This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft File: GL7k74fvph6QWaCm44LeNxsnqkw.mft (raw, json) Hash identifier: rhENdCHF6BO1zieJD5bjgXp56cn9nlWFFdzw3qY9hNA= Subject key identifier: B2:8C:37:2A:07:3D:47:36:A2:E8:12:59:00:C4:49:17:B7:03:A5:CF Authority key identifier: 18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C Certificate issuer: /CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c Certificate serial: 019AF0BF71B54A38197DEDCFA562721DE917 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft Manifest number: 1E Signing time: Fri 05 Dec 2025 23:01:09 +0000 Manifest this update: Fri 05 Dec 2025 23:01:09 +0000 Manifest next update: Sat 06 Dec 2025 23:01:09 +0000 Files and hashes: 1: Br98s9QhRuoQDApiowG5mfMYnLk.roa (hash: 1ggPGATGp7/SUZxuPNOuKEEw9HCSv0c3nDbnGDK2jT0=) 2: GL7k74fvph6QWaCm44LeNxsnqkw.crl (hash: k4RHVBUce+Jf6ronswmNjwxTsVfcmyWs5OMtl6iXnQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:71:b5:4a:38:19:7d:ed:cf:a5:62:72:1d:e9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c Validity Not Before: Dec 5 23:01:09 2025 GMT Not After : Dec 6 23:01:09 2025 GMT Subject: CN=b28c372a073d4736a2e8125900c44917b703a5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:0c:d2:62:27:17:14:40:07:b5:f9:bb:c0: b3:91:56:a7:b8:07:33:c0:ae:76:a1:c8:6a:0c:3a: e2:9a:5a:e3:98:0a:6e:c3:55:18:af:1e:37:ba:49: b2:a3:dc:28:90:e7:01:be:a6:d1:86:9b:38:31:7f: 8b:40:d9:d3:7a:fc:92:9c:f1:58:ef:84:9e:b5:5a: 2a:44:36:79:b3:d9:15:3e:b0:52:e5:47:00:9b:71: d9:e0:87:9c:27:cc:78:d5:cf:66:39:8e:a2:17:b0: 25:95:31:af:e7:f7:7c:52:11:54:bf:80:b0:99:3d: ac:bb:2e:b8:6e:a9:cb:fb:8e:00:af:5b:db:e1:bd: 43:19:68:73:34:26:6f:9a:94:85:58:f1:08:f9:9c: 28:da:f2:01:90:4d:89:8c:56:c8:f8:7d:fe:4d:3e: e9:63:a2:32:c8:a0:2b:5f:70:9a:2b:2e:bf:80:f8: 54:4e:29:38:30:b4:27:4e:e2:78:78:a1:a0:df:cb: 08:e9:75:fe:6a:ba:04:20:63:73:2d:f0:ff:82:d8: ee:20:59:f8:b2:d1:3f:84:3a:a4:a1:e1:de:5f:85: ec:60:d3:78:ea:93:1d:b1:e9:22:11:71:4f:bc:62: 6c:65:1a:fb:5d:74:d2:68:cb:2e:56:db:67:c2:6d: d6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8C:37:2A:07:3D:47:36:A2:E8:12:59:00:C4:49:17:B7:03:A5:CF X509v3 Authority Key Identifier: keyid:18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f7:3b:4b:2e:54:99:78:e4:cc:cd:42:60:f2:42:15:68:6c: ec:99:3f:67:ab:6e:bc:46:65:06:36:a7:c0:b2:5f:43:0c:46: 92:28:4b:b6:3e:4e:03:d2:30:91:6b:81:11:e5:dd:2b:b4:60: cc:90:e5:00:47:1e:2a:e0:46:b8:1e:33:80:c5:05:3e:cb:41: 3c:5b:97:01:ea:35:95:b9:95:2f:0a:83:7e:46:ba:e1:6f:3f: 14:82:e0:2a:38:c7:b5:bb:30:67:54:89:d2:62:8c:a4:70:1e: 79:8d:6c:a7:6e:ad:a0:f6:2c:23:01:bb:62:1e:bb:09:b5:d9: cb:46:91:20:7b:b7:b7:9d:f5:8c:54:7a:ad:58:d6:43:d6:a4: 88:4c:44:39:78:84:e3:5e:7e:dd:79:2f:8c:5a:48:ad:ca:54: 3b:ef:68:15:a3:d4:67:06:21:60:49:f4:00:19:c8:ba:83:ee: 5f:b7:26:a3:8d:14:37:e4:e9:eb:bf:dd:ba:aa:2f:53:0b:39: 63:60:06:57:79:ac:9c:bf:62:5a:19:6d:e9:7f:b4:26:68:b2: d2:3a:6c:d5:93:c5:8c:c9:01:a3:2b:36:3b:66:a8:96:62:da: 33:50:ed:d1:22:cf:c2:fd:c3:12:b9:1f:ea:a8:a7:36:9e:28: e6:11:f5:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3G1SjgZfe3PpWJyHekXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YmVlNGVmODdlZmE2MWU5MDU5YTBhNmUzODJkZTM3MWIy N2FhNGMwHhcNMjUxMjA1MjMwMTA5WhcNMjUxMjA2MjMwMTA5WjAzMTEwLwYDVQQD EyhiMjhjMzcyYTA3M2Q0NzM2YTJlODEyNTkwMGM0NDkxN2I3MDNhNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaMM0mInFxRAB7X5u8CzkVanuAcz wK52ochqDDrimlrjmApuw1UYrx43ukmyo9wokOcBvqbRhps4MX+LQNnTevySnPFY 74SetVoqRDZ5s9kVPrBS5UcAm3HZ4IecJ8x41c9mOY6iF7AllTGv5/d8UhFUv4Cw mT2suy64bqnL+44Ar1vb4b1DGWhzNCZvmpSFWPEI+Zwo2vIBkE2JjFbI+H3+TT7p Y6IyyKArX3CaKy6/gPhUTik4MLQnTuJ4eKGg38sI6XX+aroEIGNzLfD/gtjuIFn4 stE/hDqkoeHeX4XsYNN46pMdsekiEXFPvGJsZRr7XXTSaMsuVttnwm3WJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKMNyoHPUc2ougSWQDESRe3A6XPMB8GA1UdIwQY MBaAFBi+5O+H76YekFmgpuOC3jcbJ6pMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80YTRkNDItNDQzYy00NzFkLWExNTMt MTMyODg1YzkwMmIxLzEvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS80YTRkNDItNDQzYy00NzFkLWExNTMtMTMyODg1YzkwMmIx LzEvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvc7Sy5U mXjkzM1CYPJCFWhs7Jk/Z6tuvEZlBjanwLJfQwxGkihLtj5OA9IwkWuBEeXdK7Rg zJDlAEceKuBGuB4zgMUFPstBPFuXAeo1lbmVLwqDfka64W8/FILgKjjHtbswZ1SJ 0mKMpHAeeY1sp26toPYsIwG7Yh67CbXZy0aRIHu3t531jFR6rVjWQ9akiExEOXiE 415+3XkvjFpIrcpUO+9oFaPUZwYhYEn0ABnIuoPuX7cmo40UN+Tp67/duqovUws5 Y2AGV3msnL9iWhlt6X+0Jmiy0jps1ZPFjMkBoys2O2aolmLaM1Dt0SLPwv3DErkf 6qinNp4o5hH1Yw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:28 2025 by rpki-client