This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json) Hash identifier: FJph59N36axrYgi92D0RzO73Sh+LwZoakVcjtmsZjxI= Subject key identifier: A2:87:E2:19:2D:1D:F0:3E:85:78:99:E5:A9:97:16:5B:47:9D:51:B4 Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41 Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941 Certificate serial: 019AF12E4F85AB493026DDBFCE8894735CE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft Manifest number: 12A5 Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: mDhf6YjI9aEu6EST5Wcx1ZZ/MSwgvblg1dCtFnRzlYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4f:85:ab:49:30:26:dd:bf:ce:88:94:73:5c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941 Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=a287e2192d1df03e857899e5a997165b479d51b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:20:c2:2f:28:be:28:0a:a9:89:2e:be:5a:d6: 9d:69:db:a2:6b:f9:77:9c:6e:b9:6f:20:51:d7:68: 65:8e:73:53:b8:fc:68:e5:85:52:7d:60:b8:72:51: d9:54:d1:d1:57:43:4b:da:2c:3f:a9:12:33:a9:97: 4c:2e:31:7e:3b:07:c4:86:65:e4:b8:17:a7:6a:7f: 94:86:9c:e0:eb:ee:79:20:dd:e6:84:f3:15:b8:5c: f2:b1:5f:58:64:9c:d1:11:45:9e:2e:1b:f4:68:5f: 9c:8e:8a:22:e3:fa:0a:bc:4d:43:1f:a2:de:d7:ed: b7:c0:17:b3:a6:4b:db:f0:db:b2:bd:89:ab:98:f1: 12:d7:35:af:94:d0:77:2a:65:2e:99:a0:e1:5b:33: dd:a0:18:f3:39:8e:24:13:5f:8f:00:8c:82:1e:52: 4f:77:c8:a8:27:cc:cb:dd:84:70:67:1e:ac:c2:ed: cc:a3:2b:d1:b2:e0:a2:63:c0:87:8d:45:ec:0b:ee: 4c:56:0a:a0:8d:bc:3d:c0:40:fd:0e:ee:d7:f9:bf: 5b:86:65:92:0d:fa:cd:f1:8f:ab:9f:4e:66:9e:56: f3:11:1a:e1:f8:2a:aa:83:39:9d:fa:16:35:89:89: 5c:b4:3d:39:59:55:1d:fe:00:c6:f0:06:ff:2c:9a: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:87:E2:19:2D:1D:F0:3E:85:78:99:E5:A9:97:16:5B:47:9D:51:B4 X509v3 Authority Key Identifier: keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:59:fc:16:52:6f:08:0d:25:c4:3f:03:6e:aa:5e:65:01:a0: 76:e9:e7:af:e1:cb:b2:2e:a0:cd:a4:ff:b5:6c:ea:88:cb:a1: ed:ba:23:03:56:a6:44:71:fa:8d:fb:9e:6c:5c:bd:88:7d:e2: 33:17:19:c9:37:67:0a:7c:c3:c4:ab:ac:a4:c2:75:10:ab:e4: 32:fb:26:14:0a:d4:0d:74:dd:bf:d3:77:b3:86:b1:73:09:b8: a1:09:2a:af:18:21:e8:99:1b:bd:31:d3:39:98:e5:70:a0:0e: 03:f0:39:de:99:a6:7d:eb:ac:b3:36:ee:c8:62:5c:94:0c:56: 2d:fe:fc:cd:0d:51:eb:8f:e9:6c:4b:81:d0:90:08:91:43:12: a9:2b:34:8b:e1:a9:ca:37:05:63:c0:23:7c:43:37:8f:33:cf: 3e:c1:b5:a5:64:10:cf:20:f9:18:04:69:4e:f3:ff:d4:5e:21: e9:c8:f6:cd:cf:e6:2b:de:92:9d:60:4d:05:53:c4:2a:cf:b2: 6a:0c:17:e7:89:8d:09:8c:10:fe:41:8d:11:b7:61:94:98:d6: d1:53:de:4b:ad:0a:a9:b9:cd:6d:76:06:c3:f9:03:43:e0:eb: 39:8e:1b:94:63:13:56:a5:52:cc:9f:bc:be:cb:a1:ba:35:2b: a5:a9:3b:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLk+Fq0kwJt2/zoiUc1znMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTc2M2Q0MWJiNTMzNTU4YTg1MjBkZTVhOTZlYjIyNTgw Njg5NDEwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD EyhhMjg3ZTIxOTJkMWRmMDNlODU3ODk5ZTVhOTk3MTY1YjQ3OWQ1MWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yDCLyi+KAqpiS6+Wtadaduia/l3 nG65byBR12hljnNTuPxo5YVSfWC4clHZVNHRV0NL2iw/qRIzqZdMLjF+OwfEhmXk uBenan+Uhpzg6+55IN3mhPMVuFzysV9YZJzREUWeLhv0aF+cjooi4/oKvE1DH6Le 1+23wBezpkvb8NuyvYmrmPES1zWvlNB3KmUumaDhWzPdoBjzOY4kE1+PAIyCHlJP d8ioJ8zL3YRwZx6swu3MoyvRsuCiY8CHjUXsC+5MVgqgjbw9wED9Du7X+b9bhmWS DfrN8Y+rn05mnlbzERrh+Cqqgzmd+hY1iYlctD05WVUd/gDG8Ab/LJow7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKH4hktHfA+hXiZ5amXFltHnVG0MB8GA1UdIwQY MBaAFBpXY9QbtTNVioUg3lqW6yJYBolBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yZWZmYmUtMTA5Yy00OTU2LWI0YTAt NGM4MzY1NTE1OTY1LzEvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yZWZmYmUtMTA5Yy00OTU2LWI0YTAtNGM4MzY1NTE1OTY1 LzEvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVn8FlJv CA0lxD8DbqpeZQGgdunnr+HLsi6gzaT/tWzqiMuh7bojA1amRHH6jfuebFy9iH3i MxcZyTdnCnzDxKuspMJ1EKvkMvsmFArUDXTdv9N3s4axcwm4oQkqrxgh6JkbvTHT OZjlcKAOA/A53pmmfeusszbuyGJclAxWLf78zQ1R64/pbEuB0JAIkUMSqSs0i+Gp yjcFY8AjfEM3jzPPPsG1pWQQzyD5GARpTvP/1F4h6cj2zc/mK96SnWBNBVPEKs+y agwX54mNCYwQ/kGNEbdhlJjW0VPeS60KqbnNbXYGw/kDQ+DrOY4blGMTVqVSzJ+8 vsuhujUrpak7HQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:59 2025 by rpki-client