This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json) Hash identifier: gvI8G16eoH5+hoGNohjyoQgqXvW6mU6bm1V45591dxA= Subject key identifier: EB:5C:E5:A6:3E:88:12:61:87:BF:36:92:C9:D5:7B:04:19:11:FD:53 Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62 Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62 Certificate serial: 019B4D039F5665E6700D240D775CF0A05C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft Manifest number: 05E1 Signing time: Tue 23 Dec 2025 21:00:41 +0000 Manifest this update: Tue 23 Dec 2025 21:00:41 +0000 Manifest next update: Wed 24 Dec 2025 21:00:41 +0000 Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: lrAgBzlm6iLLmpj42qjn+4ac6rpn1HBr1zt4S2M4My4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:03:9f:56:65:e6:70:0d:24:0d:77:5c:f0:a0:5c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62 Validity Not Before: Dec 23 21:00:41 2025 GMT Not After : Dec 24 21:00:41 2025 GMT Subject: CN=eb5ce5a63e88126187bf3692c9d57b041911fd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:1c:af:29:ec:ae:a3:db:a4:c5:7c:df:a2: 9e:a9:11:eb:33:96:82:5c:05:e2:ef:fa:00:4c:b5: 38:89:4a:d6:81:72:dc:76:55:e1:78:4a:87:c0:29: ea:bb:90:c8:d9:87:c4:85:b6:0b:3b:6e:a6:ad:71: 45:4f:48:b3:b1:fe:56:3c:03:c9:a6:e5:c6:41:ea: 50:41:cf:66:67:52:04:23:9d:89:42:f6:7f:8e:6a: 2c:92:18:56:98:d7:f5:1e:5d:90:7f:4f:10:67:39: 19:cc:62:59:30:d1:a1:02:02:95:9e:83:2b:34:5d: a9:4b:58:43:5c:89:a3:e3:b3:3f:bf:d9:63:8b:c0: 4f:b0:7a:a0:63:8d:4d:40:d8:4b:0a:57:4b:00:bd: c0:80:3f:03:c8:fa:04:48:18:de:49:fd:cf:4d:6c: 2a:2b:a6:6d:c5:82:99:89:79:04:6e:8a:af:ca:0e: ec:02:fe:e4:87:36:0d:58:db:1f:10:35:15:b9:5b: b3:eb:be:8a:97:02:48:61:7a:49:48:53:39:01:48: 4c:26:23:1f:8f:75:6b:72:a4:9c:ea:a9:c8:f0:1b: 1f:7e:f0:42:2e:7d:c9:89:10:12:b2:20:56:cc:65: ce:3f:66:37:25:81:9c:18:54:d1:d1:ac:50:9f:52: 5e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5C:E5:A6:3E:88:12:61:87:BF:36:92:C9:D5:7B:04:19:11:FD:53 X509v3 Authority Key Identifier: keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:2f:7a:53:ec:9a:ae:c1:21:12:c8:58:6c:e3:c0:e7:3a:ae: 73:d9:39:09:f1:16:e2:aa:df:1f:34:fc:eb:8a:ba:34:4b:d5: 72:0e:4f:77:d3:a0:0b:05:0c:c7:d3:9b:c8:86:70:f2:a0:c1: 73:d0:df:6c:d6:93:b8:48:0c:ab:06:5e:e2:40:13:67:76:d8: f6:87:96:28:98:9e:85:77:25:92:15:33:af:73:d6:5c:31:69: 6d:bc:dc:ad:5d:86:04:84:52:3d:2c:b0:bd:ec:e9:a4:b5:1d: 46:e5:d3:53:6c:35:ac:50:30:89:b6:d0:41:2e:72:b5:0c:35: f8:83:ab:c3:1b:25:76:1a:49:c5:6f:96:bc:10:c5:11:d7:55: 34:8b:41:df:db:de:eb:df:2a:d1:ca:eb:65:bd:21:de:ae:64: 86:f2:d7:52:71:5d:77:9f:07:ef:eb:29:d0:fb:b1:9a:7c:c0: 38:36:7f:ef:d4:e2:6d:23:9f:89:1d:5b:14:9a:6a:dc:57:84: 6f:0c:7b:11:73:a5:66:8a:52:97:ea:d3:48:26:27:78:26:d0: 60:c7:49:de:bb:f4:db:98:66:ee:21:14:6a:9d:d5:62:d7:1b: 77:1b:d5:93:41:69:67:8b:f2:7a:73:b9:16:b6:c1:48:59:59: 2a:74:9c:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNA59WZeZwDSQNd1zwoFxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjBjYWQ3ZmM1OGJjODQyNThkZGMxNTMzZjRhMGRmMjQ4 OWVjNjIwHhcNMjUxMjIzMjEwMDQxWhcNMjUxMjI0MjEwMDQxWjAzMTEwLwYDVQQD EyhlYjVjZTVhNjNlODgxMjYxODdiZjM2OTJjOWQ1N2IwNDE5MTFmZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxccrynsrqPbpMV836KeqRHrM5aC XAXi7/oATLU4iUrWgXLcdlXheEqHwCnqu5DI2YfEhbYLO26mrXFFT0izsf5WPAPJ puXGQepQQc9mZ1IEI52JQvZ/jmoskhhWmNf1Hl2Qf08QZzkZzGJZMNGhAgKVnoMr NF2pS1hDXImj47M/v9lji8BPsHqgY41NQNhLCldLAL3AgD8DyPoESBjeSf3PTWwq K6ZtxYKZiXkEboqvyg7sAv7khzYNWNsfEDUVuVuz676KlwJIYXpJSFM5AUhMJiMf j3VrcqSc6qnI8BsffvBCLn3JiRASsiBWzGXOP2Y3JYGcGFTR0axQn1JeYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtc5aY+iBJhh782ksnVewQZEf1TMB8GA1UdIwQY MBaAFBnwytf8WLyEJY3cFTP0oN8kiexiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODct NTdhNDJkZjBjODY3LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODctNTdhNDJkZjBjODY3 LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEy96U+ya rsEhEshYbOPA5zquc9k5CfEW4qrfHzT864q6NEvVcg5Pd9OgCwUMx9ObyIZw8qDB c9DfbNaTuEgMqwZe4kATZ3bY9oeWKJiehXclkhUzr3PWXDFpbbzcrV2GBIRSPSyw vezppLUdRuXTU2w1rFAwibbQQS5ytQw1+IOrwxsldhpJxW+WvBDFEddVNItB39ve 698q0crrZb0h3q5khvLXUnFdd58H7+sp0PuxmnzAODZ/79TibSOfiR1bFJpq3FeE bwx7EXOlZopSl+rTSCYneCbQYMdJ3rv025hm7iEUap3VYtcbdxvVk0FpZ4vyenO5 FrbBSFlZKnSc8A== -----END CERTIFICATE-----Generated at Wed Dec 24 03:37:15 2025 by rpki-client