This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json) Hash identifier: Y/pzdvphiN4J2Vk0aRWoHef+4TNOeoTn6Yscg9xgO6A= Subject key identifier: 50:25:79:00:5A:F8:E0:7F:AE:BE:99:3C:73:A1:96:72:16:52:C6:21 Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e Certificate serial: 019AF3524CEEC6C86D8B45E9B0ED99A4CABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft Manifest number: 035B Signing time: Sat 06 Dec 2025 11:00:48 +0000 Manifest this update: Sat 06 Dec 2025 11:00:48 +0000 Manifest next update: Sun 07 Dec 2025 11:00:48 +0000 Files and hashes: 1: 1-J_uLfpgRYrtxrpsYSaesRuiQ2g.roa (hash: GvASZIyrV5t2M4DjO8tp4WjyB+kQVX9GlnrOl3qGLxQ=) 2: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: /iO0Oi7F7JlE+hAFu9WYKf76s410zwcGch+I1SqaHec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:4c:ee:c6:c8:6d:8b:45:e9:b0:ed:99:a4:ca:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e Validity Not Before: Dec 6 11:00:48 2025 GMT Not After : Dec 7 11:00:48 2025 GMT Subject: CN=502579005af8e07faebe993c73a196721652c621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4c:1f:dd:7a:d6:36:55:47:94:fe:de:05:e8: 74:97:46:5d:c4:4a:f9:7c:75:a4:f4:5f:40:f3:13: f0:5b:17:60:95:93:50:3f:77:ef:7f:0c:78:b5:fb: bc:00:b5:b0:50:60:8a:18:2b:0b:62:58:28:86:e8: b8:7c:7a:88:ad:48:c4:c4:fa:d3:bd:f8:44:b4:bd: 5e:cd:8e:78:46:c9:da:a7:49:06:c2:de:63:e2:8c: f9:03:5f:ac:a9:8a:35:b9:26:e0:78:fb:8c:72:aa: 70:30:3e:69:b7:7a:84:d5:70:65:57:9e:f8:93:62: 35:01:1e:b1:0f:3d:d0:73:5d:ad:71:28:62:6e:5f: 8f:97:3d:c7:d1:80:27:e2:fb:1e:28:49:f8:9c:26: 23:25:09:e4:8f:05:80:e9:e3:90:32:58:a5:c0:ce: f7:43:06:ee:8d:a4:e2:99:0c:0c:24:22:75:32:69: 5d:6e:ac:a9:cd:d1:af:b3:ff:39:bf:b2:db:83:c4: 1c:b5:cb:ce:73:cb:ea:e0:ff:b9:cd:47:d9:0b:9e: b0:db:f9:6b:5d:fb:f8:ca:dc:fb:64:20:55:cd:93: 48:7c:6e:eb:bf:27:dc:b5:61:93:b7:98:28:09:bb: 88:86:16:21:1c:24:9b:76:d1:38:41:b1:74:5d:27: 90:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:25:79:00:5A:F8:E0:7F:AE:BE:99:3C:73:A1:96:72:16:52:C6:21 X509v3 Authority Key Identifier: keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:db:b3:45:ef:55:65:b3:33:70:d2:53:17:55:54:65:46:fe: c3:8c:1e:70:44:4a:58:7a:03:40:30:64:ce:78:04:2e:1d:31: a3:39:d6:a1:a6:9f:a3:ac:4c:5c:ad:a2:28:bf:06:8b:ac:63: 98:f8:41:36:a8:4c:a0:24:cf:f1:6d:11:24:de:86:52:58:a3: f5:be:f1:37:cc:b0:2f:b9:4d:49:7c:a7:fe:90:c2:00:63:d5: 24:80:85:4a:fc:9c:a3:5c:3c:e6:ef:e1:2c:46:48:f9:51:cc: db:93:ab:91:c6:a2:f2:ee:bb:53:c3:4c:18:07:71:4e:37:6a: 8f:eb:e4:f2:d2:2a:9a:95:8d:0e:28:2f:cb:96:dc:89:bb:a2: de:95:04:d5:2f:b7:6f:91:6d:f5:0f:95:03:1a:e4:6e:fc:4d: b7:78:fa:f3:2d:93:35:b0:2c:1f:0b:17:30:8f:a8:78:05:d6: 78:0e:0d:c7:3e:b8:26:6d:40:0e:63:26:e0:72:c0:f9:a4:d9: 50:e3:df:c2:27:ae:cf:85:ba:9d:75:05:80:0a:42:6a:1b:7f: 56:0a:93:e8:09:73:a5:cb:4f:5b:cb:b0:29:6f:16:0b:76:7c: ae:81:bf:43:2b:30:42:60:99:a9:e8:b0:41:a7:6d:27:35:7f: ac:03:7e:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkzuxshti0XpsO2ZpMq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NjJlY2U1NDc1NzJhZGVjYTFhOWZmMDU3ZTBiYThlYWU4 YzVkNWUwHhcNMjUxMjA2MTEwMDQ4WhcNMjUxMjA3MTEwMDQ4WjAzMTEwLwYDVQQD Eyg1MDI1NzkwMDVhZjhlMDdmYWViZTk5M2M3M2ExOTY3MjE2NTJjNjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEwf3XrWNlVHlP7eBeh0l0ZdxEr5 fHWk9F9A8xPwWxdglZNQP3fvfwx4tfu8ALWwUGCKGCsLYlgohui4fHqIrUjExPrT vfhEtL1ezY54Rsnap0kGwt5j4oz5A1+sqYo1uSbgePuMcqpwMD5pt3qE1XBlV574 k2I1AR6xDz3Qc12tcShibl+Plz3H0YAn4vseKEn4nCYjJQnkjwWA6eOQMlilwM73 QwbujaTimQwMJCJ1MmldbqypzdGvs/85v7Lbg8QctcvOc8vq4P+5zUfZC56w2/lr Xfv4ytz7ZCBVzZNIfG7rvyfctWGTt5goCbuIhhYhHCSbdtE4QbF0XSeQDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAleQBa+OB/rr6ZPHOhlnIWUsYhMB8GA1UdIwQY MBaAFNRi7OVHVyreyhqf8Ffguo6ujF1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84YTk0MTctYmMyOC00YTAyLWE5MmYt YTQwOGJiYTczNWVlLzEvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84YTk0MTctYmMyOC00YTAyLWE5MmYtYTQwOGJiYTczNWVl LzEvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtuzRe9V ZbMzcNJTF1VUZUb+w4wecERKWHoDQDBkzngELh0xoznWoaafo6xMXK2iKL8Gi6xj mPhBNqhMoCTP8W0RJN6GUlij9b7xN8ywL7lNSXyn/pDCAGPVJICFSvyco1w85u/h LEZI+VHM25Orkcai8u67U8NMGAdxTjdqj+vk8tIqmpWNDigvy5bcibui3pUE1S+3 b5Ft9Q+VAxrkbvxNt3j68y2TNbAsHwsXMI+oeAXWeA4Nxz64Jm1ADmMm4HLA+aTZ UOPfwieuz4W6nXUFgApCaht/VgqT6AlzpctPW8uwKW8WC3Z8roG/QyswQmCZqeiw QadtJzV/rAN+7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:38:06 2025 by rpki-client