This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft File: GL7k74fvph6QWaCm44LeNxsnqkw.mft (raw, json) Hash identifier: kSF8hqqebq0X9BJKWGEA99qa3ofVujePVJs06Z/uIDU= Subject key identifier: 5F:D4:EB:BE:B5:29:BE:99:8F:D0:17:50:25:A0:B8:2E:37:EE:23:A7 Authority key identifier: 18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C Certificate issuer: /CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c Certificate serial: 019B5AF680C0E4DF8991435B92974A7DA2B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft Manifest number: 55 Signing time: Fri 26 Dec 2025 14:01:02 +0000 Manifest this update: Fri 26 Dec 2025 14:01:02 +0000 Manifest next update: Sat 27 Dec 2025 14:01:02 +0000 Files and hashes: 1: Br98s9QhRuoQDApiowG5mfMYnLk.roa (hash: 1ggPGATGp7/SUZxuPNOuKEEw9HCSv0c3nDbnGDK2jT0=) 2: GL7k74fvph6QWaCm44LeNxsnqkw.crl (hash: G3lwfMOODK/iGf0oQoKR7QsxWaU6RvpSwjk3qR4yX9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:80:c0:e4:df:89:91:43:5b:92:97:4a:7d:a2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c Validity Not Before: Dec 26 14:01:02 2025 GMT Not After : Dec 27 14:01:02 2025 GMT Subject: CN=5fd4ebbeb529be998fd0175025a0b82e37ee23a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:05:5c:15:61:2d:71:00:fd:27:59:7a:8d: 08:17:5e:eb:1c:93:82:e6:6f:86:3e:53:f1:0a:97: a4:6e:4d:c1:d8:72:02:71:43:6e:bd:ee:c3:ae:ad: 68:f8:71:c3:3d:c2:95:ec:94:a2:6b:3f:ca:db:49: ae:31:de:61:24:0d:dc:b6:24:d5:52:39:e0:0d:91: 47:9f:23:e0:41:5f:1e:d0:95:82:a9:1a:06:ee:03: 7b:2f:38:47:2e:cd:d9:e1:1d:5f:a8:3e:95:23:6c: 23:52:80:17:4d:8c:4d:6f:36:4b:9e:68:8a:5e:c4: f5:a8:9a:47:79:6f:81:b6:06:b9:9a:df:3b:e9:ea: f8:5b:a4:50:4c:fa:6a:3b:51:a1:fe:af:f6:fd:2a: 48:35:4d:79:43:4f:70:3d:47:0d:83:bf:85:b8:cc: 5f:d5:2b:7f:23:41:54:b7:dd:da:c7:d3:ff:ff:5b: 30:80:1e:47:c6:d8:75:4c:b1:f4:e5:5f:2e:a5:fa: 09:1f:b8:0a:33:17:07:2c:1b:dd:6c:1d:bb:0e:96: 46:81:8e:e9:07:9a:34:cd:1f:f1:ff:98:63:32:7a: f0:77:8f:cf:06:a2:07:d9:c3:ec:f1:47:09:84:81: 4c:f4:60:a9:f1:e7:75:83:4c:dd:ba:b0:02:4b:5a: 09:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D4:EB:BE:B5:29:BE:99:8F:D0:17:50:25:A0:B8:2E:37:EE:23:A7 X509v3 Authority Key Identifier: keyid:18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b9:6c:ad:e9:1a:ff:b2:e0:49:3a:8b:ea:ae:5f:bb:ca:f1: ca:7c:b0:b0:de:cb:cd:ac:77:3b:61:87:09:08:6b:ce:02:22: 7f:b1:cf:dc:7a:5f:22:80:0f:f1:95:19:fe:8b:70:9b:c3:c5: b8:e6:84:ac:5a:fc:8c:8a:33:72:38:a5:24:c6:24:e2:60:17: a7:83:94:1c:97:d8:be:2e:46:4a:28:a9:20:12:c0:19:1f:10: 9a:d8:1b:cb:43:85:42:f5:14:42:ac:8c:b2:9d:9a:8c:da:ad: 3f:68:97:16:2b:0e:c6:97:11:42:b3:51:22:e3:ee:12:bb:34: 1d:b0:13:c8:1b:f4:25:1e:c9:bc:0e:0c:60:bb:72:0a:27:9a: bd:c4:15:7b:25:5f:25:f4:48:0e:f5:6f:b2:35:23:bc:83:50: b6:88:7c:f2:25:10:2e:cc:84:4d:f0:8c:ed:32:e5:39:39:8d: 62:03:8e:2f:6d:9b:dd:63:4c:bf:df:22:94:c4:9c:65:2d:e0: da:80:a6:8e:3d:f9:a4:49:19:c7:9c:91:d8:f5:a6:f6:76:ed: c0:81:c2:3c:df:83:6d:4c:f9:90:5a:b0:f5:b6:3b:54:2d:67: 58:fc:c5:a0:f4:cb:c8:d0:bf:f3:be:25:45:65:ac:5b:bf:8d: eb:2f:3a:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9oDA5N+JkUNbkpdKfaKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YmVlNGVmODdlZmE2MWU5MDU5YTBhNmUzODJkZTM3MWIy N2FhNGMwHhcNMjUxMjI2MTQwMTAyWhcNMjUxMjI3MTQwMTAyWjAzMTEwLwYDVQQD Eyg1ZmQ0ZWJiZWI1MjliZTk5OGZkMDE3NTAyNWEwYjgyZTM3ZWUyM2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvoFXBVhLXEA/SdZeo0IF17rHJOC 5m+GPlPxCpekbk3B2HICcUNuve7Drq1o+HHDPcKV7JSiaz/K20muMd5hJA3ctiTV UjngDZFHnyPgQV8e0JWCqRoG7gN7LzhHLs3Z4R1fqD6VI2wjUoAXTYxNbzZLnmiK XsT1qJpHeW+Btga5mt876er4W6RQTPpqO1Gh/q/2/SpINU15Q09wPUcNg7+FuMxf 1St/I0FUt93ax9P//1swgB5Hxth1TLH05V8upfoJH7gKMxcHLBvdbB27DpZGgY7p B5o0zR/x/5hjMnrwd4/PBqIH2cPs8UcJhIFM9GCp8ed1g0zdurACS1oJCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/U6761Kb6Zj9AXUCWguC437iOnMB8GA1UdIwQY MBaAFBi+5O+H76YekFmgpuOC3jcbJ6pMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80YTRkNDItNDQzYy00NzFkLWExNTMt MTMyODg1YzkwMmIxLzEvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS80YTRkNDItNDQzYy00NzFkLWExNTMtMTMyODg1YzkwMmIx LzEvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrlsreka /7LgSTqL6q5fu8rxynywsN7Lzax3O2GHCQhrzgIif7HP3HpfIoAP8ZUZ/otwm8PF uOaErFr8jIozcjilJMYk4mAXp4OUHJfYvi5GSiipIBLAGR8Qmtgby0OFQvUUQqyM sp2ajNqtP2iXFisOxpcRQrNRIuPuErs0HbATyBv0JR7JvA4MYLtyCieavcQVeyVf JfRIDvVvsjUjvINQtoh88iUQLsyETfCM7TLlOTmNYgOOL22b3WNMv98ilMScZS3g 2oCmjj35pEkZx5yR2PWm9nbtwIHCPN+DbUz5kFqw9bY7VC1nWPzFoPTLyNC/874l RWWsW7+N6y86gQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:35 2025 by rpki-client