This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json) Hash identifier: HilIeLHzTaBCVIqW5VpbFUB9NdKzlMkb9JaoWYPnLuA= Subject key identifier: B2:B2:5D:1D:6D:B4:AD:D7:29:4E:4B:F5:ED:32:5E:88:16:71:D8:2F Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0 Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0 Certificate serial: 019B2219BBCA300DDE3A275B348B4BFC1838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft Manifest number: 1776 Signing time: Mon 15 Dec 2025 13:01:10 +0000 Manifest this update: Mon 15 Dec 2025 13:01:10 +0000 Manifest next update: Tue 16 Dec 2025 13:01:10 +0000 Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: orhs6+ieyycTMsvHCsdry09XbGQwD+gxueunTrea/g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:bb:ca:30:0d:de:3a:27:5b:34:8b:4b:fc:18:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0 Validity Not Before: Dec 15 13:01:10 2025 GMT Not After : Dec 16 13:01:10 2025 GMT Subject: CN=b2b25d1d6db4add7294e4bf5ed325e881671d82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:97:b6:d0:b9:1b:9a:ab:f9:51:38:53:1d:3a: 2b:cb:dc:88:b8:cb:70:20:d4:7d:56:a0:78:09:af: 5a:42:23:2f:14:61:92:e8:0a:4b:61:67:a1:0c:f6: e2:19:60:17:44:b6:28:05:11:6f:61:da:cb:63:9b: e9:4d:12:31:6f:bb:55:d1:42:ca:58:ea:0a:40:00: 26:0c:08:85:d0:89:bb:2d:c1:97:29:a0:96:f9:87: 06:6d:ed:9b:8a:0d:be:3f:91:cc:18:39:ca:ce:0b: 1c:ee:2a:03:8a:d0:41:29:43:84:e6:3a:88:29:a0: 8d:53:55:5b:3f:cf:2a:74:56:96:97:39:d8:2d:62: 92:91:d2:30:73:bc:52:da:99:4a:ac:7d:c7:41:ed: 52:de:0d:75:0e:6d:5c:f0:1c:bf:ff:a9:00:a5:7c: dc:15:9f:70:a5:0f:21:c6:a6:bb:c6:fa:5a:56:e4: 1a:ae:cb:48:38:54:9e:36:39:24:7f:03:67:a3:45: bc:08:a9:d5:7d:85:6e:a6:38:17:69:26:f3:90:34: e3:f1:58:ff:99:0f:3c:df:5d:c6:b2:02:5b:9b:73: ef:bb:4a:d4:ca:45:5d:e1:00:59:c7:58:71:e8:29: 4d:cf:ab:22:73:2d:03:14:9f:97:0a:66:eb:c0:8f: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B2:5D:1D:6D:B4:AD:D7:29:4E:4B:F5:ED:32:5E:88:16:71:D8:2F X509v3 Authority Key Identifier: keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:0e:e5:3b:5f:6a:c3:ed:b3:ce:13:c0:72:9c:b7:61:3d:7e: 03:95:7f:cb:eb:cc:f2:83:1f:55:0d:59:ba:ef:38:16:ef:6f: a1:bd:d6:9d:df:e5:5d:54:20:50:b3:a2:f8:de:05:00:58:5c: 8f:94:26:6c:c1:3c:0b:d0:dd:66:8d:8b:aa:33:de:fd:13:d6: 45:0c:9d:a5:bd:69:b9:02:6e:a4:9b:80:80:e8:63:36:bf:ef: 82:8f:22:8f:ea:82:90:02:a1:f6:91:bc:26:5b:3d:c6:a3:47: 10:bb:0e:8c:5b:3b:2b:46:bd:1c:16:4c:72:6c:ca:26:00:30: 67:55:d1:7e:c2:38:d5:c8:12:81:65:39:3b:37:36:d7:ff:a1: 9e:ff:eb:d1:a9:b3:8f:6c:3a:1c:59:6a:16:32:fa:32:ab:9a: b1:04:73:0c:63:89:c4:5c:cb:2d:51:53:5b:c8:6c:dc:03:ec: 8f:92:3c:87:34:d1:6a:63:71:5f:18:51:64:8e:ef:bf:11:ee: 1b:9d:ef:7b:ca:df:e1:7d:8e:6e:e0:fa:12:aa:48:7c:38:34: 21:99:73:63:5b:d2:f2:d9:74:d1:ff:e8:6f:d1:54:76:9e:dc: 8b:7f:92:37:da:bd:8b:30:37:52:d3:3c:a3:a8:bf:f7:82:9d: c9:73:d9:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGbvKMA3eOidbNItL/Bg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTk0OTViNzJmZjAxNTg3OGMxMzE0ZDI0NzU5YjZlOTE0 N2E4ZTAwHhcNMjUxMjE1MTMwMTEwWhcNMjUxMjE2MTMwMTEwWjAzMTEwLwYDVQQD EyhiMmIyNWQxZDZkYjRhZGQ3Mjk0ZTRiZjVlZDMyNWU4ODE2NzFkODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Je20Lkbmqv5UThTHTory9yIuMtw INR9VqB4Ca9aQiMvFGGS6ApLYWehDPbiGWAXRLYoBRFvYdrLY5vpTRIxb7tV0ULK WOoKQAAmDAiF0Im7LcGXKaCW+YcGbe2big2+P5HMGDnKzgsc7ioDitBBKUOE5jqI KaCNU1VbP88qdFaWlznYLWKSkdIwc7xS2plKrH3HQe1S3g11Dm1c8By//6kApXzc FZ9wpQ8hxqa7xvpaVuQarstIOFSeNjkkfwNno0W8CKnVfYVupjgXaSbzkDTj8Vj/ mQ88313GsgJbm3Pvu0rUykVd4QBZx1hx6ClNz6sicy0DFJ+XCmbrwI8weQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKyXR1ttK3XKU5L9e0yXogWcdgvMB8GA1UdIwQY MBaAFIFZSVty/wFYeMExTSR1m26RR6jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmIt OTAyNGIwZDIyNmM2LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmItOTAyNGIwZDIyNmM2 LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcg7lO19q w+2zzhPAcpy3YT1+A5V/y+vM8oMfVQ1Zuu84Fu9vob3Wnd/lXVQgULOi+N4FAFhc j5QmbME8C9DdZo2LqjPe/RPWRQydpb1puQJupJuAgOhjNr/vgo8ij+qCkAKh9pG8 Jls9xqNHELsOjFs7K0a9HBZMcmzKJgAwZ1XRfsI41cgSgWU5Ozc21/+hnv/r0amz j2w6HFlqFjL6MquasQRzDGOJxFzLLVFTW8hs3APsj5I8hzTRamNxXxhRZI7vvxHu G53ve8rf4X2ObuD6EqpIfDg0IZlzY1vS8tl00f/ob9FUdp7ci3+SN9q9izA3UtM8 o6i/94KdyXPZiw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:48:53 2025 by rpki-client