This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json) Hash identifier: 3vt7426q4FHJPhK6AnwaIk4VUVQ3QJPWIQ9gu/1J/FQ= Subject key identifier: FC:53:21:91:3E:05:C3:CD:59:97:0C:8F:B8:25:6F:9B:CF:DD:D0:7A Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0 Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0 Certificate serial: 019B2F9E5C117E2FFB1DF4F90E18D4412546 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft Manifest number: 177D Signing time: Thu 18 Dec 2025 04:01:05 +0000 Manifest this update: Thu 18 Dec 2025 04:01:05 +0000 Manifest next update: Fri 19 Dec 2025 04:01:05 +0000 Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: IWJPAHA/kkSZZFSeGUcgZtI2RczK501X9cJM2Pi8DDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:5c:11:7e:2f:fb:1d:f4:f9:0e:18:d4:41:25:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0 Validity Not Before: Dec 18 04:01:05 2025 GMT Not After : Dec 19 04:01:05 2025 GMT Subject: CN=fc5321913e05c3cd59970c8fb8256f9bcfddd07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f1:1a:b9:b8:d8:ab:19:b0:88:5f:66:c3:1f: 8d:58:8a:15:7e:93:30:50:8e:fc:ab:b9:9d:0c:00: de:c7:64:3c:d7:61:5f:1c:cd:b3:66:4a:3c:99:c7: 3b:05:f8:85:2e:b8:76:2c:4c:8c:19:a6:f1:06:76: cc:f4:86:92:14:eb:ef:43:91:f5:5d:54:8e:03:2e: 40:0d:03:32:bd:ba:b6:49:e7:55:c1:32:e8:09:13: 64:0a:85:dd:bb:b6:81:bd:68:d9:53:30:e1:b3:ba: 77:9c:20:0c:30:73:cb:44:8d:65:8d:07:8d:20:10: 47:12:02:1e:41:22:b6:72:a0:5c:80:aa:1e:b6:3c: bb:c4:12:ab:28:22:ca:63:81:d8:af:b5:34:4b:9a: a3:bc:75:4b:4e:e0:a0:13:bf:50:69:9a:8d:2b:49: 15:18:f5:40:63:20:a9:49:e6:7e:34:b1:1f:a2:42: f1:9c:e4:f4:09:10:c1:e6:35:76:d1:56:75:5b:f6: c4:cb:6a:af:f2:25:98:db:d3:23:53:41:8b:60:00: 68:4d:78:f0:d3:ad:7d:e1:dc:dd:c2:f5:45:f0:64: 62:8d:cc:00:c3:c8:94:db:f4:bb:3b:8a:bf:4b:16: c2:73:1d:20:65:f1:f9:ac:a2:ea:84:b4:fc:1b:46: cb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:53:21:91:3E:05:C3:CD:59:97:0C:8F:B8:25:6F:9B:CF:DD:D0:7A X509v3 Authority Key Identifier: keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bb:69:0e:e8:19:9d:8b:50:a5:86:f2:44:39:48:16:d3:94: 9c:21:1d:5b:d1:ee:65:4d:2a:bc:6c:18:6d:72:0e:54:4d:76: b9:41:be:69:f1:20:86:5c:7f:12:59:ab:81:15:3c:bc:72:e1: fd:3b:b3:9c:28:b3:28:0d:a3:fd:2e:a8:cc:00:df:db:42:0e: 11:39:ea:01:1a:ae:7c:4a:28:61:c9:25:59:19:b4:98:71:10: 20:fc:58:84:d5:3c:66:67:01:23:42:b1:fb:eb:3a:11:43:ac: be:31:18:f5:1c:5a:79:f0:cd:ac:9e:0a:97:48:b3:07:56:b7: f6:2e:2a:fd:65:68:8e:70:17:d1:c0:1d:50:80:e1:34:56:20: 3a:50:be:35:25:e7:36:5b:b5:fe:2e:3a:c9:d9:17:2c:c9:7b: 3b:54:d0:29:1e:9b:37:3f:ce:e1:6d:17:b1:47:01:66:c1:4b: be:de:57:cf:69:3d:a9:d1:c1:45:d9:ac:e9:d9:1d:0b:cf:b9: 91:88:8b:c1:85:d9:9b:cf:18:9c:78:c9:bc:5f:3b:69:68:62: e5:4a:82:49:41:e2:3c:e6:93:f1:95:11:2c:48:df:b2:f6:04: b0:c7:18:fb:d1:96:39:2a:31:22:62:54:c3:47:8e:38:91:66: 27:a5:d8:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnlwRfi/7HfT5DhjUQSVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTk0OTViNzJmZjAxNTg3OGMxMzE0ZDI0NzU5YjZlOTE0 N2E4ZTAwHhcNMjUxMjE4MDQwMTA1WhcNMjUxMjE5MDQwMTA1WjAzMTEwLwYDVQQD EyhmYzUzMjE5MTNlMDVjM2NkNTk5NzBjOGZiODI1NmY5YmNmZGRkMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fEaubjYqxmwiF9mwx+NWIoVfpMw UI78q7mdDADex2Q812FfHM2zZko8mcc7BfiFLrh2LEyMGabxBnbM9IaSFOvvQ5H1 XVSOAy5ADQMyvbq2SedVwTLoCRNkCoXdu7aBvWjZUzDhs7p3nCAMMHPLRI1ljQeN IBBHEgIeQSK2cqBcgKoetjy7xBKrKCLKY4HYr7U0S5qjvHVLTuCgE79QaZqNK0kV GPVAYyCpSeZ+NLEfokLxnOT0CRDB5jV20VZ1W/bEy2qv8iWY29MjU0GLYABoTXjw 06194dzdwvVF8GRijcwAw8iU2/S7O4q/SxbCcx0gZfH5rKLqhLT8G0bLewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxTIZE+BcPNWZcMj7glb5vP3dB6MB8GA1UdIwQY MBaAFIFZSVty/wFYeMExTSR1m26RR6jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmIt OTAyNGIwZDIyNmM2LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmItOTAyNGIwZDIyNmM2 LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7tpDugZ nYtQpYbyRDlIFtOUnCEdW9HuZU0qvGwYbXIOVE12uUG+afEghlx/ElmrgRU8vHLh /TuznCizKA2j/S6ozADf20IOETnqARqufEooYcklWRm0mHEQIPxYhNU8ZmcBI0Kx ++s6EUOsvjEY9RxaefDNrJ4Kl0izB1a39i4q/WVojnAX0cAdUIDhNFYgOlC+NSXn Nlu1/i46ydkXLMl7O1TQKR6bNz/O4W0XsUcBZsFLvt5Xz2k9qdHBRdms6dkdC8+5 kYiLwYXZm88YnHjJvF87aWhi5UqCSUHiPOaT8ZURLEjfsvYEsMcY+9GWOSoxImJU w0eOOJFmJ6XYLg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:12:49 2025 by rpki-client