This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json) Hash identifier: pMKNNXMyXEUysMEB6nBpITxzNNPuP73v09VDkLFH28s= Subject key identifier: C4:FF:2A:B7:7A:C6:ED:8D:03:22:DA:AF:9D:BC:D4:B2:FE:8F:8C:F3 Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62 Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62 Certificate serial: 019B52CEC41115EA832E264C3648BE23204A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft Manifest number: 05E4 Signing time: Thu 25 Dec 2025 00:00:40 +0000 Manifest this update: Thu 25 Dec 2025 00:00:40 +0000 Manifest next update: Fri 26 Dec 2025 00:00:40 +0000 Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: tn7sjoDYgr5k55VYOpc5w7/UMPRlrG0qflrqLuSwV00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:c4:11:15:ea:83:2e:26:4c:36:48:be:23:20:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62 Validity Not Before: Dec 25 00:00:40 2025 GMT Not After : Dec 26 00:00:40 2025 GMT Subject: CN=c4ff2ab77ac6ed8d0322daaf9dbcd4b2fe8f8cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:87:2a:bd:01:81:e7:50:6a:50:21:49:50: 6d:63:47:0f:44:c2:1a:d0:83:71:06:22:7f:d0:73: a6:3c:0d:a6:c1:f6:42:bb:4b:cb:d8:86:9e:ff:8d: c1:ba:93:78:31:fc:91:9a:42:99:31:40:20:e5:48: 01:12:31:d4:6b:3e:c6:68:1f:70:93:44:91:87:85: 61:33:e3:56:6e:48:18:2e:af:58:ee:eb:3a:8e:e7: d9:aa:76:4e:93:3e:3c:de:b0:c8:cd:02:c9:05:ce: 1e:ae:8b:c3:ee:52:46:55:ba:67:79:84:d6:60:1b: 2e:16:c3:b6:72:cc:f6:c2:c1:db:d4:f5:76:89:7c: 5b:3b:4e:8b:6d:c1:05:3c:2b:5e:5e:e8:d2:4f:4e: b2:4e:d7:14:26:62:e2:07:64:35:88:b4:72:ea:52: 87:20:f6:2e:7d:d2:b1:21:22:1c:10:71:61:d0:2b: 34:25:4d:1e:a7:71:d2:ba:f9:b2:2d:92:50:e0:db: 50:5e:1f:c4:c8:ed:94:00:79:7d:82:e5:ad:ef:57: 1c:e1:fd:bc:c5:40:d6:8c:cf:48:f1:d5:96:8b:68: 5f:ef:c6:db:3c:58:ec:3a:02:63:ad:50:b5:c8:9f: d9:5e:47:3d:29:19:50:22:77:19:67:99:3f:60:e6: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FF:2A:B7:7A:C6:ED:8D:03:22:DA:AF:9D:BC:D4:B2:FE:8F:8C:F3 X509v3 Authority Key Identifier: keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e1:7c:d2:16:e9:c2:50:13:9e:50:39:49:aa:33:d5:08:35: 16:e3:d5:41:94:78:a2:d3:03:07:0f:59:d4:25:8a:14:28:6a: ba:8b:e7:06:9b:d7:40:6c:80:03:3c:22:a6:8c:04:cd:2c:bf: ac:66:c2:7b:75:7d:ea:a5:bf:13:88:37:b1:01:10:fb:93:98: 80:e2:a8:aa:06:74:7e:dd:12:2e:36:ff:7d:e9:af:28:fb:18: 32:45:40:35:81:75:67:42:7c:84:4b:40:ed:c2:a3:a8:86:6a: 21:8e:94:ae:bd:6e:28:37:70:f5:33:49:f2:01:37:21:63:b6: f4:00:c5:75:4c:e2:d0:42:5d:10:1c:db:c6:8d:a6:41:93:92: 86:e9:b7:4b:d6:d5:94:cd:de:e1:e0:3b:71:c3:d3:dd:30:0d: cd:c5:eb:d8:72:b6:84:1a:42:8b:0e:27:61:46:39:16:89:24: 9b:d4:3f:d3:ad:86:9b:ea:e2:f1:4a:ed:6a:10:c8:cf:5b:5b: fc:3b:ed:d5:6b:4e:9c:bb:51:c5:7c:9f:aa:89:91:aa:e0:b7: 3f:88:2b:62:6a:0a:d1:e4:ea:cc:39:ac:0e:8f:0c:1a:64:29: 0d:3b:e8:77:56:d7:ae:b8:37:b7:c1:f6:ca:27:31:cd:25:17: cb:67:27:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzsQRFeqDLiZMNki+IyBKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjBjYWQ3ZmM1OGJjODQyNThkZGMxNTMzZjRhMGRmMjQ4 OWVjNjIwHhcNMjUxMjI1MDAwMDQwWhcNMjUxMjI2MDAwMDQwWjAzMTEwLwYDVQQD EyhjNGZmMmFiNzdhYzZlZDhkMDMyMmRhYWY5ZGJjZDRiMmZlOGY4Y2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LuHKr0BgedQalAhSVBtY0cPRMIa 0INxBiJ/0HOmPA2mwfZCu0vL2Iae/43BupN4MfyRmkKZMUAg5UgBEjHUaz7GaB9w k0SRh4VhM+NWbkgYLq9Y7us6jufZqnZOkz483rDIzQLJBc4erovD7lJGVbpneYTW YBsuFsO2csz2wsHb1PV2iXxbO06LbcEFPCteXujST06yTtcUJmLiB2Q1iLRy6lKH IPYufdKxISIcEHFh0Cs0JU0ep3HSuvmyLZJQ4NtQXh/EyO2UAHl9guWt71cc4f28 xUDWjM9I8dWWi2hf78bbPFjsOgJjrVC1yJ/ZXkc9KRlQIncZZ5k/YOaRWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT/Krd6xu2NAyLar5281LL+j4zzMB8GA1UdIwQY MBaAFBnwytf8WLyEJY3cFTP0oN8kiexiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODct NTdhNDJkZjBjODY3LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODctNTdhNDJkZjBjODY3 LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuF80hbp wlATnlA5Saoz1Qg1FuPVQZR4otMDBw9Z1CWKFChquovnBpvXQGyAAzwipowEzSy/ rGbCe3V96qW/E4g3sQEQ+5OYgOKoqgZ0ft0SLjb/femvKPsYMkVANYF1Z0J8hEtA 7cKjqIZqIY6Urr1uKDdw9TNJ8gE3IWO29ADFdUzi0EJdEBzbxo2mQZOShum3S9bV lM3e4eA7ccPT3TANzcXr2HK2hBpCiw4nYUY5Fokkm9Q/062Gm+ri8UrtahDIz1tb /Dvt1WtOnLtRxXyfqomRquC3P4grYmoK0eTqzDmsDo8MGmQpDTvod1bXrrg3t8H2 yicxzSUXy2cnpQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:03:43 2025 by rpki-client