This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json) Hash identifier: vAiKoGVjklzQMPWZvSWDyksGn7KOQcI6RWPnSxlqOGg= Subject key identifier: 2F:FD:A5:56:00:5C:9F:BB:D6:00:8B:76:1E:86:CF:EF:F7:C4:DB:FE Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57 Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557 Certificate serial: 019B5976C0680D39C0038D04964268B6CEF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft Manifest number: 0E40 Signing time: Fri 26 Dec 2025 07:01:53 +0000 Manifest this update: Fri 26 Dec 2025 07:01:53 +0000 Manifest next update: Sat 27 Dec 2025 07:01:53 +0000 Files and hashes: 1: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (hash: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=) 2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: eeBDPXPki3nPZdWz2428Ew0jBttToF6QmujAuJj03fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:c0:68:0d:39:c0:03:8d:04:96:42:68:b6:ce:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557 Validity Not Before: Dec 26 07:01:53 2025 GMT Not After : Dec 27 07:01:53 2025 GMT Subject: CN=2ffda556005c9fbbd6008b761e86cfeff7c4dbfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:7a:6f:02:10:d3:c1:9d:24:93:3a:34:9a: 9a:f5:bb:a7:7c:a4:4f:79:6b:87:4d:77:71:89:0d: 65:de:fa:b9:98:96:6c:6e:51:55:e2:ea:93:33:c2: d4:0a:a0:8b:ae:d5:1c:7d:ae:d9:53:af:ed:e1:74: 94:e9:4e:ac:3b:48:65:78:68:4a:3f:e7:3b:77:38: 8d:69:80:57:e5:54:c3:03:43:f0:38:a8:cd:5c:db: f8:a7:97:20:4f:74:e2:4e:40:aa:58:c1:64:2a:e1: b1:22:8b:7b:b1:dc:4d:1b:53:ec:97:48:04:ad:87: 7a:a5:ca:dd:70:f0:e2:ad:02:6d:02:ce:f9:6e:a6: 8e:90:31:c3:4a:25:3d:db:56:42:1b:4f:f9:7d:97: 77:99:2f:06:a9:49:d5:16:6c:82:bd:82:a9:c6:12: 93:2b:3e:13:88:3f:c8:ed:aa:f1:06:bb:eb:67:89: 67:5b:74:6e:ec:92:25:cb:52:50:16:2c:b7:cd:e6: 9c:05:77:e6:11:c4:3f:0c:c4:20:a3:f8:08:8c:19: 21:f6:0d:69:c3:f5:01:7a:1e:91:ae:d0:51:3f:26: e5:63:d3:de:39:a5:14:7e:80:c7:3b:dd:e5:f1:43: 60:6e:85:55:b1:8f:65:95:50:d4:b8:93:6e:7d:0d: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FD:A5:56:00:5C:9F:BB:D6:00:8B:76:1E:86:CF:EF:F7:C4:DB:FE X509v3 Authority Key Identifier: keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:57:e2:cc:d2:ac:f6:28:c2:7f:f6:92:25:3a:3b:06:0e:c7: b1:b9:76:5e:63:98:2e:63:b8:16:34:d0:32:ff:3c:5e:16:40: 15:90:00:61:aa:71:e2:ad:00:7e:10:a6:a5:25:0b:53:f1:d3: 5b:21:9f:9e:18:33:18:f0:39:14:b6:35:9f:3e:be:12:eb:2b: 74:68:42:ee:3b:b0:c6:f5:17:30:31:8b:09:3a:e3:11:d2:50: ba:e9:74:2a:22:01:fd:6a:de:98:b6:91:89:4d:63:8c:89:08: 02:dd:4b:b8:a9:d7:7f:f2:69:5a:4e:f1:cb:7b:ef:d8:44:75: 3a:72:ff:eb:51:e1:0a:b1:65:0e:8f:a8:8c:f9:9e:2d:07:12: 49:08:b1:06:ce:7e:aa:0e:2f:6c:94:9e:4d:94:01:6f:ce:5a: c3:b9:44:68:4c:95:44:96:0c:43:f2:cc:d1:d3:dc:51:85:f1: 26:01:94:02:3d:fc:77:e1:19:a5:de:12:16:60:49:c6:cc:8e: 8e:8f:f6:78:b1:1b:55:3a:bc:8e:e8:ec:96:3e:de:75:a8:4f: ba:8c:33:5e:75:cc:c2:5a:9c:c7:15:12:e3:49:76:10:c5:3f: 7e:1b:6d:85:05:b0:95:65:3c:f8:f6:7f:e7:ca:7c:75:5f:5d: b1:2a:74:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdsBoDTnAA40ElkJots75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYjljZmI5MTMwOWQ1ZDkxZmZjMzJiY2FmMDZjMzZiMDk3 NzI1NTcwHhcNMjUxMjI2MDcwMTUzWhcNMjUxMjI3MDcwMTUzWjAzMTEwLwYDVQQD EygyZmZkYTU1NjAwNWM5ZmJiZDYwMDhiNzYxZTg2Y2ZlZmY3YzRkYmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPt6bwIQ08GdJJM6NJqa9bunfKRP eWuHTXdxiQ1l3vq5mJZsblFV4uqTM8LUCqCLrtUcfa7ZU6/t4XSU6U6sO0hleGhK P+c7dziNaYBX5VTDA0PwOKjNXNv4p5cgT3TiTkCqWMFkKuGxIot7sdxNG1Psl0gE rYd6pcrdcPDirQJtAs75bqaOkDHDSiU921ZCG0/5fZd3mS8GqUnVFmyCvYKpxhKT Kz4TiD/I7arxBrvrZ4lnW3Ru7JIly1JQFiy3zeacBXfmEcQ/DMQgo/gIjBkh9g1p w/UBeh6RrtBRPyblY9PeOaUUfoDHO93l8UNgboVVsY9llVDUuJNufQ23UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/9pVYAXJ+71gCLdh6Gz+/3xNv+MB8GA1UdIwQY MBaAFIC5z7kTCdXZH/wyvK8Gw2sJdyVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mZDk0ODItOGNkMS00ODk5LThjZGIt MjdiYjBiODg3NWE4LzEvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mZDk0ODItOGNkMS00ODk5LThjZGItMjdiYjBiODg3NWE4 LzEvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4VfizNKs 9ijCf/aSJTo7Bg7Hsbl2XmOYLmO4FjTQMv88XhZAFZAAYapx4q0AfhCmpSULU/HT WyGfnhgzGPA5FLY1nz6+EusrdGhC7juwxvUXMDGLCTrjEdJQuul0KiIB/WremLaR iU1jjIkIAt1LuKnXf/JpWk7xy3vv2ER1OnL/61HhCrFlDo+ojPmeLQcSSQixBs5+ qg4vbJSeTZQBb85aw7lEaEyVRJYMQ/LM0dPcUYXxJgGUAj38d+EZpd4SFmBJxsyO jo/2eLEbVTq8jujslj7edahPuowzXnXMwlqcxxUS40l2EMU/fhtthQWwlWU8+PZ/ 58p8dV9dsSp05Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:14 2025 by rpki-client