This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json) Hash identifier: gZ8oR4XEFVjPIDeezpZtlHQ5TWUtMCxDVjpWVTmS0+o= Subject key identifier: 04:63:3E:99:36:26:F5:C8:5F:42:93:DB:C3:25:0C:D7:E4:7E:C1:58 Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33 Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33 Certificate serial: 019B5A5227AE7F68A9B2210799AF0F9BBFC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft Manifest number: 05CE Signing time: Fri 26 Dec 2025 11:01:32 +0000 Manifest this update: Fri 26 Dec 2025 11:01:32 +0000 Manifest next update: Sat 27 Dec 2025 11:01:32 +0000 Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: R5NyHXlpgT91gCe6HEo+EmWcXhgMqaAoNSTvBRXjBXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:27:ae:7f:68:a9:b2:21:07:99:af:0f:9b:bf:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33 Validity Not Before: Dec 26 11:01:32 2025 GMT Not After : Dec 27 11:01:32 2025 GMT Subject: CN=04633e993626f5c85f4293dbc3250cd7e47ec158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:32:14:c6:d0:63:21:2d:55:76:79:10:f3: 50:8b:36:33:ed:c1:4b:99:29:9a:3b:c0:c4:d1:7e: 01:59:62:d2:23:48:50:ec:a8:a8:10:a1:a0:68:99: ef:fb:f1:f3:4a:eb:32:91:4b:27:19:c1:22:3d:4a: 10:bc:99:fe:d9:2c:c0:61:c8:6b:6f:95:35:cc:11: 72:ac:55:8b:9f:58:8b:4e:ef:d6:6b:a4:9c:67:a7: 23:5d:d5:96:c9:6f:e2:f2:00:ff:cb:9b:62:a0:8f: 0f:0c:56:45:d0:b8:82:4c:03:9c:43:94:b5:d2:40: 68:aa:0b:5b:a8:ba:c8:dc:18:0f:fe:d4:f8:d6:dc: ef:6d:fb:2a:92:ba:cf:f5:43:7c:4b:96:45:1f:55: e9:fd:8a:f2:5e:55:f8:10:25:c6:9f:bb:c6:53:86: 10:3c:6f:db:5d:39:dc:f0:f7:b6:c5:1c:b5:f6:eb: 84:9d:fa:f0:00:f3:81:69:c6:d9:48:1d:db:cf:52: ad:a0:3a:42:c4:5c:5e:89:f4:36:f6:ea:10:d2:65: a7:75:23:3b:0c:bc:fc:4b:05:26:18:8f:c5:10:1d: 44:d3:e7:cd:72:a9:0f:3f:96:4c:d9:99:a5:69:42: a2:b8:3f:d0:73:2c:9c:c3:44:f6:92:c7:17:fd:86: a3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:63:3E:99:36:26:F5:C8:5F:42:93:DB:C3:25:0C:D7:E4:7E:C1:58 X509v3 Authority Key Identifier: keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:49:1e:bb:98:25:36:ef:4f:f7:33:cf:15:c2:13:a1:0c:c9: 3d:a1:0a:18:e5:e9:9d:61:36:30:63:f9:34:ee:8e:a6:53:e2: 14:dd:8e:c3:86:b2:09:c0:36:2c:36:dd:6f:12:3a:9a:30:8f: 93:a7:e6:f4:b2:fa:18:fb:2d:e9:ee:c3:ba:42:27:18:6e:a7: 7b:48:a0:8d:0b:df:54:2c:2a:5a:37:4c:28:29:47:f8:e6:07: 71:7d:d9:b2:09:67:1a:90:84:07:32:0d:82:d0:02:9d:cb:aa: be:5a:66:ea:09:e7:1c:34:3e:0e:cd:f5:47:da:0b:a6:02:94: 54:80:cf:6f:29:e4:5f:be:90:e1:e3:68:51:3f:3a:60:6a:cd: 02:2d:5f:aa:c2:c5:8f:95:a0:84:ba:bf:89:cb:bf:77:e1:8f: 3a:fb:1c:b4:e7:6a:38:e2:96:c6:13:ac:91:1d:e5:25:3b:d2: 3d:71:52:38:9b:61:61:e0:08:3c:45:62:2c:6a:63:97:ea:29: f0:f0:8f:0e:e4:a2:0b:3f:ce:ee:19:4c:af:4c:26:e7:25:f0: 02:7b:5d:af:cb:5d:c7:f5:2f:fb:62:37:5f:2b:e7:9a:c2:c0: f7:64:9c:66:f7:d9:fc:3b:15:77:d7:04:0a:42:1e:4d:a4:bf: 7a:6f:58:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUieuf2ipsiEHma8Pm7/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZDRlYTQ0ZGU5ZTU5YTE3YzkyMmY2ZTA0MTcxM2JiYzRh ZjBhMzMwHhcNMjUxMjI2MTEwMTMyWhcNMjUxMjI3MTEwMTMyWjAzMTEwLwYDVQQD EygwNDYzM2U5OTM2MjZmNWM4NWY0MjkzZGJjMzI1MGNkN2U0N2VjMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05QyFMbQYyEtVXZ5EPNQizYz7cFL mSmaO8DE0X4BWWLSI0hQ7KioEKGgaJnv+/HzSusykUsnGcEiPUoQvJn+2SzAYchr b5U1zBFyrFWLn1iLTu/Wa6ScZ6cjXdWWyW/i8gD/y5tioI8PDFZF0LiCTAOcQ5S1 0kBoqgtbqLrI3BgP/tT41tzvbfsqkrrP9UN8S5ZFH1Xp/YryXlX4ECXGn7vGU4YQ PG/bXTnc8Pe2xRy19uuEnfrwAPOBacbZSB3bz1KtoDpCxFxeifQ29uoQ0mWndSM7 DLz8SwUmGI/FEB1E0+fNcqkPP5ZM2ZmlaUKiuD/Qcyycw0T2kscX/YajfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARjPpk2JvXIX0KT28MlDNfkfsFYMB8GA1UdIwQY MBaAFIHU6kTenlmhfJIvbgQXE7vErwozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUt MDMzMDQyZTg4ZDE4LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUtMDMzMDQyZTg4ZDE4 LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0keu5gl Nu9P9zPPFcIToQzJPaEKGOXpnWE2MGP5NO6OplPiFN2Ow4ayCcA2LDbdbxI6mjCP k6fm9LL6GPst6e7DukInGG6ne0igjQvfVCwqWjdMKClH+OYHcX3ZsglnGpCEBzIN gtACncuqvlpm6gnnHDQ+Ds31R9oLpgKUVIDPbynkX76Q4eNoUT86YGrNAi1fqsLF j5WghLq/icu/d+GPOvsctOdqOOKWxhOskR3lJTvSPXFSOJthYeAIPEViLGpjl+op 8PCPDuSiCz/O7hlMr0wm5yXwAntdr8tdx/Uv+2I3XyvnmsLA92ScZvfZ/DsVd9cE CkIeTaS/em9YgQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:20 2025 by rpki-client