This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json) Hash identifier: iSPB1LRnjxqSPM+W73HVhIM2Rn1vdsfXYqjnaPNecDU= Subject key identifier: 24:BE:6B:59:34:9E:8C:43:9B:86:54:45:EA:C3:FE:33:C2:FC:2E:C8 Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01 Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01 Certificate serial: 019B7146D5F8626941D69FFE99F1D8C4ED0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft Manifest number: 119E Signing time: Tue 30 Dec 2025 22:00:26 +0000 Manifest this update: Tue 30 Dec 2025 22:00:26 +0000 Manifest next update: Wed 31 Dec 2025 22:00:26 +0000 Files and hashes: 1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: an0vzoL/vUyOMIWLb3XRAC2CTiNVHlXDBVlTWvocoSM=) 2: aveWHqfuaX_kG8WIp_xJcLumQBk.roa (hash: 3xccH6hLZrL399VCmO0jTOsOoPHpVJqnI9JkWpXbAog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:46:d5:f8:62:69:41:d6:9f:fe:99:f1:d8:c4:ed:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01 Validity Not Before: Dec 30 22:00:26 2025 GMT Not After : Dec 31 22:00:26 2025 GMT Subject: CN=24be6b59349e8c439b865445eac3fe33c2fc2ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:3c:77:26:76:79:87:fa:9d:62:9b:71:4c: 9f:fc:d2:18:9a:b2:38:50:e9:74:ac:15:a5:30:07: b2:ed:3d:06:98:a2:cf:74:4e:77:b1:b1:d9:29:5e: 5e:d3:87:0d:33:e3:7d:27:b4:d3:14:7e:d4:14:79: ea:50:05:d1:1b:89:08:43:01:36:99:05:65:8f:9f: bd:63:4c:53:26:6d:e5:a3:9c:1f:3a:1a:20:fc:6e: d2:ba:96:0e:ba:68:03:ad:97:96:d2:86:75:8d:66: e8:0b:b3:9a:f8:1f:23:e0:c7:11:04:f3:f2:61:0f: 4f:12:9d:69:fb:be:d5:cc:c4:a1:da:b2:83:be:d6: 1b:4c:32:14:0f:2a:62:e7:48:46:b7:45:b6:0f:a6: ad:65:3b:41:ec:25:1e:ee:d9:18:16:31:46:e3:49: 60:e7:a3:d1:eb:d5:07:85:db:11:10:b9:0e:97:b1: 3f:48:fb:79:d4:6a:d4:a7:1c:1c:e7:4c:9a:33:61: 21:ad:7f:05:65:f9:74:50:e0:38:51:ff:5f:a4:b9: 02:73:a7:96:6a:66:88:92:38:70:d6:1f:29:0d:3a: 77:b0:e6:63:fb:ac:12:84:07:52:f2:3b:dd:67:17: 16:2c:9f:a0:53:ed:ef:0c:70:a7:df:7f:b8:59:1e: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BE:6B:59:34:9E:8C:43:9B:86:54:45:EA:C3:FE:33:C2:FC:2E:C8 X509v3 Authority Key Identifier: keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c0:27:28:46:82:e0:05:b4:a3:03:76:9c:5a:68:a5:c5:63: 2b:de:5c:89:1b:a9:68:80:00:02:9f:55:35:a0:50:23:84:34: 02:fd:de:87:b8:19:c4:c9:0e:87:ac:58:28:44:05:d2:6a:ac: aa:80:58:d3:95:d9:dd:25:73:1c:0c:75:bd:13:40:df:15:2a: 11:88:f6:65:a2:1a:e3:31:fa:73:eb:b7:15:ad:8a:13:b0:77: d1:39:fa:c3:cd:61:e6:4d:0c:c8:04:fd:da:50:43:9e:ef:e1: 1a:85:92:b6:0a:e5:06:7b:80:62:28:94:21:be:3e:fc:d9:c6: 04:1f:0e:13:ee:37:bd:b9:54:97:dc:45:67:ec:00:19:39:3a: ed:14:b4:4a:4b:45:bc:ca:7f:49:ce:09:ca:46:8c:b5:e5:07: ac:9b:e9:8c:92:80:b7:43:fa:b0:7f:5c:63:c2:da:a9:b4:57: 74:08:d6:ad:f3:ce:b5:2b:e1:36:e7:63:6d:38:1a:f6:f5:87: f8:e7:21:e5:6b:b0:5c:07:81:d7:ba:05:71:3d:2b:4f:09:1f: dc:72:fe:84:d6:e8:0b:77:c5:74:6e:1d:25:4a:5a:d0:65:95: 93:91:29:4e:73:5b:bf:15:c2:97:62:4a:b7:87:2e:42:30:c1: 56:cd:ea:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxRtX4YmlB1p/+mfHYxO0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YjczNzdjZTVlZmEzY2EwMzBlYmI0ZGQ3NzU2N2ZjMDMy ZmNkMDEwHhcNMjUxMjMwMjIwMDI2WhcNMjUxMjMxMjIwMDI2WjAzMTEwLwYDVQQD EygyNGJlNmI1OTM0OWU4YzQzOWI4NjU0NDVlYWMzZmUzM2MyZmMyZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxA8dyZ2eYf6nWKbcUyf/NIYmrI4 UOl0rBWlMAey7T0GmKLPdE53sbHZKV5e04cNM+N9J7TTFH7UFHnqUAXRG4kIQwE2 mQVlj5+9Y0xTJm3lo5wfOhog/G7SupYOumgDrZeW0oZ1jWboC7Oa+B8j4McRBPPy YQ9PEp1p+77VzMSh2rKDvtYbTDIUDypi50hGt0W2D6atZTtB7CUe7tkYFjFG40lg 56PR69UHhdsRELkOl7E/SPt51GrUpxwc50yaM2EhrX8FZfl0UOA4Uf9fpLkCc6eW amaIkjhw1h8pDTp3sOZj+6wShAdS8jvdZxcWLJ+gU+3vDHCn33+4WR4l+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCS+a1k0noxDm4ZURerD/jPC/C7IMB8GA1UdIwQY MBaAFBi3N3zl76PKAw67Tdd1Z/wDL80BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hMGJhODgtNGQ4OC00NjkxLWFhNmMt YjViOGY1Nzg0ZGZlLzEvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hMGJhODgtNGQ4OC00NjkxLWFhNmMtYjViOGY1Nzg0ZGZl LzEvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8AnKEaC 4AW0owN2nFpopcVjK95ciRupaIAAAp9VNaBQI4Q0Av3eh7gZxMkOh6xYKEQF0mqs qoBY05XZ3SVzHAx1vRNA3xUqEYj2ZaIa4zH6c+u3Fa2KE7B30Tn6w81h5k0MyAT9 2lBDnu/hGoWStgrlBnuAYiiUIb4+/NnGBB8OE+43vblUl9xFZ+wAGTk67RS0SktF vMp/Sc4JykaMteUHrJvpjJKAt0P6sH9cY8LaqbRXdAjWrfPOtSvhNudjbTga9vWH +Och5WuwXAeB17oFcT0rTwkf3HL+hNboC3fFdG4dJUpa0GWVk5EpTnNbvxXCl2JK t4cuQjDBVs3qDg== -----END CERTIFICATE-----Generated at Wed Dec 31 07:42:47 2025 by rpki-client