This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json) Hash identifier: 33yXqMszf4rSeaqvq3yh/sX3m9hHqu6si4ITwDeSrv4= Subject key identifier: D1:CF:DF:0B:C8:AF:41:E5:26:06:27:DF:AC:47:D6:A1:9F:85:C1:DC Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057 Certificate serial: 019B300C420D2CDE077292039DF7507070AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 06:01:08 +0000 Manifest this update: Thu 18 Dec 2025 06:01:08 +0000 Manifest next update: Fri 19 Dec 2025 06:01:08 +0000 Files and hashes: 1: 1YWYnMlB7bNjXZ-mR2gEvtLN3Bc.roa (hash: iv4yYaqxX9/BpncOJNi6FP4hgIeS1SbHKqiyIfxcth4=) 2: 4CDjeVRMh18gOoZFQB0kG87F3Ac.roa (hash: iS2zUZpr0OcJtSkJuXKr1ZglVEc7UdAcxQ+F6PuEqkI=) 3: CDG-7PWVVdm5Z7h-n4Ap6W6lHRg.roa (hash: 7yd+Jrhn2cJ3wJGfKqF6or4RqCKrwJRg13HNF9MQpQc=) 4: Kr-1FkX8isznu7LNjpkGbo9RXAQ.roa (hash: Nkup561eSF2a1lVSMy8ZbGKlbupLimNEQbbUAaz0DIc=) 5: Qxvf4dambUM4wGGmpG65pgeoc3M.roa (hash: dkmpKTZscpBI0IsTqLbisMD9yO7kEmJGfj1/YKPtkuc=) 6: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (hash: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=) 7: SkASK4zN7bPehdagCz89JkwUfsA.roa (hash: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=) 8: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: 7/F3W87M6xSE2X8y5MO6QAYMifAeyZ5pa/nd2mzk3uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:42:0d:2c:de:07:72:92:03:9d:f7:50:70:70:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057 Validity Not Before: Dec 18 06:01:08 2025 GMT Not After : Dec 19 06:01:08 2025 GMT Subject: CN=d1cfdf0bc8af41e5260627dfac47d6a19f85c1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:74:24:be:b6:6a:4c:7b:ed:f9:2a:7a:26:a6: 50:5c:f7:a1:84:56:01:a5:79:80:1d:ca:a7:ff:3d: 93:59:31:e0:4c:16:df:31:e6:bd:9e:5c:cb:57:ce: b9:ae:83:ee:91:9b:46:32:d2:cf:8a:d6:9a:a7:57: a9:6b:d2:b8:6c:25:d8:2d:f6:da:d7:71:31:90:1c: ca:77:0a:d8:36:51:b9:2a:21:bf:ef:4f:d3:40:c6: c0:24:4a:f9:0c:29:16:f8:59:50:97:bb:24:06:10: ac:b6:46:b7:d0:1f:f1:4a:f0:10:cf:cd:5c:e1:7f: b7:99:03:81:f7:89:64:e6:e3:b7:c3:e2:d3:ce:49: 47:b0:6f:1f:a6:d7:57:bd:da:e8:70:f2:ee:9a:0a: dd:de:72:aa:ba:d6:3c:2c:e6:30:ee:21:f0:71:d0: b9:48:93:41:d8:17:fa:95:d1:63:97:3b:7c:48:03: d6:9c:48:1b:8c:74:10:e6:9d:08:ef:a6:68:59:b1: 30:aa:da:8a:7a:30:c3:8f:ab:2e:54:c7:b1:c7:24: 67:eb:72:26:83:4d:af:9c:f0:10:09:5f:aa:4e:e9: a6:52:98:2e:e5:00:21:1a:da:93:75:62:4c:29:3a: 18:3b:a5:c7:d5:2c:d3:83:4c:8d:b2:1f:96:9a:1b: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CF:DF:0B:C8:AF:41:E5:26:06:27:DF:AC:47:D6:A1:9F:85:C1:DC X509v3 Authority Key Identifier: keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f2:ba:5c:87:2d:6b:fb:1d:62:80:78:13:0c:9e:cc:92:65: b8:63:eb:9b:20:1c:1b:ba:f5:8e:c3:b2:c4:70:3e:10:d3:c5: fe:69:0c:49:4a:49:49:66:4a:49:a4:ae:51:d3:64:58:76:fb: 62:21:48:52:d7:31:bb:89:80:00:11:fa:b0:a9:11:a2:f0:c3: 2f:72:19:7a:24:55:88:bc:f4:5d:03:db:97:70:27:0c:23:e8: 4b:42:6f:88:c9:f6:73:7e:9e:b0:47:e1:f0:8c:5a:9f:87:da: e4:37:fd:39:ce:be:fb:fb:77:61:41:13:18:b7:35:41:e2:94: 72:0b:ae:78:ce:af:7b:8d:58:7a:5b:3a:93:72:74:ab:c6:63: 81:b0:ac:2a:b0:88:16:dd:5a:b0:01:6b:8e:d7:3d:b6:61:75: 13:77:6a:50:c7:f0:08:78:86:de:8b:a5:fa:07:6a:28:42:26: 24:bd:1a:98:b1:2f:fc:7e:a9:d5:f8:4d:9b:39:ea:c5:e7:1d: b9:20:a5:15:fc:98:db:1a:a0:75:48:bd:bf:4c:5b:4a:02:c4: 57:85:fc:6a:f1:0c:a8:a8:55:04:23:e1:43:cd:df:61:f1:f9: 57:41:f6:d7:2b:3f:f4:46:51:a9:c7:90:90:4b:f6:29:2e:29: b2:8c:fa:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDEINLN4HcpIDnfdQcHCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli NTMwNTcwHhcNMjUxMjE4MDYwMTA4WhcNMjUxMjE5MDYwMTA4WjAzMTEwLwYDVQQD EyhkMWNmZGYwYmM4YWY0MWU1MjYwNjI3ZGZhYzQ3ZDZhMTlmODVjMWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nQkvrZqTHvt+Sp6JqZQXPehhFYB pXmAHcqn/z2TWTHgTBbfMea9nlzLV865roPukZtGMtLPitaap1epa9K4bCXYLfba 13ExkBzKdwrYNlG5KiG/70/TQMbAJEr5DCkW+FlQl7skBhCstka30B/xSvAQz81c 4X+3mQOB94lk5uO3w+LTzklHsG8fptdXvdrocPLumgrd3nKqutY8LOYw7iHwcdC5 SJNB2Bf6ldFjlzt8SAPWnEgbjHQQ5p0I76ZoWbEwqtqKejDDj6suVMexxyRn63Im g02vnPAQCV+qTummUpgu5QAhGtqTdWJMKToYO6XH1SzTg0yNsh+WmhsIcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHP3wvIr0HlJgYn36xH1qGfhcHcMB8GA1UdIwQY MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt YzQzYWM0MjllNTNmLzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPK6XIct a/sdYoB4EwyezJJluGPrmyAcG7r1jsOyxHA+ENPF/mkMSUpJSWZKSaSuUdNkWHb7 YiFIUtcxu4mAABH6sKkRovDDL3IZeiRViLz0XQPbl3AnDCPoS0JviMn2c36esEfh 8Ixan4fa5Df9Oc6++/t3YUETGLc1QeKUcguueM6ve41Yels6k3J0q8ZjgbCsKrCI Ft1asAFrjtc9tmF1E3dqUMfwCHiG3oul+gdqKEImJL0amLEv/H6p1fhNmznqxecd uSClFfyY2xqgdUi9v0xbSgLEV4X8avEMqKhVBCPhQ83fYfH5V0H21ys/9EZRqceQ kEv2KS4psoz6CQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:41:32 2025 by rpki-client