This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json) Hash identifier: +FrB+XF+0ygdDRIvbllzbAqHk0PYW77ZqP1oB7JnP4s= Subject key identifier: DC:48:19:92:B6:71:38:04:D5:CA:99:6A:AD:E5:11:FD:85:AA:26:62 Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0 Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0 Certificate serial: 019AF1D1EDA9EF793CF73B0DCDE5229EC8EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 04:00:58 +0000 Manifest this update: Sat 06 Dec 2025 04:00:58 +0000 Manifest next update: Sun 07 Dec 2025 04:00:58 +0000 Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: axyXIA5F6tfFMn5iWaZtQ5Rn3wpBZcw5oSpdnaXERR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ed:a9:ef:79:3c:f7:3b:0d:cd:e5:22:9e:c8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0 Validity Not Before: Dec 6 04:00:58 2025 GMT Not After : Dec 7 04:00:58 2025 GMT Subject: CN=dc481992b6713804d5ca996aade511fd85aa2662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:22:12:a0:fc:8b:98:43:3a:07:20:cd:77: 06:ae:c6:37:a4:36:72:73:84:42:c5:4d:89:d0:1e: a1:2f:7b:0b:b3:db:6a:0d:a2:bc:13:f2:a8:b6:e5: 46:93:89:51:0b:c3:1f:99:73:10:42:72:d2:a5:74: 1c:93:63:a6:a6:37:f9:ba:2c:74:81:fe:7b:1b:de: 6b:f6:5f:4a:11:ed:6c:60:95:16:f7:30:90:66:ad: d4:03:26:ca:f5:70:e3:d4:42:68:4a:bd:5a:5e:21: ea:f5:ef:10:a7:c1:60:5b:55:e1:8f:da:13:5f:a0: b9:b6:23:42:ae:e0:d9:8c:77:9b:87:83:5b:63:90: 9e:2f:0a:37:fb:84:8a:8c:76:da:ba:71:8a:37:94: 84:48:e0:ff:25:0d:5c:3a:71:83:ba:9f:07:fa:be: 58:f2:e8:ef:1a:e0:3b:8d:0f:b7:43:fc:13:f4:33: a2:6c:b1:71:07:c5:5d:9a:64:80:4d:04:36:1c:4a: db:da:6f:d7:9e:c9:b0:25:07:0f:33:82:77:ac:d8: cd:db:e1:4a:df:20:c0:ec:dd:e2:09:0a:f5:0e:c9: 0d:ba:cc:5f:a5:2b:63:07:9c:b6:38:22:94:90:d8: ea:48:5c:5c:34:e1:c3:f0:81:30:9f:61:7e:90:90: d1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:48:19:92:B6:71:38:04:D5:CA:99:6A:AD:E5:11:FD:85:AA:26:62 X509v3 Authority Key Identifier: keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:47:db:54:3c:3b:14:67:aa:3a:ee:1b:5e:ea:18:98:c5:47: 71:39:e6:99:fb:e5:c4:ed:ab:a6:fb:67:59:37:0d:4a:5a:d8: d9:cb:9a:df:b5:f9:1b:36:25:44:83:92:ad:42:12:eb:ba:96: cd:b2:08:11:0a:62:4b:09:41:37:58:92:13:39:f1:4e:4f:2a: ec:7e:6d:48:e8:73:30:54:79:d4:64:d4:59:a5:1d:9b:4a:a6: 21:05:0a:de:28:bb:c0:b6:e8:78:b9:fa:b3:25:f0:99:ea:29: 35:0c:63:cf:b7:fe:a2:d9:00:ea:c5:04:4a:95:30:7b:d6:b0: 45:08:08:a3:c0:77:67:db:10:9c:11:a2:1e:21:26:1c:35:c8: fb:8e:52:19:29:77:cd:2c:27:dc:dc:1d:b1:a0:01:0a:7b:ab: 9e:53:98:77:25:07:12:ff:b8:20:54:ab:1b:ae:77:7c:bc:d2: ba:e6:61:ac:35:91:3d:1a:2e:9a:33:05:14:85:b6:80:75:98: 13:64:c2:89:cc:c8:16:81:5f:70:39:72:af:b5:f9:4d:8e:d4: 7d:09:7d:07:1f:97:ce:36:43:ca:b8:01:ca:74:0c:f9:9e:e5: 6d:66:39:c1:15:52:d5:31:a4:04:11:c6:2f:96:c5:9a:99:5b: 37:dc:6e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0e2p73k89zsNzeUinsjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTk0OTViNzJmZjAxNTg3OGMxMzE0ZDI0NzU5YjZlOTE0 N2E4ZTAwHhcNMjUxMjA2MDQwMDU4WhcNMjUxMjA3MDQwMDU4WjAzMTEwLwYDVQQD EyhkYzQ4MTk5MmI2NzEzODA0ZDVjYTk5NmFhZGU1MTFmZDg1YWEyNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszoiEqD8i5hDOgcgzXcGrsY3pDZy c4RCxU2J0B6hL3sLs9tqDaK8E/KotuVGk4lRC8MfmXMQQnLSpXQck2Ompjf5uix0 gf57G95r9l9KEe1sYJUW9zCQZq3UAybK9XDj1EJoSr1aXiHq9e8Qp8FgW1Xhj9oT X6C5tiNCruDZjHebh4NbY5CeLwo3+4SKjHbaunGKN5SESOD/JQ1cOnGDup8H+r5Y 8ujvGuA7jQ+3Q/wT9DOibLFxB8VdmmSATQQ2HErb2m/XnsmwJQcPM4J3rNjN2+FK 3yDA7N3iCQr1DskNusxfpStjB5y2OCKUkNjqSFxcNOHD8IEwn2F+kJDRFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxIGZK2cTgE1cqZaq3lEf2FqiZiMB8GA1UdIwQY MBaAFIFZSVty/wFYeMExTSR1m26RR6jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmIt OTAyNGIwZDIyNmM2LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmItOTAyNGIwZDIyNmM2 LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0fbVDw7 FGeqOu4bXuoYmMVHcTnmmfvlxO2rpvtnWTcNSlrY2cua37X5GzYlRIOSrUIS67qW zbIIEQpiSwlBN1iSEznxTk8q7H5tSOhzMFR51GTUWaUdm0qmIQUK3ii7wLboeLn6 syXwmeopNQxjz7f+otkA6sUESpUwe9awRQgIo8B3Z9sQnBGiHiEmHDXI+45SGSl3 zSwn3NwdsaABCnurnlOYdyUHEv+4IFSrG653fLzSuuZhrDWRPRoumjMFFIW2gHWY E2TCiczIFoFfcDlyr7X5TY7UfQl9Bx+XzjZDyrgBynQM+Z7lbWY5wRVS1TGkBBHG L5bFmplbN9xuXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:44 2025 by rpki-client