This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft File: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft (raw, json) Hash identifier: JD1g771LRXMMJShHLunmtbDfEYua7Tk2kOeZnXzzfuk= Subject key identifier: C4:8E:5C:6C:92:C2:48:1F:24:3F:C0:A1:26:A4:39:4B:A9:DA:7C:38 Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53 Certificate issuer: /CN=813e051cb831d1989607bb76c0bc5693ff947b53 Certificate serial: 019B36451BE5B6460734009BA475AB4AE3F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft Manifest number: 1791 Signing time: Fri 19 Dec 2025 11:00:57 +0000 Manifest this update: Fri 19 Dec 2025 11:00:57 +0000 Manifest next update: Sat 20 Dec 2025 11:00:57 +0000 Files and hashes: 1: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl (hash: Ys5qMIAf7ne00TC6UA9Tf2o2hWE2NZe17s9piebVrcw=) 2: x_N3hpJtRSPWEjO0n6o6sQry1Jg.roa (hash: L4PUkpr3w+Sn4bU/wKaWhl8LERzOZYhflR9066iKXwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:1b:e5:b6:46:07:34:00:9b:a4:75:ab:4a:e3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53 Validity Not Before: Dec 19 11:00:57 2025 GMT Not After : Dec 20 11:00:57 2025 GMT Subject: CN=c48e5c6c92c2481f243fc0a126a4394ba9da7c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d1:1f:c2:6b:60:c2:63:94:d6:03:12:9a:49: 7a:73:e9:61:e8:e3:ee:5b:5a:76:7a:3e:c0:3f:65: 68:bb:ea:41:72:0f:d5:70:fb:dc:84:5a:b1:1d:e2: b1:d8:13:a8:61:63:72:f9:19:df:a8:77:23:53:1c: 00:52:ac:22:ce:75:99:3e:d6:a2:56:4f:f0:f7:86: 7b:64:ff:af:f3:07:fb:3a:13:60:76:59:04:20:9e: 10:90:7a:a7:31:1f:e2:4a:6f:76:cd:52:09:57:b0: c7:a6:c4:22:96:01:93:e4:cf:5d:8c:86:40:9f:9e: 29:5e:ce:ec:f3:8e:f8:a0:73:5f:6e:d6:0a:32:27: 2e:71:7c:bb:08:0c:af:b7:c5:51:0c:3c:90:fd:cd: 38:97:41:de:94:53:52:b7:66:7e:68:f3:e0:f9:db: b4:6f:36:74:57:11:d7:1c:12:e0:7b:7d:95:7c:88: 18:e9:17:ea:04:12:6c:17:32:e2:8b:83:3b:93:af: c1:2e:ad:29:db:d6:cb:a1:45:8c:dc:3b:ef:4c:c7: b6:df:b7:ee:50:6e:1c:84:81:fa:ca:98:5d:31:da: ed:ec:06:91:e5:b9:00:f5:62:ce:0f:97:27:f8:c8: 5c:55:ef:cf:a2:65:e0:a1:aa:aa:c2:0a:b6:e8:b7: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8E:5C:6C:92:C2:48:1F:24:3F:C0:A1:26:A4:39:4B:A9:DA:7C:38 X509v3 Authority Key Identifier: keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4a:97:38:08:ae:0b:50:97:65:31:da:33:bc:7a:50:b4:05: ec:bc:c6:bd:ed:26:15:64:59:b8:1a:47:e8:16:53:5d:01:c6: 3c:ff:8d:ad:16:c4:93:2b:31:78:a2:1e:c3:47:ba:f6:79:82: a3:7d:ce:90:7d:2d:b8:2a:96:90:26:24:62:25:48:16:7f:84: 74:37:f9:d6:2a:0c:b5:87:5e:47:a3:73:bb:70:45:b3:e1:6b: e1:95:f8:bb:43:2f:8f:e6:d4:dc:20:47:95:fe:26:12:91:cd: b1:bf:8c:78:80:d4:03:52:33:d9:4e:63:5d:91:d7:f0:7a:35: 92:7f:51:6c:a8:9c:28:36:8b:52:a9:aa:9c:a0:c3:99:b3:ec: 72:62:5a:1b:50:f0:02:04:50:b6:c7:d6:ac:76:da:77:b2:45: 28:75:9f:0e:fd:cf:82:93:9b:8f:3f:a5:db:5b:97:56:a3:3b: 67:b3:06:a7:a4:b4:a5:52:1f:64:3d:34:1e:49:ca:bd:4b:f0: 14:73:ac:07:0d:c8:6f:1f:d8:2a:d3:d9:c2:13:65:68:ab:a7: 8f:e0:01:88:b7:da:65:6f:17:73:e3:0c:60:c3:71:94:71:9c: 60:8e:f8:d2:88:bc:35:13:fb:cd:d8:70:d2:96:26:c1:5f:79: 79:99:e2:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RRvltkYHNACbpHWrSuP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxM2UwNTFjYjgzMWQxOTg5NjA3YmI3NmMwYmM1NjkzZmY5 NDdiNTMwHhcNMjUxMjE5MTEwMDU3WhcNMjUxMjIwMTEwMDU3WjAzMTEwLwYDVQQD EyhjNDhlNWM2YzkyYzI0ODFmMjQzZmMwYTEyNmE0Mzk0YmE5ZGE3YzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99EfwmtgwmOU1gMSmkl6c+lh6OPu W1p2ej7AP2Vou+pBcg/VcPvchFqxHeKx2BOoYWNy+RnfqHcjUxwAUqwiznWZPtai Vk/w94Z7ZP+v8wf7OhNgdlkEIJ4QkHqnMR/iSm92zVIJV7DHpsQilgGT5M9djIZA n54pXs7s8474oHNfbtYKMicucXy7CAyvt8VRDDyQ/c04l0HelFNSt2Z+aPPg+du0 bzZ0VxHXHBLge32VfIgY6RfqBBJsFzLii4M7k6/BLq0p29bLoUWM3DvvTMe237fu UG4chIH6yphdMdrt7AaR5bkA9WLOD5cn+MhcVe/PomXgoaqqwgq26LeAkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSOXGySwkgfJD/AoSakOUup2nw4MB8GA1UdIwQY MBaAFIE+BRy4MdGYlge7dsC8VpP/lHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQt ZjU3N2FhNDZkZTgzLzEvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQtZjU3N2FhNDZkZTgz LzEvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkqXOAiu C1CXZTHaM7x6ULQF7LzGve0mFWRZuBpH6BZTXQHGPP+NrRbEkysxeKIew0e69nmC o33OkH0tuCqWkCYkYiVIFn+EdDf51ioMtYdeR6Nzu3BFs+Fr4ZX4u0Mvj+bU3CBH lf4mEpHNsb+MeIDUA1Iz2U5jXZHX8Ho1kn9RbKicKDaLUqmqnKDDmbPscmJaG1Dw AgRQtsfWrHbad7JFKHWfDv3PgpObjz+l21uXVqM7Z7MGp6S0pVIfZD00HknKvUvw FHOsBw3Ibx/YKtPZwhNlaKunj+ABiLfaZW8Xc+MMYMNxlHGcYI740oi8NRP7zdhw 0pYmwV95eZnikQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:35:14 2025 by rpki-client