This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json) Hash identifier: cazCrNsOttQhUoplVSXHfCW3kgashZrPU/lAQ0hW8G0= Subject key identifier: 48:E8:DA:14:ED:CB:1F:9F:11:AB:85:19:0F:5A:06:B6:E0:CD:CC:A6 Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33 Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33 Certificate serial: 019AF209A24F502780E26468A98A143D6063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft Manifest number: 0598 Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: GLozfGt9jaeZxqG5MP/Xb5VfCUT5PL7bmQklJ380xls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a2:4f:50:27:80:e2:64:68:a9:8a:14:3d:60:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33 Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=48e8da14edcb1f9f11ab85190f5a06b6e0cdcca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:70:2e:63:72:75:12:3f:1a:d4:30:db:1d:3b: e5:91:c8:0d:eb:28:6f:06:9a:a3:24:2f:e0:fb:b7: 73:79:8b:5e:24:db:59:4b:78:48:7b:ad:de:27:06: 82:33:49:b1:ba:24:71:4c:be:0b:2d:3c:6b:6a:7c: c5:c6:bd:43:8f:19:0b:38:ec:14:8e:58:2c:61:b4: 38:63:53:3c:19:93:98:6c:a5:9b:cd:9f:4d:19:34: a6:6a:c0:8a:b3:07:bd:35:46:3b:9e:38:ec:0f:0e: 38:2d:c1:d7:ff:8d:12:a9:69:90:0a:fc:66:1f:f4: dd:f8:06:83:cc:db:18:1f:79:aa:fe:75:79:c2:92: d7:06:55:9c:df:37:e4:31:62:c4:2b:9d:98:4e:48: 4d:58:d1:c1:03:41:3f:5c:42:4b:28:29:c1:2e:80: ac:23:66:dc:c1:ac:b2:b1:e1:8c:f4:32:7d:37:09: e5:a4:da:fb:cc:5f:6c:43:2c:68:b9:c3:a0:3d:e6: a6:b0:bd:97:9c:f7:b9:7a:f2:94:d0:ad:be:08:53: 1f:9f:30:36:45:bc:1a:c5:80:d1:f0:cf:ce:ad:60: d7:ce:7f:8a:f7:08:48:11:69:41:40:a1:a7:af:ca: 74:12:68:91:5e:2e:2a:cc:15:26:29:6f:2c:c3:ab: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E8:DA:14:ED:CB:1F:9F:11:AB:85:19:0F:5A:06:B6:E0:CD:CC:A6 X509v3 Authority Key Identifier: keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:5f:80:37:ac:6d:45:6c:4f:41:61:2d:cd:a7:f1:67:8b:91: 72:9e:2f:fb:a1:86:3e:f6:a7:2b:98:8e:fc:5e:31:91:db:dd: 94:c9:9d:d6:ee:7a:04:b4:6b:20:2f:b5:b5:39:fe:3c:40:d7: 78:21:d7:13:a0:c0:a0:73:c5:c6:83:d2:0a:22:e1:07:fb:aa: c2:35:47:79:39:50:ae:8a:fe:4e:0f:3e:3e:21:78:1f:f8:7c: 1a:b0:62:1b:86:03:2b:a9:0b:5c:4a:e1:7f:e5:78:14:d2:cc: 88:0e:95:1e:9e:81:d6:ec:bc:ce:8a:69:c7:de:46:05:57:6b: 74:34:16:3b:5f:a1:4c:90:ea:bd:7d:56:91:37:d9:1e:bc:5b: 21:1a:5c:c6:56:5b:d8:ec:84:6a:53:87:59:0e:f3:1d:df:97: b7:fa:fb:9d:ba:9d:bf:ba:95:08:c2:4d:ee:23:4e:ca:47:3c: aa:4c:b5:6e:b0:cf:68:b1:2c:c4:37:14:42:b0:9c:f2:ad:ed: 5a:6d:d6:92:88:28:77:1e:c6:df:4c:80:53:b1:bd:0a:7a:e7: d9:c0:0e:e6:2f:c4:07:9c:73:23:87:b3:7f:f2:f0:a3:4f:df: 3a:7d:d0:ad:86:ea:ec:20:a6:66:92:53:f5:f7:09:ba:c7:25: 9b:93:f4:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaJPUCeA4mRoqYoUPWBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZDRlYTQ0ZGU5ZTU5YTE3YzkyMmY2ZTA0MTcxM2JiYzRh ZjBhMzMwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD Eyg0OGU4ZGExNGVkY2IxZjlmMTFhYjg1MTkwZjVhMDZiNmUwY2RjY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43AuY3J1Ej8a1DDbHTvlkcgN6yhv BpqjJC/g+7dzeYteJNtZS3hIe63eJwaCM0mxuiRxTL4LLTxranzFxr1DjxkLOOwU jlgsYbQ4Y1M8GZOYbKWbzZ9NGTSmasCKswe9NUY7njjsDw44LcHX/40SqWmQCvxm H/Td+AaDzNsYH3mq/nV5wpLXBlWc3zfkMWLEK52YTkhNWNHBA0E/XEJLKCnBLoCs I2bcwayyseGM9DJ9NwnlpNr7zF9sQyxoucOgPeamsL2XnPe5evKU0K2+CFMfnzA2 RbwaxYDR8M/OrWDXzn+K9whIEWlBQKGnr8p0EmiRXi4qzBUmKW8sw6tTBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjo2hTtyx+fEauFGQ9aBrbgzcymMB8GA1UdIwQY MBaAFIHU6kTenlmhfJIvbgQXE7vErwozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUt MDMzMDQyZTg4ZDE4LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUtMDMzMDQyZTg4ZDE4 LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABF+AN6xt RWxPQWEtzafxZ4uRcp4v+6GGPvanK5iO/F4xkdvdlMmd1u56BLRrIC+1tTn+PEDX eCHXE6DAoHPFxoPSCiLhB/uqwjVHeTlQror+Tg8+PiF4H/h8GrBiG4YDK6kLXErh f+V4FNLMiA6VHp6B1uy8zoppx95GBVdrdDQWO1+hTJDqvX1WkTfZHrxbIRpcxlZb 2OyEalOHWQ7zHd+Xt/r7nbqdv7qVCMJN7iNOykc8qky1brDPaLEsxDcUQrCc8q3t Wm3Wkogodx7G30yAU7G9Cnrn2cAO5i/EB5xzI4ezf/Lwo0/fOn3QrYbq7CCmZpJT 9fcJusclm5P0PA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:26 2025 by rpki-client