This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft File: giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json) Hash identifier: wR1GkQTEccxxhiOHdTKHYA9jB5nvwlvTxPpHk9qm/IU= Subject key identifier: 7A:22:14:2D:BA:5B:CD:59:3F:59:27:BC:1F:58:83:B2:46:B1:34:36 Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8 Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8 Certificate serial: 019B458163EBA997E46BEF9C64C2CABC4C64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft Manifest number: 171D Signing time: Mon 22 Dec 2025 10:01:06 +0000 Manifest this update: Mon 22 Dec 2025 10:01:06 +0000 Manifest next update: Tue 23 Dec 2025 10:01:06 +0000 Files and hashes: 1: GpgJajGCbSNl3e4aO7PdAchg1ng.roa (hash: JjeUV08MlhBjZNwlusZZDt6ugsqaNAcVm8lYJFEKoLw=) 2: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: ATgFbib2fZYASbqZQqpYmQdrvq3UWu+XblHygnMgd5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:63:eb:a9:97:e4:6b:ef:9c:64:c2:ca:bc:4c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8 Validity Not Before: Dec 22 10:01:06 2025 GMT Not After : Dec 23 10:01:06 2025 GMT Subject: CN=7a22142dba5bcd593f5927bc1f5883b246b13436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:65:5d:f6:69:25:d5:84:ae:78:0d:5d:ac: c4:c5:ed:66:f5:75:47:85:db:ac:93:ba:ab:02:d6: 4b:71:a1:93:e2:b6:3d:96:b5:90:2e:a1:1e:ad:da: 9b:b8:cb:06:86:35:01:c4:86:4d:ca:fa:3a:1c:83: ed:46:56:3c:b6:1b:39:a2:f6:66:48:98:f9:d0:a2: f5:0b:86:64:45:af:81:56:5a:3a:15:bb:23:98:31: 14:1a:8a:38:f1:b4:e1:29:20:09:16:3c:29:1e:13: 0c:1a:73:10:8b:72:a6:de:48:01:a4:0d:d3:84:08: f4:50:ad:61:c0:06:d4:9f:3c:86:ce:1c:f4:91:69: 51:54:2a:fe:f1:96:0e:5c:08:b0:54:2a:49:c0:05: a2:69:03:80:16:3c:78:2d:7f:ae:49:c9:68:ce:4d: 21:22:14:1a:60:b4:ff:d0:f0:a1:1b:61:a6:7c:29: 43:9d:d9:46:b5:08:23:d7:b8:ad:0f:91:d8:28:34: fd:88:ad:b5:b1:3d:f6:0c:d4:0e:73:5d:d7:bc:e0: 1a:a1:b2:75:a5:37:56:3f:f9:37:65:77:7d:b0:65: 93:d9:d8:17:7e:21:d2:98:cf:e1:7d:53:60:5b:7b: 69:07:c1:8c:e2:d3:b3:d4:01:3a:14:94:bb:2c:45: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:22:14:2D:BA:5B:CD:59:3F:59:27:BC:1F:58:83:B2:46:B1:34:36 X509v3 Authority Key Identifier: keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6b:a3:54:64:64:4a:a7:76:2f:2f:d7:47:3a:7a:c1:ff:8c: b2:37:87:d7:05:49:a6:75:3b:b4:ff:a9:57:fc:ce:33:8e:a7: d3:a3:87:82:ab:3f:93:6d:aa:e1:fe:13:dd:66:70:df:47:6c: aa:14:89:76:38:5a:4b:1c:f0:67:8e:f0:35:1b:04:1e:4a:55: a9:cd:79:49:da:f5:27:a3:53:f8:79:7a:12:04:3b:f6:60:82: 02:96:6b:d9:6a:b2:a1:b1:91:85:39:15:9f:c9:c9:4e:ea:34: 4a:2f:94:05:3a:40:eb:2b:6d:03:ca:73:05:87:89:47:15:8d: 29:91:54:a6:2e:43:f5:96:0e:80:07:40:94:9b:cf:43:ac:38: bb:aa:c8:36:eb:5d:4c:a1:16:33:d8:60:0a:ad:76:96:e9:51: 50:58:c8:26:54:a4:b5:d4:bf:c9:ba:2e:78:e6:ab:09:cc:d1: 32:b4:b1:56:25:02:42:d4:37:af:bb:ac:77:88:43:81:84:9e: de:64:68:e3:75:34:55:ce:01:73:70:52:d6:6b:b6:d8:34:d4: cc:d2:1b:6f:9f:1e:2b:f6:3d:e2:ff:99:16:bd:94:03:47:3f: f1:b8:d8:b0:79:37:b5:16:79:d0:b5:22:92:9a:e5:1d:47:a4: fd:4f:f4:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgWPrqZfka++cZMLKvExkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMjQ4YjVlMDg4NTg5NjRiYTJiNTQ3MzE1MjAxNWZkNTk5 MWZkZjgwHhcNMjUxMjIyMTAwMTA2WhcNMjUxMjIzMTAwMTA2WjAzMTEwLwYDVQQD Eyg3YTIyMTQyZGJhNWJjZDU5M2Y1OTI3YmMxZjU4ODNiMjQ2YjEzNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3ZlXfZpJdWErngNXazExe1m9XVH hdusk7qrAtZLcaGT4rY9lrWQLqEerdqbuMsGhjUBxIZNyvo6HIPtRlY8ths5ovZm SJj50KL1C4ZkRa+BVlo6FbsjmDEUGoo48bThKSAJFjwpHhMMGnMQi3Km3kgBpA3T hAj0UK1hwAbUnzyGzhz0kWlRVCr+8ZYOXAiwVCpJwAWiaQOAFjx4LX+uSclozk0h IhQaYLT/0PChG2GmfClDndlGtQgj17itD5HYKDT9iK21sT32DNQOc13XvOAaobJ1 pTdWP/k3ZXd9sGWT2dgXfiHSmM/hfVNgW3tpB8GM4tOz1AE6FJS7LEV48wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoiFC26W81ZP1knvB9Yg7JGsTQ2MB8GA1UdIwQY MBaAFIIki14IhYlkuitUcxUgFf1Zkf34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYt YWU2NDY5YWIzZjQwLzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYtYWU2NDY5YWIzZjQw LzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWujVGRk Sqd2Ly/XRzp6wf+MsjeH1wVJpnU7tP+pV/zOM46n06OHgqs/k22q4f4T3WZw30ds qhSJdjhaSxzwZ47wNRsEHkpVqc15Sdr1J6NT+Hl6EgQ79mCCApZr2WqyobGRhTkV n8nJTuo0Si+UBTpA6yttA8pzBYeJRxWNKZFUpi5D9ZYOgAdAlJvPQ6w4u6rINutd TKEWM9hgCq12lulRUFjIJlSktdS/yboueOarCczRMrSxViUCQtQ3r7usd4hDgYSe 3mRo43U0Vc4Bc3BS1mu22DTUzNIbb58eK/Y94v+ZFr2UA0c/8bjYsHk3tRZ50LUi kprlHUek/U/0VQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:42:14 2025 by rpki-client