This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json) Hash identifier: U7mkb958gWJofZnhBVN2w//p14ps0DWgfUEMNIAJCB0= Subject key identifier: EF:D9:30:9B:A8:69:D2:8C:BE:47:0A:EA:85:94:A9:15:8E:92:D3:60 Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01 Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01 Certificate serial: 019AF1D20ACDEDA37C7926D71AFF7A777A7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: MEAdsiv3zdr52L5Bno5AU4RUfg5Wdc3pd47kFA5KIH0=) 2: aveWHqfuaX_kG8WIp_xJcLumQBk.roa (hash: 3xccH6hLZrL399VCmO0jTOsOoPHpVJqnI9JkWpXbAog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0a:cd:ed:a3:7c:79:26:d7:1a:ff:7a:77:7a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=efd9309ba869d28cbe470aea8594a9158e92d360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:53:fb:48:cd:0f:12:71:c6:86:a5:89:f5: ae:34:23:d7:47:4b:07:63:52:77:52:28:a6:33:0c: 9a:b9:f1:32:a5:90:2a:0f:28:e0:03:7a:73:2f:80: 24:0d:80:4d:2f:c5:dc:21:24:de:6a:14:74:46:5b: 37:f0:f9:10:58:b4:76:13:1f:83:95:dc:4e:10:7e: 02:e8:36:6b:99:25:70:fc:2a:8e:68:8f:e8:cb:4d: 31:67:f2:3e:eb:61:e6:bd:41:4b:7d:ac:9f:65:9e: d1:48:35:50:36:1c:b6:5d:5c:eb:ed:ab:68:f9:87: 01:65:5d:bc:2b:28:0c:b3:57:b2:84:f9:6f:61:16: 1d:b2:23:ac:67:8c:db:5c:8c:74:d5:45:d4:1e:98: f2:cf:c5:64:4d:d1:11:0e:15:b4:2f:19:5d:bc:3a: 9a:16:c0:e5:f6:7f:f1:d3:c5:54:15:66:4b:00:c6: 6d:ba:d2:b9:c5:d7:42:80:5d:12:a7:7a:94:c8:ea: ef:a5:be:53:12:0b:bd:95:60:68:ba:ea:28:84:38: 11:2a:8a:16:96:62:3a:df:84:0f:9d:40:3a:33:3c: d6:8f:bf:f5:23:e0:78:f6:51:dd:5f:68:86:9e:e4: c9:54:57:4f:bd:68:f9:47:0a:c5:8f:dc:1a:d7:76: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D9:30:9B:A8:69:D2:8C:BE:47:0A:EA:85:94:A9:15:8E:92:D3:60 X509v3 Authority Key Identifier: keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a1:b1:ff:18:53:82:53:4f:9f:40:4d:45:c5:1d:01:ee:d3: 39:b4:2c:d2:21:e5:d3:f3:8c:1d:2d:8b:98:66:14:ec:78:20: 51:da:8e:1d:9f:69:a7:6f:96:ab:2b:e6:bd:f4:db:2c:70:97: e6:7b:54:f7:c1:04:01:5a:b1:ac:43:03:fd:af:c0:ba:ac:d1: 54:82:69:44:e1:aa:24:3b:4f:07:db:e4:5f:92:4d:2f:19:aa: 3c:3d:88:70:65:f9:bf:76:27:72:73:e3:09:29:78:fc:cb:b4: 7d:75:48:30:08:cc:7e:e7:be:45:f7:e9:8f:ed:83:cc:b3:ea: bd:98:f9:9f:fa:b4:99:e1:52:16:4f:66:21:20:8a:57:66:37: b7:a7:2a:55:d4:99:78:34:a0:24:1e:ca:3c:ac:4b:4e:ac:6d: 3c:a0:80:33:9c:5f:a7:18:c0:b4:e1:2a:fc:e8:15:8a:8d:82: 86:a5:c9:f8:56:e8:24:6e:10:06:38:0f:38:c5:2e:74:70:d3: a7:ba:5d:fa:4b:47:5c:4b:67:61:93:71:6d:93:2b:af:51:e7: 55:57:93:08:45:98:98:b5:c5:93:f5:18:ad:ba:fe:ea:cd:f9: a2:f0:88:1c:67:1e:88:8f:13:b4:a7:96:b9:88:ee:04:f0:4f: 41:cf:10:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0grN7aN8eSbXGv96d3p+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YjczNzdjZTVlZmEzY2EwMzBlYmI0ZGQ3NzU2N2ZjMDMy ZmNkMDEwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD EyhlZmQ5MzA5YmE4NjlkMjhjYmU0NzBhZWE4NTk0YTkxNThlOTJkMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGRT+0jNDxJxxoalifWuNCPXR0sH Y1J3UiimMwyaufEypZAqDyjgA3pzL4AkDYBNL8XcISTeahR0Rls38PkQWLR2Ex+D ldxOEH4C6DZrmSVw/CqOaI/oy00xZ/I+62HmvUFLfayfZZ7RSDVQNhy2XVzr7ato +YcBZV28KygMs1eyhPlvYRYdsiOsZ4zbXIx01UXUHpjyz8VkTdERDhW0LxldvDqa FsDl9n/x08VUFWZLAMZtutK5xddCgF0Sp3qUyOrvpb5TEgu9lWBouuoohDgRKooW lmI634QPnUA6MzzWj7/1I+B49lHdX2iGnuTJVFdPvWj5RwrFj9wa13Y+XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/ZMJuoadKMvkcK6oWUqRWOktNgMB8GA1UdIwQY MBaAFBi3N3zl76PKAw67Tdd1Z/wDL80BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hMGJhODgtNGQ4OC00NjkxLWFhNmMt YjViOGY1Nzg0ZGZlLzEvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hMGJhODgtNGQ4OC00NjkxLWFhNmMtYjViOGY1Nzg0ZGZl LzEvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaGx/xhT glNPn0BNRcUdAe7TObQs0iHl0/OMHS2LmGYU7HggUdqOHZ9pp2+WqyvmvfTbLHCX 5ntU98EEAVqxrEMD/a/AuqzRVIJpROGqJDtPB9vkX5JNLxmqPD2IcGX5v3YncnPj CSl4/Mu0fXVIMAjMfue+Rffpj+2DzLPqvZj5n/q0meFSFk9mISCKV2Y3t6cqVdSZ eDSgJB7KPKxLTqxtPKCAM5xfpxjAtOEq/OgVio2ChqXJ+FboJG4QBjgPOMUudHDT p7pd+ktHXEtnYZNxbZMrr1HnVVeTCEWYmLXFk/UYrbr+6s35ovCIHGceiI8TtKeW uYjuBPBPQc8Qow== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:28 2025 by rpki-client