This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft File: GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json) Hash identifier: +2ioY19KQ+HsLyEMqIlDyPolTfRgII6VPyIoydgiw/A= Subject key identifier: E3:78:DF:70:16:39:90:85:5C:A2:78:69:9C:A8:E1:5C:61:50:B9:17 Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6 Certificate issuer: /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6 Certificate serial: 019B5907B7A1C7025356CB6132337DF5C6A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft Manifest number: 0163 Signing time: Fri 26 Dec 2025 05:00:36 +0000 Manifest this update: Fri 26 Dec 2025 05:00:36 +0000 Manifest next update: Sat 27 Dec 2025 05:00:36 +0000 Files and hashes: 1: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: UkHVmWuwXrM6hnZNEZYI64QYsKRfbB63VG1SJlVwArk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:b7:a1:c7:02:53:56:cb:61:32:33:7d:f5:c6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6 Validity Not Before: Dec 26 05:00:36 2025 GMT Not After : Dec 27 05:00:36 2025 GMT Subject: CN=e378df70163990855ca278699ca8e15c6150b917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:d9:c1:84:82:e9:72:fc:0b:2a:8d:ff:be: 3f:75:0d:6b:5f:cc:4a:0b:d3:6e:d7:5a:71:56:e7: 52:28:92:77:8a:77:f6:69:0b:fe:f1:79:1a:ab:30: 62:52:9e:31:80:eb:ac:e2:ef:ae:b2:b6:1c:fd:9f: b5:34:20:4a:8a:12:94:ae:db:c7:82:e3:c9:3f:67: 2c:c4:08:15:2b:0d:47:a1:f0:e0:30:a8:97:aa:2f: d7:17:4f:2c:92:ae:31:8e:74:dd:7b:9f:a1:98:04: 58:0c:c2:67:fb:a0:8c:69:d2:38:d6:31:f1:c0:6b: c9:f9:d5:2e:02:f4:70:4a:8d:b3:6f:d8:df:d1:d4: 0e:3f:6e:c5:45:c9:28:36:16:b8:4f:5c:71:f6:c4: a2:36:b7:2c:ca:c5:69:37:f6:26:ff:c9:5f:4f:6c: 81:0a:18:06:32:05:a5:3b:9c:a7:a4:6a:fe:78:38: ce:06:5b:9a:eb:bf:89:53:60:6d:eb:f3:97:30:d1: 09:18:6e:12:3b:58:c3:71:ee:d6:d9:c7:f8:50:2f: e0:b4:b6:75:d7:ad:b0:8b:0f:e3:9c:81:91:cb:83: 99:ef:ca:1d:c5:10:ff:e7:ec:fb:1b:fb:96:84:cf: 7f:6a:1f:bf:f2:2d:65:3a:14:3c:9f:27:6c:47:41: 1d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:78:DF:70:16:39:90:85:5C:A2:78:69:9C:A8:E1:5C:61:50:B9:17 X509v3 Authority Key Identifier: keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fc:c0:1e:2c:2b:22:1f:d5:c0:e7:08:f0:79:0d:17:38:62: 04:3f:a4:27:39:c6:31:ff:bc:1b:35:95:78:0a:8d:ee:0e:65: 5d:cd:8d:5a:86:8d:cf:fb:cd:f1:81:3b:e2:c2:5a:c3:0d:80: 88:96:2f:cb:a4:10:c5:ec:00:8e:e9:18:72:98:5e:71:b1:a6: 43:a0:6a:4f:c5:d8:3a:17:a5:dc:9c:c3:4d:a0:54:27:46:9e: 96:22:0f:88:5f:6e:bc:ed:7f:15:0a:f4:8e:2e:00:0e:45:73: 47:77:2d:ef:14:7b:8e:81:ea:5b:c4:76:b2:95:58:57:ed:29: 8a:5c:cb:d8:95:e1:14:32:f4:ab:af:0d:6d:9c:9e:cc:aa:ca: 6a:3a:8a:32:32:29:1d:b4:3e:41:c5:32:ee:7b:4f:79:5c:e0: 16:d9:b0:d3:d3:20:73:b2:a7:4d:e7:c4:16:f1:2e:41:12:85: 8a:03:75:c5:cd:01:f1:64:88:59:cd:5a:4e:e2:c2:f2:b1:f5: e9:e5:c3:15:8a:42:35:be:28:d0:06:5d:95:45:1e:bf:e9:b5: 6f:66:0b:a0:3e:35:93:a7:1e:33:0d:91:c5:6c:c8:07:ad:eb: e7:19:7b:fb:7a:01:bb:bb:97:a0:f4:3c:00:f6:cc:e3:77:f7: 08:12:9c:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB7ehxwJTVsthMjN99canMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YjIzMDViZmI3MDA0ZTUyOWQ2MjNhNDc3NzFiOGU2ZWNk MDUxZDYwHhcNMjUxMjI2MDUwMDM2WhcNMjUxMjI3MDUwMDM2WjAzMTEwLwYDVQQD EyhlMzc4ZGY3MDE2Mzk5MDg1NWNhMjc4Njk5Y2E4ZTE1YzYxNTBiOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRjZwYSC6XL8CyqN/74/dQ1rX8xK C9Nu11pxVudSKJJ3inf2aQv+8XkaqzBiUp4xgOus4u+usrYc/Z+1NCBKihKUrtvH guPJP2csxAgVKw1HofDgMKiXqi/XF08skq4xjnTde5+hmARYDMJn+6CMadI41jHx wGvJ+dUuAvRwSo2zb9jf0dQOP27FRckoNha4T1xx9sSiNrcsysVpN/Ym/8lfT2yB ChgGMgWlO5ynpGr+eDjOBlua67+JU2Bt6/OXMNEJGG4SO1jDce7W2cf4UC/gtLZ1 162wiw/jnIGRy4OZ78odxRD/5+z7G/uWhM9/ah+/8i1lOhQ8nydsR0Ed9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFON433AWOZCFXKJ4aZyo4VxhULkXMB8GA1UdIwQY MBaAFBiyMFv7cATlKdYjpHdxuObs0FHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTkt NjhiODZlZWMyZmZjLzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTktNjhiODZlZWMyZmZj LzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPzAHiwr Ih/VwOcI8HkNFzhiBD+kJznGMf+8GzWVeAqN7g5lXc2NWoaNz/vN8YE74sJaww2A iJYvy6QQxewAjukYcphecbGmQ6BqT8XYOhel3JzDTaBUJ0aeliIPiF9uvO1/FQr0 ji4ADkVzR3ct7xR7joHqW8R2spVYV+0pilzL2JXhFDL0q68NbZyezKrKajqKMjIp HbQ+QcUy7ntPeVzgFtmw09Mgc7KnTefEFvEuQRKFigN1xc0B8WSIWc1aTuLC8rH1 6eXDFYpCNb4o0AZdlUUev+m1b2YLoD41k6ceMw2RxWzIB63r5xl7+3oBu7uXoPQ8 APbM43f3CBKcow== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:54 2025 by rpki-client