This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft File: griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json) Hash identifier: cy0ZUYrrMYRcT+eYd5wjC0BJr1GzF8vUx0rvbrMUUSM= Subject key identifier: 35:C6:71:B3:87:99:C8:7C:08:31:B3:54:E8:B0:81:E8:46:B9:28:FE Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C Certificate issuer: /CN=82b888791e47f17bbea1f51b9c976977624f041c Certificate serial: 019AF19BAE448347C82F2752C3522317E53D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft Manifest number: 06DE Signing time: Sat 06 Dec 2025 03:01:42 +0000 Manifest this update: Sat 06 Dec 2025 03:01:42 +0000 Manifest next update: Sun 07 Dec 2025 03:01:42 +0000 Files and hashes: 1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: DC8Fi8C5SttOfcFn2EHZxi8It8nWZ7KQDbxcyBNni/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:ae:44:83:47:c8:2f:27:52:c3:52:23:17:e5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c Validity Not Before: Dec 6 03:01:42 2025 GMT Not After : Dec 7 03:01:42 2025 GMT Subject: CN=35c671b38799c87c0831b354e8b081e846b928fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:9b:f9:71:20:ee:5f:ea:bd:d9:65:2e:6d: c0:17:69:69:39:46:ce:e5:92:b0:ca:4d:f7:bb:9b: b6:f3:0a:5e:27:b4:22:df:b5:c3:96:01:44:b0:bf: 95:47:8c:ba:a8:8b:0d:0a:10:06:7e:a3:36:11:0c: 48:7d:4d:5e:d2:af:09:16:65:d1:5d:3a:48:47:65: bc:1e:50:b6:cf:51:69:35:38:69:1f:e0:f5:ff:6d: b7:46:d5:8e:2a:b0:ef:15:a4:ca:bd:19:9e:72:71: 8b:03:1a:90:18:18:6c:7d:20:b8:0c:25:05:ec:e4: 29:91:b1:f2:d4:95:6a:43:1e:ef:19:97:79:36:75: 7d:0d:f1:18:25:2c:94:92:41:58:f9:c2:5e:6e:59: f0:16:a6:ad:1b:6b:6b:18:ed:35:13:28:c8:b8:f9: 6a:50:5f:97:67:94:b8:c9:74:63:40:55:45:88:59: 9f:5e:22:6e:b6:9e:ce:98:3b:93:14:1e:4e:8a:54: 74:8e:c2:16:7e:b1:03:c1:fa:25:3a:3a:5f:2a:d7: 87:3a:85:27:f7:73:0e:ad:07:45:6c:fe:ec:1b:e2: 78:88:a9:b8:38:01:17:82:c8:d5:38:63:2c:bf:79: 81:7c:6b:46:71:ea:0a:c8:fe:e8:c2:21:b3:cb:fa: 12:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C6:71:B3:87:99:C8:7C:08:31:B3:54:E8:B0:81:E8:46:B9:28:FE X509v3 Authority Key Identifier: keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:9b:f4:fd:75:f7:96:6d:82:01:69:f7:05:ea:30:0c:e7:6f: a2:a4:0e:45:59:84:85:e0:56:75:f3:3a:64:8c:31:5e:75:cb: c0:1a:5c:d3:19:e5:05:93:d8:2d:b0:3a:b4:1e:a9:f2:84:a4: 73:06:36:6b:da:5c:ab:f4:10:3e:ab:66:8a:d1:0e:88:80:0a: de:de:66:0b:c6:04:79:3c:1c:dc:ed:bb:88:62:a1:29:31:93: 12:c6:dc:85:2e:25:21:8c:01:60:30:85:a4:4a:de:d5:5b:1f: 58:e6:f8:8d:f3:27:6a:93:20:67:d9:d6:89:92:59:62:60:63: 3d:0a:55:dd:51:07:5c:bb:f6:0c:35:d4:b6:6d:07:eb:bd:36: 77:f1:dd:8b:fe:f1:b7:d6:cd:a4:02:36:e5:02:42:44:96:3b: a6:78:38:5c:c8:ab:53:f1:8f:0f:60:32:b6:61:f0:96:27:4f: 14:d5:91:96:62:5e:38:73:b4:85:ad:8c:76:21:47:8b:73:56: 31:c4:8f:60:aa:2a:ae:33:42:db:b6:9e:92:0e:8a:5c:68:2b: 12:57:c6:bc:45:56:ff:58:43:d8:c0:15:0d:0e:17:d5:52:17: 3e:6a:c9:25:1e:b5:2a:c3:3a:07:8d:08:92:6d:80:7d:1b:1e: 90:27:1f:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm65Eg0fILydSw1IjF+U9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjg4ODc5MWU0N2YxN2JiZWExZjUxYjljOTc2OTc3NjI0 ZjA0MWMwHhcNMjUxMjA2MDMwMTQyWhcNMjUxMjA3MDMwMTQyWjAzMTEwLwYDVQQD EygzNWM2NzFiMzg3OTljODdjMDgzMWIzNTRlOGIwODFlODQ2YjkyOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxCb+XEg7l/qvdllLm3AF2lpOUbO 5ZKwyk33u5u28wpeJ7Qi37XDlgFEsL+VR4y6qIsNChAGfqM2EQxIfU1e0q8JFmXR XTpIR2W8HlC2z1FpNThpH+D1/223RtWOKrDvFaTKvRmecnGLAxqQGBhsfSC4DCUF 7OQpkbHy1JVqQx7vGZd5NnV9DfEYJSyUkkFY+cJeblnwFqatG2trGO01EyjIuPlq UF+XZ5S4yXRjQFVFiFmfXiJutp7OmDuTFB5OilR0jsIWfrEDwfolOjpfKteHOoUn 93MOrQdFbP7sG+J4iKm4OAEXgsjVOGMsv3mBfGtGceoKyP7owiGzy/oSAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXGcbOHmch8CDGzVOiwgehGuSj+MB8GA1UdIwQY MBaAFIK4iHkeR/F7vqH1G5yXaXdiTwQcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lNGVjMTQtZDBlOC00MzQ4LWFlMDct NGU5MWQ3YTdkOWNlLzEvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lNGVjMTQtZDBlOC00MzQ4LWFlMDctNGU5MWQ3YTdkOWNl LzEvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5v0/XX3 lm2CAWn3BeowDOdvoqQORVmEheBWdfM6ZIwxXnXLwBpc0xnlBZPYLbA6tB6p8oSk cwY2a9pcq/QQPqtmitEOiIAK3t5mC8YEeTwc3O27iGKhKTGTEsbchS4lIYwBYDCF pEre1VsfWOb4jfMnapMgZ9nWiZJZYmBjPQpV3VEHXLv2DDXUtm0H6702d/Hdi/7x t9bNpAI25QJCRJY7png4XMirU/GPD2AytmHwlidPFNWRlmJeOHO0ha2MdiFHi3NW McSPYKoqrjNC27aekg6KXGgrElfGvEVW/1hD2MAVDQ4X1VIXPmrJJR61KsM6B40I km2AfRsekCcfSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:59 2025 by rpki-client