This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json) Hash identifier: kyStEb0CoctopUu12qghlfBGoYM45wdMnHKS2nVtz6c= Subject key identifier: EC:A7:B8:E7:A2:82:54:27:EF:FF:C5:DC:FD:D1:CF:B5:31:FE:14:6E Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f Certificate serial: 019B3945F6B00735A06D0B45F82DB41D2537 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft Manifest number: 063C Signing time: Sat 20 Dec 2025 01:00:44 +0000 Manifest this update: Sat 20 Dec 2025 01:00:44 +0000 Manifest next update: Sun 21 Dec 2025 01:00:44 +0000 Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: WeQxwfk7TJoXZA60H9I3BOdeuj7YKPmq0QcazYzkOoA=) 2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:45:f6:b0:07:35:a0:6d:0b:45:f8:2d:b4:1d:25:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f Validity Not Before: Dec 20 01:00:44 2025 GMT Not After : Dec 21 01:00:44 2025 GMT Subject: CN=eca7b8e7a2825427efffc5dcfdd1cfb531fe146e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:24:f6:98:91:6b:69:09:c7:34:25:27:44:05: 30:e8:cc:99:c2:4b:55:40:31:4c:74:9f:c0:05:18: 52:fc:cb:00:13:88:7f:12:49:f1:42:e6:e7:a8:4c: af:10:46:d9:1e:3e:8d:f3:7e:c5:da:6f:a8:7b:53: 37:1b:a3:2b:48:4f:91:40:b1:74:57:2a:01:27:95: f5:0f:3e:89:5f:ab:6a:ce:77:a7:8e:72:9f:4f:99: 93:ed:a2:01:74:5d:4d:34:6d:c5:04:07:6e:8b:12: 0a:71:08:a1:02:71:bb:77:c9:65:69:cf:c2:57:9a: e9:26:ec:83:97:5a:60:0d:d2:86:c2:64:23:c9:b4: b8:ac:31:e0:5d:46:6d:9b:59:f8:47:52:58:99:71: 4a:f4:4d:e1:38:b9:9b:c1:80:d9:51:bc:30:b0:6d: 99:8e:50:55:f4:98:97:91:d3:53:b2:01:11:ef:81: 28:7b:3d:41:01:92:41:ac:7a:70:00:1f:08:f7:6d: 9b:42:e8:78:49:4d:5d:c5:77:83:11:d7:9b:7d:de: 92:a1:74:79:b2:f3:02:93:5c:a2:82:8c:78:f7:38: 2d:b1:fc:6d:a0:fc:7e:ba:04:da:3e:69:99:59:4f: c6:ab:b0:65:81:fb:b6:c9:15:cb:4c:32:5e:74:0a: a8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A7:B8:E7:A2:82:54:27:EF:FF:C5:DC:FD:D1:CF:B5:31:FE:14:6E X509v3 Authority Key Identifier: keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:99:75:bc:7e:a4:47:86:08:26:65:d1:78:32:27:bf:29:6b: b6:f0:0d:00:63:92:84:45:ce:be:79:e1:73:2d:81:73:41:43: 80:82:c4:32:57:85:0d:64:a5:03:8d:9a:bc:d9:b2:1c:7f:c9: 00:e7:51:5e:94:32:de:51:c7:27:8b:f8:18:db:ef:b9:09:df: 51:1a:bf:67:9f:a6:4e:f9:64:48:99:49:35:d7:56:e2:08:de: 94:d6:ca:19:a0:a4:0a:9e:f7:10:4e:8b:a2:d4:d0:c9:0d:32: 17:32:47:04:d7:9e:7b:e6:75:10:c3:06:d0:e0:ab:9f:0b:41: 6a:76:f1:53:c8:ee:48:99:69:5c:75:3f:79:43:83:95:78:71: 8e:b0:95:b5:4e:0f:5f:06:f2:d8:cb:61:10:38:62:8c:82:21: cc:d3:d3:fe:33:4f:b9:1c:89:70:05:35:5c:b8:6e:52:91:49: e0:79:ad:62:50:92:5d:05:dd:5b:71:bf:5e:d2:bc:fc:cc:db: 97:99:e0:9e:c2:22:c0:ac:2b:0b:f7:99:a5:ea:a8:e4:b7:96: 5e:8c:2b:34:ba:44:4f:47:88:41:63:30:91:7b:9c:d1:8a:26: 71:e7:c9:1f:72:76:8b:44:f3:9e:b1:c1:c4:b6:37:f1:b1:b8: 0f:ea:63:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RfawBzWgbQtF+C20HSU3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTE3MjgxYWNmOTZkMzhlNzlhMzVjOGJlYjY4YjhjMDU5 NzlhNmYwHhcNMjUxMjIwMDEwMDQ0WhcNMjUxMjIxMDEwMDQ0WjAzMTEwLwYDVQQD EyhlY2E3YjhlN2EyODI1NDI3ZWZmZmM1ZGNmZGQxY2ZiNTMxZmUxNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiT2mJFraQnHNCUnRAUw6MyZwktV QDFMdJ/ABRhS/MsAE4h/EknxQubnqEyvEEbZHj6N837F2m+oe1M3G6MrSE+RQLF0 VyoBJ5X1Dz6JX6tqznenjnKfT5mT7aIBdF1NNG3FBAduixIKcQihAnG7d8llac/C V5rpJuyDl1pgDdKGwmQjybS4rDHgXUZtm1n4R1JYmXFK9E3hOLmbwYDZUbwwsG2Z jlBV9JiXkdNTsgER74Eoez1BAZJBrHpwAB8I922bQuh4SU1dxXeDEdebfd6SoXR5 svMCk1yigox49zgtsfxtoPx+ugTaPmmZWU/Gq7Blgfu2yRXLTDJedAqokwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOynuOeiglQn7//F3P3Rz7Ux/hRuMB8GA1UdIwQY MBaAFBpRcoGs+W0455o1yL62i4wFl5pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUt NzAyNzI2ODhlOTcwLzEvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUtNzAyNzI2ODhlOTcw LzEvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5l1vH6k R4YIJmXReDInvylrtvANAGOShEXOvnnhcy2Bc0FDgILEMleFDWSlA42avNmyHH/J AOdRXpQy3lHHJ4v4GNvvuQnfURq/Z5+mTvlkSJlJNddW4gjelNbKGaCkCp73EE6L otTQyQ0yFzJHBNeee+Z1EMMG0OCrnwtBanbxU8juSJlpXHU/eUODlXhxjrCVtU4P Xwby2MthEDhijIIhzNPT/jNPuRyJcAU1XLhuUpFJ4HmtYlCSXQXdW3G/XtK8/Mzb l5ngnsIiwKwrC/eZpeqo5LeWXowrNLpET0eIQWMwkXuc0YomcefJH3J2i0TznrHB xLY38bG4D+pjVw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:49:43 2025 by rpki-client