This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft File: GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json) Hash identifier: XTP6oJ6USVGABd0xsCxYFkdjJaEYWo7S7bdy4ZitV5M= Subject key identifier: 5E:48:77:47:34:B9:71:2D:09:AF:77:CA:E3:51:AC:63:C4:3C:03:00 Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6 Certificate issuer: /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6 Certificate serial: 019AF49C5F940547BC987F7516256C822C67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft Manifest number: 012F Signing time: Sat 06 Dec 2025 17:01:20 +0000 Manifest this update: Sat 06 Dec 2025 17:01:20 +0000 Manifest next update: Sun 07 Dec 2025 17:01:20 +0000 Files and hashes: 1: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: EW5QdrsWbPqHlUJZX01LgmyivFazGk2BVqRAvH+TaSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:5f:94:05:47:bc:98:7f:75:16:25:6c:82:2c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6 Validity Not Before: Dec 6 17:01:20 2025 GMT Not After : Dec 7 17:01:20 2025 GMT Subject: CN=5e48774734b9712d09af77cae351ac63c43c0300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:e6:fd:4c:05:b4:70:9d:f4:d5:0b:a2:7c: ff:6d:f6:79:d8:65:a1:22:d5:d0:da:32:47:e6:0a: ec:c2:66:85:f2:65:cf:aa:cc:b8:61:51:54:20:04: aa:d4:80:6d:ae:d3:d7:ed:32:84:7c:76:89:ed:5c: 7c:0b:36:e7:20:aa:92:aa:42:7d:61:3b:af:82:96: fb:50:1d:3c:1d:c3:27:02:89:2f:37:e2:fb:c1:b2: ee:9a:5d:ee:01:6a:c0:ec:15:58:83:92:dc:f8:67: 24:5d:f3:b8:8f:1a:bb:39:8b:76:3a:37:9c:ce:af: e1:23:f5:22:d7:c3:ae:86:6f:e1:df:3a:0a:a1:9d: cd:a3:18:b9:29:ae:9b:21:97:37:5a:4f:ac:cf:61: 55:d7:8b:bb:ad:90:aa:95:80:90:98:cd:d2:96:7b: 38:5a:03:49:03:1d:1a:4c:f8:32:1b:b1:28:6b:3c: d9:69:19:b5:24:f6:17:4f:d4:a8:dc:38:d7:63:d0: 42:e7:ad:e7:b2:7e:0d:a6:98:74:93:f8:14:04:e7: 1c:38:a8:73:2f:45:0a:fe:2b:3b:f0:9e:68:71:35: 11:85:21:6d:25:85:51:9a:30:7c:24:4b:e2:0b:6a: c0:ff:8d:fc:9a:b5:35:e9:d1:bf:c0:6a:57:5b:ba: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:48:77:47:34:B9:71:2D:09:AF:77:CA:E3:51:AC:63:C4:3C:03:00 X509v3 Authority Key Identifier: keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1d:8e:22:24:6b:bb:c4:50:38:9e:89:ce:7a:2d:64:37:f0: 62:a1:c1:e1:df:05:29:03:67:a9:23:71:d1:33:59:63:af:c7: ff:55:16:28:d8:9f:d5:24:00:9b:4c:15:e6:10:9c:bf:41:e6: 9f:fc:bb:d1:58:9d:28:5d:ca:c4:ad:c6:aa:7c:4b:f0:03:b1: c0:19:5e:bd:5c:92:5c:4a:41:b9:2a:13:99:80:1d:0c:3a:a0: 86:2b:f9:7e:09:f0:c8:ec:f6:5e:db:aa:12:75:ae:d6:bb:18: 66:df:41:30:08:17:4c:cf:d1:c3:df:24:93:80:8e:b7:cf:9e: 7d:12:96:e4:eb:8e:8c:f0:fd:52:30:5c:c7:57:2a:ed:69:da: 0e:7f:7f:b0:0d:f2:3f:b5:b5:52:5e:f7:6b:71:f8:bc:bc:b3: 2b:92:f9:2a:42:15:d5:15:aa:07:57:19:0b:e9:f5:9b:73:8b: 26:e0:12:08:2d:77:0d:0d:39:91:32:88:ee:f6:43:ec:23:7f: 71:8e:9c:ec:2a:13:1a:2b:bc:34:52:53:59:d7:23:16:cc:d2: 72:07:e2:8d:81:f5:6e:ef:c9:d3:12:e7:68:3d:ab:f2:03:d5: 12:d9:01:ea:56:68:28:12:23:9f:17:88:71:e8:39:13:14:d7: 95:44:cf:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nF+UBUe8mH91FiVsgixnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YjIzMDViZmI3MDA0ZTUyOWQ2MjNhNDc3NzFiOGU2ZWNk MDUxZDYwHhcNMjUxMjA2MTcwMTIwWhcNMjUxMjA3MTcwMTIwWjAzMTEwLwYDVQQD Eyg1ZTQ4Nzc0NzM0Yjk3MTJkMDlhZjc3Y2FlMzUxYWM2M2M0M2MwMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2jm/UwFtHCd9NULonz/bfZ52GWh ItXQ2jJH5grswmaF8mXPqsy4YVFUIASq1IBtrtPX7TKEfHaJ7Vx8CzbnIKqSqkJ9 YTuvgpb7UB08HcMnAokvN+L7wbLuml3uAWrA7BVYg5Lc+GckXfO4jxq7OYt2Ojec zq/hI/Ui18Ouhm/h3zoKoZ3Noxi5Ka6bIZc3Wk+sz2FV14u7rZCqlYCQmM3Slns4 WgNJAx0aTPgyG7EoazzZaRm1JPYXT9So3DjXY9BC563nsn4Npph0k/gUBOccOKhz L0UK/is78J5ocTURhSFtJYVRmjB8JEviC2rA/438mrU16dG/wGpXW7p3uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5Id0c0uXEtCa93yuNRrGPEPAMAMB8GA1UdIwQY MBaAFBiyMFv7cATlKdYjpHdxuObs0FHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTkt NjhiODZlZWMyZmZjLzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTktNjhiODZlZWMyZmZj LzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHx2OIiRr u8RQOJ6JznotZDfwYqHB4d8FKQNnqSNx0TNZY6/H/1UWKNif1SQAm0wV5hCcv0Hm n/y70VidKF3KxK3GqnxL8AOxwBlevVySXEpBuSoTmYAdDDqghiv5fgnwyOz2Xtuq EnWu1rsYZt9BMAgXTM/Rw98kk4COt8+efRKW5OuOjPD9UjBcx1cq7WnaDn9/sA3y P7W1Ul73a3H4vLyzK5L5KkIV1RWqB1cZC+n1m3OLJuASCC13DQ05kTKI7vZD7CN/ cY6c7CoTGiu8NFJTWdcjFszScgfijYH1bu/J0xLnaD2r8gPVEtkB6lZoKBIjnxeI ceg5ExTXlUTPvA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:29:14 2025 by rpki-client