This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json) Hash identifier: MKblBeToIDrWqjFlcW9u5pPS2M6MDjshsN6GGXTEFRc= Subject key identifier: D2:6C:79:E0:CF:2E:CC:A6:B7:A5:80:97:C7:B5:6C:F4:EF:64:BE:06 Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57 Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557 Certificate serial: 019B38A2B7F66502C112E02A86451B9AD44C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft Manifest number: 0E2F Signing time: Fri 19 Dec 2025 22:02:26 +0000 Manifest this update: Fri 19 Dec 2025 22:02:26 +0000 Manifest next update: Sat 20 Dec 2025 22:02:26 +0000 Files and hashes: 1: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (hash: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=) 2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: xlL+mCLpO/nD0esmHqTL7L/11mRzFBphKwOdJNtMaWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:b7:f6:65:02:c1:12:e0:2a:86:45:1b:9a:d4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557 Validity Not Before: Dec 19 22:02:26 2025 GMT Not After : Dec 20 22:02:26 2025 GMT Subject: CN=d26c79e0cf2ecca6b7a58097c7b56cf4ef64be06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:60:e8:50:2e:72:93:6c:4f:0d:c7:af:0e: a0:70:da:e6:d6:0f:7e:b7:e3:81:13:b6:86:4d:94: f1:2c:9d:47:cc:61:6d:9c:65:9c:41:16:a0:08:65: 92:ff:1f:0e:17:66:ff:34:ec:cd:de:6b:2c:e5:e9: d2:b2:64:14:0b:cb:8e:a8:b0:1c:27:8f:2c:d4:d9: d4:33:f4:91:eb:98:a1:38:59:dc:60:25:44:a6:b3: dd:7c:3a:dd:e2:f8:5d:53:f8:f5:11:ef:47:d2:37: 42:56:83:f7:e8:1e:f0:17:6c:61:1f:0f:f8:16:8e: 9c:77:79:5e:da:35:a4:9c:58:1f:dd:b2:cc:46:29: 92:9b:64:9f:b0:01:3b:62:63:b3:ee:06:7b:89:1f: 5c:5f:c0:3e:06:5f:84:42:f3:d1:d4:3f:a2:2c:0a: 5b:ba:e6:ed:b6:ec:42:f8:1c:f4:04:7a:aa:5e:f1: 5f:9b:89:b1:75:78:2e:14:23:e3:64:81:a9:44:87: 43:b8:af:b3:b9:bf:87:a7:ae:b5:70:34:4e:a0:d4: 9c:6c:cf:03:00:4a:90:a2:61:f0:fb:e4:03:9c:66: c3:6d:61:86:25:ad:f0:57:b4:cf:40:9c:2a:0d:0a: 30:13:70:66:5a:59:1d:94:19:59:a1:95:78:fe:83: 05:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6C:79:E0:CF:2E:CC:A6:B7:A5:80:97:C7:B5:6C:F4:EF:64:BE:06 X509v3 Authority Key Identifier: keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:20:46:7f:51:81:8f:0c:71:f3:6c:1d:32:1d:27:92:7c:c9: 22:ed:1c:63:c2:8b:1b:bf:96:0f:ab:d5:6d:41:ce:aa:02:a4: 62:b6:ce:96:7b:9a:5a:14:27:38:df:3a:2d:e8:ed:e5:bd:6a: 7b:53:a0:a5:6b:19:12:0b:5d:ec:5e:b2:68:80:25:1f:08:09: b5:eb:01:29:ff:72:11:a8:93:c7:03:3f:8f:4d:20:ea:41:02: 3a:dd:d4:3a:a6:a4:55:49:51:a3:82:38:e0:bc:af:b0:3b:36: 0b:d1:b1:2a:f4:66:26:51:b1:55:02:5a:f9:3c:94:47:07:0b: 22:74:28:66:b5:0b:6e:95:f3:f7:dd:e9:e3:50:5c:6c:c0:00: 63:5e:94:d1:b1:e4:f0:ef:14:cd:66:5a:f1:82:9e:1e:63:61: 29:88:a0:ea:45:3c:0b:97:a4:f6:c6:ed:65:1c:32:fc:76:59: eb:bc:c7:ff:5d:b7:64:64:42:b9:16:63:75:3d:f2:01:e4:26: b0:d3:bf:87:f5:1f:56:90:4b:7e:bd:0c:c2:82:6e:fa:24:54: 58:af:14:41:95:d9:11:e9:96:26:fc:e2:1c:80:7c:60:5e:a2: 58:66:ab:5e:fc:13:8f:d0:26:51:6d:17:d8:fe:85:86:eb:a3: cc:f9:83:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4orf2ZQLBEuAqhkUbmtRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYjljZmI5MTMwOWQ1ZDkxZmZjMzJiY2FmMDZjMzZiMDk3 NzI1NTcwHhcNMjUxMjE5MjIwMjI2WhcNMjUxMjIwMjIwMjI2WjAzMTEwLwYDVQQD EyhkMjZjNzllMGNmMmVjY2E2YjdhNTgwOTdjN2I1NmNmNGVmNjRiZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz81g6FAucpNsTw3Hrw6gcNrm1g9+ t+OBE7aGTZTxLJ1HzGFtnGWcQRagCGWS/x8OF2b/NOzN3mss5enSsmQUC8uOqLAc J48s1NnUM/SR65ihOFncYCVEprPdfDrd4vhdU/j1Ee9H0jdCVoP36B7wF2xhHw/4 Fo6cd3le2jWknFgf3bLMRimSm2SfsAE7YmOz7gZ7iR9cX8A+Bl+EQvPR1D+iLApb uubttuxC+Bz0BHqqXvFfm4mxdXguFCPjZIGpRIdDuK+zub+Hp661cDROoNScbM8D AEqQomHw++QDnGbDbWGGJa3wV7TPQJwqDQowE3BmWlkdlBlZoZV4/oMFsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJseeDPLsymt6WAl8e1bPTvZL4GMB8GA1UdIwQY MBaAFIC5z7kTCdXZH/wyvK8Gw2sJdyVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mZDk0ODItOGNkMS00ODk5LThjZGIt MjdiYjBiODg3NWE4LzEvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mZDk0ODItOGNkMS00ODk5LThjZGItMjdiYjBiODg3NWE4 LzEvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSBGf1GB jwxx82wdMh0nknzJIu0cY8KLG7+WD6vVbUHOqgKkYrbOlnuaWhQnON86Lejt5b1q e1OgpWsZEgtd7F6yaIAlHwgJtesBKf9yEaiTxwM/j00g6kECOt3UOqakVUlRo4I4 4LyvsDs2C9GxKvRmJlGxVQJa+TyURwcLInQoZrULbpXz993p41BcbMAAY16U0bHk 8O8UzWZa8YKeHmNhKYig6kU8C5ek9sbtZRwy/HZZ67zH/123ZGRCuRZjdT3yAeQm sNO/h/UfVpBLfr0MwoJu+iRUWK8UQZXZEemWJvziHIB8YF6iWGarXvwTj9AmUW0X 2P6FhuujzPmD5Q== -----END CERTIFICATE-----Generated at Fri Dec 19 23:23:21 2025 by rpki-client