This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft File: gLonv9hqgQoXlX0fcm_hYNTrMiU.mft (raw, json) Hash identifier: wxbwTH8uEasbSETSVEXBmoSSvXdnDX86+xq6B1f3KeE= Subject key identifier: 0F:AD:68:3C:13:3D:48:22:35:6F:8B:6B:93:FB:B9:98:13:DA:71:99 Authority key identifier: 80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25 Certificate issuer: /CN=80ba27bfd86a810a17957d1f726fe160d4eb3225 Certificate serial: 019AF276583F4ABB43B34D615333731E685E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: gLonv9hqgQoXlX0fcm_hYNTrMiU.crl (hash: T6GFSX5VhqII0CS0TwxYBzq6ovRYjCxatt68FTLZm4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:58:3f:4a:bb:43:b3:4d:61:53:33:73:1e:68:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ba27bfd86a810a17957d1f726fe160d4eb3225 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=0fad683c133d4822356f8b6b93fbb99813da7199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e6:52:43:54:70:59:e7:6f:09:f8:26:bd:62: 74:15:fb:f8:94:33:0e:91:a7:2a:6f:0e:13:ea:67: 4d:81:b3:2f:6f:cd:9c:b6:11:8f:b9:7e:17:7b:d6: 1c:4d:ec:9d:79:5e:8a:3a:c8:7c:57:27:ea:ec:5b: 05:69:89:0b:b5:da:7e:ce:f6:58:92:76:6b:64:08: ad:f3:6a:cc:73:40:8f:2d:75:56:67:28:b9:48:77: d2:c6:39:ee:9e:4d:42:07:26:26:b8:8c:ad:8a:00: ab:25:47:c5:28:0f:c4:11:3e:c3:f5:c4:1d:34:7e: 93:e1:be:df:b9:d8:0f:f4:93:49:a3:9f:20:7c:db: 77:28:99:ff:3f:18:e4:21:24:f3:8d:36:f5:79:e7: 15:a5:96:1a:e1:a4:8f:d2:0b:b8:07:da:a8:12:c5: 61:d3:76:7a:8e:7f:39:27:52:ca:20:a8:10:48:c2: b2:f0:18:d0:a3:8d:aa:ec:b7:7b:2f:48:db:7d:b8: 4d:11:86:c1:52:6b:fe:9f:79:8f:66:e5:ef:e1:39: 9a:95:e4:d2:1b:b9:33:81:6e:5f:13:e7:99:c7:fd: 26:89:0d:d4:14:d8:db:ef:68:c2:48:df:62:57:2a: 81:cb:90:6e:05:28:bf:ff:29:38:1a:74:f1:98:1b: 36:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AD:68:3C:13:3D:48:22:35:6F:8B:6B:93:FB:B9:98:13:DA:71:99 X509v3 Authority Key Identifier: keyid:80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:79:a0:ee:a4:6d:b7:56:d2:58:c2:15:ba:58:40:e4:98:98: 87:f2:28:5c:f4:40:03:50:3b:5b:c8:fe:b4:6f:aa:83:5f:aa: 66:7b:99:c0:a0:49:03:e3:80:54:f5:da:91:03:6b:74:a1:3a: b9:7d:3f:28:7b:81:7b:bf:d0:10:a0:11:b1:c7:ae:e5:fc:a6: a4:ef:a8:47:ec:a7:3f:74:5d:c2:32:6d:78:dc:57:bc:7e:0e: 55:71:b6:03:91:1f:a8:4d:98:b6:ee:dd:71:b3:cc:47:59:71: 69:04:18:ff:09:c5:6d:4f:75:46:c0:48:88:1b:45:b8:e8:e3: 2f:d2:4c:04:b4:c0:1a:91:64:c4:f7:12:b5:2a:97:18:4e:76: 0d:92:40:25:1d:c5:0c:bf:9b:ed:74:e4:0a:ca:ed:7b:9c:dc: e2:2d:1c:7d:01:7a:b5:b0:52:eb:93:96:17:f8:0d:61:5f:6c: 00:16:c1:d4:34:04:0e:3b:6d:d5:cd:50:ae:19:17:59:72:02: dd:c4:f8:65:8b:f6:3c:8f:8b:91:46:2a:d8:ac:34:5d:09:a4: d8:0d:01:8b:8c:c6:5a:36:1b:93:15:db:9a:00:19:5b:0d:d2: 40:19:12:72:8d:10:71:14:fd:74:55:26:8f:79:b8:62:47:14: 5f:38:69:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlg/SrtDs01hUzNzHmheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYmEyN2JmZDg2YTgxMGExNzk1N2QxZjcyNmZlMTYwZDRl YjMyMjUwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD EygwZmFkNjgzYzEzM2Q0ODIyMzU2ZjhiNmI5M2ZiYjk5ODEzZGE3MTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeZSQ1RwWedvCfgmvWJ0Ffv4lDMO kacqbw4T6mdNgbMvb82cthGPuX4Xe9YcTeydeV6KOsh8Vyfq7FsFaYkLtdp+zvZY knZrZAit82rMc0CPLXVWZyi5SHfSxjnunk1CByYmuIytigCrJUfFKA/EET7D9cQd NH6T4b7fudgP9JNJo58gfNt3KJn/PxjkISTzjTb1eecVpZYa4aSP0gu4B9qoEsVh 03Z6jn85J1LKIKgQSMKy8BjQo42q7Ld7L0jbfbhNEYbBUmv+n3mPZuXv4TmaleTS G7kzgW5fE+eZx/0miQ3UFNjb72jCSN9iVyqBy5BuBSi//yk4GnTxmBs2swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+taDwTPUgiNW+La5P7uZgT2nGZMB8GA1UdIwQY MBaAFIC6J7/YaoEKF5V9H3Jv4WDU6zIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kODhlODctNjJmOS00NzViLWE4NGQt MDM2ZTdlZmM5YWNhLzEvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kODhlODctNjJmOS00NzViLWE4NGQtMDM2ZTdlZmM5YWNh LzEvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3mg7qRt t1bSWMIVulhA5JiYh/IoXPRAA1A7W8j+tG+qg1+qZnuZwKBJA+OAVPXakQNrdKE6 uX0/KHuBe7/QEKARsceu5fympO+oR+ynP3RdwjJteNxXvH4OVXG2A5EfqE2Ytu7d cbPMR1lxaQQY/wnFbU91RsBIiBtFuOjjL9JMBLTAGpFkxPcStSqXGE52DZJAJR3F DL+b7XTkCsrte5zc4i0cfQF6tbBS65OWF/gNYV9sABbB1DQEDjtt1c1QrhkXWXIC 3cT4ZYv2PI+LkUYq2Kw0XQmk2A0Bi4zGWjYbkxXbmgAZWw3SQBkSco0QcRT9dFUm j3m4YkcUXzhpOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:48 2025 by rpki-client