This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json) Hash identifier: AUxKtTSKB8MAFn8L8a6E8+q0e5LF2rwv733rKAqDXfs= Subject key identifier: FE:29:0A:06:1C:1A:5B:44:21:16:6D:4C:23:32:41:B8:1D:62:A4:F5 Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6 Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6 Certificate serial: 019B318D0C300A499100DA977D31AB71981C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft Manifest number: 049B Signing time: Thu 18 Dec 2025 13:01:25 +0000 Manifest this update: Thu 18 Dec 2025 13:01:25 +0000 Manifest next update: Fri 19 Dec 2025 13:01:25 +0000 Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: Xnrp8dqS2WDNyXYlMzSgyfHMJFPIgDWgPW6wEzSX+Jg=) 2: REh2fJFOUQT0aTDY9FX0qElIo2A.roa (hash: v403zz3pfGBhC2EeF1+1/Ixjaub1EklsKy+XOu6apXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8d:0c:30:0a:49:91:00:da:97:7d:31:ab:71:98:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6 Validity Not Before: Dec 18 13:01:25 2025 GMT Not After : Dec 19 13:01:25 2025 GMT Subject: CN=fe290a061c1a5b4421166d4c233241b81d62a4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:b8:f6:87:42:e0:a4:a1:c6:94:c8:08:9f: c4:ff:50:2f:a3:ab:69:0b:9e:0e:e5:4e:e9:e7:67: 7b:a7:a5:d3:a9:4e:08:30:20:ff:22:73:92:c4:95: 61:f1:71:b2:79:69:ca:d0:d8:fa:af:b5:cf:d9:1d: 45:bd:c1:30:4b:18:f5:00:df:49:f5:56:de:28:80: eb:12:2c:70:75:fc:7d:11:ed:57:97:61:70:40:e4: eb:e3:5e:a4:c3:e5:c4:7f:a7:de:a5:dd:55:d5:47: c8:0b:c9:6a:90:1a:c2:65:b1:3f:9b:96:13:27:04: a3:10:fc:ac:53:13:83:90:a6:f3:65:f2:77:0d:4b: c6:fa:cb:b2:f8:62:22:42:58:a3:68:c1:62:4a:d3: 5f:ad:ac:d1:ef:a2:a6:14:51:0a:07:0b:2a:1e:f8: e8:05:3c:9d:96:fb:2e:a8:db:ce:b0:75:15:46:93: 2c:b1:54:0b:5b:f4:44:0b:d8:62:a0:ca:cb:b6:fa: f3:77:c7:70:e0:1d:39:d6:a7:bf:5f:8f:cc:10:4d: c5:8c:93:b6:c6:d1:fb:17:00:b7:b2:28:d5:f9:e9: 2a:ce:8a:9e:94:41:4c:a6:d7:34:8f:62:73:dc:d5: 74:07:30:f2:c6:2c:15:5e:b1:c5:66:21:89:4d:5c: 4a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:29:0A:06:1C:1A:5B:44:21:16:6D:4C:23:32:41:B8:1D:62:A4:F5 X509v3 Authority Key Identifier: keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:34:6a:5e:07:f3:b5:4d:bf:2f:dd:57:89:6e:65:9b:24:57: ae:fa:b4:9b:b5:2e:ef:73:21:e7:d8:42:39:19:e8:f5:13:9f: 78:89:7b:ba:39:b7:c6:7f:3b:bd:6a:c2:32:24:7c:75:86:7e: f2:22:3d:1b:4a:7d:38:9f:a9:ef:9a:02:98:85:0f:75:38:6d: 78:15:39:aa:d1:6c:1d:a7:ff:33:e9:c1:23:89:f8:3a:e7:18: 32:75:e0:c7:c3:56:24:c1:e5:14:8b:af:fc:8f:86:53:dd:dd: 6c:d5:f0:34:7f:71:b5:dc:79:ee:26:f5:6b:b9:39:46:f2:9a: e0:3c:72:ef:80:c7:60:4d:42:97:99:e7:7a:30:45:49:f4:e6: 2c:10:fd:66:e2:23:f7:35:fe:a2:7b:89:84:0b:5a:a0:2f:f9: 61:50:2b:76:bc:81:f7:d1:a3:8a:02:06:7a:f5:fe:02:e5:be: 6b:af:86:bc:20:76:10:2a:e9:6b:23:b4:4a:f4:02:e1:ad:10: db:85:19:3d:ff:47:48:73:5f:e7:66:99:9d:c4:ac:ea:23:bb: 9e:40:e7:8c:93:0c:37:4d:31:e8:25:26:64:4e:ae:d8:73:13: 29:6e:d8:cd:ee:a4:2a:0e:14:df:09:92:9b:e5:d7:5d:9b:0c: 33:4a:0e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjQwwCkmRANqXfTGrcZgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MzhjNWMyMmM5NzZkYTY1YTFmZDE2ZThmOWMwYzk0ZTI3 YTRiYTYwHhcNMjUxMjE4MTMwMTI1WhcNMjUxMjE5MTMwMTI1WjAzMTEwLwYDVQQD EyhmZTI5MGEwNjFjMWE1YjQ0MjExNjZkNGMyMzMyNDFiODFkNjJhNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsG49odC4KShxpTICJ/E/1Avo6tp C54O5U7p52d7p6XTqU4IMCD/InOSxJVh8XGyeWnK0Nj6r7XP2R1FvcEwSxj1AN9J 9VbeKIDrEixwdfx9Ee1Xl2FwQOTr416kw+XEf6fepd1V1UfIC8lqkBrCZbE/m5YT JwSjEPysUxODkKbzZfJ3DUvG+suy+GIiQlijaMFiStNfrazR76KmFFEKBwsqHvjo BTydlvsuqNvOsHUVRpMssVQLW/REC9hioMrLtvrzd8dw4B051qe/X4/MEE3FjJO2 xtH7FwC3sijV+ekqzoqelEFMptc0j2Jz3NV0BzDyxiwVXrHFZiGJTVxKpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4pCgYcGltEIRZtTCMyQbgdYqT1MB8GA1UdIwQY MBaAFBg4xcIsl22mWh/Rbo+cDJTiekumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0RqRndpeVhiYVphSDlGdWo1d01sT0o2UzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjEyYzEtOTEzMy00YTJiLTlkZjgt OWI1MzdmNjNiNzVkLzEvR0RqRndpeVhiYVphSDlGdWo1d01sT0o2UzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82ZjEyYzEtOTEzMy00YTJiLTlkZjgtOWI1MzdmNjNiNzVk LzEvR0RqRndpeVhiYVphSDlGdWo1d01sT0o2UzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjRqXgfz tU2/L91XiW5lmyRXrvq0m7Uu73Mh59hCORno9ROfeIl7ujm3xn87vWrCMiR8dYZ+ 8iI9G0p9OJ+p75oCmIUPdThteBU5qtFsHaf/M+nBI4n4OucYMnXgx8NWJMHlFIuv /I+GU93dbNXwNH9xtdx57ib1a7k5RvKa4Dxy74DHYE1Cl5nnejBFSfTmLBD9ZuIj 9zX+onuJhAtaoC/5YVArdryB99GjigIGevX+AuW+a6+GvCB2ECrpayO0SvQC4a0Q 24UZPf9HSHNf52aZncSs6iO7nkDnjJMMN00x6CUmZE6u2HMTKW7Yze6kKg4U3wmS m+XXXZsMM0oOUQ== -----END CERTIFICATE-----Generated at Thu Dec 18 17:53:33 2025 by rpki-client