This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft File: griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json) Hash identifier: Q8aFBYcrr2CDDWpEVwIBIEWUM1Ib7JBwgXPFzg2I7lA= Subject key identifier: DE:E7:A2:B4:1C:B7:F7:FF:4A:3D:DA:20:7A:F1:DC:9E:CA:A8:9D:F2 Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C Certificate issuer: /CN=82b888791e47f17bbea1f51b9c976977624f041c Certificate serial: 019B3155EAD98322689BC2A36F9AD2BEF82B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft Manifest number: 06FF Signing time: Thu 18 Dec 2025 12:01:12 +0000 Manifest this update: Thu 18 Dec 2025 12:01:12 +0000 Manifest next update: Fri 19 Dec 2025 12:01:12 +0000 Files and hashes: 1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: b1I1PtLJWp1QuOKpatsEkj9XxI0D+Z4Mn+9iFeA3E/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:ea:d9:83:22:68:9b:c2:a3:6f:9a:d2:be:f8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c Validity Not Before: Dec 18 12:01:12 2025 GMT Not After : Dec 19 12:01:12 2025 GMT Subject: CN=dee7a2b41cb7f7ff4a3dda207af1dc9ecaa89df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:45:c6:85:7d:d8:b5:75:ef:5f:7f:80:e5:77: ec:29:55:67:c2:f4:68:7d:fa:bd:2c:c4:93:e1:f0: 88:c5:8b:c8:bf:a8:e8:fa:a4:30:2f:1b:a4:89:d6: f8:10:c3:d1:92:5c:b2:c5:e8:8d:d8:25:d3:b0:a4: 12:da:eb:62:a3:0a:37:02:d6:22:c5:23:47:76:55: 8c:3d:d6:5a:fb:6f:7d:3e:84:d7:4f:f1:5e:93:2c: 48:57:91:5b:64:01:a1:e6:e9:d4:99:d4:f5:64:54: ef:f1:63:e7:cf:18:25:14:75:26:69:bf:b1:c3:ac: cb:77:95:d6:5b:d8:59:74:66:35:bb:f7:cb:d0:18: 5d:a7:e8:f5:c6:c0:69:e5:8a:60:7a:e2:d0:a1:7b: 79:5a:b7:b6:23:d0:63:55:99:ea:ca:f1:24:85:4b: 79:18:2c:6c:52:7e:d0:6e:9b:87:22:4e:fb:75:30: 26:a9:37:ec:d8:75:9a:84:b8:5e:98:3e:fa:4d:9a: 0e:b2:0c:02:c3:d5:f0:11:32:26:57:fa:4d:6c:1d: 9a:89:b1:b6:c7:a6:47:17:5c:92:e7:9c:b7:a7:4f: 0b:b8:2e:30:f6:79:da:5e:fc:df:31:43:ff:6a:d3: 70:4f:e8:0b:8c:4a:4d:be:8a:37:9d:09:ff:d8:e5: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E7:A2:B4:1C:B7:F7:FF:4A:3D:DA:20:7A:F1:DC:9E:CA:A8:9D:F2 X509v3 Authority Key Identifier: keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:82:59:5b:95:93:64:c4:54:b1:b6:47:80:d4:b5:25:91:4f: cb:4a:16:ee:50:d5:73:66:73:aa:f2:47:cd:e4:b3:b0:68:1c: f5:f0:dc:c0:60:8f:55:3f:4e:e3:a3:2c:56:68:8f:0c:b0:1e: 87:6f:cd:db:34:e8:4d:41:9e:4b:74:c3:e0:b5:5c:fa:c9:ad: dc:e8:6c:92:e0:55:fc:ac:d6:1c:dc:23:5f:cb:c5:1e:31:81: ae:f4:b2:1b:3d:d3:34:f5:45:3f:62:d2:e8:56:ea:69:99:c3: 44:d9:b9:6a:b0:56:eb:26:ae:e9:37:c7:a4:e7:fc:31:f5:5b: 4b:09:f8:2b:01:74:32:5e:1e:33:e2:69:68:da:a1:4c:b0:7d: 34:9d:8b:d1:c1:c3:11:01:21:66:61:55:80:57:68:38:2b:9b: 40:85:0a:56:7d:c4:da:77:b9:62:f6:b7:a6:a3:40:cd:47:f0: db:23:60:79:2c:5c:35:99:8e:b5:9e:8d:2d:ef:98:c0:b7:e0: 96:65:ed:fb:1c:4d:4d:19:d9:5a:a8:60:2a:9f:be:1e:15:da: c5:c1:67:3a:b0:45:34:c6:d8:e4:cf:0f:84:2e:35:8a:76:50: 40:a9:24:a4:b1:eb:9e:e6:d0:75:04:4e:03:21:eb:7a:d9:69: 54:a8:81:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVerZgyJom8Kjb5rSvvgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjg4ODc5MWU0N2YxN2JiZWExZjUxYjljOTc2OTc3NjI0 ZjA0MWMwHhcNMjUxMjE4MTIwMTEyWhcNMjUxMjE5MTIwMTEyWjAzMTEwLwYDVQQD EyhkZWU3YTJiNDFjYjdmN2ZmNGEzZGRhMjA3YWYxZGM5ZWNhYTg5ZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0XGhX3YtXXvX3+A5XfsKVVnwvRo ffq9LMST4fCIxYvIv6jo+qQwLxukidb4EMPRklyyxeiN2CXTsKQS2utiowo3AtYi xSNHdlWMPdZa+299PoTXT/FekyxIV5FbZAGh5unUmdT1ZFTv8WPnzxglFHUmab+x w6zLd5XWW9hZdGY1u/fL0Bhdp+j1xsBp5YpgeuLQoXt5Wre2I9BjVZnqyvEkhUt5 GCxsUn7QbpuHIk77dTAmqTfs2HWahLhemD76TZoOsgwCw9XwETImV/pNbB2aibG2 x6ZHF1yS55y3p08LuC4w9nnaXvzfMUP/atNwT+gLjEpNvoo3nQn/2OUHTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7norQct/f/Sj3aIHrx3J7KqJ3yMB8GA1UdIwQY MBaAFIK4iHkeR/F7vqH1G5yXaXdiTwQcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lNGVjMTQtZDBlOC00MzQ4LWFlMDct NGU5MWQ3YTdkOWNlLzEvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lNGVjMTQtZDBlOC00MzQ4LWFlMDctNGU5MWQ3YTdkOWNl LzEvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4oJZW5WT ZMRUsbZHgNS1JZFPy0oW7lDVc2ZzqvJHzeSzsGgc9fDcwGCPVT9O46MsVmiPDLAe h2/N2zToTUGeS3TD4LVc+smt3OhskuBV/KzWHNwjX8vFHjGBrvSyGz3TNPVFP2LS 6FbqaZnDRNm5arBW6yau6TfHpOf8MfVbSwn4KwF0Ml4eM+JpaNqhTLB9NJ2L0cHD EQEhZmFVgFdoOCubQIUKVn3E2ne5Yva3pqNAzUfw2yNgeSxcNZmOtZ6NLe+YwLfg lmXt+xxNTRnZWqhgKp++HhXaxcFnOrBFNMbY5M8PhC41inZQQKkkpLHrnubQdQRO AyHretlpVKiBWg== -----END CERTIFICATE-----Generated at Thu Dec 18 17:32:10 2025 by rpki-client