This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: EjV0ZFv+tdI2UUyw5MTO8T9pXBT3BtCsXsUwBLe7HfQ=
Subject key identifier: 48:C2:08:D2:6A:8B:55:59:AA:92:91:6F:3A:27:24:59:6A:DF:77:47
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 019AF2765B38E6A3E4745FA8A25996B84865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 15D8
Signing time: Sat 06 Dec 2025 07:00:34 +0000
Manifest this update: Sat 06 Dec 2025 07:00:34 +0000
Manifest next update: Sun 07 Dec 2025 07:00:34 +0000
Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=)
2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=)
3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: 9U85GsSc5qkVAs8731hdcOW1VwrJELvrlYIjtlaiETQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:5b:38:e6:a3:e4:74:5f:a8:a2:59:96:b8:48:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Dec 6 07:00:34 2025 GMT
Not After : Dec 7 07:00:34 2025 GMT
Subject: CN=48c208d26a8b5559aa92916f3a2724596adf7747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:13:40:44:f5:b9:55:83:a1:72:61:68:ef:
83:5e:19:9f:e1:f7:c9:40:f1:05:4d:1c:3b:ae:9d:
3d:ea:28:18:5d:31:24:88:87:8d:88:1a:40:e3:8d:
3b:25:56:2e:9f:85:b7:61:d6:28:5b:e9:0a:2a:92:
74:d5:6d:99:aa:14:b2:5e:4f:57:82:3e:28:de:94:
b1:41:2b:89:e4:cd:a5:29:c7:c5:a3:8e:1c:9f:2a:
0a:12:c8:05:6d:40:c4:f8:79:85:d0:0e:8e:1d:a1:
d7:b7:58:fe:84:33:f4:d9:24:72:86:4f:a1:80:21:
a4:6d:3c:80:73:9a:a5:c7:d2:e7:8e:6d:c3:a0:f8:
05:62:9a:56:b8:2b:a2:06:ed:7a:26:3f:28:54:f8:
53:8d:cf:00:73:79:68:c9:55:43:11:2a:0b:48:93:
eb:8b:66:c1:5c:02:a1:f7:57:09:8e:f4:51:98:6d:
7d:49:3f:f9:69:86:94:30:bc:6a:d0:7a:d5:b2:65:
4a:a0:4e:a0:e7:d4:5a:ab:53:05:74:d7:62:10:f1:
08:66:18:ba:53:ce:d6:e6:a9:36:8c:58:97:3d:06:
8c:88:bc:cf:0d:d9:a1:17:b4:77:65:e8:cf:ae:d5:
27:48:49:06:d1:41:14:d1:03:b6:6b:e2:b2:4f:68:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C2:08:D2:6A:8B:55:59:AA:92:91:6F:3A:27:24:59:6A:DF:77:47
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:62:ff:63:20:97:d8:0f:0f:8d:d2:03:d4:96:4b:85:3e:b3:
85:1c:b0:d7:d9:3e:f5:e9:cc:b7:2e:7f:22:4d:86:24:6d:7b:
c8:4c:d4:7e:8f:5a:7d:9c:a4:1f:3d:2d:6c:fd:2c:40:fd:cd:
82:f8:f2:d4:de:e2:82:f8:04:e7:78:cc:cb:f9:0f:58:12:3c:
aa:95:ca:06:dd:c2:fb:4c:1b:71:fc:5a:b1:70:ef:91:e3:d8:
ea:91:f6:74:43:a7:56:86:6e:d3:bc:15:9a:36:58:27:60:9d:
d0:2f:80:6c:f7:1d:b3:49:02:e0:ec:52:82:54:83:95:aa:4b:
c9:9a:8e:27:a3:9d:08:cb:cc:8f:e4:6e:ec:0d:6f:76:35:77:
75:6d:46:e5:5f:9f:df:d9:9e:d8:fa:04:7e:41:c8:62:4d:99:
f2:95:6b:bd:93:1c:46:59:34:74:5b:2e:ac:94:18:79:fc:35:
1c:04:8f:fe:ab:16:5c:b5:e6:18:4f:17:38:de:d5:a9:88:a7:
fe:bc:9f:04:24:e6:49:9b:f7:80:51:3b:4a:bb:db:30:21:9c:
6f:51:3a:39:2a:0f:a3:ab:b0:ec:59:5d:5e:78:73:62:c3:b9:
bb:00:19:8c:60:1f:e2:7c:00:af:8a:f7:3d:14:f1:52:06:8a:
11:b2:96:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:47:58 2025 by rpki-client