmYEcldCm3K8R039bMFM7Wgl8h606ePGNC2vrtiu+w3EAB vTYPWtwU3htEC45humAgK+BUdm6yyIWdNSvUP1ShNK8UlrYMQeNNgQkjvmuyggSw blviNshvtPsRqgB/WVd7L/FXu0xkKZ557Jqzy5Jrstfswue05nTUzhqUrJu9+vZs r0Pa7NZ0D2mx3MXrRdrg2cFF4Foy2tdhVOQVe2VhKHfjJwSCw9ybhwwMvWuIc5+Y 03ZLlM5CSDKsMg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:28:00 2025 by rpki-client