This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json) Hash identifier: NcNCH+gUL6iiV1mU/tCH9EnirgCx0jExP6ONt0HBEbY= Subject key identifier: 7D:64:A0:C6:82:8B:70:BE:8E:B5:A1:71:E1:4E:FF:01:10:73:FC:60 Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510 Certificate serial: 019B210730EC6656EF3B453D52800767BF67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft Manifest number: 0640 Signing time: Mon 15 Dec 2025 08:01:17 +0000 Manifest this update: Mon 15 Dec 2025 08:01:17 +0000 Manifest next update: Tue 16 Dec 2025 08:01:17 +0000 Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: f2nk1I17f1G7sW57vNzGIT0E/8HNddxYWLt7QlnoJVk=) 2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:30:ec:66:56:ef:3b:45:3d:52:80:07:67:bf:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510 Validity Not Before: Dec 15 08:01:17 2025 GMT Not After : Dec 16 08:01:17 2025 GMT Subject: CN=7d64a0c6828b70be8eb5a171e14eff011073fc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4d:7d:b5:f4:71:17:72:21:de:76:54:56:e9: b5:f0:9f:fe:74:db:ce:63:ba:6c:9f:9f:f4:d7:76: 76:2c:5b:2f:dd:31:25:fc:40:55:08:20:8f:43:e0: 3f:7b:40:4e:f0:20:84:19:85:1b:5f:0e:3a:f4:0f: 95:20:2f:eb:f4:d2:ca:46:27:47:8d:4c:21:35:f6: 29:71:fb:b6:82:bb:39:56:19:cf:1d:4d:49:e1:a0: 54:0c:93:f4:31:d9:2f:4f:0e:af:a1:04:76:be:17: 56:58:a8:f2:39:95:90:34:5e:88:e7:4f:80:6d:e5: 37:80:a7:38:b7:81:34:ef:b1:a0:76:29:dd:85:d3: c5:b3:95:1b:1b:80:c0:3a:f7:43:d2:2f:f8:09:3f: 0c:46:88:aa:8a:3f:74:29:7c:78:7a:0a:6e:66:cf: 15:73:c2:10:7f:c0:0a:84:9f:bc:f0:cd:ba:c3:b9: dd:2e:fc:74:b2:88:87:71:7a:b7:07:39:8e:fe:3e: 84:8b:4c:31:82:98:96:76:40:15:46:38:8d:f8:29: e1:ae:cb:14:c3:8c:2a:94:e0:98:11:2a:ad:3d:6c: 21:08:e1:47:a8:d7:75:4d:08:4d:e9:9f:12:db:09: c7:53:e9:a5:7e:4e:64:59:c9:0a:29:72:3a:e5:f5: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:64:A0:C6:82:8B:70:BE:8E:B5:A1:71:E1:4E:FF:01:10:73:FC:60 X509v3 Authority Key Identifier: keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:35:31:bb:ed:54:8f:20:c4:c6:24:81:57:1d:87:89:06:a2: bc:42:a3:2c:36:a1:51:f7:18:85:ec:e2:95:02:29:e1:af:83: 87:97:da:8e:49:53:7c:b5:f9:ea:32:fa:40:6a:67:a1:ce:a8: fb:cc:e0:ea:53:d8:45:8d:09:bb:41:72:e8:0c:39:a9:bd:12: 4e:41:99:88:c3:59:a3:f8:d6:d5:fe:62:71:a5:0d:1f:9c:bc: fc:81:ae:98:90:82:7d:9d:dd:7a:22:2c:04:54:ee:4a:20:73: 56:28:f9:fc:5b:6c:e0:6b:c9:af:90:5a:35:5b:7e:8e:12:32: 1f:11:8e:ee:a7:53:38:b1:e2:33:f3:a7:18:20:e9:99:cb:85: 56:1e:c2:68:ab:2b:b7:46:13:91:1d:b6:8d:16:75:d9:2e:df: 0b:9c:bd:c3:bf:eb:bb:15:f3:33:43:92:4c:57:c7:7c:65:62: 88:da:7f:bc:40:db:26:89:ed:dc:f2:ba:95:3d:ec:f5:4d:7a: 18:42:bb:63:91:38:39:ac:6b:bc:44:7e:a3:e6:8e:55:60:06: 5d:a7:cd:e0:38:40:d9:c2:25:e9:42:8f:48:f4:64:42:21:0e: 7f:a0:66:70:d4:7f:ad:8b:93:8c:db:a9:5b:c1:db:ed:a6:28: 4c:2b:23:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBzDsZlbvO0U9UoAHZ79nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTJjNGMzNzIzMjdmZGMyYzE3YjQ5NWI4NTg5MWE3NmRl NDI1MTAwHhcNMjUxMjE1MDgwMTE3WhcNMjUxMjE2MDgwMTE3WjAzMTEwLwYDVQQD Eyg3ZDY0YTBjNjgyOGI3MGJlOGViNWExNzFlMTRlZmYwMTEwNzNmYzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm019tfRxF3Ih3nZUVum18J/+dNvO Y7psn5/013Z2LFsv3TEl/EBVCCCPQ+A/e0BO8CCEGYUbXw469A+VIC/r9NLKRidH jUwhNfYpcfu2grs5VhnPHU1J4aBUDJP0MdkvTw6voQR2vhdWWKjyOZWQNF6I50+A beU3gKc4t4E077GgdindhdPFs5UbG4DAOvdD0i/4CT8MRoiqij90KXx4egpuZs8V c8IQf8AKhJ+88M26w7ndLvx0soiHcXq3BzmO/j6Ei0wxgpiWdkAVRjiN+CnhrssU w4wqlOCYESqtPWwhCOFHqNd1TQhN6Z8S2wnHU+mlfk5kWckKKXI65fVqFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1koMaCi3C+jrWhceFO/wEQc/xgMB8GA1UdIwQY MBaAFIJSxMNyMn/cLBe0lbhYkadt5CUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUt ZmVlMWQwMmYxMzAzLzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUtZmVlMWQwMmYxMzAz LzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTUxu+1U jyDExiSBVx2HiQaivEKjLDahUfcYhezilQIp4a+Dh5fajklTfLX56jL6QGpnoc6o +8zg6lPYRY0Ju0Fy6Aw5qb0STkGZiMNZo/jW1f5icaUNH5y8/IGumJCCfZ3deiIs BFTuSiBzVij5/Fts4GvJr5BaNVt+jhIyHxGO7qdTOLHiM/OnGCDpmcuFVh7CaKsr t0YTkR22jRZ12S7fC5y9w7/ruxXzM0OSTFfHfGViiNp/vEDbJont3PK6lT3s9U16 GEK7Y5E4OaxrvER+o+aOVWAGXafN4DhA2cIl6UKPSPRkQiEOf6BmcNR/rYuTjNup W8Hb7aYoTCsjYA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:47 2025 by rpki-client