This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft File: GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json) Hash identifier: Wkr1WAJikJmW9ek3YdI3CZflLSdlAtN8AYcc5hBY1BU= Subject key identifier: 58:85:91:C1:FB:E1:8B:C9:FF:CF:13:19:CA:73:E3:03:E7:72:4D:C2 Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0 Certificate issuer: /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0 Certificate serial: 019B53E14202C712BFED4C82A8D23A0B5BC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 05:00:29 +0000 Manifest this update: Thu 25 Dec 2025 05:00:29 +0000 Manifest next update: Fri 26 Dec 2025 05:00:29 +0000 Files and hashes: 1: 3LmcdlhkUozmC6fvBNvRqCvSzt0.roa (hash: Y7dEvx1WxwHh/kqiqr3Nj0OZHbvLg2W3/22cNvnOsh0=) 2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: 7BH07TehlRAsvnT9jusdyXuz90MF0c8vkm/CuCulMVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:42:02:c7:12:bf:ed:4c:82:a8:d2:3a:0b:5b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0 Validity Not Before: Dec 25 05:00:29 2025 GMT Not After : Dec 26 05:00:29 2025 GMT Subject: CN=588591c1fbe18bc9ffcf1319ca73e303e7724dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:5d:0e:5b:6b:62:7c:97:5d:af:da:44:23: 39:86:2b:b2:3f:d4:06:fb:7f:0e:b7:7c:eb:9b:d4: a6:d8:cc:ed:c9:a9:ff:92:37:64:c5:c2:6d:9a:f8: 51:8e:05:9e:cc:d0:9c:4c:b7:74:bb:f0:f8:5c:56: 18:46:74:1d:e3:a1:1e:c6:56:e0:8c:20:3d:cf:c4: 9c:a6:58:2c:51:33:a4:9b:60:91:13:8c:39:b8:49: 9a:b4:1e:94:07:00:7f:dd:fc:d8:10:a7:c8:26:a3: 2b:25:75:e5:93:d3:a6:29:4a:63:aa:2d:ee:bb:f8: 40:89:5f:3a:1e:89:bd:f3:00:c9:81:90:a9:8c:15: 81:f2:e5:95:b1:55:31:ad:d6:70:c8:63:ab:7c:20: 32:5f:11:84:24:36:e3:cf:84:33:6d:25:98:05:86: 1d:f6:ef:81:fe:c7:65:06:91:e0:c0:df:07:ac:9c: c1:c6:fa:24:62:fb:15:db:d9:aa:d6:e2:01:7d:71: fe:7d:dd:1c:21:be:61:51:e3:3a:08:06:93:d8:dc: bd:82:59:88:65:81:f4:e6:3c:37:66:54:71:ef:80: 50:98:d6:a9:82:72:7d:fd:4c:d8:a4:88:f6:fb:c5: 89:98:48:60:0e:7b:ae:e9:10:20:80:5f:e4:53:f9: 38:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:85:91:C1:FB:E1:8B:C9:FF:CF:13:19:CA:73:E3:03:E7:72:4D:C2 X509v3 Authority Key Identifier: keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:67:4a:2e:df:78:4c:af:ec:b3:bb:37:2d:7a:76:64:b8:13: a1:1d:e1:ad:4a:aa:fe:82:74:5d:27:8a:5e:13:08:77:a3:c9: 2a:6c:7a:ce:35:42:83:74:fc:69:0d:5a:f2:b5:f5:1a:5a:cd: 2c:c3:a9:a7:33:59:04:82:9d:3e:c6:e5:5b:93:72:29:49:7e: 0d:c0:02:1d:8f:f7:72:fa:cb:aa:e2:f5:1d:28:ba:cf:83:41: 9c:ea:96:32:d7:a3:e2:c4:42:32:8b:d6:cc:7e:90:0a:82:38: a1:0d:e2:13:0f:3d:8f:b0:4b:1d:14:be:9e:bb:05:fb:63:65: f2:e8:20:ec:19:dc:ca:8d:9f:fe:4b:62:1c:17:9a:44:75:2d: 2e:78:41:24:2a:e1:ec:91:4e:d7:79:1e:76:70:e4:85:a8:17: aa:9c:4f:b7:51:3c:69:28:ff:1e:28:d2:6c:f5:52:c6:06:7c: 79:31:1a:c0:a0:f5:83:19:43:c5:cb:2b:89:e8:48:56:4c:f9: 4f:d7:59:6b:29:6b:39:d6:0c:d5:f2:eb:1e:0b:c2:be:11:8b: 96:bc:cb:1c:ae:dd:c1:06:d0:c9:c0:83:a5:c7:bc:13:e2:6c: 55:0d:43:21:57:72:32:83:63:0e:f6:b3:10:1d:90:38:96:26: ea:21:b0:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4UICxxK/7UyCqNI6C1vFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTM3YTBjMGEzMzEwOTFiMzA3MjUzYzZmMDdlOGY4Mjg1 NGU2YjAwHhcNMjUxMjI1MDUwMDI5WhcNMjUxMjI2MDUwMDI5WjAzMTEwLwYDVQQD Eyg1ODg1OTFjMWZiZTE4YmM5ZmZjZjEzMTljYTczZTMwM2U3NzI0ZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGZdDltrYnyXXa/aRCM5hiuyP9QG +38Ot3zrm9Sm2Mztyan/kjdkxcJtmvhRjgWezNCcTLd0u/D4XFYYRnQd46Eexlbg jCA9z8ScplgsUTOkm2CRE4w5uEmatB6UBwB/3fzYEKfIJqMrJXXlk9OmKUpjqi3u u/hAiV86Hom98wDJgZCpjBWB8uWVsVUxrdZwyGOrfCAyXxGEJDbjz4QzbSWYBYYd 9u+B/sdlBpHgwN8HrJzBxvokYvsV29mq1uIBfXH+fd0cIb5hUeM6CAaT2Ny9glmI ZYH05jw3ZlRx74BQmNapgnJ9/UzYpIj2+8WJmEhgDnuu6RAggF/kU/k4oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiFkcH74YvJ/88TGcpz4wPnck3CMB8GA1UdIwQY MBaAFBpTegwKMxCRswclPG8H6PgoVOawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xONkRBb3pFSkd6QnlVOGJ3Zm8tQ2hVNXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80NjE2OWYtY2Y5NC00ZDFiLWIyZDct NzIxMjUyOTdhZjI4LzEvR2xONkRBb3pFSkd6QnlVOGJ3Zm8tQ2hVNXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80NjE2OWYtY2Y5NC00ZDFiLWIyZDctNzIxMjUyOTdhZjI4 LzEvR2xONkRBb3pFSkd6QnlVOGJ3Zm8tQ2hVNXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2dKLt94 TK/ss7s3LXp2ZLgToR3hrUqq/oJ0XSeKXhMId6PJKmx6zjVCg3T8aQ1a8rX1GlrN LMOppzNZBIKdPsblW5NyKUl+DcACHY/3cvrLquL1HSi6z4NBnOqWMtej4sRCMovW zH6QCoI4oQ3iEw89j7BLHRS+nrsF+2Nl8ugg7Bncyo2f/ktiHBeaRHUtLnhBJCrh 7JFO13kednDkhagXqpxPt1E8aSj/HijSbPVSxgZ8eTEawKD1gxlDxcsriehIVkz5 T9dZaylrOdYM1fLrHgvCvhGLlrzLHK7dwQbQycCDpce8E+JsVQ1DIVdyMoNjDvaz EB2QOJYm6iGwcw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:23:05 2025 by rpki-client