This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json) Hash identifier: N780I4st+zCSnfCDlLplnUAn9TV0K9QA+22fCz94zKs= Subject key identifier: BC:6F:96:AD:3D:19:4A:85:49:BE:F6:7A:E1:B2:5A:05:96:C0:DB:1E Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd Certificate serial: 019AF1D1BDC9ED7B6234924B49EFC5E16C04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: jDIB6y/4ulVnukZC2w8MIpx4VaddzyGvXfHBn2XziRA=) 2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bd:c9:ed:7b:62:34:92:4b:49:ef:c5:e1:6c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=bc6f96ad3d194a8549bef67ae1b25a0596c0db1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f2:ab:d0:2b:42:74:30:e0:92:c8:f0:21:92: eb:6c:23:cb:8d:16:64:6b:59:a1:72:12:1a:c8:af: df:a2:52:bb:5d:5a:1e:97:ab:d9:b7:bd:f0:47:de: 4f:bd:9d:41:81:14:9b:7e:9d:ae:28:4e:7d:8c:85: e7:36:f7:40:11:81:f0:b8:9c:0c:4b:d3:43:a9:63: 9b:17:37:00:6e:bf:5b:d9:6e:06:df:8f:50:ca:be: f0:81:d6:10:b1:a1:d4:12:09:25:55:68:91:23:51: 5a:22:b7:f8:ab:71:83:5c:48:bd:ae:42:bf:e6:ea: e8:56:f6:da:02:f0:18:4b:9b:d3:e3:14:cb:6e:60: f5:4e:ce:f9:32:eb:9f:17:4b:48:83:bc:13:52:a9: 6f:a8:02:fe:58:a6:1d:38:1b:aa:ed:cc:c3:ff:47: 44:5a:7d:fa:1a:91:6b:ea:d3:41:40:4a:bb:f8:4e: af:52:90:e8:b2:ee:b5:8c:04:e2:2a:2d:96:00:c6: 18:dd:a0:98:9d:fa:68:9d:05:21:3c:82:e7:0d:e0: cf:f8:c6:ef:6a:57:90:8b:94:42:62:b2:40:ac:0c: a6:e4:0d:c5:ad:c0:cf:54:42:dd:83:1d:47:82:55: 52:47:d3:66:ee:ce:90:4d:03:62:86:4d:7c:34:2b: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6F:96:AD:3D:19:4A:85:49:BE:F6:7A:E1:B2:5A:05:96:C0:DB:1E X509v3 Authority Key Identifier: keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:28:92:55:b1:96:2b:4f:fa:39:78:d4:19:94:38:c3:01:d0: 30:50:61:06:29:4c:17:29:a6:1b:3b:c9:10:60:a0:4c:aa:d3: 03:da:f7:c6:82:4c:0f:88:50:09:66:fe:1b:a4:6d:1f:1a:6a: 96:48:2f:7c:ed:ee:ec:18:0c:03:26:15:47:74:6e:4b:b3:61: 61:b7:ae:5a:48:2f:94:8d:e1:15:96:9c:d3:02:98:56:99:90: 6f:e1:ff:3c:b1:02:99:5f:35:ea:33:84:4b:97:03:e5:bd:3e: ef:e8:a6:87:63:94:1e:68:69:31:32:3f:30:75:13:5a:dd:b4: d4:ee:2d:7e:3f:20:2d:27:cc:e9:8c:16:04:a8:80:02:90:77: 2a:9c:a6:21:af:ef:78:dc:35:a0:cf:d4:7c:99:76:0f:71:4a: 34:d2:96:f9:08:f2:5d:76:05:e3:9e:57:d2:54:d0:50:5c:18: 30:22:a2:0d:d4:fe:ba:77:37:f1:f3:65:f8:b5:69:5d:6c:a7: 43:b2:88:4e:08:80:5c:03:ff:12:b1:10:3e:c5:ad:cb:ee:15: bf:75:d5:de:a9:fe:eb:85:0d:a5:71:72:11:be:8f:13:93:3f: 80:a9:64:ff:21:81:67:93:90:55:ee:bc:ad:37:e1:ed:9b:ef: 56:8e:36:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b3J7XtiNJJLSe/F4WwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTM0NTA1ODQ1ZmEwYTkzZjgyODVhNmRhOGJjZTZkMWQ3 MjAwZGQwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD EyhiYzZmOTZhZDNkMTk0YTg1NDliZWY2N2FlMWIyNWEwNTk2YzBkYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvKr0CtCdDDgksjwIZLrbCPLjRZk a1mhchIayK/folK7XVoel6vZt73wR95PvZ1BgRSbfp2uKE59jIXnNvdAEYHwuJwM S9NDqWObFzcAbr9b2W4G349Qyr7wgdYQsaHUEgklVWiRI1FaIrf4q3GDXEi9rkK/ 5uroVvbaAvAYS5vT4xTLbmD1Ts75MuufF0tIg7wTUqlvqAL+WKYdOBuq7czD/0dE Wn36GpFr6tNBQEq7+E6vUpDosu61jATiKi2WAMYY3aCYnfponQUhPILnDeDP+Mbv aleQi5RCYrJArAym5A3FrcDPVELdgx1HglVSR9Nm7s6QTQNihk18NCvUYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxvlq09GUqFSb72euGyWgWWwNseMB8GA1UdIwQY MBaAFIJTRQWEX6CpP4KFptqLzm0dcgDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAt NDdjYzdkMWFiYzZiLzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAtNDdjYzdkMWFiYzZi LzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSiSVbGW K0/6OXjUGZQ4wwHQMFBhBilMFymmGzvJEGCgTKrTA9r3xoJMD4hQCWb+G6RtHxpq lkgvfO3u7BgMAyYVR3RuS7NhYbeuWkgvlI3hFZac0wKYVpmQb+H/PLECmV816jOE S5cD5b0+7+imh2OUHmhpMTI/MHUTWt201O4tfj8gLSfM6YwWBKiAApB3KpymIa/v eNw1oM/UfJl2D3FKNNKW+QjyXXYF455X0lTQUFwYMCKiDdT+unc38fNl+LVpXWyn Q7KITgiAXAP/ErEQPsWty+4Vv3XV3qn+64UNpXFyEb6PE5M/gKlk/yGBZ5OQVe68 rTfh7ZvvVo42Rw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:57 2025 by rpki-client