This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft File: GD41veDiUEYFoX1O0FVDfo00ql8.mft (raw, json) Hash identifier: HTGaoHcuKmQJy8qh4DzLIdsOwkjZiuFCM1SfszOrKM8= Subject key identifier: 2B:F0:69:8C:BA:C9:61:CB:89:66:7C:43:0A:9B:30:03:9A:34:6F:56 Authority key identifier: 18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F Certificate issuer: /CN=183e35bde0e2504605a17d4ed055437e8d34aa5f Certificate serial: 019AF1D20410260B5DE7BBD9FE4694D52572 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: GD41veDiUEYFoX1O0FVDfo00ql8.crl (hash: bXlBIgcFBykFHu1wl89HpGxAAYWN2ZI93bx7u0E3Ncg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:04:10:26:0b:5d:e7:bb:d9:fe:46:94:d5:25:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=183e35bde0e2504605a17d4ed055437e8d34aa5f Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=2bf0698cbac961cb89667c430a9b30039a346f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:8b:b4:4b:20:d7:e0:bd:db:c0:9f:b9:80: 96:10:06:e9:0b:65:0a:d4:15:8d:e9:83:43:71:ef: e8:7d:e9:5e:7f:f0:d1:13:e9:99:df:64:49:2e:cb: 37:68:5e:bc:3e:34:e4:f7:db:c6:f0:ae:de:0b:56: dd:4c:91:f9:7b:df:00:0b:dc:3d:71:8b:90:98:f2: d4:19:ec:6f:4e:4b:18:a4:c8:7a:1a:5b:77:7e:00: 93:98:31:f5:72:8f:80:94:4e:04:2e:53:10:17:17: 35:8b:8c:a1:2a:c8:9a:5c:69:6a:d2:be:05:d8:fc: 09:a7:a4:95:87:ba:f7:d1:c8:b9:2c:b5:f7:4e:01: 51:a7:7d:ea:1e:19:7f:f6:c5:9e:68:81:88:eb:b6: 15:54:0d:7b:31:60:20:3c:5f:bd:43:ad:d4:73:da: 3d:f2:5b:56:bc:7a:e7:26:9d:2e:11:91:db:1b:c6: db:89:21:e7:a4:6c:4b:b6:62:f2:2c:0b:0e:8d:db: 7a:41:da:c9:28:56:b8:ff:47:b6:59:5d:bc:56:33: 5e:cc:b8:8d:00:50:c8:f5:51:25:3d:25:e7:e5:f0: a1:29:1e:a0:56:22:69:7d:42:85:03:40:85:e6:ab: 16:31:e7:84:ba:5a:24:0e:5a:12:15:9e:42:f9:ae: ca:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F0:69:8C:BA:C9:61:CB:89:66:7C:43:0A:9B:30:03:9A:34:6F:56 X509v3 Authority Key Identifier: keyid:18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1a:51:92:77:90:12:4d:78:b0:1e:49:b0:b1:00:ad:d9:ec: 59:b2:7d:58:f0:40:bc:6e:4d:aa:de:ee:09:65:2f:b1:5c:f7: 83:26:7a:ea:52:fc:00:94:41:d7:dc:9e:4b:01:f7:98:65:ba: 0a:16:6a:ea:40:56:22:cf:ea:5d:5a:64:5e:e9:c3:e7:d3:c0: 98:0f:19:13:9d:57:69:cc:88:bf:59:7d:da:c5:9d:0c:eb:0e: b6:7b:c9:ff:dc:65:e7:31:25:45:1d:00:b3:99:f7:82:70:24: 2e:9f:5d:22:8e:f8:fe:cc:30:d7:77:04:ab:38:a0:73:2b:97: 74:d2:57:48:3a:ba:fc:6c:00:79:24:1c:ad:d1:75:fb:91:84: 47:9e:d2:cd:28:89:08:b2:aa:20:4e:9e:53:e4:c5:17:d9:cd: 1e:4f:34:98:99:ad:ea:5c:2d:23:a1:72:9e:42:00:25:9e:a7: 35:76:d6:b7:8d:9b:4f:f5:8c:84:30:82:0f:1c:66:0b:d4:90: 1b:06:4e:0f:61:98:9a:9c:1f:da:01:00:38:4e:0c:3a:87:ae: b2:23:4a:04:12:b5:8f:f8:a9:a5:be:4b:d0:62:e2:1a:5f:9c: dc:01:4d:bb:38:a0:35:ba:08:d9:7f:18:b3:f2:c0:7a:94:aa: b8:58:53:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gQQJgtd57vZ/kaU1SVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4M2UzNWJkZTBlMjUwNDYwNWExN2Q0ZWQwNTU0MzdlOGQz NGFhNWYwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD EygyYmYwNjk4Y2JhYzk2MWNiODk2NjdjNDMwYTliMzAwMzlhMzQ2ZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZWLtEsg1+C928CfuYCWEAbpC2UK 1BWN6YNDce/ofelef/DRE+mZ32RJLss3aF68PjTk99vG8K7eC1bdTJH5e98AC9w9 cYuQmPLUGexvTksYpMh6Glt3fgCTmDH1co+AlE4ELlMQFxc1i4yhKsiaXGlq0r4F 2PwJp6SVh7r30ci5LLX3TgFRp33qHhl/9sWeaIGI67YVVA17MWAgPF+9Q63Uc9o9 8ltWvHrnJp0uEZHbG8bbiSHnpGxLtmLyLAsOjdt6QdrJKFa4/0e2WV28VjNezLiN AFDI9VElPSXn5fChKR6gViJpfUKFA0CF5qsWMeeEulokDloSFZ5C+a7K1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvwaYy6yWHLiWZ8QwqbMAOaNG9WMB8GA1UdIwQY MBaAFBg+Nb3g4lBGBaF9TtBVQ36NNKpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0Q0MXZlRGlVRVlGb1gxTzBGVkRmbzAwcWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80Y2I1MjQtYmFhZi00MWFmLWI4NWYt Y2M4YzJkYjZjZjI1LzEvR0Q0MXZlRGlVRVlGb1gxTzBGVkRmbzAwcWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny80Y2I1MjQtYmFhZi00MWFmLWI4NWYtY2M4YzJkYjZjZjI1 LzEvR0Q0MXZlRGlVRVlGb1gxTzBGVkRmbzAwcWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBpRkneQ Ek14sB5JsLEArdnsWbJ9WPBAvG5Nqt7uCWUvsVz3gyZ66lL8AJRB19yeSwH3mGW6 ChZq6kBWIs/qXVpkXunD59PAmA8ZE51XacyIv1l92sWdDOsOtnvJ/9xl5zElRR0A s5n3gnAkLp9dIo74/sww13cEqzigcyuXdNJXSDq6/GwAeSQcrdF1+5GER57SzSiJ CLKqIE6eU+TFF9nNHk80mJmt6lwtI6FynkIAJZ6nNXbWt42bT/WMhDCCDxxmC9SQ GwZOD2GYmpwf2gEAOE4MOoeusiNKBBK1j/ippb5L0GLiGl+c3AFNuzigNboI2X8Y s/LAepSquFhTFA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:27:53 2025 by rpki-client