This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft File: gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft (raw, json) Hash identifier: kcYQkN3cYCEgTGe+dxOwEoZ7QaAfY41e/aORboYB3wY= Subject key identifier: 8D:50:50:53:7E:48:05:EE:0A:CB:8D:55:B0:D1:F1:1B:32:6F:63:A0 Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69 Certificate issuer: /CN=82468b53967545e28e9267ccbf0069d87b259869 Certificate serial: 019AF27729060C18FFCD6C0B10F857B3B07D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft Manifest number: 16BE Signing time: Sat 06 Dec 2025 07:01:26 +0000 Manifest this update: Sat 06 Dec 2025 07:01:26 +0000 Manifest next update: Sun 07 Dec 2025 07:01:26 +0000 Files and hashes: 1: gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl (hash: ogkLHZxlukA6mRQv7EJF/TO7BmwqOP3dzjQDPHj1wGo=) 2: oqdpV3Xk0NT7skwENXjSQjVV8BM.roa (hash: 16NskiWXB3ABFUN6srz9/Gadxy8aqe8x+NDzXv8hAB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:29:06:0c:18:ff:cd:6c:0b:10:f8:57:b3:b0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869 Validity Not Before: Dec 6 07:01:26 2025 GMT Not After : Dec 7 07:01:26 2025 GMT Subject: CN=8d5050537e4805ee0acb8d55b0d1f11b326f63a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:c0:37:47:f5:49:eb:3d:8b:fc:ba:0b:63: 15:31:db:85:4d:89:ac:6a:2e:9d:da:5c:7b:dd:31: 06:73:6f:4a:c4:61:31:e3:e1:ba:bf:6f:55:a5:d1: be:9f:8c:f2:35:1a:0d:9d:2f:51:9d:50:5b:47:11: b8:62:fa:30:87:55:d2:45:77:5f:02:26:7d:dd:6b: b7:e6:96:f4:0a:7d:2d:2e:74:d5:02:5d:48:23:4c: 82:98:e5:d3:00:a1:c5:18:ae:9f:fb:2d:f8:7b:98: 75:fd:da:f2:00:a8:a6:1f:21:53:21:54:45:96:4f: cb:33:08:e3:3c:59:6f:53:0f:63:2e:96:1d:6c:25: 09:bc:1a:e8:f0:a9:44:20:14:96:a3:29:1a:d5:0a: 2b:05:35:68:33:5e:ac:ef:14:ed:f1:fd:55:05:e8: 48:c1:2a:b3:af:b1:39:36:81:86:3b:61:48:4f:61: 09:da:36:a1:8a:87:1a:39:25:76:c3:88:cb:f3:56: cd:ca:5f:f1:8a:e5:9a:bc:f8:32:21:70:d7:dd:2d: 7a:65:5f:32:bb:a2:fc:62:fb:56:89:ae:69:1c:53: ec:7c:1b:0b:d3:b0:31:76:48:3e:7e:c5:e5:57:ac: 57:d7:7e:c1:ae:b4:8b:64:be:3c:4b:0a:90:68:a9: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:50:50:53:7E:48:05:EE:0A:CB:8D:55:B0:D1:F1:1B:32:6F:63:A0 X509v3 Authority Key Identifier: keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:59:25:f4:4d:eb:01:85:d2:15:be:96:d9:8a:f4:54:f1:e2: 68:a9:16:43:d5:9b:40:06:17:f1:f6:49:56:e8:d1:74:8c:08: a9:20:5e:3f:14:82:18:7b:43:a8:45:ee:f8:3a:67:86:b7:83: 62:1d:df:d5:66:11:a5:5f:66:45:b9:a1:c7:32:6e:95:45:e0: 5c:d5:3c:7a:f2:eb:0b:49:52:aa:42:29:55:83:4f:39:83:88: e7:e4:a8:14:48:74:cb:99:0a:69:18:ed:29:ee:11:58:4d:be: 21:83:3d:e5:46:97:2b:5c:0b:98:ae:d0:2d:d2:49:d4:32:d0: 81:bf:84:0d:6a:a1:ff:34:7c:06:d0:e0:3f:84:97:55:df:ab: 2e:8e:73:66:c3:b4:2a:ad:96:3e:c1:6f:ca:d4:34:93:b2:fb: 52:bf:30:88:2c:23:93:a3:71:9e:e8:8f:4c:34:04:1a:f6:75: 67:0a:1f:40:f0:e6:68:d0:df:e9:0f:04:01:bf:a3:db:aa:04: f5:9d:6b:a4:21:3d:63:fb:13:9d:f1:f3:9a:40:f2:82:75:03: 25:cf:17:ee:95:a0:5f:6b:2f:31:0a:8c:dc:70:c0:5f:4b:c9: 23:b8:48:48:68:f0:9f:7d:4f:c5:10:61:c6:46:fc:cc:17:f2: 4e:7a:d7:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydykGDBj/zWwLEPhXs7B9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNDY4YjUzOTY3NTQ1ZTI4ZTkyNjdjY2JmMDA2OWQ4N2Iy NTk4NjkwHhcNMjUxMjA2MDcwMTI2WhcNMjUxMjA3MDcwMTI2WjAzMTEwLwYDVQQD Eyg4ZDUwNTA1MzdlNDgwNWVlMGFjYjhkNTViMGQxZjExYjMyNmY2M2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNTAN0f1Ses9i/y6C2MVMduFTYms ai6d2lx73TEGc29KxGEx4+G6v29VpdG+n4zyNRoNnS9RnVBbRxG4Yvowh1XSRXdf AiZ93Wu35pb0Cn0tLnTVAl1II0yCmOXTAKHFGK6f+y34e5h1/dryAKimHyFTIVRF lk/LMwjjPFlvUw9jLpYdbCUJvBro8KlEIBSWoyka1QorBTVoM16s7xTt8f1VBehI wSqzr7E5NoGGO2FIT2EJ2jahiocaOSV2w4jL81bNyl/xiuWavPgyIXDX3S16ZV8y u6L8YvtWia5pHFPsfBsL07Axdkg+fsXlV6xX137BrrSLZL48SwqQaKlDtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1QUFN+SAXuCsuNVbDR8Rsyb2OgMB8GA1UdIwQY MBaAFIJGi1OWdUXijpJnzL8Aadh7JZhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2thTFU1WjFSZUtPa21mTXZ3QnAySHNsbUdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85Y2RhY2YtNTNlOS00MTM5LWJiNGEt OGFjMmJhZjY5NmM4LzEvZ2thTFU1WjFSZUtPa21mTXZ3QnAySHNsbUdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85Y2RhY2YtNTNlOS00MTM5LWJiNGEtOGFjMmJhZjY5NmM4 LzEvZ2thTFU1WjFSZUtPa21mTXZ3QnAySHNsbUdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFkl9E3r AYXSFb6W2Yr0VPHiaKkWQ9WbQAYX8fZJVujRdIwIqSBePxSCGHtDqEXu+DpnhreD Yh3f1WYRpV9mRbmhxzJulUXgXNU8evLrC0lSqkIpVYNPOYOI5+SoFEh0y5kKaRjt Ke4RWE2+IYM95UaXK1wLmK7QLdJJ1DLQgb+EDWqh/zR8BtDgP4SXVd+rLo5zZsO0 Kq2WPsFvytQ0k7L7Ur8wiCwjk6NxnuiPTDQEGvZ1ZwofQPDmaNDf6Q8EAb+j26oE 9Z1rpCE9Y/sTnfHzmkDygnUDJc8X7pWgX2svMQqM3HDAX0vJI7hISGjwn31PxRBh xkb8zBfyTnrXnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:01:42 2025 by rpki-client