This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft File: GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json) Hash identifier: 04EsvnLj3cLLm0uO9EVGAXYGD2oPa9VDoe9JjH80wv4= Subject key identifier: 4D:E9:FE:2A:BD:46:19:24:0E:09:0F:B3:05:65:27:25:05:17:31:C3 Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6 Certificate issuer: /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6 Certificate serial: 019B2EFAB34E3B0D188B518A860A2ADBF48C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft Manifest number: 12C5 Signing time: Thu 18 Dec 2025 01:02:20 +0000 Manifest this update: Thu 18 Dec 2025 01:02:20 +0000 Manifest next update: Fri 19 Dec 2025 01:02:20 +0000 Files and hashes: 1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: 3FScMM8ZyHiXwkbs8ywVetrzpw0ZmjkgjKR/JbRALbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:b3:4e:3b:0d:18:8b:51:8a:86:0a:2a:db:f4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6 Validity Not Before: Dec 18 01:02:20 2025 GMT Not After : Dec 19 01:02:20 2025 GMT Subject: CN=4de9fe2abd4619240e090fb305652725051731c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:46:a0:6f:1d:cc:e7:aa:77:66:85:f2:77: a8:83:a5:c8:c1:38:d8:f5:0d:5d:91:0a:0e:8b:fd: a4:0a:d7:f3:dd:b3:52:6c:2b:e1:87:0f:e5:b6:82: 38:7b:38:d4:a2:33:6e:bf:4d:b3:b0:34:1e:75:1c: ba:1a:60:6f:8e:ce:c8:6b:e9:f6:80:fe:05:c0:99: 93:dc:46:20:03:93:db:05:28:cc:29:40:b9:b5:18: 3c:21:bc:92:48:be:6b:88:6f:b2:a9:e8:d2:55:b2: 81:1a:8b:65:f7:f2:5a:5b:9a:42:35:06:59:09:01: 1c:e7:f7:5b:8d:2d:fd:27:f9:16:66:9b:46:ec:0e: e0:e0:cd:26:4a:46:f0:e9:a6:bf:dc:2c:ce:77:97: 4c:f0:89:d0:8f:75:18:96:f3:ef:ad:07:64:cb:e9: 35:e9:ad:10:1b:80:12:d3:52:fb:5d:ab:0e:1e:c1: 6d:d5:dd:83:67:db:f3:f5:fd:57:ef:e0:5d:84:1f: f8:38:5d:34:92:49:15:f3:55:be:f8:07:03:4c:2b: 25:07:df:af:0f:13:d3:ff:87:98:d1:fd:99:49:ac: 5e:64:74:ef:85:62:2b:7e:b8:1a:4d:cd:7a:2f:0e: be:0a:82:03:5c:0e:c6:30:4a:cc:15:ac:c8:94:6a: e2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E9:FE:2A:BD:46:19:24:0E:09:0F:B3:05:65:27:25:05:17:31:C3 X509v3 Authority Key Identifier: keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a5:75:79:30:11:b2:8b:d6:6b:e2:81:2a:6c:82:1f:d3:6a: 50:76:2f:c7:2e:e6:98:07:e0:69:df:fd:54:54:51:32:50:ca: 33:3a:37:9a:ed:0b:0a:66:02:b2:6c:de:e4:e5:92:5f:c9:1c: 64:b5:6d:b9:62:7f:95:68:00:7c:86:2f:96:26:12:b2:00:9d: b5:60:79:31:cc:33:22:c5:39:89:89:89:27:29:c3:97:3d:35: af:fb:cb:ea:ee:68:25:da:11:85:27:79:d5:5e:30:c4:46:f7: 8a:b3:81:2c:8d:62:70:9c:e4:a5:ff:63:61:28:bd:f2:0e:88: fa:43:54:66:7e:39:74:d0:17:8b:84:0d:a4:22:30:51:fb:28: 6e:ad:cc:c9:5c:3f:44:66:96:6d:a0:cc:d1:cf:57:5d:c9:20: 88:cd:d7:57:ae:ad:45:4e:81:f5:e9:91:d5:58:69:0b:f4:7e: 51:5c:3c:53:73:89:e2:a9:84:d6:f3:2b:ea:bf:87:6a:44:29: 40:02:46:ad:ec:f4:ea:b0:e2:83:8d:1c:2b:a0:17:0c:38:a0: 13:b9:b5:ac:37:8f:83:88:5c:76:cc:3f:9b:03:c6:a1:a1:7f: 98:bd:66:62:65:87:ad:12:36:55:0d:ab:9b:98:f6:bb:a4:31: 39:72:8f:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+rNOOw0Yi1GKhgoq2/SMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTViYWI0MjVlYWM0YjZhODI0YzY1MTYzZmE5ZWY1MDBl OWY4YzYwHhcNMjUxMjE4MDEwMjIwWhcNMjUxMjE5MDEwMjIwWjAzMTEwLwYDVQQD Eyg0ZGU5ZmUyYWJkNDYxOTI0MGUwOTBmYjMwNTY1MjcyNTA1MTczMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD9GoG8dzOeqd2aF8neog6XIwTjY 9Q1dkQoOi/2kCtfz3bNSbCvhhw/ltoI4ezjUojNuv02zsDQedRy6GmBvjs7Ia+n2 gP4FwJmT3EYgA5PbBSjMKUC5tRg8IbySSL5riG+yqejSVbKBGotl9/JaW5pCNQZZ CQEc5/dbjS39J/kWZptG7A7g4M0mSkbw6aa/3CzOd5dM8InQj3UYlvPvrQdky+k1 6a0QG4AS01L7XasOHsFt1d2DZ9vz9f1X7+BdhB/4OF00kkkV81W++AcDTCslB9+v DxPT/4eY0f2ZSaxeZHTvhWIrfrgaTc16Lw6+CoIDXA7GMErMFazIlGriOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3p/iq9RhkkDgkPswVlJyUFFzHDMB8GA1UdIwQY MBaAFBpVurQl6sS2qCTGUWP6nvUA6fjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84YjQ2ZmItMDMxNy00NDNhLWI2MTUt M2Q0MTllZDQzMTJkLzEvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84YjQ2ZmItMDMxNy00NDNhLWI2MTUtM2Q0MTllZDQzMTJk LzEvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKV1eTAR sovWa+KBKmyCH9NqUHYvxy7mmAfgad/9VFRRMlDKMzo3mu0LCmYCsmze5OWSX8kc ZLVtuWJ/lWgAfIYvliYSsgCdtWB5McwzIsU5iYmJJynDlz01r/vL6u5oJdoRhSd5 1V4wxEb3irOBLI1icJzkpf9jYSi98g6I+kNUZn45dNAXi4QNpCIwUfsobq3MyVw/ RGaWbaDM0c9XXckgiM3XV66tRU6B9emR1VhpC/R+UVw8U3OJ4qmE1vMr6r+HakQp QAJGrez06rDig40cK6AXDDigE7m1rDePg4hcdsw/mwPGoaF/mL1mYmWHrRI2VQ2r m5j2u6QxOXKPFg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:50:12 2025 by rpki-client