This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json) Hash identifier: MxOfV8pzs48iaQobWOhSKHQYJ/hF79LUBoMF2HJCZhE= Subject key identifier: 4B:4F:AB:1F:BA:A3:43:4B:58:AE:10:C4:B9:36:4C:C0:D1:5E:3D:BB Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f Certificate serial: 019AF1D1C3ED3900A7C250753E8E0CD752BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft Manifest number: 0617 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: TihdOE0lQDE/z9NI1VOFsV2VCZEWlTqr4kSkheHQ8MM=) 2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c3:ed:39:00:a7:c2:50:75:3e:8e:0c:d7:52:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=4b4fab1fbaa3434b58ae10c4b9364cc0d15e3dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:ee:8e:f4:55:b2:c8:6f:c1:0f:d1:6b:75: 13:20:c6:18:f5:7d:63:92:56:1f:41:31:f4:c9:19: 1c:f4:7a:bd:07:ef:39:e2:b6:84:6d:48:d8:4f:c8: 0c:18:68:39:9e:d8:20:15:f5:3e:b4:52:6c:20:aa: 71:a7:5e:c2:13:62:57:3c:ce:5c:bd:a0:8a:27:d2: a4:77:05:0c:a5:80:cb:ea:e8:1d:2a:a7:de:91:62: a1:64:99:37:ce:d4:ec:77:29:b2:91:2d:f9:cb:e0: b2:3c:61:dc:6b:c1:19:40:27:dd:67:24:b0:54:93: 9c:5c:d8:64:c9:6d:07:59:38:61:d5:65:77:da:e3: 72:d3:84:ec:a6:19:b9:64:8f:d4:da:a0:90:87:7c: 8d:6b:d5:6e:35:53:e0:2d:66:88:b3:fb:99:0a:8e: 18:a2:5e:86:84:0e:00:4e:6f:49:07:ad:51:3d:74: 37:74:31:6b:80:c8:7e:58:7e:47:6f:32:15:c1:7d: 4e:e8:e1:52:34:ff:00:7b:2a:18:38:e8:06:04:5e: be:44:59:17:85:24:a6:0c:a6:97:f3:20:e7:77:bb: ed:9f:34:6c:23:cd:41:13:bd:b7:78:16:85:b4:71: a8:04:19:b7:9b:c6:1d:1a:ce:14:be:54:d0:f8:ea: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4F:AB:1F:BA:A3:43:4B:58:AE:10:C4:B9:36:4C:C0:D1:5E:3D:BB X509v3 Authority Key Identifier: keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3c:2b:3a:a9:a7:2a:c3:80:1b:e2:01:12:b1:14:84:a2:03: b5:e0:f2:59:69:d3:87:62:54:7a:41:bd:00:ac:4b:03:57:1b: 86:df:4d:91:3b:95:8e:2e:6c:aa:11:e9:79:ca:bd:cf:29:05: ae:44:ab:5a:41:40:32:e5:42:da:e8:76:56:71:1a:05:3d:b8: e7:39:f6:3c:2e:45:34:ac:cf:50:c5:4e:0f:f5:d0:57:57:32: 53:8d:a6:b6:98:ef:29:82:95:b1:f1:00:0e:21:78:17:59:14: 0a:39:d0:89:50:4c:31:cf:fe:da:36:35:be:c9:12:5c:00:f7: 8b:08:70:dd:0b:35:c4:92:63:27:6c:37:21:09:0a:f2:fb:f5: 66:db:ad:38:bd:4c:46:1b:d0:ab:06:5d:be:66:fd:64:e3:e2: 3a:a8:d4:31:ff:c9:2a:88:b0:fa:2a:69:2a:66:5d:76:d1:a1: 59:9b:54:9f:96:d5:5e:ea:e6:9d:ab:19:30:a9:ef:d6:68:91: 83:7b:b1:c0:f6:11:2a:cf:b5:b7:ef:ae:c0:ac:06:9c:0d:d6: db:10:3f:df:0a:f4:d6:07:07:fb:3c:52:6c:a4:30:d7:07:be: 21:cc:3b:34:86:98:2d:2c:31:5e:fb:01:b0:64:04:e0:90:48: bb:28:a3:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cPtOQCnwlB1Po4M11K8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTE3MjgxYWNmOTZkMzhlNzlhMzVjOGJlYjY4YjhjMDU5 NzlhNmYwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD Eyg0YjRmYWIxZmJhYTM0MzRiNThhZTEwYzRiOTM2NGNjMGQxNWUzZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjLujvRVsshvwQ/Ra3UTIMYY9X1j klYfQTH0yRkc9Hq9B+854raEbUjYT8gMGGg5ntggFfU+tFJsIKpxp17CE2JXPM5c vaCKJ9KkdwUMpYDL6ugdKqfekWKhZJk3ztTsdymykS35y+CyPGHca8EZQCfdZySw VJOcXNhkyW0HWThh1WV32uNy04Tsphm5ZI/U2qCQh3yNa9VuNVPgLWaIs/uZCo4Y ol6GhA4ATm9JB61RPXQ3dDFrgMh+WH5HbzIVwX1O6OFSNP8AeyoYOOgGBF6+RFkX hSSmDKaX8yDnd7vtnzRsI81BE723eBaFtHGoBBm3m8YdGs4UvlTQ+OqZvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtPqx+6o0NLWK4QxLk2TMDRXj27MB8GA1UdIwQY MBaAFBpRcoGs+W0455o1yL62i4wFl5pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUt NzAyNzI2ODhlOTcwLzEvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUtNzAyNzI2ODhlOTcw LzEvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjwrOqmn KsOAG+IBErEUhKIDteDyWWnTh2JUekG9AKxLA1cbht9NkTuVji5sqhHpecq9zykF rkSrWkFAMuVC2uh2VnEaBT245zn2PC5FNKzPUMVOD/XQV1cyU42mtpjvKYKVsfEA DiF4F1kUCjnQiVBMMc/+2jY1vskSXAD3iwhw3Qs1xJJjJ2w3IQkK8vv1ZtutOL1M RhvQqwZdvmb9ZOPiOqjUMf/JKoiw+ippKmZddtGhWZtUn5bVXurmnasZMKnv1miR g3uxwPYRKs+1t++uwKwGnA3W2xA/3wr01gcH+zxSbKQw1we+Icw7NIaYLSwxXvsB sGQE4JBIuyijDw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:48 2025 by rpki-client