This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json) Hash identifier: LA2O2lO4ZCMsn+KzZRJpT/ztdOf59+D3w1bBoHkILgc= Subject key identifier: 1F:33:2F:17:1C:A0:A8:DB:5F:FB:9C:99:49:35:C2:AD:74:B2:29:97 Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41 Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941 Certificate serial: 019B5975BA5AC7CFD3CDADBAA6188F4D88D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft Manifest number: 12DB Signing time: Fri 26 Dec 2025 07:00:46 +0000 Manifest this update: Fri 26 Dec 2025 07:00:46 +0000 Manifest next update: Sat 27 Dec 2025 07:00:46 +0000 Files and hashes: 1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: uHsvAMWC1np5rq/zxopX3GIu+mFh0IumHdroGfLkU3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:ba:5a:c7:cf:d3:cd:ad:ba:a6:18:8f:4d:88:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941 Validity Not Before: Dec 26 07:00:46 2025 GMT Not After : Dec 27 07:00:46 2025 GMT Subject: CN=1f332f171ca0a8db5ffb9c994935c2ad74b22997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e1:14:2a:41:a3:39:59:26:a0:d5:8d:de:98: 0d:79:dd:f7:25:f3:55:ca:e2:d0:de:bd:eb:d5:e9: 7d:cf:44:49:62:ef:37:86:b6:93:0f:f3:f8:c8:5d: df:2a:3a:9d:21:2f:da:9d:9b:77:29:1f:ea:5e:5e: 6e:96:65:c6:5b:11:28:9c:7a:5b:9c:6d:5b:ff:d4: ff:16:f8:53:77:35:d9:c8:b2:a4:04:80:20:eb:81: e6:e2:0d:76:fb:35:b9:31:d1:d7:f5:55:f0:3d:b2: 4d:c4:8d:e7:ea:57:0b:a4:a4:f3:31:23:d2:95:7f: 0a:62:7a:1b:1f:47:fb:b6:31:92:d6:67:ba:fd:e2: aa:14:44:6d:5a:7e:26:8c:e2:4c:ce:13:80:30:55: f7:92:ee:b6:ff:ab:63:d8:5f:7e:6b:90:5b:a8:6b: 16:95:75:e4:36:d2:50:b9:14:ac:f7:92:05:c3:49: a0:eb:81:63:46:00:e8:a2:b2:1e:f4:d1:51:ac:88: 63:47:ec:40:db:00:ef:dc:d6:5e:a3:f0:e7:0c:5c: 75:b5:97:04:f3:39:dc:dd:5b:f3:84:36:8c:a2:08: 6c:24:89:87:f3:1e:87:3e:66:99:96:41:91:56:b7: 87:4e:2d:3d:62:6b:93:93:cf:44:46:51:8c:45:60: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:33:2F:17:1C:A0:A8:DB:5F:FB:9C:99:49:35:C2:AD:74:B2:29:97 X509v3 Authority Key Identifier: keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:92:38:15:6e:78:5a:27:a2:59:a5:8c:c6:5e:7c:b4:f7:99: a8:75:b0:6b:62:f9:72:9c:e4:6a:ec:ee:c3:9f:ba:99:b9:a2: fb:fb:c0:55:cd:21:fc:07:e6:af:3a:48:77:42:2c:d9:1f:13: b6:dd:98:e1:a1:86:88:c0:03:48:c4:9a:16:8d:21:7e:92:52: 5c:76:82:8c:26:c9:0f:36:0d:47:9b:ca:55:66:8d:83:b5:e7: 68:83:bc:12:7f:c0:dd:fd:3a:dc:f6:90:80:bf:f8:c9:84:b5: 36:8f:a3:e8:b4:b5:e1:cf:aa:bf:bb:72:29:fd:12:7c:34:93: 73:5c:c1:7e:85:39:91:62:70:59:57:8e:30:91:e1:db:e3:e7: 48:c5:1c:44:08:9b:8d:77:72:ad:f4:04:c3:9d:5a:b8:26:6f: a7:e7:d9:ab:ff:af:cd:41:11:49:b0:79:15:4c:41:bf:d4:4c: 05:cd:e3:56:69:3e:07:03:54:98:cb:33:1f:81:ae:2c:f2:28: ba:71:b2:33:87:ac:d1:e0:21:a8:46:19:0e:fa:41:07:67:97: 46:8d:e7:37:1d:85:e7:b3:01:87:28:42:c1:ad:9d:d1:b1:74: d5:e6:de:ce:fc:78:02:ea:1a:b4:b3:d9:c7:e6:df:75:53:48: 87:4e:e9:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbpax8/Tza26phiPTYjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTc2M2Q0MWJiNTMzNTU4YTg1MjBkZTVhOTZlYjIyNTgw Njg5NDEwHhcNMjUxMjI2MDcwMDQ2WhcNMjUxMjI3MDcwMDQ2WjAzMTEwLwYDVQQD EygxZjMzMmYxNzFjYTBhOGRiNWZmYjljOTk0OTM1YzJhZDc0YjIyOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOEUKkGjOVkmoNWN3pgNed33JfNV yuLQ3r3r1el9z0RJYu83hraTD/P4yF3fKjqdIS/anZt3KR/qXl5ulmXGWxEonHpb nG1b/9T/FvhTdzXZyLKkBIAg64Hm4g12+zW5MdHX9VXwPbJNxI3n6lcLpKTzMSPS lX8KYnobH0f7tjGS1me6/eKqFERtWn4mjOJMzhOAMFX3ku62/6tj2F9+a5BbqGsW lXXkNtJQuRSs95IFw0mg64FjRgDoorIe9NFRrIhjR+xA2wDv3NZeo/DnDFx1tZcE 8znc3VvzhDaMoghsJImH8x6HPmaZlkGRVreHTi09YmuTk89ERlGMRWCkaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8zLxccoKjbX/ucmUk1wq10simXMB8GA1UdIwQY MBaAFBpXY9QbtTNVioUg3lqW6yJYBolBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yZWZmYmUtMTA5Yy00OTU2LWI0YTAt NGM4MzY1NTE1OTY1LzEvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yZWZmYmUtMTA5Yy00OTU2LWI0YTAtNGM4MzY1NTE1OTY1 LzEvR2xkajFCdTFNMVdLaFNEZVdwYnJJbGdHaVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzpI4FW54 WieiWaWMxl58tPeZqHWwa2L5cpzkauzuw5+6mbmi+/vAVc0h/AfmrzpId0Is2R8T tt2Y4aGGiMADSMSaFo0hfpJSXHaCjCbJDzYNR5vKVWaNg7XnaIO8En/A3f063PaQ gL/4yYS1No+j6LS14c+qv7tyKf0SfDSTc1zBfoU5kWJwWVeOMJHh2+PnSMUcRAib jXdyrfQEw51auCZvp+fZq/+vzUERSbB5FUxBv9RMBc3jVmk+BwNUmMszH4GuLPIo unGyM4es0eAhqEYZDvpBB2eXRo3nNx2F57MBhyhCwa2d0bF01ebezvx4AuoatLPZ x+bfdVNIh07pTg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:21 2025 by rpki-client