This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json) Hash identifier: dsegmN7ZnqRaXkuaq4BlOFg9/FI1zx0itDKlkCAUre8= Subject key identifier: 3A:39:C4:C0:1A:78:31:23:F1:4C:97:C2:F9:28:C5:72:91:9A:C3:B5 Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e Certificate serial: 019B3CB4E7DFEBD3BCC488543245E033ED88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft Manifest number: 0381 Signing time: Sat 20 Dec 2025 17:00:47 +0000 Manifest this update: Sat 20 Dec 2025 17:00:47 +0000 Manifest next update: Sun 21 Dec 2025 17:00:47 +0000 Files and hashes: 1: 1-J_uLfpgRYrtxrpsYSaesRuiQ2g.roa (hash: GvASZIyrV5t2M4DjO8tp4WjyB+kQVX9GlnrOl3qGLxQ=) 2: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: jTHleGa0VS8OaQqS6CmRttlAnBuGkGY2T3LlHUgRdAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:e7:df:eb:d3:bc:c4:88:54:32:45:e0:33:ed:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e Validity Not Before: Dec 20 17:00:47 2025 GMT Not After : Dec 21 17:00:47 2025 GMT Subject: CN=3a39c4c01a783123f14c97c2f928c572919ac3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cb:32:e9:1f:6b:c5:6b:44:1b:a3:10:5f:4e: b0:c1:59:bc:19:a4:77:07:7d:5b:a6:1d:1d:b7:cd: b3:68:60:0c:c5:a1:cb:60:40:30:97:d2:dd:10:79: 9c:46:15:ee:18:73:18:d4:9a:cd:6c:df:52:d7:2e: f6:a4:1c:07:71:d2:5c:12:6b:e8:05:68:96:44:fd: 13:cb:0e:73:f2:e5:ea:5c:df:6b:2c:d5:2d:f8:99: d0:60:9b:f1:1c:fa:b7:36:23:0d:11:03:24:fb:a7: 75:91:0f:e2:22:37:09:14:95:ab:13:98:4b:34:f4: 9b:94:19:5f:d1:18:8e:39:7b:0d:f7:85:6e:fb:31: 9d:6c:57:e9:71:b6:36:a9:9e:eb:10:97:27:0c:f1: 9c:8d:0f:1e:27:76:d5:38:ef:3b:81:1b:26:22:cc: c2:56:ec:eb:eb:5c:83:18:9f:72:14:06:c7:36:8b: 16:01:80:70:9b:92:86:25:26:02:6b:47:fa:0a:95: ef:ab:51:77:8f:24:a5:65:06:d2:bb:53:0f:3f:b4: 7f:c7:fe:03:e5:93:16:9e:7d:c9:f1:52:cb:d0:b5: 5f:0b:22:ba:29:ef:71:c4:40:6f:6e:a8:fe:f3:c3: df:22:66:81:70:81:28:4a:45:3c:7a:8a:cd:64:3c: 7b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:39:C4:C0:1A:78:31:23:F1:4C:97:C2:F9:28:C5:72:91:9A:C3:B5 X509v3 Authority Key Identifier: keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8d:ab:cb:d5:9a:f2:93:af:d7:0d:84:ea:ce:e7:55:41:57: 49:51:6a:95:5b:ee:bb:24:e4:78:23:f2:54:a7:0a:ae:b3:a9: f8:ad:0f:28:78:cb:ed:66:e1:c5:44:94:48:07:20:19:f2:88: 5e:6e:ad:5d:bd:3a:45:b5:c7:45:72:c2:0d:5f:cd:7a:0f:de: 77:9b:bc:a5:33:ff:e1:35:f4:70:5d:39:17:03:25:ad:f6:cc: 50:bb:74:35:73:3c:f2:d7:db:e5:0b:94:e2:1b:d5:07:d4:cf: 9c:37:6d:01:51:ee:4e:09:f5:3f:31:e2:98:12:be:a8:49:f3: b7:c6:db:82:78:ce:7f:29:18:5f:b2:d0:75:8b:f0:e3:77:18: 7f:43:79:7f:4c:33:53:d1:33:8e:c8:ec:c0:27:b7:cb:4b:b9: 7f:ad:85:3f:d7:e9:ca:4e:ad:0e:05:ef:d0:81:42:49:54:72: 5e:be:a1:78:ad:c3:79:43:0e:69:53:90:82:dd:6f:2d:71:0e: ea:b1:84:bc:b2:43:90:81:dc:4d:1d:cf:cf:37:64:98:4d:5c: f7:15:92:9e:ae:da:d2:d8:c7:87:f3:64:81:18:23:f8:81:e2: 19:e4:b2:f3:5b:76:e3:78:fe:8f:ea:59:35:ec:6e:03:f6:9b: 24:8f:c3:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tOff69O8xIhUMkXgM+2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NjJlY2U1NDc1NzJhZGVjYTFhOWZmMDU3ZTBiYThlYWU4 YzVkNWUwHhcNMjUxMjIwMTcwMDQ3WhcNMjUxMjIxMTcwMDQ3WjAzMTEwLwYDVQQD EygzYTM5YzRjMDFhNzgzMTIzZjE0Yzk3YzJmOTI4YzU3MjkxOWFjM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18sy6R9rxWtEG6MQX06wwVm8GaR3 B31bph0dt82zaGAMxaHLYEAwl9LdEHmcRhXuGHMY1JrNbN9S1y72pBwHcdJcEmvo BWiWRP0Tyw5z8uXqXN9rLNUt+JnQYJvxHPq3NiMNEQMk+6d1kQ/iIjcJFJWrE5hL NPSblBlf0RiOOXsN94Vu+zGdbFfpcbY2qZ7rEJcnDPGcjQ8eJ3bVOO87gRsmIszC Vuzr61yDGJ9yFAbHNosWAYBwm5KGJSYCa0f6CpXvq1F3jySlZQbSu1MPP7R/x/4D 5ZMWnn3J8VLL0LVfCyK6Ke9xxEBvbqj+88PfImaBcIEoSkU8eorNZDx7VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDo5xMAaeDEj8UyXwvkoxXKRmsO1MB8GA1UdIwQY MBaAFNRi7OVHVyreyhqf8Ffguo6ujF1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84YTk0MTctYmMyOC00YTAyLWE5MmYt YTQwOGJiYTczNWVlLzEvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84YTk0MTctYmMyOC00YTAyLWE5MmYtYTQwOGJiYTczNWVl LzEvMUdMczVVZFhLdDdLR3Bfd1YtQzZqcTZNWFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUo2ry9Wa 8pOv1w2E6s7nVUFXSVFqlVvuuyTkeCPyVKcKrrOp+K0PKHjL7WbhxUSUSAcgGfKI Xm6tXb06RbXHRXLCDV/Neg/ed5u8pTP/4TX0cF05FwMlrfbMULt0NXM88tfb5QuU 4hvVB9TPnDdtAVHuTgn1PzHimBK+qEnzt8bbgnjOfykYX7LQdYvw43cYf0N5f0wz U9EzjsjswCe3y0u5f62FP9fpyk6tDgXv0IFCSVRyXr6heK3DeUMOaVOQgt1vLXEO 6rGEvLJDkIHcTR3PzzdkmE1c9xWSnq7a0tjHh/NkgRgj+IHiGeSy81t243j+j+pZ NexuA/abJI/D3g== -----END CERTIFICATE-----Generated at Sun Dec 21 02:44:02 2025 by rpki-client