This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json) Hash identifier: oVSflAOjQ5NP8ardWMvvcutQxp55KYoSUVsuB3x/YEU= Subject key identifier: 27:72:67:FC:97:3E:A6:24:BF:17:8A:20:8A:95:4D:97:2D:70:5F:E2 Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62 Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62 Certificate serial: 019AF23F75FBFDE264973953C1FB285E8CE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft Manifest number: 05B2 Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: t3L18iieZkfxfCk/QLcMlmkg0tS0YVOzurOqpAjy0PU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:75:fb:fd:e2:64:97:39:53:c1:fb:28:5e:8c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62 Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=277267fc973ea624bf178a208a954d972d705fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0e:1d:8a:fc:74:92:91:f8:e0:63:64:2a:56: 69:7f:18:15:2b:47:25:22:90:64:40:f8:d7:6c:42: 17:96:1b:c9:c9:2f:db:91:af:c4:66:a8:76:61:fb: 73:40:a2:b4:2c:42:0a:f9:cd:06:13:f7:17:21:a4: 66:43:9f:13:cd:61:3c:74:82:85:26:ec:db:0a:00: 30:db:56:8b:1d:6f:86:65:04:03:34:72:ea:f0:c8: 86:21:c3:53:16:d3:46:63:11:f0:97:ba:be:19:d0: 5c:6e:fe:42:a4:ea:a9:85:27:2e:7a:12:17:34:62: 16:c1:61:fc:01:14:56:8c:48:8d:52:ca:53:93:83: 92:1a:6f:d8:3f:1b:c4:e8:42:ba:b6:74:39:f1:7c: 5b:f6:9c:39:44:bb:40:47:76:5d:43:b2:55:2a:2a: b2:81:c3:9b:99:3f:4a:2d:b9:de:b7:94:11:1b:cb: 07:21:30:fd:13:03:ef:78:c9:fd:1f:10:ac:db:47: 58:9e:44:92:8d:84:84:92:32:a4:45:3c:f0:e5:4f: 5a:a8:00:d6:55:09:a0:67:ac:f5:95:da:ec:97:44: 23:8b:ed:9d:b2:70:50:c5:b8:aa:f6:80:0d:6c:f3: 1a:8d:e4:62:48:1c:12:24:6b:6a:f1:ab:31:ba:20: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:72:67:FC:97:3E:A6:24:BF:17:8A:20:8A:95:4D:97:2D:70:5F:E2 X509v3 Authority Key Identifier: keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:17:42:d1:e0:9c:89:00:da:37:af:3d:ca:c2:59:33:17:ed: 85:a5:94:0e:68:b4:54:03:ed:2f:cd:f2:cb:a3:fc:6c:fe:69: d2:41:4f:36:75:bd:03:13:26:90:59:bf:cd:54:49:7b:23:00: c4:f1:9e:90:9a:7e:11:10:b0:34:ae:fe:40:ed:24:66:40:76: 8d:b3:fb:ee:fa:d2:84:e1:96:ba:a1:d3:78:ca:30:a4:20:33: 82:81:b4:b5:e3:03:aa:a4:5a:bd:08:54:32:5b:54:04:cc:03: ac:81:89:9a:ca:0d:9d:08:61:bd:ca:ab:01:4f:27:84:4d:0c: 2e:1e:ab:49:86:77:5b:30:81:86:b8:e9:fb:28:16:d2:92:5e: 04:37:1c:ac:f3:db:2e:b4:b3:41:67:1d:8b:d5:bc:15:e1:37: 9d:72:34:83:92:cc:10:7e:66:fe:e6:e7:17:ea:b4:f6:63:97: c2:31:21:ce:a9:1f:5a:4f:8b:63:02:5d:33:83:2b:7a:f5:1f: 9d:69:26:e4:f9:7a:43:87:cf:63:c6:e2:58:6d:96:37:6b:5d: 58:2d:44:d9:4b:93:2c:50:e2:6a:2b:52:33:e5:79:67:1d:b9: 3f:49:37:9e:ca:8d:bd:2e:41:d1:1e:dd:dd:05:c8:fa:d2:6c: 35:83:f5:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3X7/eJklzlTwfsoXozjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjBjYWQ3ZmM1OGJjODQyNThkZGMxNTMzZjRhMGRmMjQ4 OWVjNjIwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD EygyNzcyNjdmYzk3M2VhNjI0YmYxNzhhMjA4YTk1NGQ5NzJkNzA1ZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg4divx0kpH44GNkKlZpfxgVK0cl IpBkQPjXbEIXlhvJyS/bka/EZqh2YftzQKK0LEIK+c0GE/cXIaRmQ58TzWE8dIKF JuzbCgAw21aLHW+GZQQDNHLq8MiGIcNTFtNGYxHwl7q+GdBcbv5CpOqphScuehIX NGIWwWH8ARRWjEiNUspTk4OSGm/YPxvE6EK6tnQ58Xxb9pw5RLtAR3ZdQ7JVKiqy gcObmT9KLbnet5QRG8sHITD9EwPveMn9HxCs20dYnkSSjYSEkjKkRTzw5U9aqADW VQmgZ6z1ldrsl0Qji+2dsnBQxbiq9oANbPMajeRiSBwSJGtq8asxuiC9FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdyZ/yXPqYkvxeKIIqVTZctcF/iMB8GA1UdIwQY MBaAFBnwytf8WLyEJY3cFTP0oN8kiexiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODct NTdhNDJkZjBjODY3LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODctNTdhNDJkZjBjODY3 LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhdC0eCc iQDaN689ysJZMxfthaWUDmi0VAPtL83yy6P8bP5p0kFPNnW9AxMmkFm/zVRJeyMA xPGekJp+ERCwNK7+QO0kZkB2jbP77vrShOGWuqHTeMowpCAzgoG0teMDqqRavQhU MltUBMwDrIGJmsoNnQhhvcqrAU8nhE0MLh6rSYZ3WzCBhrjp+ygW0pJeBDccrPPb LrSzQWcdi9W8FeE3nXI0g5LMEH5m/ubnF+q09mOXwjEhzqkfWk+LYwJdM4MrevUf nWkm5Pl6Q4fPY8biWG2WN2tdWC1E2UuTLFDiaitSM+V5Zx25P0k3nsqNvS5B0R7d 3QXI+tJsNYP1SA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:20 2025 by rpki-client