This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft File: GlhGL-ulRhBLR5cpLdI6RrAvftI.mft (raw, json) Hash identifier: Pk5eIUDSeZkKnqnZ82aoscthbKwbxxYxVwV/lEyy9k4= Subject key identifier: 12:2A:51:26:41:00:B8:EC:22:B7:F0:3C:59:2E:52:FB:B3:4A:A6:81 Authority key identifier: 1A:58:46:2F:EB:A5:46:10:4B:47:97:29:2D:D2:3A:46:B0:2F:7E:D2 Certificate issuer: /CN=1a58462feba546104b4797292dd23a46b02f7ed2 Certificate serial: 019AF20991C095D4ABE765BFDD8D1D3C3CEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft Manifest number: 67 Signing time: Sat 06 Dec 2025 05:01:44 +0000 Manifest this update: Sat 06 Dec 2025 05:01:44 +0000 Manifest next update: Sun 07 Dec 2025 05:01:44 +0000 Files and hashes: 1: GlhGL-ulRhBLR5cpLdI6RrAvftI.crl (hash: FqDmmOgxWGnRS9HZ2gLZjJmeh+YzHPd35aIWezmfYOs=) 2: lDLi_sshU1yeeZ8S7VhgBjf-8hg.roa (hash: MAmtX5yRejHvc2KsKRoKAGrhUgZk5XcqMVYZ1wlfc74=) 3: lUE3uZJLYe9eqmUyCH05H36SEp0.roa (hash: Rvx06ICV18qyvBGjnh3E88XndXAT1M4PLYOoy7xw/Xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:91:c0:95:d4:ab:e7:65:bf:dd:8d:1d:3c:3c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a58462feba546104b4797292dd23a46b02f7ed2 Validity Not Before: Dec 6 05:01:44 2025 GMT Not After : Dec 7 05:01:44 2025 GMT Subject: CN=122a51264100b8ec22b7f03c592e52fbb34aa681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:df:42:8b:85:6a:89:c1:42:ee:ca:01:2d:e5: c9:14:19:66:88:36:23:53:da:97:13:ff:e9:4d:16: 93:f8:ee:bc:52:03:fd:39:b4:e3:f8:a4:d6:14:45: ab:d9:5a:e0:4c:ec:c5:ef:87:c1:02:42:24:93:f3: 9a:85:f2:20:af:0e:38:39:7e:bf:95:a0:7f:84:c5: ea:a1:6e:57:90:21:fa:e6:d4:37:73:ec:7f:89:94: 25:e4:eb:da:91:69:05:fe:74:7f:d9:2c:3d:eb:cc: ff:3c:2e:03:26:b2:a1:57:00:66:87:bd:a1:c3:f8: d5:75:54:dc:bf:f8:69:54:fc:7d:e6:75:f7:7c:e4: 30:37:e0:32:51:da:47:9d:e0:ea:8d:d3:b3:e1:33: b1:63:59:dc:0e:bb:11:9a:33:cc:55:53:e7:66:6e: 00:f5:89:61:3a:f9:80:a3:e7:56:24:c0:cf:c9:2e: f1:4b:78:86:c7:07:32:20:65:92:86:34:d8:fa:18: de:5f:24:0b:7e:bf:66:94:24:df:f1:54:f9:0d:e8: 65:46:57:24:e6:f6:7a:6f:a8:e0:1e:e8:23:ec:07: 01:ae:b0:9f:78:7e:32:2e:c6:6e:57:3e:b9:8a:76: 6e:9a:74:fd:fd:a7:01:32:18:a2:bb:27:2f:0e:be: 7a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2A:51:26:41:00:B8:EC:22:B7:F0:3C:59:2E:52:FB:B3:4A:A6:81 X509v3 Authority Key Identifier: keyid:1A:58:46:2F:EB:A5:46:10:4B:47:97:29:2D:D2:3A:46:B0:2F:7E:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d2:10:bb:82:6f:99:14:9d:8c:b9:44:0b:21:c1:b6:e9:5e: af:91:25:b0:2c:42:0d:3b:4d:b7:f0:dc:89:ff:bd:20:a0:6b: b1:1e:1f:85:11:c0:f0:8b:80:db:a9:f0:85:5e:71:77:9e:da: 37:a6:93:fb:c9:8e:55:26:3f:64:6e:e2:11:63:48:b1:ce:1c: 91:cc:94:1c:e0:bb:8c:f2:86:df:dc:70:d1:a4:a8:37:7c:04: fb:1f:22:41:64:a7:bf:07:3b:40:37:97:c7:5b:4e:94:2b:8c: ba:81:20:08:1a:6e:e8:ba:c5:f5:25:54:d6:c1:a0:2f:72:43: 11:e2:bc:38:28:a8:d2:e2:d2:88:b8:19:8c:81:46:a4:ef:8d: 41:bb:56:a9:15:65:bd:ce:a6:90:00:44:3a:85:94:aa:08:83: 4d:49:4c:f1:cf:fb:6c:16:8d:4a:e9:b6:e2:bc:a4:7f:f9:95: 4c:37:48:3d:15:af:d0:de:8f:d2:a2:09:ce:d7:f7:71:ba:a2: 0a:a6:fb:22:36:11:45:84:d5:7d:6e:b8:ef:0a:11:43:fc:46: c2:58:09:04:af:17:1c:b1:6e:5a:c9:b7:7d:1f:da:84:be:a2: 1b:df:4e:ad:90:09:5e:b1:83:40:9e:85:0a:ae:f5:28:76:af: cd:69:07:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZHAldSr52W/3Y0dPDzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTg0NjJmZWJhNTQ2MTA0YjQ3OTcyOTJkZDIzYTQ2YjAy ZjdlZDIwHhcNMjUxMjA2MDUwMTQ0WhcNMjUxMjA3MDUwMTQ0WjAzMTEwLwYDVQQD EygxMjJhNTEyNjQxMDBiOGVjMjJiN2YwM2M1OTJlNTJmYmIzNGFhNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9N9Ci4VqicFC7soBLeXJFBlmiDYj U9qXE//pTRaT+O68UgP9ObTj+KTWFEWr2VrgTOzF74fBAkIkk/OahfIgrw44OX6/ laB/hMXqoW5XkCH65tQ3c+x/iZQl5OvakWkF/nR/2Sw968z/PC4DJrKhVwBmh72h w/jVdVTcv/hpVPx95nX3fOQwN+AyUdpHneDqjdOz4TOxY1ncDrsRmjPMVVPnZm4A 9YlhOvmAo+dWJMDPyS7xS3iGxwcyIGWShjTY+hjeXyQLfr9mlCTf8VT5DehlRlck 5vZ6b6jgHugj7AcBrrCfeH4yLsZuVz65inZumnT9/acBMhiiuycvDr56lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIqUSZBALjsIrfwPFkuUvuzSqaBMB8GA1UdIwQY MBaAFBpYRi/rpUYQS0eXKS3SOkawL37SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xoR0wtdWxSaEJMUjVjcExkSTZSckF2ZnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wNmI3ZWUtNjc1Mi00NTBlLWI4NTIt OWU5MDhkMDc3ZjRmLzEvR2xoR0wtdWxSaEJMUjVjcExkSTZSckF2ZnRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wNmI3ZWUtNjc1Mi00NTBlLWI4NTItOWU5MDhkMDc3ZjRm LzEvR2xoR0wtdWxSaEJMUjVjcExkSTZSckF2ZnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItIQu4Jv mRSdjLlECyHBtuler5ElsCxCDTtNt/Dcif+9IKBrsR4fhRHA8IuA26nwhV5xd57a N6aT+8mOVSY/ZG7iEWNIsc4ckcyUHOC7jPKG39xw0aSoN3wE+x8iQWSnvwc7QDeX x1tOlCuMuoEgCBpu6LrF9SVU1sGgL3JDEeK8OCio0uLSiLgZjIFGpO+NQbtWqRVl vc6mkABEOoWUqgiDTUlM8c/7bBaNSum24rykf/mVTDdIPRWv0N6P0qIJztf3cbqi Cqb7IjYRRYTVfW647woRQ/xGwlgJBK8XHLFuWsm3fR/ahL6iG99OrZAJXrGDQJ6F Cq71KHavzWkHrg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:01 2025 by rpki-client