This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft File: glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json) Hash identifier: Yzra59vd5u2YSfanMWvDl/DQAiCB8KerIgHh6GokLbk= Subject key identifier: F7:75:01:2C:9A:36:1B:41:A4:BF:F8:3D:05:0F:B9:47:02:A2:A9:A4 Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2 Certificate serial: 019AF3F7149E7E84114710B57F1DC4ECE41E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:00:47 +0000 Manifest this update: Sat 06 Dec 2025 14:00:47 +0000 Manifest next update: Sun 07 Dec 2025 14:00:47 +0000 Files and hashes: 1: BiweuLnHoWiHw0dJtOKVLYe5VXw.roa (hash: v5I7lbo3yrRW4OdIb5Z9T1Oajdn5oMeqluzGbBuYfMA=) 2: KyxetZabMrCwSGQGlQiCSSpLezw.roa (hash: lB6fVKgf9Cm2eRE3kdPJEkhSEzxtd0NAC6g5PlzMoxw=) 3: SkHxUs-FrIQyM07xjoxzMJo0A-0.roa (hash: pe66sdl4nqsnLQs5V6pFP+Jxy3p0QpIUCzbid73OCcA=) 4: _muTs8Yrozyvhukvws4l05B7mTo.roa (hash: LD706s8S0q0ox0+6TKcyKrOGDjOk87XG1dzJqAoo9NE=) 5: dvbWlIR_nyOoTtNcYB_wCKbM8x8.roa (hash: vqMhD9X26YxNwUr/WhYc7U9uIGwJ0S9qj2YKPJvFuT0=) 6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: 8RCAueHlYLTLFN71G5AGVhkcoJFER40chEyuqX3kGtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:14:9e:7e:84:11:47:10:b5:7f:1d:c4:ec:e4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2 Validity Not Before: Dec 6 14:00:47 2025 GMT Not After : Dec 7 14:00:47 2025 GMT Subject: CN=f775012c9a361b41a4bff83d050fb94702a2a9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:b4:45:b6:62:2b:d1:46:f8:da:8c:1e:38: 06:12:ad:04:c8:01:eb:99:6f:ea:1e:b4:ce:eb:59: 26:67:73:13:16:eb:01:54:7c:1a:c6:9d:cd:f8:92: 59:3f:b8:dc:b4:dd:63:18:c2:28:ca:53:eb:f8:c5: 84:7a:9e:55:8d:f7:77:90:c0:62:ea:14:27:ae:f1: 75:0d:81:e7:83:74:39:ed:c1:86:61:27:77:45:40: 77:ba:f8:41:f6:9d:4b:1b:57:f1:8c:bf:e5:2e:28: 8d:79:87:a1:62:aa:4f:b5:1e:ed:b6:d7:5f:0c:35: d8:c5:26:9f:19:dd:44:35:d2:19:49:88:1a:db:9e: 3d:c3:1b:68:06:a3:34:be:0b:3c:11:7c:33:f3:95: 89:5e:92:2f:9a:29:c5:55:e1:5b:bb:e0:b2:0f:be: e1:29:71:06:7d:7f:7a:f7:0a:45:73:b4:0f:4f:2a: 44:0c:d8:e0:99:92:2b:4a:93:3a:d0:ef:0d:6d:6d: ca:d1:2b:a3:5d:ae:fc:0e:92:58:49:40:dc:e3:f6: 47:6d:da:c6:6e:3c:30:ff:43:c3:22:97:59:a6:a3: 1a:8d:52:06:f7:51:7c:85:c8:35:c6:e8:1b:73:1a: da:ca:ed:dd:14:ee:6b:91:7e:6e:86:40:26:72:da: 00:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:75:01:2C:9A:36:1B:41:A4:BF:F8:3D:05:0F:B9:47:02:A2:A9:A4 X509v3 Authority Key Identifier: keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a0:03:5f:19:f8:0c:94:62:07:a1:39:26:1f:15:e6:ae:6b: 1a:97:cc:b8:46:c8:ab:3d:f3:76:26:22:05:3c:0f:79:b1:7d: c3:4c:72:7f:df:0d:51:db:fe:75:54:10:6a:72:33:ed:11:f1: f1:3d:41:cb:78:1c:a4:86:ca:17:a4:d4:42:71:a4:cd:3a:fd: f3:b6:6f:a8:13:f1:93:f9:72:e0:0b:cb:cf:a4:62:68:3f:47: db:c3:9d:87:55:40:59:38:aa:e7:ad:94:b1:d8:9b:75:b8:3b: 81:af:48:5d:1d:b8:4b:7e:af:29:a5:bb:a4:32:49:6b:94:2c: 10:a8:08:0a:88:05:1f:c0:99:f2:0b:77:08:10:e6:16:9e:2c: 4a:a4:34:81:23:1a:15:70:d8:9d:9c:e2:07:8b:1c:d3:1f:ce: ad:7b:d6:38:52:3d:05:9d:3b:b2:33:20:0a:a6:8b:d7:7f:49: 69:01:c5:4d:14:24:07:0e:d6:f1:d4:6b:23:b9:af:0e:b1:56: cd:f3:4c:b5:16:bb:32:43:9b:cc:93:eb:2f:18:3b:d1:4e:ff: 17:aa:81:d1:41:66:82:d9:f7:df:59:91:7e:17:40:be:d5:64: 4a:52:57:e3:75:89:0b:16:a6:5a:10:6c:7e:18:78:8f:55:cd: 52:de:8b:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xSefoQRRxC1fx3E7OQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTFlN2ZiNmI5NjBkNDA2YjIyMzZkMjVlNGUyMGUyNDUz NTlkYjIwHhcNMjUxMjA2MTQwMDQ3WhcNMjUxMjA3MTQwMDQ3WjAzMTEwLwYDVQQD EyhmNzc1MDEyYzlhMzYxYjQxYTRiZmY4M2QwNTBmYjk0NzAyYTJhOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06q0RbZiK9FG+NqMHjgGEq0EyAHr mW/qHrTO61kmZ3MTFusBVHwaxp3N+JJZP7jctN1jGMIoylPr+MWEep5Vjfd3kMBi 6hQnrvF1DYHng3Q57cGGYSd3RUB3uvhB9p1LG1fxjL/lLiiNeYehYqpPtR7tttdf DDXYxSafGd1ENdIZSYga2549wxtoBqM0vgs8EXwz85WJXpIvminFVeFbu+CyD77h KXEGfX969wpFc7QPTypEDNjgmZIrSpM60O8NbW3K0SujXa78DpJYSUDc4/ZHbdrG bjww/0PDIpdZpqMajVIG91F8hcg1xugbcxrayu3dFO5rkX5uhkAmctoAvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPd1ASyaNhtBpL/4PQUPuUcCoqmkMB8GA1UdIwQY MBaAFIJR5/trlg1AayI20l5OIOJFNZ2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjct ZDNhNDg3Mjk1NDkxLzEvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mZjBlNjEtMWM5Mi00MThjLTkyNjctZDNhNDg3Mjk1NDkx LzEvZ2xIbi0ydVdEVUJySWpiU1hrNGc0a1UxbmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKADXxn4 DJRiB6E5Jh8V5q5rGpfMuEbIqz3zdiYiBTwPebF9w0xyf98NUdv+dVQQanIz7RHx 8T1By3gcpIbKF6TUQnGkzTr987ZvqBPxk/ly4AvLz6RiaD9H28Odh1VAWTiq562U sdibdbg7ga9IXR24S36vKaW7pDJJa5QsEKgICogFH8CZ8gt3CBDmFp4sSqQ0gSMa FXDYnZziB4sc0x/OrXvWOFI9BZ07sjMgCqaL139JaQHFTRQkBw7W8dRrI7mvDrFW zfNMtRa7MkObzJPrLxg70U7/F6qB0UFmgtn331mRfhdAvtVkSlJX43WJCxamWhBs fhh4j1XNUt6LHA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:06 2025 by rpki-client