This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json) Hash identifier: g1mciw4t/DDuqO+mHb/pNmxrynSAwqKX84l9PUnt/Hw= Subject key identifier: 82:0B:32:38:5A:8A:FB:FF:C7:E8:2A:4E:34:C9:F2:B0:3E:81:B5:C4 Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6 Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6 Certificate serial: 019B544FD428F85BEFFE4EEDCA9401210643 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft Manifest number: 04AD Signing time: Thu 25 Dec 2025 07:01:16 +0000 Manifest this update: Thu 25 Dec 2025 07:01:16 +0000 Manifest next update: Fri 26 Dec 2025 07:01:16 +0000 Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: bKtbEEUz1YAWNR8YJyRzt+6hiTR4ZHBzu8ynzC8apbM=) 2: REh2fJFOUQT0aTDY9FX0qElIo2A.roa (hash: v403zz3pfGBhC2EeF1+1/Ixjaub1EklsKy+XOu6apXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:d4:28:f8:5b:ef:fe:4e:ed:ca:94:01:21:06:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6 Validity Not Before: Dec 25 07:01:16 2025 GMT Not After : Dec 26 07:01:16 2025 GMT Subject: CN=820b32385a8afbffc7e82a4e34c9f2b03e81b5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:74:08:59:ce:af:f4:05:0b:68:9c:25:f7: 10:36:1c:a4:46:23:ca:1b:47:46:d2:d7:f9:18:b6: 34:ab:4b:8c:fb:16:8b:fd:66:89:06:2b:02:02:58: 51:10:ea:cd:59:9a:8f:a9:aa:ca:c4:b4:11:3e:56: 1c:e5:94:99:93:f2:1a:08:65:01:6c:64:2a:b5:ab: d5:6e:d6:2f:ae:47:8f:4a:9b:82:33:df:d9:a9:1a: 14:ad:5a:48:a5:5d:23:63:81:be:c4:93:b4:fc:4a: 29:27:93:0b:69:53:fd:39:e9:56:db:36:2b:ea:2d: 8a:d7:a3:50:f0:5b:27:68:d4:f2:d0:42:e3:ae:64: b5:d1:f3:60:90:a8:83:25:78:00:bd:d4:f6:c6:d2: e8:24:45:9a:0e:e3:82:f1:da:8f:01:19:9f:26:5c: 9e:a5:61:c3:d1:df:38:20:35:18:86:17:77:f8:2b: d8:87:17:1d:51:d8:7e:4f:3a:14:a4:67:9d:8b:23: b6:91:2a:4a:90:c3:9f:c6:5d:dd:61:47:3f:52:44: 2a:f2:21:87:e4:4b:f2:5c:fd:e4:6d:09:00:ca:ca: c4:fe:84:d0:02:48:31:0a:5a:5a:61:41:92:65:e2: 9b:94:bc:89:fb:c0:fc:b7:64:29:e8:b1:f3:49:27: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0B:32:38:5A:8A:FB:FF:C7:E8:2A:4E:34:C9:F2:B0:3E:81:B5:C4 X509v3 Authority Key Identifier: keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bd:6c:a8:f4:b0:7e:ae:7b:6c:ce:d1:79:92:17:ff:12:04: 1a:fa:a0:b1:53:fd:c0:79:9b:d7:5a:07:62:bb:b2:bf:ed:82: d9:03:a0:19:c4:52:84:4f:a7:14:58:75:69:32:40:00:95:9a: f5:4c:a2:3a:bd:36:bc:2e:0c:2e:27:14:5e:32:1f:d7:07:6a: 30:d7:5f:9a:59:72:3d:72:64:09:0b:12:6d:67:7d:0a:99:54: 6b:a3:94:bb:36:96:79:b2:f6:0c:6d:4c:d2:5e:5e:88:64:4c: 75:7a:ed:6c:2f:e4:c5:34:5e:1f:e3:6a:67:ad:59:f1:1a:25: 2c:ac:68:c5:b4:66:6a:04:d0:49:44:b3:ad:a9:7f:94:20:0e: 49:db:a5:39:d3:cd:20:7a:f1:27:68:9b:bc:21:a2:4f:61:ad: ec:a9:0b:e9:09:c2:37:46:22:c6:2a:72:7a:55:cb:bc:ee:97: 35:14:e1:5b:27:ef:56:d7:7f:ae:a7:b2:73:17:b8:fe:e7:06: 64:3c:9f:98:2e:3e:29:a1:a5:78:6e:41:63:f2:23:ce:61:6e: f6:b3:b9:94:f8:66:c2:a9:db:f9:11:85:9e:77:ce:e5:8a:16: 86:9e:42:3f:4e:c6:f6:5c:24:b4:11:d1:aa:71:ee:51:1b:a5: bf:60:31:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT9Qo+Fvv/k7typQBIQZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MzhjNWMyMmM5NzZkYTY1YTFmZDE2ZThmOWMwYzk0ZTI3 YTRiYTYwHhcNMjUxMjI1MDcwMTE2WhcNMjUxMjI2MDcwMTE2WjAzMTEwLwYDVQQD Eyg4MjBiMzIzODVhOGFmYmZmYzdlODJhNGUzNGM5ZjJiMDNlODFiNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyt0CFnOr/QFC2icJfcQNhykRiPK G0dG0tf5GLY0q0uM+xaL/WaJBisCAlhREOrNWZqPqarKxLQRPlYc5ZSZk/IaCGUB bGQqtavVbtYvrkePSpuCM9/ZqRoUrVpIpV0jY4G+xJO0/EopJ5MLaVP9OelW2zYr 6i2K16NQ8FsnaNTy0ELjrmS10fNgkKiDJXgAvdT2xtLoJEWaDuOC8dqPARmfJlye pWHD0d84IDUYhhd3+CvYhxcdUdh+TzoUpGediyO2kSpKkMOfxl3dYUc/UkQq8iGH 5EvyXP3kbQkAysrE/oTQAkgxClpaYUGSZeKblLyJ+8D8t2Qp6LHzSSfDTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIILMjhaivv/x+gqTjTJ8rA+gbXEMB8GA1UdIwQY MBaAFBg4xcIsl22mWh/Rbo+cDJTiekumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0RqRndpeVhiYVphSDlGdWo1d01sT0o2UzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjEyYzEtOTEzMy00YTJiLTlkZjgt OWI1MzdmNjNiNzVkLzEvR0RqRndpeVhiYVphSDlGdWo1d01sT0o2UzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82ZjEyYzEtOTEzMy00YTJiLTlkZjgtOWI1MzdmNjNiNzVk LzEvR0RqRndpeVhiYVphSDlGdWo1d01sT0o2UzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX71sqPSw fq57bM7ReZIX/xIEGvqgsVP9wHmb11oHYruyv+2C2QOgGcRShE+nFFh1aTJAAJWa 9UyiOr02vC4MLicUXjIf1wdqMNdfmllyPXJkCQsSbWd9CplUa6OUuzaWebL2DG1M 0l5eiGRMdXrtbC/kxTReH+NqZ61Z8RolLKxoxbRmagTQSUSzral/lCAOSdulOdPN IHrxJ2ibvCGiT2Gt7KkL6QnCN0YixipyelXLvO6XNRThWyfvVtd/rqeycxe4/ucG ZDyfmC4+KaGleG5BY/IjzmFu9rO5lPhmwqnb+RGFnnfO5YoWhp5CP07G9lwktBHR qnHuURulv2AxVw== -----END CERTIFICATE-----Generated at Thu Dec 25 16:00:27 2025 by rpki-client