This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json) Hash identifier: YDSd6sFqbpnsGYGgErBc0Ae3eMHVsQ8EFX9UUL678Y8= Subject key identifier: 42:53:74:C7:89:30:3E:55:23:4E:61:8A:3B:35:9D:7C:6E:F5:E7:6F Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1 Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1 Certificate serial: 019AF23FD506178F5D80CDBCA4638E107787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft Manifest number: 0E32 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: OHJnrRAr7OfzIwa64tp3YlxuLgDS9iuFsTLDD2BKdA4=) 2: X3uPBxzPVXv3n_QN1aGdKbmuIRY.roa (hash: hUPc8yRkBzbeF7M/RRJW79E+lPzVmxoaNEB54waojEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d5:06:17:8f:5d:80:cd:bc:a4:63:8e:10:77:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=425374c789303e55234e618a3b359d7c6ef5e76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:c5:83:ff:6b:9b:12:b8:81:42:18:05:35: 36:e0:9d:ac:c2:9c:8a:c9:f4:69:36:d8:ee:33:bd: e0:36:1a:8e:81:da:5b:2e:e5:bb:dd:95:24:51:98: ee:16:11:66:3b:f9:f1:3e:d5:3d:11:7b:58:0f:e2: c4:db:cc:16:d2:03:3c:24:77:f7:81:bf:74:ad:d7: d9:02:56:4a:90:12:08:f9:d1:57:0c:b1:e7:42:bd: 09:78:fe:d7:e9:aa:8d:21:4d:1d:20:a3:88:c9:04: 4e:d4:9b:19:40:fa:b1:01:80:0d:49:57:8d:53:8e: b5:d0:03:ea:02:72:c8:17:de:b1:15:d2:12:8f:35: c4:ce:f6:c0:cd:d1:60:1a:aa:4a:cd:a2:75:1d:91: 99:9b:db:fd:c2:03:03:3f:84:61:c6:ac:18:1d:8b: fe:ea:d8:b4:d8:85:8b:3c:1b:49:f6:3f:c9:f2:f7: c5:d5:14:76:d4:6a:2d:27:23:b4:3f:e2:8b:68:21: 3c:44:23:71:87:0e:d5:d3:57:34:41:a3:6a:fe:9d: bd:7b:22:ec:35:ef:05:cc:47:ad:47:f6:cb:27:7f: f7:fe:d6:42:6f:62:3e:d2:38:0c:af:3e:aa:69:29: 42:d3:3b:a8:59:c7:28:a3:bd:91:61:f7:a1:4a:5f: e7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:53:74:C7:89:30:3E:55:23:4E:61:8A:3B:35:9D:7C:6E:F5:E7:6F X509v3 Authority Key Identifier: keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:02:0e:f9:1d:1c:ee:32:cc:25:19:2e:54:1b:eb:de:40:2d: 6e:86:58:a7:1c:b7:ac:27:e5:12:76:59:5f:6e:50:51:74:ff: e9:76:1c:22:5d:12:9d:6a:78:bf:01:a7:9b:ce:25:5a:79:21: 31:e2:8e:e3:06:29:ea:45:36:ea:dd:e5:4b:a7:04:99:85:1f: c4:f9:f8:d2:8c:0e:34:10:49:e5:9e:19:4b:9e:16:cd:d7:44: f5:fe:2b:03:8b:80:c3:2d:a2:3a:d1:88:aa:39:d9:8f:2c:60: c9:f8:b5:94:65:a8:d7:11:9e:1e:eb:78:4f:56:ff:eb:99:3f: e2:20:53:54:e7:3d:76:5d:a3:36:19:64:69:5b:f7:16:53:a9: 53:84:bd:52:cd:bf:38:13:59:0b:5e:3b:86:89:35:b8:52:d4: b9:71:7b:b1:23:95:b3:52:ca:48:26:07:d9:31:1f:7e:9d:8d: bb:8b:80:7e:87:a5:bf:20:8a:47:01:ac:10:c4:f2:d8:f6:15: cf:cc:b0:3e:27:e5:3e:f4:c8:b5:7b:9d:e0:47:4d:21:be:69: 7d:5d:e7:ba:84:f3:18:35:07:5c:9f:15:5f:de:a1:e3:3b:60: f2:32:6c:9e:20:58:11:4d:ea:87:fd:65:4a:ef:e4:48:14:26: 59:a6:2a:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9UGF49dgM28pGOOEHeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZDk2MDA1OGE1NTNiM2Y1ZGY5ZmU3MjcyMTkwMzdjNDhh YjUwZTEwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD Eyg0MjUzNzRjNzg5MzAzZTU1MjM0ZTYxOGEzYjM1OWQ3YzZlZjVlNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdfFg/9rmxK4gUIYBTU24J2swpyK yfRpNtjuM73gNhqOgdpbLuW73ZUkUZjuFhFmO/nxPtU9EXtYD+LE28wW0gM8JHf3 gb90rdfZAlZKkBII+dFXDLHnQr0JeP7X6aqNIU0dIKOIyQRO1JsZQPqxAYANSVeN U4610APqAnLIF96xFdISjzXEzvbAzdFgGqpKzaJ1HZGZm9v9wgMDP4RhxqwYHYv+ 6ti02IWLPBtJ9j/J8vfF1RR21GotJyO0P+KLaCE8RCNxhw7V01c0QaNq/p29eyLs Ne8FzEetR/bLJ3/3/tZCb2I+0jgMrz6qaSlC0zuoWccoo72RYfehSl/niwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJTdMeJMD5VI05hijs1nXxu9edvMB8GA1UdIwQY MBaAFBnZYAWKVTs/Xfn+cnIZA3xIq1DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iZjU4MGItZTkxMi00YzFkLTllNTAt NTdiOTFlODE1MzMwLzEvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9iZjU4MGItZTkxMi00YzFkLTllNTAtNTdiOTFlODE1MzMw LzEvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgIO+R0c 7jLMJRkuVBvr3kAtboZYpxy3rCflEnZZX25QUXT/6XYcIl0SnWp4vwGnm84lWnkh MeKO4wYp6kU26t3lS6cEmYUfxPn40owONBBJ5Z4ZS54WzddE9f4rA4uAwy2iOtGI qjnZjyxgyfi1lGWo1xGeHut4T1b/65k/4iBTVOc9dl2jNhlkaVv3FlOpU4S9Us2/ OBNZC147hok1uFLUuXF7sSOVs1LKSCYH2TEffp2Nu4uAfoelvyCKRwGsEMTy2PYV z8ywPiflPvTItXud4EdNIb5pfV3nuoTzGDUHXJ8VX96h4ztg8jJsniBYEU3qh/1l Su/kSBQmWaYqHg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:57 2025 by rpki-client