This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json) Hash identifier: MEcYSZLa6ml4javWLAlS6P/buCI4FW//liZYor3rfWw= Subject key identifier: DD:7F:1A:3A:35:AC:FE:B3:AD:55:99:1D:F2:23:67:69:83:D2:8C:F9 Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Certificate serial: 019B3BA2A25176865FB7F2F8E47C04FDC81A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft Manifest number: 0FE1 Signing time: Sat 20 Dec 2025 12:01:12 +0000 Manifest this update: Sat 20 Dec 2025 12:01:12 +0000 Manifest next update: Sun 21 Dec 2025 12:01:12 +0000 Files and hashes: 1: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: /j67vD8+r69ZQ1z7nnLZdr1NUD2eL3yRmr2nhtFCEM8=) 2: Kot_9W-z5W9clQssyO_RwTkY8os.roa (hash: RiAmjKyPe+jYgz0emcbcNd9sovJ3TU3wuyEDxRv4KU8=) 3: O6HR6_Zj_J8JouXxKJzEpG_J9iY.roa (hash: zkyPGN71itUBurBDFCf1AgW9vMBDOWpYZJYvI+GyxrU=) 4: T8wfyMdVYO2pjTxLu-sXHav7xb4.roa (hash: wl6nwJQYbPdR2wx0aUH8mDWuK+w6c/DDvIQ/E5ZhcW8=) 5: f1RZXAhEg31a-K2NYzsPeQqdHwI.roa (hash: 08m92bP9sI2GbA9p2mUsOu1DMSTzd+WdkX5Gq/lzuNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:a2:51:76:86:5f:b7:f2:f8:e4:7c:04:fd:c8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Validity Not Before: Dec 20 12:01:12 2025 GMT Not After : Dec 21 12:01:12 2025 GMT Subject: CN=dd7f1a3a35acfeb3ad55991df223676983d28cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:05:91:d5:a1:ff:10:09:e7:25:f1:71:c0:65: 67:8e:be:8a:22:e3:27:ae:47:e3:2f:14:aa:4d:ca: 3a:ce:e5:d0:4d:0d:a7:5f:fa:a8:50:7d:18:c3:38: 4a:0c:ac:8f:92:bf:c1:c6:92:c9:fd:cb:5d:b1:a7: 9e:fc:7d:36:75:33:35:a7:a8:64:04:43:2a:e5:0b: 7c:38:0f:13:af:5d:f9:f9:00:f8:51:8e:cf:3d:d5: 09:73:58:c5:2d:83:f1:e7:a4:d0:fc:2f:1c:c9:ca: dd:a4:aa:a8:38:e9:a0:eb:50:32:98:b7:6f:14:32: 25:be:73:40:8d:79:3d:1a:ea:df:30:08:44:1e:11: 25:f3:a6:2c:c8:0e:06:6f:76:c6:a1:26:83:f1:1a: 39:11:2c:76:71:4e:eb:fb:ba:ee:0a:72:64:f7:ac: 71:4c:01:23:90:59:f9:16:ef:13:b1:35:72:f0:9e: 64:39:75:40:0b:52:3c:51:69:7e:80:95:d0:0e:db: b2:cd:51:61:a8:f7:fb:49:2d:b4:21:f3:7e:34:99: 5c:00:f4:ce:2b:cf:78:b1:96:5d:9f:81:92:7a:34: 33:c6:a9:95:13:6d:55:f3:60:4b:c3:89:04:27:6c: f5:47:a2:09:b8:57:9b:ea:7a:7f:21:79:fc:fc:59: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7F:1A:3A:35:AC:FE:B3:AD:55:99:1D:F2:23:67:69:83:D2:8C:F9 X509v3 Authority Key Identifier: keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:13:fc:8a:c1:b1:2e:c7:c3:a1:0e:ae:b1:35:27:55:c3:a6: 59:cc:9c:ba:87:b7:76:77:0a:bb:47:72:14:5a:12:47:d4:c3: b5:16:eb:52:f7:fc:f4:61:b9:15:63:c2:db:50:49:07:97:56: a2:e3:b2:a2:c1:84:4a:0b:df:13:35:10:8d:73:65:7a:1e:af: 42:25:f0:35:3f:64:86:b3:d7:53:e9:0c:ec:bb:56:bb:b3:db: 32:ca:ed:87:cd:45:0d:c9:30:29:19:94:cb:fd:50:4b:f8:00: a0:58:d1:f9:b4:37:3e:d3:6a:73:ee:23:28:7d:15:a0:3a:6c: a9:c0:11:cd:22:ad:f2:ab:65:28:9a:eb:e9:71:97:d1:5b:51: 9e:04:4d:a6:93:21:60:0d:d9:38:07:34:ba:02:c1:67:87:a9: 57:84:39:50:91:3c:cc:63:8a:dc:65:71:2b:e6:76:89:d7:75: 5f:a2:40:cf:9c:d4:85:dd:cc:63:b3:45:df:73:ba:ed:de:8d: d4:05:e5:91:90:39:93:d8:40:31:bc:99:3c:71:cf:aa:bb:ba: 96:cf:06:c9:7d:be:6e:65:5f:9b:1c:d0:5a:6f:f3:87:c1:30: 27:d1:27:05:57:8c:70:5a:74:16:f3:85:53:2a:69:8c:43:b5: de:ed:91:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oqJRdoZft/L45HwE/cgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4 ODBiZTAwHhcNMjUxMjIwMTIwMTEyWhcNMjUxMjIxMTIwMTEyWjAzMTEwLwYDVQQD EyhkZDdmMWEzYTM1YWNmZWIzYWQ1NTk5MWRmMjIzNjc2OTgzZDI4Y2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogWR1aH/EAnnJfFxwGVnjr6KIuMn rkfjLxSqTco6zuXQTQ2nX/qoUH0YwzhKDKyPkr/BxpLJ/ctdsaee/H02dTM1p6hk BEMq5Qt8OA8Tr135+QD4UY7PPdUJc1jFLYPx56TQ/C8cycrdpKqoOOmg61AymLdv FDIlvnNAjXk9GurfMAhEHhEl86YsyA4Gb3bGoSaD8Ro5ESx2cU7r+7ruCnJk96xx TAEjkFn5Fu8TsTVy8J5kOXVAC1I8UWl+gJXQDtuyzVFhqPf7SS20IfN+NJlcAPTO K894sZZdn4GSejQzxqmVE21V82BLw4kEJ2z1R6IJuFeb6np/IXn8/Fm/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1/Gjo1rP6zrVWZHfIjZ2mD0oz5MB8GA1UdIwQY MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt ODdmNWI2NDc5ZDFlLzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABP8isGx LsfDoQ6usTUnVcOmWcycuoe3dncKu0dyFFoSR9TDtRbrUvf89GG5FWPC21BJB5dW ouOyosGESgvfEzUQjXNleh6vQiXwNT9khrPXU+kM7LtWu7PbMsrth81FDckwKRmU y/1QS/gAoFjR+bQ3PtNqc+4jKH0VoDpsqcARzSKt8qtlKJrr6XGX0VtRngRNppMh YA3ZOAc0ugLBZ4epV4Q5UJE8zGOK3GVxK+Z2idd1X6JAz5zUhd3MY7NF33O67d6N 1AXlkZA5k9hAMbyZPHHPqru6ls8GyX2+bmVfmxzQWm/zh8EwJ9EnBVeMcFp0FvOF UyppjEO13u2RDw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:53:41 2025 by rpki-client