This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json) Hash identifier: DK8vu3d0HkrgTKmuV/fDmTMg99er60Ba6YMB1g4jYPo= Subject key identifier: 64:DC:A3:33:9A:AD:D3:3D:BB:F9:B6:14:79:E7:51:8B:A2:6B:71:FC Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee Certificate serial: 019AF31BB98FB4070A739E1D355E953616B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:11 +0000 Manifest this update: Sat 06 Dec 2025 10:01:11 +0000 Manifest next update: Sun 07 Dec 2025 10:01:11 +0000 Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: 40IWO3fdmDGCIoHqe5GVZG917KhDi7WkCQ1D6kD2auU=) 2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b9:8f:b4:07:0a:73:9e:1d:35:5e:95:36:16:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee Validity Not Before: Dec 6 10:01:11 2025 GMT Not After : Dec 7 10:01:11 2025 GMT Subject: CN=64dca3339aadd33dbbf9b61479e7518ba26b71fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9b:b6:21:b4:d3:da:8a:93:4e:1f:45:60:5d: 43:c4:02:18:bc:0e:27:ba:63:27:ad:8e:75:f6:25: 8b:dd:cb:63:fb:bb:f0:f3:49:23:84:52:a8:a1:c3: f6:5e:a1:a1:06:1a:f2:61:29:ef:5a:d8:b9:05:43: 28:c2:eb:da:83:0a:45:a8:98:6f:a5:03:ed:4e:cf: 99:97:12:8e:76:cb:f6:b7:4c:51:f1:27:ee:99:c0: 64:4f:b1:03:7b:53:59:eb:a9:e4:e1:ee:a0:1b:87: 39:f4:15:ba:11:67:b4:51:a2:a9:8d:98:fb:87:ac: 14:40:9a:19:6d:d8:1a:31:fa:57:e7:ad:5c:6a:f2: d2:d4:05:a8:31:8c:a9:75:b7:7b:31:58:bd:51:20: 83:c9:d7:93:7c:4b:b5:c8:39:22:fc:82:fc:c1:40: b7:2c:f0:04:59:67:da:28:91:8e:cd:a1:6f:cd:0e: 46:f3:aa:37:b6:66:35:8b:a9:9c:40:d7:18:3a:e6: 8f:58:92:ff:4e:ff:37:67:c0:41:70:f2:c6:d1:81: 52:f2:05:61:32:94:91:43:60:0d:9a:16:a5:c6:ec: ef:10:d7:41:e9:47:bc:92:7b:8b:e1:58:8d:48:c8: 19:d2:c7:43:42:2b:f2:8f:27:d1:12:c0:31:74:fb: 18:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DC:A3:33:9A:AD:D3:3D:BB:F9:B6:14:79:E7:51:8B:A2:6B:71:FC X509v3 Authority Key Identifier: keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:52:28:40:21:80:67:46:4a:42:99:d2:22:86:89:ed:81:33: 33:41:f3:48:dc:75:27:0e:ff:38:b0:de:27:e7:29:24:95:25: 2d:d3:ee:62:9a:97:df:2e:fc:62:1f:30:06:52:f1:fc:da:14: 6b:66:8b:42:56:de:e9:8b:d9:d8:91:0f:6d:de:12:f2:01:3e: 5e:fb:9f:d4:26:fc:b4:d5:a6:9e:51:1b:04:c9:af:ba:73:7f: df:5b:96:ad:98:cb:b0:09:11:5c:f1:bd:58:54:c2:17:be:79: 5c:e2:b8:e2:2f:0c:be:7d:8a:be:85:94:2e:fb:0f:be:02:dd: 78:39:4b:63:68:37:81:2b:c8:bc:8e:0d:c4:af:d2:df:0b:f0: e1:a3:0a:46:a2:50:a3:b6:13:aa:51:d4:8e:b6:27:2a:89:2e: c0:34:ae:e8:e3:da:c2:69:c9:14:71:54:1b:d1:67:07:bd:8b: dd:3f:97:3b:22:00:fd:c0:8d:b3:f1:0a:f1:4f:ee:b8:79:58: 2d:00:d6:a6:6f:6c:70:32:6f:18:07:dd:6f:9c:8c:ba:f1:54: 64:01:fe:30:8a:e9:31:19:b5:c7:ab:ef:ce:c4:32:36:10:cf: d2:b5:44:49:fb:4a:00:7b:d4:1a:96:18:61:a4:45:42:4c:d1: 2c:bf:7a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7mPtAcKc54dNV6VNha2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDE4YmNmMzE5NDMxN2I5YzI4ODExOTMxOTZmZWI1OThm ZDllZWUwHhcNMjUxMjA2MTAwMTExWhcNMjUxMjA3MTAwMTExWjAzMTEwLwYDVQQD Eyg2NGRjYTMzMzlhYWRkMzNkYmJmOWI2MTQ3OWU3NTE4YmEyNmI3MWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zu2IbTT2oqTTh9FYF1DxAIYvA4n umMnrY519iWL3ctj+7vw80kjhFKoocP2XqGhBhryYSnvWti5BUMowuvagwpFqJhv pQPtTs+ZlxKOdsv2t0xR8SfumcBkT7EDe1NZ66nk4e6gG4c59BW6EWe0UaKpjZj7 h6wUQJoZbdgaMfpX561cavLS1AWoMYypdbd7MVi9USCDydeTfEu1yDki/IL8wUC3 LPAEWWfaKJGOzaFvzQ5G86o3tmY1i6mcQNcYOuaPWJL/Tv83Z8BBcPLG0YFS8gVh MpSRQ2ANmhalxuzvENdB6Ue8knuL4ViNSMgZ0sdDQivyjyfREsAxdPsYwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTcozOardM9u/m2FHnnUYuia3H8MB8GA1UdIwQY MBaAFNtBi88xlDF7nCiBGTGW/rWY/Z7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMt ZTI5ZWUzZDkxMzk1LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMtZTI5ZWUzZDkxMzk1 LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlIoQCGA Z0ZKQpnSIoaJ7YEzM0HzSNx1Jw7/OLDeJ+cpJJUlLdPuYpqX3y78Yh8wBlLx/NoU a2aLQlbe6YvZ2JEPbd4S8gE+Xvuf1Cb8tNWmnlEbBMmvunN/31uWrZjLsAkRXPG9 WFTCF755XOK44i8Mvn2KvoWULvsPvgLdeDlLY2g3gSvIvI4NxK/S3wvw4aMKRqJQ o7YTqlHUjrYnKokuwDSu6OPawmnJFHFUG9FnB72L3T+XOyIA/cCNs/EK8U/uuHlY LQDWpm9scDJvGAfdb5yMuvFUZAH+MIrpMRm1x6vvzsQyNhDP0rVESftKAHvUGpYY YaRFQkzRLL96eQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:50 2025 by rpki-client