This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json) Hash identifier: aP1qb+WgKVbaAIq9nz8sKErX8X373TGgLcNz3uj3r+s= Subject key identifier: BD:79:2E:B4:24:82:08:9C:33:99:8D:70:7C:94:C4:69:D5:51:EE:DE Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57 Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557 Certificate serial: 019B32D68CD0982331D3D359706D076C351F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft Manifest number: 0E2C Signing time: Thu 18 Dec 2025 19:01:20 +0000 Manifest this update: Thu 18 Dec 2025 19:01:20 +0000 Manifest next update: Fri 19 Dec 2025 19:01:20 +0000 Files and hashes: 1: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (hash: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=) 2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: EY793EsMZrVZGDPtsG+6GWIRO9gZQ3i0XrFZYB7VXQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:8c:d0:98:23:31:d3:d3:59:70:6d:07:6c:35:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557 Validity Not Before: Dec 18 19:01:20 2025 GMT Not After : Dec 19 19:01:20 2025 GMT Subject: CN=bd792eb42482089c33998d707c94c469d551eede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:7b:80:58:ff:eb:b7:4a:cd:14:8e:75:68: c6:42:8d:ae:4a:4a:87:91:cb:2d:15:ae:65:20:28: f4:f2:aa:8e:68:ee:e9:a4:76:45:b4:65:4b:e1:8f: 1f:ad:9c:db:bb:90:30:8a:b6:3d:ef:ab:01:77:44: 31:10:82:bc:8e:ca:72:a9:82:57:d0:da:d3:2e:50: 52:f7:80:70:80:7d:00:2a:71:8a:c6:f5:ec:44:a6: a6:d4:eb:d5:95:47:15:a7:53:c6:cc:7e:2b:4b:0b: 67:b7:e0:50:13:37:8b:c9:d3:c7:d8:c7:75:38:70: 83:3a:dd:1d:1f:75:cf:0d:1e:30:4a:b7:f7:8e:26: 82:c2:47:eb:a1:3c:01:b5:1f:4b:e2:05:b1:f9:80: 11:f6:58:df:b4:b5:34:db:0d:76:bf:5d:d6:db:d2: 87:bb:72:3c:74:5b:b4:95:1b:59:db:41:08:26:a5: 2c:c6:3d:a4:ef:38:97:93:59:dd:89:bc:95:e3:b2: a8:b7:6c:d4:d0:65:83:db:79:5e:88:5c:98:25:2c: 2e:c2:d8:f1:8c:14:4d:ff:6c:9e:6d:d8:72:2f:61: 0b:0c:7b:b3:f0:48:9c:c7:ea:93:23:a7:82:27:7d: 4f:2a:c8:d8:9a:01:86:3f:19:b1:1a:bf:73:a5:72: 8b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:79:2E:B4:24:82:08:9C:33:99:8D:70:7C:94:C4:69:D5:51:EE:DE X509v3 Authority Key Identifier: keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:65:2c:b9:45:22:dc:a9:10:48:53:06:30:84:d1:f7:25:2e: c4:f2:56:17:a8:1b:16:55:23:3a:07:ad:5d:72:1b:a5:88:99: 26:2b:0c:a2:90:8f:c4:e8:e4:c2:97:69:f7:6a:74:ed:26:14: ab:05:7c:5a:97:39:9b:d5:b0:cd:22:0c:54:59:2e:60:e9:c3: 93:14:3f:06:3c:9d:b2:fe:d3:32:38:71:38:4e:f9:a1:5f:1d: 5d:70:6d:81:8a:f5:d2:b2:b7:6e:74:15:29:8d:af:73:6f:af: 5a:4e:b4:25:07:d3:64:de:6b:13:78:19:20:73:a8:0b:e1:d4: 46:2e:99:92:93:77:d3:5a:9d:41:4e:7d:bc:d2:dd:b9:c0:fb: 5a:2f:51:df:64:60:80:b1:8d:88:8a:23:67:42:bd:02:1f:2d: 0f:38:05:02:72:ad:6d:89:09:15:30:55:32:51:57:e9:76:06: e2:d6:51:08:41:16:64:fe:72:a2:6b:6c:51:3f:68:2b:ad:4d: 17:ac:87:06:76:69:a7:80:68:15:86:6d:d7:1e:81:f9:df:1b: b4:17:ea:73:58:d5:56:59:d5:8e:90:c4:49:fb:a6:39:da:48: 9b:c2:b2:76:59:4d:cc:4b:02:00:4f:59:80:8f:31:11:bc:7a: e6:c7:a6:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1ozQmCMx09NZcG0HbDUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYjljZmI5MTMwOWQ1ZDkxZmZjMzJiY2FmMDZjMzZiMDk3 NzI1NTcwHhcNMjUxMjE4MTkwMTIwWhcNMjUxMjE5MTkwMTIwWjAzMTEwLwYDVQQD EyhiZDc5MmViNDI0ODIwODljMzM5OThkNzA3Yzk0YzQ2OWQ1NTFlZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMN7gFj/67dKzRSOdWjGQo2uSkqH kcstFa5lICj08qqOaO7ppHZFtGVL4Y8frZzbu5AwirY976sBd0QxEIK8jspyqYJX 0NrTLlBS94BwgH0AKnGKxvXsRKam1OvVlUcVp1PGzH4rSwtnt+BQEzeLydPH2Md1 OHCDOt0dH3XPDR4wSrf3jiaCwkfroTwBtR9L4gWx+YAR9ljftLU02w12v13W29KH u3I8dFu0lRtZ20EIJqUsxj2k7ziXk1ndibyV47Kot2zU0GWD23leiFyYJSwuwtjx jBRN/2yebdhyL2ELDHuz8Eicx+qTI6eCJ31PKsjYmgGGPxmxGr9zpXKLWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL15LrQkggicM5mNcHyUxGnVUe7eMB8GA1UdIwQY MBaAFIC5z7kTCdXZH/wyvK8Gw2sJdyVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mZDk0ODItOGNkMS00ODk5LThjZGIt MjdiYjBiODg3NWE4LzEvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mZDk0ODItOGNkMS00ODk5LThjZGItMjdiYjBiODg3NWE4 LzEvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGUsuUUi 3KkQSFMGMITR9yUuxPJWF6gbFlUjOgetXXIbpYiZJisMopCPxOjkwpdp92p07SYU qwV8Wpc5m9WwzSIMVFkuYOnDkxQ/Bjydsv7TMjhxOE75oV8dXXBtgYr10rK3bnQV KY2vc2+vWk60JQfTZN5rE3gZIHOoC+HURi6ZkpN301qdQU59vNLducD7Wi9R32Rg gLGNiIojZ0K9Ah8tDzgFAnKtbYkJFTBVMlFX6XYG4tZRCEEWZP5yomtsUT9oK61N F6yHBnZpp4BoFYZt1x6B+d8btBfqc1jVVlnVjpDESfumOdpIm8KydllNzEsCAE9Z gI8xEbx65semxA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:10:54 2025 by rpki-client