This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json) Hash identifier: uBQEbUQ4hdw2wYMSlvNMBCnNlDQ9qkOz3hRkZ8BX9lc= Subject key identifier: 01:FE:82:EA:E6:36:1F:39:3B:8C:A7:F9:25:30:67:FB:04:6D:B4:19 Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510 Certificate serial: 019B3079F95E9BDE2D313EAF60F4C0770DBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft Manifest number: 0648 Signing time: Thu 18 Dec 2025 08:00:58 +0000 Manifest this update: Thu 18 Dec 2025 08:00:58 +0000 Manifest next update: Fri 19 Dec 2025 08:00:58 +0000 Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: 7YhxGoUtLoKzZe3QlOjLvpffKOElxbqOyHtJGfkHujw=) 2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:f9:5e:9b:de:2d:31:3e:af:60:f4:c0:77:0d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510 Validity Not Before: Dec 18 08:00:58 2025 GMT Not After : Dec 19 08:00:58 2025 GMT Subject: CN=01fe82eae6361f393b8ca7f9253067fb046db419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:1d:33:7c:75:84:1b:99:89:61:da:80:67: a2:8e:5b:af:c5:87:93:93:6c:a6:17:a9:19:16:4a: 1f:7c:44:08:a8:e5:6f:cc:87:0d:5c:80:80:8f:6d: 78:ff:a9:9a:e1:74:18:bb:68:fa:20:e8:ad:0c:05: 0f:59:a2:8b:ee:10:1a:bf:a3:af:98:2a:04:14:7f: 54:c7:cd:6a:be:34:ce:c8:d9:b9:af:82:a1:0b:c1: 00:30:c9:f1:17:c1:a9:35:7a:1f:1d:81:9d:28:db: 48:24:49:4f:b1:cc:ba:13:f8:09:ee:f5:ca:8d:9c: f4:f6:5e:9f:ec:5f:79:63:db:f8:a4:4c:6d:32:56: 12:52:21:eb:2b:57:13:ea:a1:9c:47:e6:3a:70:f2: ad:5f:13:c2:d4:33:8f:5b:15:28:0a:d0:85:4f:4c: f7:a1:36:50:48:3b:c8:85:59:bf:78:d9:90:fe:52: 70:78:ff:dc:09:d1:a3:79:9e:0a:88:0c:82:c0:8e: 45:f2:8d:8f:af:0d:8b:3d:da:d7:89:c0:01:39:41: 60:a3:6b:70:4f:19:e9:f7:c4:64:ea:ab:83:45:c2: 77:36:8e:d3:95:6b:c7:f4:ae:3f:8d:07:8a:5a:38: 7c:d4:80:74:43:4c:f4:77:fe:a4:ed:ed:ce:0f:b1: d0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FE:82:EA:E6:36:1F:39:3B:8C:A7:F9:25:30:67:FB:04:6D:B4:19 X509v3 Authority Key Identifier: keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:31:29:02:49:f0:61:06:06:a5:a3:cc:b8:62:84:b9:7a:07: 98:43:02:87:94:71:b9:9d:ea:5d:cd:bd:0c:fe:aa:24:ae:55: b3:3d:85:87:80:03:2b:f9:e3:1a:71:ab:53:56:20:20:74:12: 65:b0:a8:6f:c4:32:b4:da:fb:51:7a:dc:eb:99:a5:1a:3e:e4: 55:97:24:8e:22:1a:66:4c:63:bd:9f:8e:f1:8d:f2:7b:c3:2c: 0c:f7:9b:17:1b:ca:cd:d0:8b:f4:86:e0:9b:2c:45:ea:a5:07: 8c:b0:3d:0a:a9:16:14:a9:95:7f:c0:8b:18:8e:b3:0d:7c:31: 0f:9c:c2:28:74:41:72:3d:ff:ab:f5:c0:ad:fc:30:f0:03:a4: 46:28:84:05:07:b0:ea:b4:21:1e:63:03:4c:67:37:dc:d8:b0: 6a:a2:36:87:a4:03:3d:76:01:57:63:14:3f:91:6d:83:b6:9d: 95:12:9d:62:8f:36:e3:1e:46:0a:fc:9b:ee:bf:88:dc:b8:f0: b1:c5:ba:90:23:a6:16:df:9d:8c:9f:ab:b5:2b:17:f5:19:5b: 8b:95:d1:f0:a5:10:f5:20:9b:5b:f6:f5:a9:65:56:fe:90:f4: a8:ab:93:95:50:81:32:9a:b0:aa:b1:c4:c7:0c:90:84:14:e7: 4d:f5:90:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweflem94tMT6vYPTAdw26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTJjNGMzNzIzMjdmZGMyYzE3YjQ5NWI4NTg5MWE3NmRl NDI1MTAwHhcNMjUxMjE4MDgwMDU4WhcNMjUxMjE5MDgwMDU4WjAzMTEwLwYDVQQD EygwMWZlODJlYWU2MzYxZjM5M2I4Y2E3ZjkyNTMwNjdmYjA0NmRiNDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYkdM3x1hBuZiWHagGeijluvxYeT k2ymF6kZFkoffEQIqOVvzIcNXICAj214/6ma4XQYu2j6IOitDAUPWaKL7hAav6Ov mCoEFH9Ux81qvjTOyNm5r4KhC8EAMMnxF8GpNXofHYGdKNtIJElPscy6E/gJ7vXK jZz09l6f7F95Y9v4pExtMlYSUiHrK1cT6qGcR+Y6cPKtXxPC1DOPWxUoCtCFT0z3 oTZQSDvIhVm/eNmQ/lJweP/cCdGjeZ4KiAyCwI5F8o2Prw2LPdrXicABOUFgo2tw Txnp98Rk6quDRcJ3No7TlWvH9K4/jQeKWjh81IB0Q0z0d/6k7e3OD7HQIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAH+gurmNh85O4yn+SUwZ/sEbbQZMB8GA1UdIwQY MBaAFIJSxMNyMn/cLBe0lbhYkadt5CUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUt ZmVlMWQwMmYxMzAzLzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUtZmVlMWQwMmYxMzAz LzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITEpAknw YQYGpaPMuGKEuXoHmEMCh5RxuZ3qXc29DP6qJK5Vsz2Fh4ADK/njGnGrU1YgIHQS ZbCob8QytNr7UXrc65mlGj7kVZckjiIaZkxjvZ+O8Y3ye8MsDPebFxvKzdCL9Ibg myxF6qUHjLA9CqkWFKmVf8CLGI6zDXwxD5zCKHRBcj3/q/XArfww8AOkRiiEBQew 6rQhHmMDTGc33NiwaqI2h6QDPXYBV2MUP5Ftg7adlRKdYo824x5GCvyb7r+I3Ljw scW6kCOmFt+djJ+rtSsX9Rlbi5XR8KUQ9SCbW/b1qWVW/pD0qKuTlVCBMpqwqrHE xwyQhBTnTfWQIQ== -----END CERTIFICATE-----Generated at Thu Dec 18 15:24:15 2025 by rpki-client