This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft File: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json) Hash identifier: wpEkv5PxjsGqY4xUfGELCTbTB/7kuWof+QARNf6+sl0= Subject key identifier: 1E:12:10:D0:3C:E3:5B:49:C2:7F:64:74:93:8B:4D:19:42:D7:F9:20 Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94 Certificate issuer: /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794 Certificate serial: 019AF5AF33891456F2F6D5CA56DCE00D5F3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft Manifest number: 14CF Signing time: Sat 06 Dec 2025 22:01:31 +0000 Manifest this update: Sat 06 Dec 2025 22:01:31 +0000 Manifest next update: Sun 07 Dec 2025 22:01:31 +0000 Files and hashes: 1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: Zv5IiGWLZ77Rr+o0se5gjNBcl0fij5XlTAJhzPDbR68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:33:89:14:56:f2:f6:d5:ca:56:dc:e0:0d:5f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794 Validity Not Before: Dec 6 22:01:31 2025 GMT Not After : Dec 7 22:01:31 2025 GMT Subject: CN=1e1210d03ce35b49c27f6474938b4d1942d7f920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:06:fd:cb:b1:f3:56:3e:44:2a:f6:06:08: 27:28:17:43:39:cc:13:6a:cf:29:6f:c5:b2:ab:67: dd:1d:63:aa:a0:b9:99:39:50:2f:f0:c7:39:ce:c3: ed:05:8e:f8:10:79:04:6d:f0:18:16:84:da:26:2a: e7:81:64:f3:ee:8e:59:b0:93:13:74:ef:3e:f2:09: 70:c5:4d:e2:c6:b9:4a:c8:4a:cf:d7:7c:46:79:68: fe:d6:ec:dd:fe:70:62:7e:97:d1:fa:ed:bf:ea:11: 3b:14:5e:d6:0b:ca:50:88:ea:47:3c:6a:e6:8f:bf: f6:cf:53:a0:44:08:50:04:c6:d3:b8:3a:8d:3f:82: 67:70:93:3a:2f:0b:ad:0c:12:54:c1:2f:7b:6c:0e: 2c:87:c9:03:83:c9:bc:cc:2e:f1:28:a0:00:f9:58: 8b:ee:13:02:5a:b1:e5:2c:1a:83:a4:a0:e4:40:41: 95:2c:38:3d:56:26:0f:70:93:f5:ba:7a:9a:ca:f6: d9:1b:f4:01:d5:c7:76:78:2f:68:56:9a:0d:df:36: 75:56:c3:5f:b3:53:c6:b2:75:44:9b:d5:15:5e:bd: 68:21:16:24:29:79:dd:d7:a0:ae:11:79:96:e3:b8: 85:85:e4:da:bc:a8:70:96:fe:77:38:30:4f:81:8f: 58:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:12:10:D0:3C:E3:5B:49:C2:7F:64:74:93:8B:4D:19:42:D7:F9:20 X509v3 Authority Key Identifier: keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:99:22:0f:08:97:8e:07:ee:bb:0a:36:03:90:3e:41:ab:a9: c5:c0:ce:d3:c3:59:2c:aa:a2:d9:c1:0b:31:25:4f:13:98:53: ff:36:a7:db:e7:47:40:a9:56:73:a3:50:c0:2c:64:07:58:c1: 28:d6:7f:26:34:34:96:55:89:cb:00:46:43:3d:03:b6:92:81: 9b:0c:01:07:20:65:7c:e1:6b:35:86:49:a0:8c:42:e4:c0:d2: 12:0e:3c:f7:51:1d:8d:5b:b4:b5:8c:f1:54:d3:85:09:e6:28: 2e:61:f6:4f:d2:d8:34:3f:ad:aa:c9:ba:8f:ff:70:da:aa:c5: 60:cd:ef:5a:2a:e0:54:4b:46:14:d0:2d:b7:a5:3d:96:fc:7a: 88:3e:d6:fc:72:60:96:c2:a4:4b:b2:83:ac:bb:33:a6:5e:d0: 0e:40:d9:b9:a6:75:75:5d:9f:24:b3:31:74:06:c9:2f:58:ff: b4:9f:83:e0:b6:f8:ff:e5:c9:7e:42:28:56:84:93:d4:67:85: 3a:b0:07:b8:03:9f:4b:de:49:6d:a6:ea:8f:e4:f5:72:aa:4e: 3f:6e:00:07:3b:85:cc:66:fb:63:4c:97:ae:27:7b:96:d6:5f: 08:9b:78:c3:f3:07:b2:ab:84:0d:1d:39:1a:5c:9a:93:13:b2: 2a:75:c6:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rzOJFFby9tXKVtzgDV88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NTA0M2E1NGU2MjMzZDIyZTU2ZGI3NGM5Zjc4ZTJkNmQx Yzk3OTQwHhcNMjUxMjA2MjIwMTMxWhcNMjUxMjA3MjIwMTMxWjAzMTEwLwYDVQQD EygxZTEyMTBkMDNjZTM1YjQ5YzI3ZjY0NzQ5MzhiNGQxOTQyZDdmOTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlEG/cux81Y+RCr2BggnKBdDOcwT as8pb8Wyq2fdHWOqoLmZOVAv8Mc5zsPtBY74EHkEbfAYFoTaJirngWTz7o5ZsJMT dO8+8glwxU3ixrlKyErP13xGeWj+1uzd/nBifpfR+u2/6hE7FF7WC8pQiOpHPGrm j7/2z1OgRAhQBMbTuDqNP4JncJM6LwutDBJUwS97bA4sh8kDg8m8zC7xKKAA+ViL 7hMCWrHlLBqDpKDkQEGVLDg9ViYPcJP1unqayvbZG/QB1cd2eC9oVpoN3zZ1VsNf s1PGsnVEm9UVXr1oIRYkKXnd16CuEXmW47iFheTavKhwlv53ODBPgY9YbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4SENA841tJwn9kdJOLTRlC1/kgMB8GA1UdIwQY MBaAFBlQQ6VOYjPSLlbbdMn3ji1tHJeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTkt M2I1MjdjYjk4Njg1LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTktM2I1MjdjYjk4Njg1 LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5kiDwiX jgfuuwo2A5A+QaupxcDO08NZLKqi2cELMSVPE5hT/zan2+dHQKlWc6NQwCxkB1jB KNZ/JjQ0llWJywBGQz0DtpKBmwwBByBlfOFrNYZJoIxC5MDSEg4891EdjVu0tYzx VNOFCeYoLmH2T9LYND+tqsm6j/9w2qrFYM3vWirgVEtGFNAtt6U9lvx6iD7W/HJg lsKkS7KDrLszpl7QDkDZuaZ1dV2fJLMxdAbJL1j/tJ+D4Lb4/+XJfkIoVoST1GeF OrAHuAOfS95Jbabqj+T1cqpOP24ABzuFzGb7Y0yXrid7ltZfCJt4w/MHsquEDR05 GlyakxOyKnXGwg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:40 2025 by rpki-client