This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json) Hash identifier: worRf0RxtxEgzy/dSgW8c1+XKPThyxk//gJwCsb1Hj8= Subject key identifier: 23:34:F7:36:A8:B8:CA:74:ED:61:07:AA:5F:0D:55:E1:2D:45:E2:5E Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0 Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0 Certificate serial: 019B40FFAB0E27A1C9719E2A2E6C9467FD65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft Manifest number: 1786 Signing time: Sun 21 Dec 2025 13:00:55 +0000 Manifest this update: Sun 21 Dec 2025 13:00:55 +0000 Manifest next update: Mon 22 Dec 2025 13:00:55 +0000 Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: M5+W7GeP5s3USD+qPP62E+ZM2T7IhsqyIY7bClnVyzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:ab:0e:27:a1:c9:71:9e:2a:2e:6c:94:67:fd:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0 Validity Not Before: Dec 21 13:00:55 2025 GMT Not After : Dec 22 13:00:55 2025 GMT Subject: CN=2334f736a8b8ca74ed6107aa5f0d55e12d45e25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:f2:d4:cb:86:cc:89:96:b5:57:78:bf:93: b4:84:a8:76:a0:02:91:73:ec:a8:33:4b:6a:d1:b2: dd:da:b2:6c:8b:0d:f2:b5:69:d4:91:d5:f8:2a:7f: c2:f0:73:7e:e0:88:c6:0b:71:44:3b:53:a7:87:c8: b0:5a:d9:d2:0d:94:5a:e1:66:3b:60:5e:b1:20:93: c1:02:c4:8c:fe:cd:ee:e7:cc:8f:23:78:63:dc:7c: a3:00:51:a6:58:84:e3:74:43:64:fb:48:2c:8f:74: 64:22:e5:ac:33:f3:c2:c8:30:e8:a6:a7:72:a4:9a: dc:55:1f:27:38:43:f8:9e:1a:cd:f9:cc:95:24:d3: 5c:0e:cb:d7:42:fb:c6:a9:7e:d6:0c:b8:c3:80:d6: ff:49:67:77:f6:0f:e7:45:99:8a:83:ab:2b:5a:ae: ba:e1:97:ca:e7:6e:5b:22:ab:bd:45:8e:b4:9c:0f: bd:4c:17:2a:10:ff:3e:d1:c5:eb:ab:1a:67:ff:16: d3:29:55:40:78:49:a6:14:fd:63:50:c7:f0:19:e3: 90:2f:96:0a:b5:07:4f:97:f6:79:f9:d3:13:03:c1: 14:c4:5f:ae:62:f5:5a:b5:f5:0c:dc:d9:0f:5a:77: 8f:c9:73:be:f7:c3:2e:13:44:1f:f8:b2:d7:f3:f5: 8e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:34:F7:36:A8:B8:CA:74:ED:61:07:AA:5F:0D:55:E1:2D:45:E2:5E X509v3 Authority Key Identifier: keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:55:17:c3:39:0c:d6:8b:2d:bc:99:ed:4b:2c:aa:2c:bd:ad: 1e:ce:3e:b6:a0:c7:f9:39:42:30:17:8c:6b:49:7a:fd:94:67: 70:51:ce:54:a7:aa:06:62:ba:9e:fd:2d:a3:60:d1:0b:e5:f2: b6:ea:be:c2:9a:82:62:d8:50:05:b4:dc:6c:af:37:1d:30:34: 3e:03:0f:8e:d6:60:17:4f:68:2b:83:7d:a8:c9:e3:89:bb:56: 58:8a:16:99:93:11:ff:83:91:a3:33:f7:80:04:e6:c4:58:e1: eb:da:ea:d5:de:33:07:7d:15:78:32:e9:e6:9f:91:4d:f9:ee: 99:c6:e5:df:04:7b:67:30:71:63:e9:08:eb:b8:a2:d8:1c:f2: 35:f8:5a:9c:33:55:39:46:b7:a8:ba:61:40:38:89:4c:41:31: 30:87:ae:4d:4e:69:59:6b:56:ea:51:b8:69:a4:eb:bb:09:0a: 27:9c:43:c6:61:01:85:9a:d5:cd:46:96:5e:90:ea:18:b8:72: 05:5b:d3:04:82:db:50:ac:58:32:a9:d9:21:1e:5b:4f:68:19: 01:e0:32:68:24:7e:6e:d9:1c:73:8f:56:42:d6:2f:38:e3:03: a0:3c:9e:2c:67:64:c2:9e:8b:12:6e:4b:b2:0c:05:fe:ef:12: 33:8d:f1:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/6sOJ6HJcZ4qLmyUZ/1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTk0OTViNzJmZjAxNTg3OGMxMzE0ZDI0NzU5YjZlOTE0 N2E4ZTAwHhcNMjUxMjIxMTMwMDU1WhcNMjUxMjIyMTMwMDU1WjAzMTEwLwYDVQQD EygyMzM0ZjczNmE4YjhjYTc0ZWQ2MTA3YWE1ZjBkNTVlMTJkNDVlMjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYDy1MuGzImWtVd4v5O0hKh2oAKR c+yoM0tq0bLd2rJsiw3ytWnUkdX4Kn/C8HN+4IjGC3FEO1Onh8iwWtnSDZRa4WY7 YF6xIJPBAsSM/s3u58yPI3hj3HyjAFGmWITjdENk+0gsj3RkIuWsM/PCyDDopqdy pJrcVR8nOEP4nhrN+cyVJNNcDsvXQvvGqX7WDLjDgNb/SWd39g/nRZmKg6srWq66 4ZfK525bIqu9RY60nA+9TBcqEP8+0cXrqxpn/xbTKVVAeEmmFP1jUMfwGeOQL5YK tQdPl/Z5+dMTA8EUxF+uYvVatfUM3NkPWnePyXO+98MuE0Qf+LLX8/WOLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCM09zaouMp07WEHql8NVeEtReJeMB8GA1UdIwQY MBaAFIFZSVty/wFYeMExTSR1m26RR6jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmIt OTAyNGIwZDIyNmM2LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmItOTAyNGIwZDIyNmM2 LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1UXwzkM 1ostvJntSyyqLL2tHs4+tqDH+TlCMBeMa0l6/ZRncFHOVKeqBmK6nv0to2DRC+Xy tuq+wpqCYthQBbTcbK83HTA0PgMPjtZgF09oK4N9qMnjibtWWIoWmZMR/4ORozP3 gATmxFjh69rq1d4zB30VeDLp5p+RTfnumcbl3wR7ZzBxY+kI67ii2BzyNfhanDNV OUa3qLphQDiJTEExMIeuTU5pWWtW6lG4aaTruwkKJ5xDxmEBhZrVzUaWXpDqGLhy BVvTBILbUKxYMqnZIR5bT2gZAeAyaCR+btkcc49WQtYvOOMDoDyeLGdkwp6LEm5L sgwF/u8SM43x6A== -----END CERTIFICATE-----Generated at Sun Dec 21 15:43:20 2025 by rpki-client