This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json) Hash identifier: wltmmrcgmGyRhyDrvG6pyXLMYz6g98fBPam6Zgqb2Uc= Subject key identifier: 7B:F5:75:D8:0E:50:EB:F2:B2:B6:FF:E9:E1:CF:97:DB:70:1E:B0:56 Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f Certificate serial: 019B733586929A667CA2B3FAE7DB5A2D3B02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft Manifest number: 065A Signing time: Wed 31 Dec 2025 07:00:46 +0000 Manifest this update: Wed 31 Dec 2025 07:00:46 +0000 Manifest next update: Thu 01 Jan 2026 07:00:46 +0000 Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: sAOHCIWsEv5NwjS/2rDqQRJk3fjHMKyM3hHreCModak=) 2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:35:86:92:9a:66:7c:a2:b3:fa:e7:db:5a:2d:3b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f Validity Not Before: Dec 31 07:00:46 2025 GMT Not After : Jan 1 07:00:46 2026 GMT Subject: CN=7bf575d80e50ebf2b2b6ffe9e1cf97db701eb056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:fb:16:5d:d0:34:b3:81:50:c6:8d:d3:b3: 5a:c3:01:0d:7a:31:81:56:f9:35:25:8a:c5:70:5d: 22:ed:db:e0:e3:03:b4:bd:c9:22:d8:cc:a8:db:3e: 97:d6:76:d3:72:0a:31:f3:b5:3d:04:48:7d:e3:dd: b3:64:cf:32:6a:d2:46:ef:7a:3b:47:e1:6a:8d:e0: f7:b9:f7:4e:3f:cb:ac:93:48:28:44:a1:59:c7:06: 6c:fb:2f:40:d9:cc:fb:68:61:b4:5c:86:c1:0c:03: aa:cf:da:e9:d6:46:4b:41:30:d0:60:de:13:fe:b5: be:72:61:49:6c:dd:02:1c:03:b9:f5:b9:6d:5f:4e: 4c:ec:73:85:f0:c6:ad:07:44:9a:07:34:35:1a:3d: 7a:11:1e:80:36:88:88:05:5b:cf:00:72:2d:88:a1: 71:0b:38:4d:74:fd:a2:29:36:16:0b:f8:8e:90:fd: 5b:f1:f6:9b:86:a3:dc:e2:a2:9b:0e:ec:4d:da:79: 9b:2c:74:69:79:35:c1:16:d3:a1:60:19:99:5d:0d: 9e:da:ac:dc:d4:51:06:42:3b:13:f6:da:7d:2d:1d: b8:fb:2b:a5:a7:44:10:60:16:11:95:fc:29:b2:65: ae:20:90:56:73:40:2a:dc:dd:58:69:80:68:6c:7a: b5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F5:75:D8:0E:50:EB:F2:B2:B6:FF:E9:E1:CF:97:DB:70:1E:B0:56 X509v3 Authority Key Identifier: keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:63:20:2f:f6:c2:e3:06:1f:66:9e:32:78:0a:a6:b1:1f:38: 9e:a5:43:02:34:e7:77:59:a6:5f:f1:7e:65:bb:07:d2:26:eb: e2:b9:97:ff:ab:4f:1f:1f:35:66:f7:d7:9a:c2:14:16:55:85: 6a:c8:93:af:c8:b5:b0:d5:30:4f:91:cb:b0:a3:7d:b1:f1:07: bf:fe:b3:70:7d:9f:b8:75:6b:76:f7:e6:9e:51:31:ac:fe:60: 71:27:89:2c:0e:f1:66:27:a2:db:1c:7a:2f:bd:4b:bc:a2:cb: d7:0d:94:b1:ce:a5:07:c6:e6:d7:fa:ee:ca:9e:2e:0d:22:cc: 14:2a:8a:14:36:d2:ae:1a:a9:79:48:37:cd:fb:0d:6b:e3:62: c8:b0:6a:46:0b:2a:74:f9:cf:bf:4a:4d:37:06:f6:5a:34:90: cb:e7:8d:87:44:0b:db:ce:ad:1e:55:a9:73:dd:7d:22:a0:72: 89:d2:89:2a:ca:b8:0d:cb:b4:9e:24:13:9d:d0:52:26:4b:83: ef:ea:ed:cd:f5:c6:44:d8:39:35:2e:43:44:7c:9a:c1:c8:7d: 69:8e:dc:5e:85:d4:fa:21:5c:6f:76:d4:cb:20:60:81:71:4b: 04:e1:22:c1:77:1a:b5:6e:f7:ab:79:83:0d:53:52:80:a1:99: 44:94:96:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzNYaSmmZ8orP659taLTsCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTE3MjgxYWNmOTZkMzhlNzlhMzVjOGJlYjY4YjhjMDU5 NzlhNmYwHhcNMjUxMjMxMDcwMDQ2WhcNMjYwMTAxMDcwMDQ2WjAzMTEwLwYDVQQD Eyg3YmY1NzVkODBlNTBlYmYyYjJiNmZmZTllMWNmOTdkYjcwMWViMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaz7Fl3QNLOBUMaN07NawwENejGB Vvk1JYrFcF0i7dvg4wO0vcki2Myo2z6X1nbTcgox87U9BEh9492zZM8yatJG73o7 R+FqjeD3ufdOP8usk0goRKFZxwZs+y9A2cz7aGG0XIbBDAOqz9rp1kZLQTDQYN4T /rW+cmFJbN0CHAO59bltX05M7HOF8MatB0SaBzQ1Gj16ER6ANoiIBVvPAHItiKFx CzhNdP2iKTYWC/iOkP1b8fabhqPc4qKbDuxN2nmbLHRpeTXBFtOhYBmZXQ2e2qzc 1FEGQjsT9tp9LR24+yulp0QQYBYRlfwpsmWuIJBWc0Aq3N1YaYBobHq1vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHv1ddgOUOvysrb/6eHPl9twHrBWMB8GA1UdIwQY MBaAFBpRcoGs+W0455o1yL62i4wFl5pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUt NzAyNzI2ODhlOTcwLzEvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xNGZmZTItNGU0NS00YWYyLWI2ODUtNzAyNzI2ODhlOTcw LzEvR2xGeWdhejViVGpubWpYSXZyYUxqQVdYbW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2MgL/bC 4wYfZp4yeAqmsR84nqVDAjTnd1mmX/F+ZbsH0ibr4rmX/6tPHx81ZvfXmsIUFlWF asiTr8i1sNUwT5HLsKN9sfEHv/6zcH2fuHVrdvfmnlExrP5gcSeJLA7xZiei2xx6 L71LvKLL1w2Usc6lB8bm1/ruyp4uDSLMFCqKFDbSrhqpeUg3zfsNa+NiyLBqRgsq dPnPv0pNNwb2WjSQy+eNh0QL286tHlWpc919IqByidKJKsq4Dcu0niQTndBSJkuD 7+rtzfXGRNg5NS5DRHyawch9aY7cXoXU+iFcb3bUyyBggXFLBOEiwXcatW73q3mD DVNSgKGZRJSWMg== -----END CERTIFICATE-----Generated at Wed Dec 31 10:15:53 2025 by rpki-client