This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json) Hash identifier: GYFA3o8IjyFmqojJ90bv7UW/7V1klG9floDzBTN5rmo= Subject key identifier: E3:89:66:08:A6:7C:F5:E8:80:6B:1B:AC:3B:14:CA:81:D3:3C:AF:5C Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e Certificate serial: 019B19F261AD6DEE8EF5D73CADB008B52E1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft Manifest number: 036F Signing time: Sat 13 Dec 2025 23:01:13 +0000 Manifest this update: Sat 13 Dec 2025 23:01:13 +0000 Manifest next update: Sun 14 Dec 2025 23:01:13 +0000 Files and hashes: 1: 1-J_uLfpgRYrtxrpsYSaesRuiQ2g.roa (hash: GvASZIyrV5t2M4DjO8tp4WjyB+kQVX9GlnrOl3qGLxQ=) 2: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: BXtb7x4j7LPe79HoTnEmMt5v9IQYHKtReqxTggobeqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:61:ad:6d:ee:8e:f5:d7:3c:ad:b0:08:b5:2e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e Validity Not Before: Dec 13 23:01:13 2025 GMT Not After : Dec 14 23:01:13 2025 GMT Subject: CN=e3896608a67cf5e8806b1bac3b14ca81d33caf5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:0a:73:6d:01:81:35:c4:83:73:db:ce:de: 1a:05:77:c6:be:01:ee:42:4b:a2:e2:6f:18:58:92: 3b:26:51:32:db:51:fa:74:f0:4a:b7:b3:8e:f4:6f: 2c:d6:af:0e:1d:2f:4f:57:df:29:78:73:27:8d:59: 78:36:86:6a:16:51:7b:3c:2a:5b:9f:4a:ad:6d:64: 19:ec:37:ad:cf:28:a9:0f:7a:f2:99:66:a1:37:50: c0:9e:34:52:89:5d:51:c6:4e:90:8b:c1:95:ca:69: 4b:25:61:77:5c:07:cc:c3:53:7c:e5:02:d6:96:cc: 9f:26:f8:c9:53:37:7b:4e:eb:69:29:ec:03:d8:b6: 05:53:4f:c2:cf:02:af:05:33:44:e2:66:fb:1c:8f: 74:1a:93:3a:8e:ca:a1:34:15:7e:f0:a3:af:49:17: ba:54:25:9e:a4:6d:02:b2:27:1c:f3:07:44:6f:61: 2c:3b:7b:c9:d7:7b:eb:ad:e8:d0:45:7f:b6:ad:61: 06:13:78:8e:e9:1c:59:bc:53:4a:b3:57:15:b6:71: 52:b8:f3:62:20:16:3f:02:09:f4:c9:08:66:c5:39: 6f:8b:3d:da:5c:a8:d0:c1:46:17:7a:51:df:f6:50: 87:bd:33:d6:cd:23:13:49:4c:ae:60:97:61:7f:f9: bf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:89:66:08:A6:7C:F5:E8:80:6B:1B:AC:3B:14:CA:81:D3:3C:AF:5C X509v3 Authority Key Identifier: keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d0:75:0c:8b:ea:8c:cb:fe:15:5e:75:f9:e1:e1:3a:19:95: 88:7d:22:c1:ff:8b:3d:d6:a4:eb:84:22:2f:f3:a3:7c:1d:09: c3:37:54:f1:bf:b5:ca:9a:79:03:3b:20:7b:ce:db:ea:cd:23: 5c:80:a9:f7:84:e3:ed:59:df:17:0c:ed:8a:81:06:00:9e:cb: 3f:6c:19:b5:e8:bd:c3:a2:4e:5d:40:f8:ff:a6:35:00:c6:48: b4:f1:46:87:8c:d8:4d:bb:cd:9c:10:e4:a8:eb:0e:cc:1a:9a: 6f:e7:62:7b:3c:ca:1c:5b:cd:5c:4e:8d:fc:be:03:f8:d2:86: 4f:89:db:fa:45:a4:67:9d:fe:7a:64:a4:50:bd:f7:92:ac:40: a0:48:75:16:c7:25:f3:44:1b:ba:36:44:90:b9:14:23:f2:2b: 71:8f:09:e4:82:b9:63:ee:3e:75:cb:a5:09:18:10:47:aa:c5: f7:3d:da:ed:9d:b8:66:8b:54:20:b1:61:f1:00:1a:f0:c1:88: 08:fe:dc:1e:dd:e6:b4:71:93:cd:44:c4:44:63:10:db:15:5f: de:d1:14:94:34:04:07:e0:cb:21:5d:80:29:0c:df:d1:1a:0c: 06:fa:33:88:86:1f:4d:2a:41:b7:e3:52:2b:f2:cf:30:f2:01: 6d:18:91:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8mGtbe6O9dc8rbAItS4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NjJlY2U1NDc1NzJhZGVjYTFhOWZmMDU3ZTBiYThlYWU4 YzVkNWUwHhcNMjUxMjEzMjMwMTEzWhcNMjUxMjE0MjMwMTEzWjAzMTEwLwYDVQQD EyhlMzg5NjYwOGE2N2NmNWU4ODA2YjFiYWMzYjE0Y2E4MWQzM2NhZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmYKc20BgTXEg3Pbzt4aBXfGvgHu Qkui4m8YWJI7JlEy21H6dPBKt7OO9G8s1q8OHS9PV98peHMnjVl4NoZqFlF7PCpb n0qtbWQZ7DetzyipD3rymWahN1DAnjRSiV1Rxk6Qi8GVymlLJWF3XAfMw1N85QLW lsyfJvjJUzd7TutpKewD2LYFU0/CzwKvBTNE4mb7HI90GpM6jsqhNBV+8KOvSRe6 VCWepG0Csicc8wdEb2EsO3vJ13vrrejQRX+2rWEGE3iO6RxZvFNKs1cVtnFSuPNi IBY/Agn0yQhmxTlviz3aXKjQwUYXelHf9lCHvTPWzSMTSUyuYJdhf/m/BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOJZgimfPXogGsbrDsUyoHTPK9cMB8GA1UdIwQY MBaAFNRi7OVHVyreyhqf8Ffguo6ujF1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84YTk0MTctYmMyOC00YTAyLWE5MmYt YTQwOGJiYTczNWVlLzEvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84YTk0MTctYmMyOC00YTAyLWE5MmYtYTQwOGJiYTczNWVl LzEvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9B1DIvq jMv+FV51+eHhOhmViH0iwf+LPdak64QiL/OjfB0JwzdU8b+1ypp5Azsge87b6s0j XICp94Tj7VnfFwztioEGAJ7LP2wZtei9w6JOXUD4/6Y1AMZItPFGh4zYTbvNnBDk qOsOzBqab+diezzKHFvNXE6N/L4D+NKGT4nb+kWkZ53+emSkUL33kqxAoEh1Fscl 80QbujZEkLkUI/IrcY8J5IK5Y+4+dculCRgQR6rF9z3a7Z24ZotUILFh8QAa8MGI CP7cHt3mtHGTzUTERGMQ2xVf3tEUlDQEB+DLIV2AKQzf0RoMBvoziIYfTSpBt+NS K/LPMPIBbRiRZQ== -----END CERTIFICATE-----Generated at Sun Dec 14 05:11:52 2025 by rpki-client