This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json) Hash identifier: VQK3QiEiWEHj63yrwDuvEvSBL10dGGscvTXqhI+sD9g= Subject key identifier: 9E:24:B2:1B:B5:DC:1E:DA:EA:37:0E:46:F1:80:3B:D2:9D:A2:BF:C9 Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06 Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06 Certificate serial: 019B2A77B83E145B4F2A704DFB9CF4DA4A0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft Manifest number: 15F5 Signing time: Wed 17 Dec 2025 04:00:47 +0000 Manifest this update: Wed 17 Dec 2025 04:00:47 +0000 Manifest next update: Thu 18 Dec 2025 04:00:47 +0000 Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=) 2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=) 3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: QhD31QmTlQw+rMS4jD0DsnlCx1oPru7OKDKKPXnG3Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:77:b8:3e:14:5b:4f:2a:70:4d:fb:9c:f4:da:4a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06 Validity Not Before: Dec 17 04:00:47 2025 GMT Not After : Dec 18 04:00:47 2025 GMT Subject: CN=9e24b21bb5dc1edaea370e46f1803bd29da2bfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:b4:15:06:b6:c3:88:3d:37:3e:34:1e:42: 17:c1:7b:82:be:96:8e:36:85:16:2c:52:0b:fc:3b: 08:61:00:38:96:89:ab:d6:70:bd:8e:9b:58:a1:d6: 89:df:cb:89:74:9e:ba:10:71:6f:21:f7:21:0f:04: 01:9b:78:70:af:72:44:d1:8f:21:ef:86:02:c3:da: 89:ee:a2:6f:fc:6b:94:cf:06:bb:7b:e0:5c:72:30: 83:8d:ff:e1:8b:57:ff:bf:bf:01:b8:1c:d6:85:8b: 86:ba:9c:44:de:1d:8e:6c:ec:fa:54:fa:c9:36:9b: 44:b8:fc:66:2e:a8:d7:ad:8b:c0:e4:4e:d1:6e:53: e7:e3:4c:8a:5b:04:74:27:a0:37:30:98:c0:a4:f4: 4d:81:eb:a7:4a:ec:2c:5b:36:06:46:08:76:75:9e: 6b:13:7c:26:2f:1a:e9:a8:13:7a:96:b6:a8:1f:6b: 23:92:b1:10:16:0c:0b:b9:fd:6f:20:da:78:aa:fa: 26:bb:d9:59:7f:54:3a:18:18:89:a6:3d:24:93:cb: 59:40:d4:38:fc:71:89:e0:98:35:c1:a2:98:e0:d2: 05:f3:33:cb:36:e7:3b:2f:30:ec:1a:79:01:75:bd: 4d:18:0c:60:3e:b5:fc:6b:1c:ba:f1:43:73:4f:f9: 55:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:24:B2:1B:B5:DC:1E:DA:EA:37:0E:46:F1:80:3B:D2:9D:A2:BF:C9 X509v3 Authority Key Identifier: keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e0:e5:46:2f:4f:99:49:29:f0:ce:64:19:03:92:4f:04:9e: a8:a6:cb:68:53:49:9e:e8:4b:15:94:d3:e0:94:a1:e2:19:38: c0:a3:f7:55:d1:a0:a9:25:eb:08:2a:28:8d:0d:33:ba:69:06: 97:89:f6:01:c2:d7:e2:f6:7a:a3:b4:17:5d:03:bd:af:4b:c1: 09:d9:f4:b0:aa:c5:43:f4:b7:48:17:d3:ff:84:95:7c:93:96: 98:6a:7f:c0:79:28:c3:cc:9b:14:a2:43:30:35:d2:38:82:28: 29:92:ba:b5:dc:43:de:05:52:c0:91:b5:7f:d1:b4:24:62:2e: dc:c7:11:bf:64:8f:30:a0:94:e0:68:15:37:bc:0e:4f:3b:ab: 67:4b:fd:a1:09:e9:1b:c3:53:ec:44:b8:16:b3:a3:be:29:c6: cb:f1:d0:30:f7:ad:08:30:c7:0d:3f:ef:1a:09:92:73:d9:3b: be:f3:35:2c:c0:e9:62:52:e9:26:1d:da:34:06:89:bf:a7:74: cd:c0:93:ac:2f:38:2d:e8:e9:6d:a8:3d:5d:82:5c:20:63:9c: d5:db:c1:f8:76:63:1b:a5:ea:9a:44:76:cd:9c:1e:04:ee:ba: 27:18:b9:e4:09:dc:3f:39:49:c6:e5:47:0d:78:f5:c8:c8:08: 8c:7b:8e:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqd7g+FFtPKnBN+5z02koLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4Yjg4OWYwZGRiYjUyODAxZTJkMmU3YTJlYmUxMTY3Y2Fk MzRjMDYwHhcNMjUxMjE3MDQwMDQ3WhcNMjUxMjE4MDQwMDQ3WjAzMTEwLwYDVQQD Eyg5ZTI0YjIxYmI1ZGMxZWRhZWEzNzBlNDZmMTgwM2JkMjlkYTJiZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMe0FQa2w4g9Nz40HkIXwXuCvpaO NoUWLFIL/DsIYQA4lomr1nC9jptYodaJ38uJdJ66EHFvIfchDwQBm3hwr3JE0Y8h 74YCw9qJ7qJv/GuUzwa7e+BccjCDjf/hi1f/v78BuBzWhYuGupxE3h2ObOz6VPrJ NptEuPxmLqjXrYvA5E7RblPn40yKWwR0J6A3MJjApPRNgeunSuwsWzYGRgh2dZ5r E3wmLxrpqBN6lraoH2sjkrEQFgwLuf1vINp4qvomu9lZf1Q6GBiJpj0kk8tZQNQ4 /HGJ4Jg1waKY4NIF8zPLNuc7LzDsGnkBdb1NGAxgPrX8axy68UNzT/lVAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4kshu13B7a6jcORvGAO9Kdor/JMB8GA1UdIwQY MBaAFBi4ifDdu1KAHi0uei6+EWfK00wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQt ZGJiNjRhNjgzNWFkLzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQtZGJiNjRhNjgzNWFk LzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuDlRi9P mUkp8M5kGQOSTwSeqKbLaFNJnuhLFZTT4JSh4hk4wKP3VdGgqSXrCCoojQ0zumkG l4n2AcLX4vZ6o7QXXQO9r0vBCdn0sKrFQ/S3SBfT/4SVfJOWmGp/wHkow8ybFKJD MDXSOIIoKZK6tdxD3gVSwJG1f9G0JGIu3McRv2SPMKCU4GgVN7wOTzurZ0v9oQnp G8NT7ES4FrOjvinGy/HQMPetCDDHDT/vGgmSc9k7vvM1LMDpYlLpJh3aNAaJv6d0 zcCTrC84Lejpbag9XYJcIGOc1dvB+HZjG6XqmkR2zZweBO66Jxi55AncPzlJxuVH DXj1yMgIjHuORg== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:42 2025 by rpki-client