This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json) Hash identifier: 8Bm4PuOCF4TbkTE6UjYu8esYE31ActI7GVL2nrxL6Iw= Subject key identifier: E9:D6:8A:4E:A6:F0:EE:0E:E5:6B:F9:7A:E7:B1:B3:43:B1:EE:4E:87 Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06 Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06 Certificate serial: 019B4B4C48127D253EE80A634EDC38B06F73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft Manifest number: 1606 Signing time: Tue 23 Dec 2025 13:00:48 +0000 Manifest this update: Tue 23 Dec 2025 13:00:48 +0000 Manifest next update: Wed 24 Dec 2025 13:00:48 +0000 Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=) 2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=) 3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: TBRNYklPiAOotGgQBZLY/vdzkvOtQCS/xtg7JvkjZWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:48:12:7d:25:3e:e8:0a:63:4e:dc:38:b0:6f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06 Validity Not Before: Dec 23 13:00:48 2025 GMT Not After : Dec 24 13:00:48 2025 GMT Subject: CN=e9d68a4ea6f0ee0ee56bf97ae7b1b343b1ee4e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a3:f8:38:61:cd:5f:55:22:6f:fe:cf:ab:c6: f1:f1:ca:82:2c:d4:8a:c2:fa:50:ab:62:39:cd:8e: ff:73:e3:97:f7:92:71:00:01:5c:03:98:4a:dd:2c: 0d:13:99:87:5a:3c:bc:cc:92:ab:df:7c:fc:67:3f: 24:4f:4f:d1:15:5a:81:32:e6:68:de:68:16:8e:f7: bb:34:7e:9c:99:ec:af:72:6d:a8:5a:9d:e0:6a:32: 36:58:83:f3:91:11:9c:c2:72:ad:c9:02:65:3f:9c: 9b:9a:71:58:8c:21:62:a6:3c:84:ee:6e:96:45:e8: f1:45:ee:b3:57:b7:7d:41:bc:3a:37:15:3d:19:74: 78:da:0a:1d:f4:0c:40:87:42:3d:ac:87:05:33:2c: 16:76:87:de:04:e6:06:b8:ce:89:33:a4:56:0b:17: 9a:ca:31:09:b0:87:9e:4e:1a:1e:08:82:0e:b3:b3: 3c:bf:07:a1:35:04:03:c8:bb:eb:ef:d1:96:31:17: 7f:73:d9:cb:20:13:72:1a:0e:d4:d0:66:67:24:d2: de:2d:3c:d9:3b:c7:dd:c1:15:e1:57:1e:3b:05:64: a2:5c:c4:86:ac:b3:d3:88:a0:1b:c2:24:60:00:5b: d2:3c:bd:8c:c5:61:9d:09:be:39:71:41:fe:ee:3f: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D6:8A:4E:A6:F0:EE:0E:E5:6B:F9:7A:E7:B1:B3:43:B1:EE:4E:87 X509v3 Authority Key Identifier: keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:47:2b:df:8c:70:9a:6b:00:14:92:c1:1b:24:75:62:9a:37: d3:af:b5:1b:2e:fd:d9:aa:ce:1e:b0:8f:24:86:5f:73:f2:04: 6e:75:9c:c3:d7:90:9e:27:0c:d2:b7:ce:6d:88:6f:47:96:72: ac:29:62:31:97:65:94:49:24:32:dd:7f:15:00:b6:4a:51:5a: 18:13:a4:2e:29:f4:a2:94:51:f0:8f:40:d8:22:e9:c8:2f:6e: 55:79:ff:e9:63:43:d7:7d:28:3a:2a:e0:85:ae:0d:66:b7:e5: 45:1b:ff:18:c7:94:8f:bd:b0:a2:a1:7a:85:99:86:33:49:a1: f8:8c:20:41:17:46:2a:19:7e:f5:cb:c1:73:43:2a:9e:bd:6e: 9f:13:be:e1:66:dd:0f:a1:bf:df:1a:39:93:b9:0a:72:d7:ea: 4e:64:62:54:30:c2:d0:1a:33:ec:d7:6e:a1:92:79:04:d2:5a: 55:ec:6e:00:16:76:95:34:ff:06:d4:f3:01:e1:b5:2d:8b:c8: 48:a8:45:6e:69:b1:0b:db:66:3e:12:eb:e8:42:d1:cb:85:a9: ac:de:b7:5b:24:f6:a2:a0:f5:3f:6e:65:30:c6:a8:16:3f:c0: e3:cd:b0:d7:03:06:6e:13:27:e9:0c:63:ae:e1:67:36:e8:b6: 5c:eb:d1:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTEgSfSU+6ApjTtw4sG9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4Yjg4OWYwZGRiYjUyODAxZTJkMmU3YTJlYmUxMTY3Y2Fk MzRjMDYwHhcNMjUxMjIzMTMwMDQ4WhcNMjUxMjI0MTMwMDQ4WjAzMTEwLwYDVQQD EyhlOWQ2OGE0ZWE2ZjBlZTBlZTU2YmY5N2FlN2IxYjM0M2IxZWU0ZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqP4OGHNX1Uib/7Pq8bx8cqCLNSK wvpQq2I5zY7/c+OX95JxAAFcA5hK3SwNE5mHWjy8zJKr33z8Zz8kT0/RFVqBMuZo 3mgWjve7NH6cmeyvcm2oWp3gajI2WIPzkRGcwnKtyQJlP5ybmnFYjCFipjyE7m6W RejxRe6zV7d9Qbw6NxU9GXR42god9AxAh0I9rIcFMywWdofeBOYGuM6JM6RWCxea yjEJsIeeThoeCIIOs7M8vwehNQQDyLvr79GWMRd/c9nLIBNyGg7U0GZnJNLeLTzZ O8fdwRXhVx47BWSiXMSGrLPTiKAbwiRgAFvSPL2MxWGdCb45cUH+7j/nSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnWik6m8O4O5Wv5euexs0Ox7k6HMB8GA1UdIwQY MBaAFBi4ifDdu1KAHi0uei6+EWfK00wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQt ZGJiNjRhNjgzNWFkLzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQtZGJiNjRhNjgzNWFk LzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUcr34xw mmsAFJLBGyR1Ypo306+1Gy792arOHrCPJIZfc/IEbnWcw9eQnicM0rfObYhvR5Zy rCliMZdllEkkMt1/FQC2SlFaGBOkLin0opRR8I9A2CLpyC9uVXn/6WND130oOirg ha4NZrflRRv/GMeUj72woqF6hZmGM0mh+IwgQRdGKhl+9cvBc0Mqnr1unxO+4Wbd D6G/3xo5k7kKctfqTmRiVDDC0Boz7NduoZJ5BNJaVexuABZ2lTT/BtTzAeG1LYvI SKhFbmmxC9tmPhLr6ELRy4WprN63WyT2oqD1P25lMMaoFj/A482w1wMGbhMn6Qxj ruFnNui2XOvR4g== -----END CERTIFICATE-----Generated at Tue Dec 23 16:47:07 2025 by rpki-client