This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft File: xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json) Hash identifier: 5ZXmQcv+5uAbkzmEMXXssa5CdlzUdwzogvplC4qdVCs= Subject key identifier: 67:0B:08:1B:44:55:46:DD:23:63:3E:D1:7B:6B:1C:84:C9:86:14:43 Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A Certificate issuer: /CN=c46825cc10e4c22b385c4a37af90f30b6881411a Certificate serial: 019B243ECC813AF68B7BBCFAD9667866A578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft Manifest number: 0855 Signing time: Mon 15 Dec 2025 23:00:53 +0000 Manifest this update: Mon 15 Dec 2025 23:00:53 +0000 Manifest next update: Tue 16 Dec 2025 23:00:53 +0000 Files and hashes: 1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: xITni8guRNlug+1BU/5rnBv1uNIiCR3EUTyR9luYkj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:cc:81:3a:f6:8b:7b:bc:fa:d9:66:78:66:a5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a Validity Not Before: Dec 15 23:00:53 2025 GMT Not After : Dec 16 23:00:53 2025 GMT Subject: CN=670b081b445546dd23633ed17b6b1c84c9861443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:6e:31:b7:34:34:4e:48:ed:68:82:9f:ee: 7d:17:42:29:53:e7:40:cf:e4:4e:8a:f4:9a:d8:9f: a2:af:fe:4c:78:4e:fa:cb:70:c4:d5:a6:18:64:97: 8b:57:1c:2c:55:07:4c:96:27:3e:b4:b6:73:33:43: 00:fd:d1:f9:5b:96:96:83:4b:0c:13:4f:87:13:6e: 5f:4d:1c:39:04:bd:09:ea:2d:21:5c:a0:6a:9e:15: 2d:6f:3d:dd:2e:13:e6:42:d0:33:8c:bb:8e:b0:da: ff:f9:88:9f:cb:52:26:fe:e9:fe:1f:65:76:40:f8: 1d:7c:c8:6e:a1:09:67:ee:2d:47:7b:b7:e7:d1:58: 7a:5f:db:32:46:2b:b9:10:50:db:ef:d2:b5:16:99: 0c:16:1c:9e:ff:2c:7a:c3:43:5f:4a:37:76:aa:14: e4:13:ac:de:14:bb:55:b2:df:7f:67:b3:cb:55:e0: 1b:93:89:d8:d1:19:f1:64:35:8b:db:c6:c1:22:90: 97:a3:49:4f:82:32:3f:88:5e:b3:b7:31:22:e5:5a: e4:1c:66:07:43:4a:41:10:66:4a:79:02:f5:6b:b9: b4:a2:b3:ed:c7:fa:57:c4:63:8c:3c:43:f5:85:08: 3d:fc:09:d9:42:f9:0d:3a:ab:7b:02:53:e7:ce:7c: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0B:08:1B:44:55:46:DD:23:63:3E:D1:7B:6B:1C:84:C9:86:14:43 X509v3 Authority Key Identifier: keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:83:e2:a4:87:54:a4:98:c7:09:62:53:9e:97:75:36:4f:4e: a3:e4:f8:9a:d2:2b:ad:1b:a5:b9:3b:9a:ec:38:39:6e:e8:23: e0:8e:f8:c9:d6:0b:cb:c7:2f:39:79:5d:9e:7a:16:19:b0:49: 53:ff:7e:c9:0a:b4:03:5c:73:3c:9d:82:3d:8a:b1:e4:af:df: 43:b7:8a:62:4d:8b:7b:e1:ef:6b:a9:e6:51:56:7f:02:27:51: 09:9a:0d:11:6a:1e:b9:cf:98:a6:d5:d8:03:22:24:d8:8e:cf: 04:d7:d2:a2:69:8f:96:19:0f:c4:6a:85:ac:e2:c0:eb:f6:cc: 33:61:3f:75:99:8a:a7:6d:ae:42:99:02:1b:b7:0c:15:06:0c: 44:fa:46:3f:33:61:11:f4:4d:22:51:41:4a:ae:69:51:42:8f: e3:38:e7:7c:b1:5a:b5:fc:af:a7:5b:88:7a:66:2b:a7:ae:08: d6:6c:7d:c6:c3:69:4e:ed:28:b1:cc:f1:fd:e7:9e:3b:96:17: 80:c1:15:c8:a0:f5:8f:52:e4:06:30:4f:a7:78:01:43:91:06: e2:b1:c0:f6:1f:35:8c:ae:28:a4:f9:f9:82:3b:c4:c3:1c:8e: c5:d1:d5:37:38:2b:3f:7c:58:85:2a:af:f2:be:a7:8b:d2:fd: 55:62:84:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPsyBOvaLe7z62WZ4ZqV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NjgyNWNjMTBlNGMyMmIzODVjNGEzN2FmOTBmMzBiNjg4 MTQxMWEwHhcNMjUxMjE1MjMwMDUzWhcNMjUxMjE2MjMwMDUzWjAzMTEwLwYDVQQD Eyg2NzBiMDgxYjQ0NTU0NmRkMjM2MzNlZDE3YjZiMWM4NGM5ODYxNDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstxuMbc0NE5I7WiCn+59F0IpU+dA z+ROivSa2J+ir/5MeE76y3DE1aYYZJeLVxwsVQdMlic+tLZzM0MA/dH5W5aWg0sM E0+HE25fTRw5BL0J6i0hXKBqnhUtbz3dLhPmQtAzjLuOsNr/+Yify1Im/un+H2V2 QPgdfMhuoQln7i1He7fn0Vh6X9syRiu5EFDb79K1FpkMFhye/yx6w0NfSjd2qhTk E6zeFLtVst9/Z7PLVeAbk4nY0RnxZDWL28bBIpCXo0lPgjI/iF6ztzEi5VrkHGYH Q0pBEGZKeQL1a7m0orPtx/pXxGOMPEP1hQg9/AnZQvkNOqt7AlPnznwbZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcLCBtEVUbdI2M+0XtrHITJhhRDMB8GA1UdIwQY MBaAFMRoJcwQ5MIrOFxKN6+Q8wtogUEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82YTE4MDgtNmZiOC00NWM4LTk1NGUt ZDU0OTY5NWU0MzNjLzEveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS82YTE4MDgtNmZiOC00NWM4LTk1NGUtZDU0OTY5NWU0MzNj LzEveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4PipIdU pJjHCWJTnpd1Nk9Oo+T4mtIrrRuluTua7Dg5bugj4I74ydYLy8cvOXldnnoWGbBJ U/9+yQq0A1xzPJ2CPYqx5K/fQ7eKYk2Le+Hva6nmUVZ/AidRCZoNEWoeuc+YptXY AyIk2I7PBNfSommPlhkPxGqFrOLA6/bMM2E/dZmKp22uQpkCG7cMFQYMRPpGPzNh EfRNIlFBSq5pUUKP4zjnfLFatfyvp1uIemYrp64I1mx9xsNpTu0osczx/eeeO5YX gMEVyKD1j1LkBjBPp3gBQ5EG4rHA9h81jK4opPn5gjvEwxyOxdHVNzgrP3xYhSqv 8r6ni9L9VWKEEQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:34:51 2025 by rpki-client