This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json) Hash identifier: WSxhnUq70+YZBN+K7EN9+WYdp/tGNV/jJn7KHGcB3rk= Subject key identifier: 85:E4:CF:01:0D:37:68:EC:0C:24:A6:7D:68:42:98:69:D9:B0:24:46 Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23 Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423 Certificate serial: 019B3C7F87CECFBE75767DCD3C2F7C87A129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 16:02:29 +0000 Manifest this update: Sat 20 Dec 2025 16:02:29 +0000 Manifest next update: Sun 21 Dec 2025 16:02:29 +0000 Files and hashes: 1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: v8/8Y4+pNDDPYQwGqRCtHyHtlXLrVwEjRbwmhuZcQ6w=) 2: n3bBKfncJSw0BedT5BmrufOi-w4.roa (hash: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:87:ce:cf:be:75:76:7d:cd:3c:2f:7c:87:a1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423 Validity Not Before: Dec 20 16:02:29 2025 GMT Not After : Dec 21 16:02:29 2025 GMT Subject: CN=85e4cf010d3768ec0c24a67d68429869d9b02446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:87:13:cb:e5:af:8c:02:53:89:06:27:f5: c9:cd:92:cb:d9:e9:fb:08:94:fc:b7:f5:2e:78:03: 28:ad:c9:54:6b:86:5f:ce:f2:a2:b6:cd:33:64:c2: dc:5d:a3:d7:b5:16:b4:18:d3:07:45:88:45:b6:e7: 12:9a:f9:11:4b:0b:bb:a6:b0:d8:04:d9:74:85:85: 5d:8a:d6:b6:a8:6a:23:df:c8:1f:6f:71:a8:15:29: f9:20:20:73:52:b3:aa:d6:55:67:eb:da:32:ef:ad: 64:58:b2:ee:de:62:bf:6d:f5:36:fc:c7:92:37:06: b1:42:79:1d:29:26:62:e2:89:11:05:d7:a9:12:82: 90:49:ff:a0:6e:93:99:99:e2:91:10:fb:0c:41:1e: 61:ec:4a:f6:e9:fd:ba:ba:41:0b:80:e2:ca:e4:0c: ab:19:21:17:a2:b0:33:05:cc:03:99:12:7f:02:24: 9f:8e:f7:f8:fb:47:9a:95:93:85:f0:c2:47:51:0d: 47:14:90:4e:8b:21:2d:b3:6d:59:02:74:d4:51:6c: 1b:32:84:9c:bb:1d:95:0a:d2:cf:e9:0a:8c:3c:b3: ea:12:49:3a:fc:62:63:8c:d6:01:fe:36:67:c3:01: 51:72:0a:ab:8f:de:be:1f:6e:b3:0f:01:83:20:8e: 54:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E4:CF:01:0D:37:68:EC:0C:24:A6:7D:68:42:98:69:D9:B0:24:46 X509v3 Authority Key Identifier: keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:67:63:98:e7:4a:f4:85:76:53:1a:10:33:cd:3f:63:96:bc: b2:24:0e:0e:c5:f5:33:4f:fa:96:8b:da:06:51:47:99:9c:a3: 76:e0:d1:8b:dd:0a:e6:4c:23:dc:6b:81:dc:00:1a:b1:ce:bf: c8:69:c5:e0:cd:84:f2:c8:55:8a:59:d5:7d:f8:29:40:52:58: 81:00:02:c5:f1:77:9b:6c:42:56:3e:72:bb:f2:96:a6:d2:fb: 7b:85:8f:95:ae:33:51:30:61:8a:3c:7e:f4:10:f1:01:8e:2c: 16:38:57:d2:85:fb:7a:1d:64:09:d3:ef:cc:14:72:e8:c9:74: d9:74:7c:31:0c:3c:ed:de:33:ac:7c:9d:4f:84:e4:ef:e1:cb: 50:d5:b3:ba:f4:25:57:e5:cb:f0:29:dc:e5:1a:8b:52:10:cc: 09:65:e2:1b:f8:6d:8d:a5:97:5d:d7:c4:00:e7:5d:01:af:f6: a6:e3:0d:32:73:d6:e2:10:7a:31:6a:c3:b3:3c:75:78:24:d7: 8e:d9:9e:8b:ba:5e:22:fe:ad:55:32:c1:8e:85:ee:7e:de:f4: 9b:c8:f8:b1:22:32:55:dd:b1:d4:9d:7d:60:99:57:f5:03:90: 44:af:9b:1e:64:51:50:40:e1:08:d7:ae:42:34:b3:ba:2f:98: 0b:57:9b:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f4fOz751dn3NPC98h6EpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OGVkNDg4NGYxMTE5MzljYTZjN2YwZjM0YjI3OTJiMzli OTM0MjMwHhcNMjUxMjIwMTYwMjI5WhcNMjUxMjIxMTYwMjI5WjAzMTEwLwYDVQQD Eyg4NWU0Y2YwMTBkMzc2OGVjMGMyNGE2N2Q2ODQyOTg2OWQ5YjAyNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua2HE8vlr4wCU4kGJ/XJzZLL2en7 CJT8t/UueAMorclUa4ZfzvKits0zZMLcXaPXtRa0GNMHRYhFtucSmvkRSwu7prDY BNl0hYVdita2qGoj38gfb3GoFSn5ICBzUrOq1lVn69oy761kWLLu3mK/bfU2/MeS NwaxQnkdKSZi4okRBdepEoKQSf+gbpOZmeKREPsMQR5h7Er26f26ukELgOLK5Ayr GSEXorAzBcwDmRJ/AiSfjvf4+0ealZOF8MJHUQ1HFJBOiyEts21ZAnTUUWwbMoSc ux2VCtLP6QqMPLPqEkk6/GJjjNYB/jZnwwFRcgqrj96+H26zDwGDII5UhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXkzwENN2jsDCSmfWhCmGnZsCRGMB8GA1UdIwQY MBaAFBiO1IhPERk5ymx/DzSyeSs5uTQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQt NWUwNzc3YjA0MDQ5LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQtNWUwNzc3YjA0MDQ5 LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2djmOdK 9IV2UxoQM80/Y5a8siQODsX1M0/6lovaBlFHmZyjduDRi90K5kwj3GuB3AAasc6/ yGnF4M2E8shVilnVffgpQFJYgQACxfF3m2xCVj5yu/KWptL7e4WPla4zUTBhijx+ 9BDxAY4sFjhX0oX7eh1kCdPvzBRy6Ml02XR8MQw87d4zrHydT4Tk7+HLUNWzuvQl V+XL8Cnc5RqLUhDMCWXiG/htjaWXXdfEAOddAa/2puMNMnPW4hB6MWrDszx1eCTX jtmei7peIv6tVTLBjoXuft70m8j4sSIyVd2x1J19YJlX9QOQRK+bHmRRUEDhCNeu QjSzui+YC1eb/Q== -----END CERTIFICATE-----Generated at Sat Dec 20 21:41:02 2025 by rpki-client