This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft File: GL7k74fvph6QWaCm44LeNxsnqkw.mft (raw, json) Hash identifier: kFLAkDTynkZSzybGD86oCNEzT7fDGGYjr3yHbh44mF8= Subject key identifier: A4:39:20:C9:C5:7B:09:AB:A5:14:24:B3:8E:39:F7:18:60:F8:B1:F7 Authority key identifier: 18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C Certificate issuer: /CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c Certificate serial: 019B514EA9A7F9E1E1DDF62A7470F5E8DC9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft Manifest number: 50 Signing time: Wed 24 Dec 2025 17:01:08 +0000 Manifest this update: Wed 24 Dec 2025 17:01:08 +0000 Manifest next update: Thu 25 Dec 2025 17:01:08 +0000 Files and hashes: 1: Br98s9QhRuoQDApiowG5mfMYnLk.roa (hash: 1ggPGATGp7/SUZxuPNOuKEEw9HCSv0c3nDbnGDK2jT0=) 2: GL7k74fvph6QWaCm44LeNxsnqkw.crl (hash: 2vfzxtttXVS6WhfUwoKRsFdMf60B+ZvWuQXFH6HBD0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:a9:a7:f9:e1:e1:dd:f6:2a:74:70:f5:e8:dc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c Validity Not Before: Dec 24 17:01:08 2025 GMT Not After : Dec 25 17:01:08 2025 GMT Subject: CN=a43920c9c57b09aba51424b38e39f71860f8b1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:88:7b:58:62:13:46:43:96:fe:2e:27:40: 45:79:15:46:d3:09:99:0b:3c:50:90:c2:77:52:9a: fb:15:36:70:38:ac:5d:f0:67:c5:b2:5d:41:17:85: ab:03:49:b3:cb:d8:71:e5:da:66:76:aa:91:81:92: f9:c3:fa:db:9c:a7:65:b3:9c:53:57:f1:cc:31:26: 57:3c:46:9a:20:2d:71:eb:0a:cb:90:a9:f1:57:d7: b2:e3:dd:30:2b:0f:6e:22:5e:78:d3:c9:20:32:aa: 25:52:3c:94:d4:67:5f:ac:7b:67:60:de:8c:6f:a9: 12:06:32:c3:41:9e:49:82:d6:45:c6:63:92:2b:20: 70:85:7e:9f:ea:89:6d:dc:9f:9b:c2:6c:8a:0d:e4: 43:66:54:78:ab:6e:82:fe:52:3c:0a:fe:dc:4c:1e: 3d:b4:2e:24:72:17:0f:5f:9d:f1:0b:82:82:92:45: f3:62:9b:6c:3e:3e:1b:64:86:8a:a6:bd:94:ca:08: 62:27:30:26:4a:f9:c6:a7:34:6e:13:b7:e8:83:02: 0b:cd:fd:8e:71:93:0d:d8:07:a0:9e:72:01:7e:a5: ee:7a:7f:6b:ab:6e:07:52:9b:df:c9:b4:9c:6d:f3: a9:b1:dd:3e:f9:fc:2f:5a:f5:ec:6c:1f:5d:3d:96: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:39:20:C9:C5:7B:09:AB:A5:14:24:B3:8E:39:F7:18:60:F8:B1:F7 X509v3 Authority Key Identifier: keyid:18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ee:5a:ad:a2:77:9e:d2:e1:fd:e0:e3:78:34:2e:b1:4c:d7: 29:5f:a7:5c:cb:13:0d:6c:63:0e:fb:e7:33:ac:08:2d:23:46: 8b:05:27:10:85:c8:0f:04:7f:f0:67:e9:cb:b1:a9:9f:cb:99: ac:67:3d:a9:dc:79:fd:83:a0:3f:48:c4:02:80:d0:1b:23:24: 7f:69:10:37:b8:16:b0:57:1b:8a:97:22:e2:f2:e1:71:09:16: 45:29:c4:43:d1:06:3e:b5:00:67:97:bf:ed:22:91:c5:dc:79: 51:50:2d:00:0c:dc:93:b6:b6:42:a6:08:18:27:49:6e:09:7d: 55:05:f1:06:86:4e:3a:95:14:49:8a:c5:06:82:a8:1a:16:0c: 7a:66:fa:40:1d:e4:fe:bd:f0:f3:0c:64:95:f0:de:da:a9:1f: b0:e9:9d:00:11:fa:3c:83:e4:6e:ea:d0:51:21:ec:55:6c:2c: 15:da:0a:60:cd:5c:d1:f1:9c:a6:58:bd:93:01:15:bd:e7:d0: b6:5c:2b:97:1b:8e:14:05:84:17:ae:fe:c8:10:eb:d1:a1:df: 70:53:ea:17:8e:61:18:0d:70:81:e9:b2:80:a6:5a:c9:2f:77: 92:a6:b9:97:0b:7e:d5:7f:c4:55:96:47:ed:97:fb:1b:f2:08: f7:bb:0d:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTqmn+eHh3fYqdHD16NyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YmVlNGVmODdlZmE2MWU5MDU5YTBhNmUzODJkZTM3MWIy N2FhNGMwHhcNMjUxMjI0MTcwMTA4WhcNMjUxMjI1MTcwMTA4WjAzMTEwLwYDVQQD EyhhNDM5MjBjOWM1N2IwOWFiYTUxNDI0YjM4ZTM5ZjcxODYwZjhiMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzWIe1hiE0ZDlv4uJ0BFeRVG0wmZ CzxQkMJ3Upr7FTZwOKxd8GfFsl1BF4WrA0mzy9hx5dpmdqqRgZL5w/rbnKdls5xT V/HMMSZXPEaaIC1x6wrLkKnxV9ey490wKw9uIl5408kgMqolUjyU1GdfrHtnYN6M b6kSBjLDQZ5JgtZFxmOSKyBwhX6f6olt3J+bwmyKDeRDZlR4q26C/lI8Cv7cTB49 tC4kchcPX53xC4KCkkXzYptsPj4bZIaKpr2UyghiJzAmSvnGpzRuE7fogwILzf2O cZMN2AegnnIBfqXuen9rq24HUpvfybScbfOpsd0++fwvWvXsbB9dPZa3cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQ5IMnFewmrpRQks4459xhg+LH3MB8GA1UdIwQY MBaAFBi+5O+H76YekFmgpuOC3jcbJ6pMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80YTRkNDItNDQzYy00NzFkLWExNTMt MTMyODg1YzkwMmIxLzEvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS80YTRkNDItNDQzYy00NzFkLWExNTMtMTMyODg1YzkwMmIx LzEvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+5araJ3 ntLh/eDjeDQusUzXKV+nXMsTDWxjDvvnM6wILSNGiwUnEIXIDwR/8Gfpy7Gpn8uZ rGc9qdx5/YOgP0jEAoDQGyMkf2kQN7gWsFcbipci4vLhcQkWRSnEQ9EGPrUAZ5e/ 7SKRxdx5UVAtAAzck7a2QqYIGCdJbgl9VQXxBoZOOpUUSYrFBoKoGhYMemb6QB3k /r3w8wxklfDe2qkfsOmdABH6PIPkburQUSHsVWwsFdoKYM1c0fGcpli9kwEVvefQ tlwrlxuOFAWEF67+yBDr0aHfcFPqF45hGA1wgemygKZayS93kqa5lwt+1X/EVZZH 7Zf7G/II97sNZg== -----END CERTIFICATE-----Generated at Wed Dec 24 18:37:19 2025 by rpki-client