This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft File: Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft (raw, json) Hash identifier: 6CMNGwyIuqBPQuzLSYjeil6bZceTsJeoZOtzov9kqtw= Subject key identifier: AF:F8:4F:0E:BC:90:62:7C:B6:B8:05:EE:77:7E:10:1B:E8:CD:AF:85 Authority key identifier: 1A:5F:EE:44:C4:07:FD:0D:8A:49:53:0E:FA:E3:C2:7B:FC:8C:BF:59 Certificate issuer: /CN=1a5fee44c407fd0d8a49530efae3c27bfc8cbf59 Certificate serial: 019B39EB279B1612449BE2CF14F1DA1A31D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft Manifest number: 07 Signing time: Sat 20 Dec 2025 04:01:10 +0000 Manifest this update: Sat 20 Dec 2025 04:01:10 +0000 Manifest next update: Sun 21 Dec 2025 04:01:10 +0000 Files and hashes: 1: Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.crl (hash: gAPseaRg01nqLPACHEEQNv8v/aQccI2Kb97gU2PR9qs=) 2: IuR2fV6tf7K6Izd_TevUjm1QpPM.asa (hash: emvaUHAZKdAu3XX04l4AghDFW6GxkQO/OSarFY+vPUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft rsync://rpki.ripe.net/repository/DEFAULT/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:27:9b:16:12:44:9b:e2:cf:14:f1:da:1a:31:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5fee44c407fd0d8a49530efae3c27bfc8cbf59 Validity Not Before: Dec 20 04:01:10 2025 GMT Not After : Dec 21 04:01:10 2025 GMT Subject: CN=aff84f0ebc90627cb6b805ee777e101be8cdaf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:81:36:00:42:87:ad:23:c1:c6:49:50:5d:4f: 3b:e0:3f:6d:dc:a5:e8:00:56:bb:78:1b:ee:6e:ad: 3a:0e:2a:80:82:b6:ff:ef:91:01:f3:9d:6b:ca:79: 61:b0:b4:2c:83:c2:63:26:8a:8f:9b:f7:d1:ae:79: bb:5f:76:4a:d6:c6:f1:75:40:af:6e:b0:bb:01:9d: ba:48:e7:08:55:47:22:96:1e:24:aa:b7:8c:33:6b: 67:27:3f:e5:7a:0c:7e:85:b0:89:7f:7a:39:96:6a: bf:cd:7b:7f:44:0f:56:11:b2:47:f5:03:32:88:94: 25:6e:cc:7f:45:5f:7a:7b:17:bc:29:97:00:21:ce: a5:77:a9:a5:b0:da:b9:92:32:79:ba:b4:c7:6f:f6: 6d:23:38:ee:cd:73:9a:62:b4:92:77:ee:1d:37:84: 3f:01:11:7e:4e:7c:4d:f8:87:67:7c:d9:58:5f:10: 1c:97:20:a5:6d:2b:9b:87:1d:bc:a2:31:a2:7d:76: 87:13:c4:a8:6a:93:ad:68:6b:85:b2:6c:c8:a2:12: 2b:6d:e4:c2:47:95:e5:8d:d4:61:8a:2d:c0:77:c9: 64:7e:8f:8a:e9:94:c8:dd:55:a7:46:b6:a1:e6:43: 07:93:87:4a:be:b4:9d:89:2d:7b:69:fe:31:47:e1: cb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F8:4F:0E:BC:90:62:7C:B6:B8:05:EE:77:7E:10:1B:E8:CD:AF:85 X509v3 Authority Key Identifier: keyid:1A:5F:EE:44:C4:07:FD:0D:8A:49:53:0E:FA:E3:C2:7B:FC:8C:BF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2f:b9:6e:77:79:14:b6:79:87:2a:e1:79:cb:ea:b3:5b:1d: 3c:02:ee:12:4e:b2:ac:95:af:25:80:2a:91:57:50:9e:a7:ca: 1f:07:51:4c:86:2e:e7:f3:fa:26:8e:f7:90:80:01:f9:98:9f: 31:f1:7f:94:bc:04:fe:31:22:83:9c:53:68:35:ff:4a:9e:67: 96:2a:62:9b:86:c6:9f:ea:75:56:95:86:05:f7:e5:2e:74:43: 1c:dc:f5:0d:a5:22:a2:a1:95:b2:93:f4:9d:31:ec:0d:98:06: a5:fa:f6:a2:34:05:a1:0c:5e:5c:7c:4b:b8:e0:cb:c5:56:d5: ab:dd:98:61:49:e6:b5:c8:f6:a1:cd:35:9e:97:ee:ad:a9:65: ff:05:f4:69:00:ef:4f:45:75:5f:3a:2b:b7:c0:82:38:50:d2: 33:f2:ae:8f:01:ed:34:6a:dd:9e:66:78:b4:08:a3:c9:37:30: 23:29:79:cf:6e:3f:e4:40:15:88:32:f3:1b:cc:6d:58:de:75: 15:73:6c:3d:08:89:44:85:08:0f:3b:ab:cd:dc:6b:a7:5f:71: 63:ea:69:6a:d5:de:f8:a4:ee:3a:66:1a:4d:1d:7c:11:21:21: d2:76:25:6c:a2:6c:3d:15:e8:c6:e9:fc:4c:10:d1:38:95:26: 6d:e3:ea:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56yebFhJEm+LPFPHaGjHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNWZlZTQ0YzQwN2ZkMGQ4YTQ5NTMwZWZhZTNjMjdiZmM4 Y2JmNTkwHhcNMjUxMjIwMDQwMTEwWhcNMjUxMjIxMDQwMTEwWjAzMTEwLwYDVQQD EyhhZmY4NGYwZWJjOTA2MjdjYjZiODA1ZWU3NzdlMTAxYmU4Y2RhZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IE2AEKHrSPBxklQXU874D9t3KXo AFa7eBvubq06DiqAgrb/75EB851rynlhsLQsg8JjJoqPm/fRrnm7X3ZK1sbxdUCv brC7AZ26SOcIVUcilh4kqreMM2tnJz/legx+hbCJf3o5lmq/zXt/RA9WEbJH9QMy iJQlbsx/RV96exe8KZcAIc6ld6mlsNq5kjJ5urTHb/ZtIzjuzXOaYrSSd+4dN4Q/ ARF+TnxN+IdnfNlYXxAclyClbSubhx28ojGifXaHE8SoapOtaGuFsmzIohIrbeTC R5XljdRhii3Ad8lkfo+K6ZTI3VWnRrah5kMHk4dKvrSdiS17af4xR+HLywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/4Tw68kGJ8trgF7nd+EBvoza+FMB8GA1UdIwQY MBaAFBpf7kTEB/0NiklTDvrjwnv8jL9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xfdVJNUUhfUTJLU1ZNTy11UENlX3lNdjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kMzQ4ZjQtNWU3ZC00NmE5LTllNDYt MTA2ZTJhNDczNWRhLzEvR2xfdVJNUUhfUTJLU1ZNTy11UENlX3lNdjFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kMzQ4ZjQtNWU3ZC00NmE5LTllNDYtMTA2ZTJhNDczNWRh LzEvR2xfdVJNUUhfUTJLU1ZNTy11UENlX3lNdjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS+5bnd5 FLZ5hyrhecvqs1sdPALuEk6yrJWvJYAqkVdQnqfKHwdRTIYu5/P6Jo73kIAB+Zif MfF/lLwE/jEig5xTaDX/Sp5nlipim4bGn+p1VpWGBfflLnRDHNz1DaUioqGVspP0 nTHsDZgGpfr2ojQFoQxeXHxLuODLxVbVq92YYUnmtcj2oc01npfurall/wX0aQDv T0V1Xzort8CCOFDSM/KujwHtNGrdnmZ4tAijyTcwIyl5z24/5EAViDLzG8xtWN51 FXNsPQiJRIUIDzurzdxrp19xY+ppatXe+KTuOmYaTR18ESEh0nYlbKJsPRXoxun8 TBDROJUmbePqbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:10 2025 by rpki-client