This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json) Hash identifier: qxspQpQOsgXvfizqMAQ4nRlop5FGzNuA3Nwdqfuiv+Q= Subject key identifier: BD:69:0E:3A:18:E3:19:8D:2B:74:C1:6A:C6:EC:7E:ED:B0:50:DB:8D Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6 Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6 Certificate serial: 019B2551BB0701BA082FC62A635509316308 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft Manifest number: 1595 Signing time: Tue 16 Dec 2025 04:01:11 +0000 Manifest this update: Tue 16 Dec 2025 04:01:11 +0000 Manifest next update: Wed 17 Dec 2025 04:01:11 +0000 Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: 1RUOoyy9oK/2mtPu9TNkPdvJfHVdvgq7JO9z/qQmXw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:bb:07:01:ba:08:2f:c6:2a:63:55:09:31:63:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6 Validity Not Before: Dec 16 04:01:11 2025 GMT Not After : Dec 17 04:01:11 2025 GMT Subject: CN=bd690e3a18e3198d2b74c16ac6ec7eedb050db8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:c4:15:5a:b0:04:19:35:4f:79:82:25:c7: 83:d3:af:d3:47:9b:63:74:b2:e0:5c:8f:e6:c7:e3: cc:09:f6:c0:dd:5c:f8:23:30:40:45:1c:3f:06:e0: 53:37:bb:25:d2:20:3b:b1:53:03:d6:7d:4e:c2:78: ed:6b:77:91:61:2e:da:cc:9e:02:cb:33:11:07:b6: 53:7d:77:a6:84:65:a6:07:24:96:af:16:7d:de:5b: fe:9e:b2:b7:2c:d0:2a:ec:71:2a:86:46:fc:66:ca: 45:a0:68:57:b0:86:42:92:1e:76:4f:d8:a3:fb:d4: 9d:8d:8e:2c:d7:4c:a2:11:b1:ba:f4:90:70:ea:7c: c9:53:ba:c5:95:e4:5b:a3:67:25:5d:76:f5:99:5c: 7e:41:b6:df:8e:de:ce:52:fc:03:a1:1d:a2:50:42: 5f:50:13:2c:61:e1:de:b4:fe:e0:fb:4f:90:3d:49: 8f:04:14:4d:1f:09:69:eb:72:c8:77:9e:25:8e:d2: 35:70:8f:90:1b:a0:bb:85:c1:ef:b9:74:a1:33:87: a3:05:6f:24:52:a1:16:21:6b:3d:36:f7:e7:11:cd: d8:1d:c6:d8:3f:a0:b1:cb:34:2d:79:a2:5a:2d:f8: 46:7e:24:a0:6e:96:4e:9e:ed:ed:ed:25:ec:a8:c6: 5c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:69:0E:3A:18:E3:19:8D:2B:74:C1:6A:C6:EC:7E:ED:B0:50:DB:8D X509v3 Authority Key Identifier: keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ca:1d:69:c4:23:b9:3b:ca:a1:cb:35:48:a7:3d:bd:95:63: bd:ea:c7:b9:e9:5d:76:7a:a8:cb:5c:41:4b:a9:a5:52:45:1e: 43:e8:ca:4c:b5:58:85:db:0b:64:11:ca:08:3f:64:2a:57:ff: e9:c6:51:7f:92:60:b3:82:f7:7a:1a:40:8c:15:95:eb:6c:7f: 80:3a:65:eb:d4:07:18:6b:aa:7e:3b:a3:a0:c2:38:9b:0e:70: 44:a9:c2:46:3d:9a:f9:02:f6:cc:01:e0:cc:b9:4f:34:47:46: 04:9a:55:2f:78:df:db:e9:fa:8a:6f:44:84:f9:f0:81:52:88: 0e:37:4d:56:2b:1d:08:a2:a7:03:f8:b5:55:6a:f2:11:c1:50: 8e:26:d0:59:9c:10:96:cf:ca:b3:45:f0:ea:de:93:7f:4f:47: aa:10:e4:8a:9e:a0:c1:4e:b4:7a:0b:92:09:86:0e:c1:1e:c3: 3a:a0:d0:0e:c8:21:ad:84:c7:83:bd:df:e7:bc:07:3a:c6:50: b4:a3:93:d3:98:ec:50:56:e1:0e:a0:6a:38:cd:08:4d:13:ad: 9c:a2:aa:5b:c0:3e:9f:c0:80:98:0f:d5:8b:b0:7f:bf:b8:29: 03:c8:01:4d:68:e9:7b:85:86:5e:9e:10:fa:d1:6e:ee:6b:d8: dd:18:ea:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUbsHAboIL8YqY1UJMWMIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZDU1N2E4ODY4ZTZkMjYxNmFkMzY3NTRkYzZkYzkxMmI3 Y2Q3ZDYwHhcNMjUxMjE2MDQwMTExWhcNMjUxMjE3MDQwMTExWjAzMTEwLwYDVQQD EyhiZDY5MGUzYTE4ZTMxOThkMmI3NGMxNmFjNmVjN2VlZGIwNTBkYjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qfEFVqwBBk1T3mCJceD06/TR5tj dLLgXI/mx+PMCfbA3Vz4IzBARRw/BuBTN7sl0iA7sVMD1n1Ownjta3eRYS7azJ4C yzMRB7ZTfXemhGWmBySWrxZ93lv+nrK3LNAq7HEqhkb8ZspFoGhXsIZCkh52T9ij +9SdjY4s10yiEbG69JBw6nzJU7rFleRbo2clXXb1mVx+Qbbfjt7OUvwDoR2iUEJf UBMsYeHetP7g+0+QPUmPBBRNHwlp63LId54ljtI1cI+QG6C7hcHvuXShM4ejBW8k UqEWIWs9NvfnEc3YHcbYP6CxyzQteaJaLfhGfiSgbpZOnu3t7SXsqMZcNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1pDjoY4xmNK3TBasbsfu2wUNuNMB8GA1UdIwQY MBaAFIHVV6iGjm0mFq02dU3G3JErfNfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jOTIzM2MtMTI1Yi00YzU1LTkyNjgt ZGZiYTE1ZTRiN2E1LzEvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jOTIzM2MtMTI1Yi00YzU1LTkyNjgtZGZiYTE1ZTRiN2E1 LzEvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8odacQj uTvKocs1SKc9vZVjverHuelddnqoy1xBS6mlUkUeQ+jKTLVYhdsLZBHKCD9kKlf/ 6cZRf5Jgs4L3ehpAjBWV62x/gDpl69QHGGuqfjujoMI4mw5wRKnCRj2a+QL2zAHg zLlPNEdGBJpVL3jf2+n6im9EhPnwgVKIDjdNVisdCKKnA/i1VWryEcFQjibQWZwQ ls/Ks0Xw6t6Tf09HqhDkip6gwU60eguSCYYOwR7DOqDQDsghrYTHg73f57wHOsZQ tKOT05jsUFbhDqBqOM0ITROtnKKqW8A+n8CAmA/Vi7B/v7gpA8gBTWjpe4WGXp4Q +tFu7mvY3RjqXg== -----END CERTIFICATE-----Generated at Tue Dec 16 06:39:09 2025 by rpki-client