This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json) Hash identifier: +GtAB3kzImg8xKiUv405FlndvhcBzB1jhfX06uUG26c= Subject key identifier: 51:7F:E3:EE:88:1E:D6:13:6B:95:3C:8F:4D:B8:60:2E:55:D3:F7:99 Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510 Certificate serial: 019AF2AD99335C70951AC13368B6E8AB85DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft Manifest number: 0628 Signing time: Sat 06 Dec 2025 08:00:54 +0000 Manifest this update: Sat 06 Dec 2025 08:00:54 +0000 Manifest next update: Sun 07 Dec 2025 08:00:54 +0000 Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: qidBKdLku1KOONnCdTKj9wnxt/qOBs+OljRhs24lS8Q=) 2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:99:33:5c:70:95:1a:c1:33:68:b6:e8:ab:85:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510 Validity Not Before: Dec 6 08:00:54 2025 GMT Not After : Dec 7 08:00:54 2025 GMT Subject: CN=517fe3ee881ed6136b953c8f4db8602e55d3f799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:86:f1:f2:84:9e:91:db:49:ee:1c:b9:8a: e9:be:df:90:53:14:0d:ba:82:0e:6e:81:0b:5a:9b: 74:ba:af:75:d2:da:62:2b:a1:51:c6:56:7a:38:60: f1:9a:e4:33:a1:4d:94:5f:85:b5:a9:45:5e:d7:f8: f2:00:95:79:a6:28:11:0a:f3:42:1f:e4:7b:80:6a: b9:1b:18:6b:58:0e:87:01:57:3c:50:4a:3a:43:08: f0:51:57:4a:39:d8:e4:05:72:bc:15:72:3d:5f:11: 77:cc:71:47:1b:13:79:b5:12:85:b5:f1:9d:42:fb: 11:76:60:af:a9:c4:e7:65:99:14:2b:3b:08:60:b4: 6b:e6:8b:58:85:72:1f:2f:b6:72:52:1d:5c:1e:e2: 49:b2:7a:23:19:ec:92:26:50:23:d3:cb:d9:83:2a: 4b:62:4a:52:b0:bc:c8:2d:3f:1a:19:cc:4f:a6:52: df:b5:e0:d7:48:a9:dd:f0:bf:d2:2e:3e:dd:8c:c8: 5d:22:1f:fa:ad:8d:db:e4:77:00:11:25:e1:53:34: 84:de:f0:53:83:69:9c:ed:45:7e:21:ec:10:f7:99: de:a6:c5:a4:1a:37:ae:53:5b:40:d2:c7:85:7b:ca: 06:03:2e:c4:d9:d0:24:4f:a2:99:a3:5c:b8:43:c3: aa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7F:E3:EE:88:1E:D6:13:6B:95:3C:8F:4D:B8:60:2E:55:D3:F7:99 X509v3 Authority Key Identifier: keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:71:56:64:76:3f:43:5e:59:d8:56:95:10:0a:c2:fc:5f:1b: 5e:3c:5d:6c:98:ab:87:17:6e:18:5e:61:41:05:ca:04:56:51: a4:7a:43:f6:3b:87:aa:b3:d2:07:03:bb:b0:e6:b4:93:b7:a5: 31:3f:59:bc:42:b7:4b:16:f4:f1:d0:ee:4a:b9:85:cd:6c:b8: 71:f3:ab:22:8c:5e:6f:06:42:48:41:7d:36:b5:98:68:37:e3: b8:32:07:73:d0:33:48:ad:b1:e7:d8:76:cf:ba:cc:09:90:88: 09:cb:0d:eb:e5:37:c6:5a:33:06:f2:b3:99:4f:00:84:f7:c2: 5b:48:92:2e:ba:5d:a3:0f:0c:da:f4:bb:6a:75:ad:21:34:de: 13:44:30:fe:54:88:b8:6e:28:12:46:c4:20:3b:51:d7:f1:ff: 0a:b1:5e:21:21:52:9e:e0:e4:9d:c7:74:35:43:04:73:85:79: cd:82:ba:c4:ae:99:ee:2d:91:e7:61:f6:e4:12:ba:90:b5:93: fc:66:89:2a:c5:a9:3b:32:dd:30:a1:16:0e:58:37:53:4f:99: 79:67:05:9b:76:89:b7:77:b9:ba:87:34:77:e8:76:3f:a4:ab: 2d:fa:52:e1:a7:15:3c:82:e2:c1:43:fd:22:3c:e0:f9:7d:24: 9f:e2:d4:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZkzXHCVGsEzaLboq4XaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTJjNGMzNzIzMjdmZGMyYzE3YjQ5NWI4NTg5MWE3NmRl NDI1MTAwHhcNMjUxMjA2MDgwMDU0WhcNMjUxMjA3MDgwMDU0WjAzMTEwLwYDVQQD Eyg1MTdmZTNlZTg4MWVkNjEzNmI5NTNjOGY0ZGI4NjAyZTU1ZDNmNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDWG8fKEnpHbSe4cuYrpvt+QUxQN uoIOboELWpt0uq910tpiK6FRxlZ6OGDxmuQzoU2UX4W1qUVe1/jyAJV5pigRCvNC H+R7gGq5GxhrWA6HAVc8UEo6QwjwUVdKOdjkBXK8FXI9XxF3zHFHGxN5tRKFtfGd QvsRdmCvqcTnZZkUKzsIYLRr5otYhXIfL7ZyUh1cHuJJsnojGeySJlAj08vZgypL YkpSsLzILT8aGcxPplLfteDXSKnd8L/SLj7djMhdIh/6rY3b5HcAESXhUzSE3vBT g2mc7UV+IewQ95nepsWkGjeuU1tA0seFe8oGAy7E2dAkT6KZo1y4Q8OqswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFF/4+6IHtYTa5U8j024YC5V0/eZMB8GA1UdIwQY MBaAFIJSxMNyMn/cLBe0lbhYkadt5CUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUt ZmVlMWQwMmYxMzAzLzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUtZmVlMWQwMmYxMzAz LzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3FWZHY/ Q15Z2FaVEArC/F8bXjxdbJirhxduGF5hQQXKBFZRpHpD9juHqrPSBwO7sOa0k7el MT9ZvEK3Sxb08dDuSrmFzWy4cfOrIoxebwZCSEF9NrWYaDfjuDIHc9AzSK2x59h2 z7rMCZCICcsN6+U3xlozBvKzmU8AhPfCW0iSLrpdow8M2vS7anWtITTeE0Qw/lSI uG4oEkbEIDtR1/H/CrFeISFSnuDkncd0NUMEc4V5zYK6xK6Z7i2R52H25BK6kLWT /GaJKsWpOzLdMKEWDlg3U0+ZeWcFm3aJt3e5uoc0d+h2P6SrLfpS4acVPILiwUP9 Ijzg+X0kn+LUng== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:35 2025 by rpki-client