This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft File: GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json) Hash identifier: xKmEHQFVOY/RtjzPDJUJc8vwdfdS48NnSNtMlMQc5Ko= Subject key identifier: 4C:0E:3E:89:31:7B:D9:64:1D:66:E9:22:C9:E4:AA:53:51:CD:5C:6B Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6 Certificate issuer: /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6 Certificate serial: 019AF31D5A3B575DA78A93C1A6C2D4C47F63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft Manifest number: 12A6 Signing time: Sat 06 Dec 2025 10:02:58 +0000 Manifest this update: Sat 06 Dec 2025 10:02:58 +0000 Manifest next update: Sun 07 Dec 2025 10:02:58 +0000 Files and hashes: 1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: 15tJouhYJiA9OF5lhu2QVqavKg8MtHnoqK80WO/feEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5a:3b:57:5d:a7:8a:93:c1:a6:c2:d4:c4:7f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6 Validity Not Before: Dec 6 10:02:58 2025 GMT Not After : Dec 7 10:02:58 2025 GMT Subject: CN=4c0e3e89317bd9641d66e922c9e4aa5351cd5c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:38:07:22:86:c1:22:9d:1b:03:2b:51:f8: 72:c0:62:79:c6:3a:8d:3c:11:c0:92:f4:66:f4:49: 92:ba:ac:24:86:86:b1:82:70:d5:63:0c:b2:01:e2: 32:5e:78:32:45:a9:95:e2:91:5d:6d:36:b5:3e:0a: d5:9a:27:f3:d0:cb:73:6e:6b:5a:10:0f:aa:e8:19: 14:ef:46:73:a8:0e:0f:03:9b:47:cc:75:55:87:3f: a4:d4:b7:c5:65:be:66:f3:2b:06:63:ee:29:b4:d3: 4f:b1:31:c6:c0:29:c2:63:f0:f0:5f:6f:d2:4f:74: bd:0e:c9:e5:c4:76:6f:81:3a:65:38:02:98:76:4e: 76:98:4b:e7:0b:97:b6:63:d2:9e:2f:cd:39:e9:49: e3:c0:c4:75:71:f8:f0:b9:9a:83:3c:db:6a:ff:a9: d2:a1:43:94:53:d0:0d:ff:56:ac:f3:44:ff:bd:1f: f9:c9:e5:62:32:fb:6b:3a:58:0f:86:d2:69:43:41: 41:6a:44:d6:8e:0b:d9:80:62:0a:67:79:59:66:e4: 83:30:7f:b0:ac:3f:54:d7:b1:65:36:6c:cf:a7:b2: 25:eb:e5:0f:46:ea:cf:c6:62:a5:ed:10:6b:86:0d: a5:44:b0:af:42:c0:af:13:6a:51:5b:6a:71:73:87: 06:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0E:3E:89:31:7B:D9:64:1D:66:E9:22:C9:E4:AA:53:51:CD:5C:6B X509v3 Authority Key Identifier: keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:24:8a:c7:df:79:6f:92:1a:0f:93:30:a6:9f:52:9e:20:b5: 95:3e:af:51:a5:fc:87:f4:ae:1b:f0:53:c4:6e:be:25:07:b8: 7f:97:f9:3a:b5:e9:10:05:9c:88:f2:56:3d:e5:df:ab:01:36: 2e:ef:87:20:a6:72:59:de:07:5b:0c:d5:20:ac:45:3a:69:ed: 82:cd:42:d0:b0:42:04:35:15:f5:c8:75:88:a6:36:b0:90:5c: 8b:25:08:53:d5:64:d9:c4:2a:1f:c5:83:88:00:65:b9:53:29: 5c:c9:6a:76:7e:16:c2:53:aa:7a:d2:2e:2b:2f:8e:d9:08:94: b1:89:43:af:49:ac:91:64:b7:89:f2:be:68:00:69:20:74:d6: b1:ee:c7:b6:64:59:57:ab:05:68:d7:4c:9b:c8:26:50:86:80: 3b:fd:8b:98:70:37:ce:81:7a:f6:e7:53:f8:b1:0c:84:87:84: e3:d8:e3:22:84:07:e1:e9:53:92:a7:d3:50:33:e1:73:26:77: 13:f2:8f:93:35:18:b0:12:ed:06:40:17:a0:eb:74:46:45:38: 1a:8f:f5:41:43:81:17:dd:50:66:af:f6:71:12:a5:35:36:36: 54:6e:d2:1b:d5:db:14:1e:04:1a:f7:e9:d1:2f:c0:41:f0:88: 82:dc:f1:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVo7V12nipPBpsLUxH9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTViYWI0MjVlYWM0YjZhODI0YzY1MTYzZmE5ZWY1MDBl OWY4YzYwHhcNMjUxMjA2MTAwMjU4WhcNMjUxMjA3MTAwMjU4WjAzMTEwLwYDVQQD Eyg0YzBlM2U4OTMxN2JkOTY0MWQ2NmU5MjJjOWU0YWE1MzUxY2Q1YzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMs4ByKGwSKdGwMrUfhywGJ5xjqN PBHAkvRm9EmSuqwkhoaxgnDVYwyyAeIyXngyRamV4pFdbTa1PgrVmifz0Mtzbmta EA+q6BkU70ZzqA4PA5tHzHVVhz+k1LfFZb5m8ysGY+4ptNNPsTHGwCnCY/DwX2/S T3S9DsnlxHZvgTplOAKYdk52mEvnC5e2Y9KeL8056UnjwMR1cfjwuZqDPNtq/6nS oUOUU9AN/1as80T/vR/5yeViMvtrOlgPhtJpQ0FBakTWjgvZgGIKZ3lZZuSDMH+w rD9U17FlNmzPp7Il6+UPRurPxmKl7RBrhg2lRLCvQsCvE2pRW2pxc4cGswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwOPokxe9lkHWbpIsnkqlNRzVxrMB8GA1UdIwQY MBaAFBpVurQl6sS2qCTGUWP6nvUA6fjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84YjQ2ZmItMDMxNy00NDNhLWI2MTUt M2Q0MTllZDQzMTJkLzEvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84YjQ2ZmItMDMxNy00NDNhLWI2MTUtM2Q0MTllZDQzMTJk LzEvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWySKx995 b5IaD5Mwpp9SniC1lT6vUaX8h/SuG/BTxG6+JQe4f5f5OrXpEAWciPJWPeXfqwE2 Lu+HIKZyWd4HWwzVIKxFOmntgs1C0LBCBDUV9ch1iKY2sJBciyUIU9Vk2cQqH8WD iABluVMpXMlqdn4WwlOqetIuKy+O2QiUsYlDr0mskWS3ifK+aABpIHTWse7HtmRZ V6sFaNdMm8gmUIaAO/2LmHA3zoF69udT+LEMhIeE49jjIoQH4elTkqfTUDPhcyZ3 E/KPkzUYsBLtBkAXoOt0RkU4Go/1QUOBF91QZq/2cRKlNTY2VG7SG9XbFB4EGvfp 0S/AQfCIgtzx2w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:48 2025 by rpki-client