This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft File: GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json) Hash identifier: P2iPwsaijYYG3rurust7ZFGqzOxQm1iN3tHfBNeq5xk= Subject key identifier: E5:23:E5:1C:E8:1A:4C:97:24:77:C5:5E:A2:77:94:63:1E:E8:2F:06 Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0 Certificate issuer: /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0 Certificate serial: 019B3CB4D094D1C53D6DF687DE46B23FBE7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 17:00:41 +0000 Manifest this update: Sat 20 Dec 2025 17:00:41 +0000 Manifest next update: Sun 21 Dec 2025 17:00:41 +0000 Files and hashes: 1: 3LmcdlhkUozmC6fvBNvRqCvSzt0.roa (hash: Y7dEvx1WxwHh/kqiqr3Nj0OZHbvLg2W3/22cNvnOsh0=) 2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: RVjmRqhMa9ENHEut8tfGSyPAyC1jisU4iww5/y+Gehg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d0:94:d1:c5:3d:6d:f6:87:de:46:b2:3f:be:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0 Validity Not Before: Dec 20 17:00:41 2025 GMT Not After : Dec 21 17:00:41 2025 GMT Subject: CN=e523e51ce81a4c972477c55ea27794631ee82f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a2:97:31:40:fe:3d:c2:6a:7b:03:26:5b:e7: 97:a3:d6:09:1a:83:22:0e:18:b7:1d:85:85:66:d1: 6e:49:72:ad:4f:93:c1:1e:90:47:7e:3c:91:f7:91: f0:db:fe:65:04:02:6e:15:d2:ee:3e:9c:10:e6:96: 21:27:91:21:32:4d:89:a0:7c:61:b5:ba:20:ca:d6: 96:d0:6d:a7:57:49:f2:f2:0d:f8:1f:ac:cc:33:f0: 26:28:d9:01:ee:f3:d8:fb:96:b4:a3:d4:2c:84:89: cc:a4:73:49:6f:e8:ce:26:4c:56:6d:01:65:21:5f: c1:27:eb:63:8e:be:51:21:20:fd:5d:61:49:b7:2d: c4:5c:98:ec:60:7a:41:ce:75:63:c8:8b:f0:c8:f5: 63:25:f0:58:14:ca:99:31:00:fd:f7:3a:ae:81:63: ec:4e:58:38:a3:72:fb:70:7e:82:a2:3e:fc:18:b2: 0a:95:d9:e4:4e:2b:35:5c:99:35:f8:c8:93:29:ac: 8f:df:b6:db:1b:2c:fb:3e:68:8e:60:ef:fa:51:05: 6c:0c:c9:c1:d5:d8:9d:b7:aa:77:07:11:70:82:7e: c9:9d:2b:72:28:52:31:c9:ee:4a:c2:db:98:6c:25: 46:da:7e:ff:89:68:6b:4d:b4:f5:f0:ec:fa:1f:f2: cc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:23:E5:1C:E8:1A:4C:97:24:77:C5:5E:A2:77:94:63:1E:E8:2F:06 X509v3 Authority Key Identifier: keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:2e:eb:ca:6a:fa:d7:d9:98:86:99:ff:c2:54:f2:9d:2f:f1: df:d5:95:87:06:70:47:50:37:8a:0e:c3:8c:2e:a3:79:88:d2: 78:e9:1e:ac:1c:c3:54:b5:65:e7:b1:90:9e:2c:c1:e6:22:07: 53:b0:9b:e2:8e:d5:cc:16:ec:48:16:e0:c8:47:d9:12:d2:68: 65:30:0a:b9:5b:66:fe:25:af:52:ee:5b:7a:24:c4:07:6d:aa: a1:fd:02:a8:c1:6b:1f:25:ea:3f:f1:8e:59:7b:c9:fe:98:e4: 2c:e3:41:f1:dc:6a:15:0e:0a:fe:49:d7:7f:30:b4:f4:59:1d: 3b:94:79:6a:24:5a:b3:d6:52:c0:4a:8a:f9:b0:d6:33:ea:74: 22:87:39:48:0c:4b:be:90:80:5e:bb:f7:58:fe:22:45:26:c7: 21:b8:55:1a:01:21:5e:67:f4:d7:f9:47:f3:69:57:12:ac:e0: ae:78:ae:6e:b1:ef:a5:e6:a3:69:dd:e9:36:21:3b:d1:ae:e1: 31:cb:11:98:82:9a:18:1a:4e:71:2b:82:ee:93:dd:80:9a:51: a8:4b:e0:10:1d:88:9a:50:49:7c:6a:fe:1c:36:26:93:d5:9e: 95:9e:d6:d4:02:88:19:73:24:00:c4:88:2c:cc:3c:d4:73:d4: 5d:04:60:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNCU0cU9bfaH3kayP759MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTM3YTBjMGEzMzEwOTFiMzA3MjUzYzZmMDdlOGY4Mjg1 NGU2YjAwHhcNMjUxMjIwMTcwMDQxWhcNMjUxMjIxMTcwMDQxWjAzMTEwLwYDVQQD EyhlNTIzZTUxY2U4MWE0Yzk3MjQ3N2M1NWVhMjc3OTQ2MzFlZTgyZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96KXMUD+PcJqewMmW+eXo9YJGoMi Dhi3HYWFZtFuSXKtT5PBHpBHfjyR95Hw2/5lBAJuFdLuPpwQ5pYhJ5EhMk2JoHxh tbogytaW0G2nV0ny8g34H6zMM/AmKNkB7vPY+5a0o9QshInMpHNJb+jOJkxWbQFl IV/BJ+tjjr5RISD9XWFJty3EXJjsYHpBznVjyIvwyPVjJfBYFMqZMQD99zqugWPs Tlg4o3L7cH6Coj78GLIKldnkTis1XJk1+MiTKayP37bbGyz7PmiOYO/6UQVsDMnB 1didt6p3BxFwgn7JnStyKFIxye5KwtuYbCVG2n7/iWhrTbT18Oz6H/LM8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUj5RzoGkyXJHfFXqJ3lGMe6C8GMB8GA1UdIwQY MBaAFBpTegwKMxCRswclPG8H6PgoVOawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xONkRBb3pFSkd6QnlVOGJ3Zm8tQ2hVNXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80NjE2OWYtY2Y5NC00ZDFiLWIyZDct NzIxMjUyOTdhZjI4LzEvR2xONkRBb3pFSkd6QnlVOGJ3Zm8tQ2hVNXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80NjE2OWYtY2Y5NC00ZDFiLWIyZDctNzIxMjUyOTdhZjI4 LzEvR2xONkRBb3pFSkd6QnlVOGJ3Zm8tQ2hVNXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwS7rymr6 19mYhpn/wlTynS/x39WVhwZwR1A3ig7DjC6jeYjSeOkerBzDVLVl57GQnizB5iIH U7Cb4o7VzBbsSBbgyEfZEtJoZTAKuVtm/iWvUu5beiTEB22qof0CqMFrHyXqP/GO WXvJ/pjkLONB8dxqFQ4K/knXfzC09FkdO5R5aiRas9ZSwEqK+bDWM+p0Ioc5SAxL vpCAXrv3WP4iRSbHIbhVGgEhXmf01/lH82lXEqzgrniubrHvpeajad3pNiE70a7h McsRmIKaGBpOcSuC7pPdgJpRqEvgEB2ImlBJfGr+HDYmk9WelZ7W1AKIGXMkAMSI LMw81HPUXQRgJg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:14 2025 by rpki-client