This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft File: GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json) Hash identifier: MPGnG9VI/lBzNykCbrrRXIFGkg2gkq/KUej8cqU1FwY= Subject key identifier: 74:AC:0A:CA:34:07:1D:FB:C2:3F:0B:46:C7:5A:9A:6A:8B:4B:3C:77 Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27 Certificate issuer: /CN=181e4d608152fc244afffba2dc72b851b19b2527 Certificate serial: 019B4A037B59069F180AD6C7E8FCF2037646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 07:01:40 +0000 Manifest this update: Tue 23 Dec 2025 07:01:40 +0000 Manifest next update: Wed 24 Dec 2025 07:01:40 +0000 Files and hashes: 1: 3SDO9hGSLXcvKio5nucfHtpBZqo.roa (hash: UySF852N3LzIIXg+WlqkSuDwnOKj/L9pAk/WjttqTkE=) 2: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: pBHnd8ep20I2KsEXvw+J74bUnpv6QK5Bjg6jGqFJpAY=) 3: QYv8HyZwcR2EgwyDNXO4DNm4alY.roa (hash: 4y8aidT7cf46oC9Rb8MtLIG+06WpyEeua6nqGV7vmw0=) 4: t3Zx6p1wvn7jY8kHjzfJnnc7eNg.roa (hash: OLIfG4z0xwuSo4+uWrBPz+WPutgwTrYoDXIoHunSp5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:7b:59:06:9f:18:0a:d6:c7:e8:fc:f2:03:76:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527 Validity Not Before: Dec 23 07:01:40 2025 GMT Not After : Dec 24 07:01:40 2025 GMT Subject: CN=74ac0aca34071dfbc23f0b46c75a9a6a8b4b3c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:11:0a:81:dc:d4:39:1c:78:a9:45:27:81:40: e2:b1:65:2e:ec:a9:be:34:f2:0b:a0:2a:f5:03:6b: 2e:29:cf:47:b1:fc:d7:78:4f:1f:43:b4:19:95:97: 9b:41:f4:ca:88:03:bf:64:b0:9d:b6:6d:e3:3f:6b: 22:be:08:0f:d8:03:0e:d7:75:bf:5f:73:5d:b6:9b: 0a:d4:9b:56:e3:09:35:4c:4e:3f:8e:4a:0f:3a:ed: 41:67:3d:2f:1c:f2:2a:dd:c1:5d:1b:9e:25:67:1b: 75:b5:fd:19:9e:75:e1:2d:7e:93:d6:6c:a3:81:ab: b9:4e:d7:74:5a:91:07:0c:94:17:d3:96:96:40:7d: 22:61:b7:01:8f:d0:72:80:ba:83:19:9a:85:54:ed: 21:a5:41:f9:21:0c:b6:db:6b:c7:3f:22:69:aa:bb: b1:72:7f:4a:bc:09:6b:7a:6b:01:df:67:a6:6f:c5: ff:8d:a2:af:ea:a0:85:9b:01:d1:5d:c4:c1:3b:c3: 55:85:f4:7f:5e:46:b3:eb:cf:3e:c8:ac:1b:3a:ca: f0:a7:cf:f6:e3:5e:9c:4f:ba:04:54:96:71:0c:f0: f5:51:e9:91:01:5a:8c:61:02:ea:04:0b:7b:86:a5: c0:a9:96:cb:4f:6a:cf:20:76:cf:ec:30:66:15:03: f0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AC:0A:CA:34:07:1D:FB:C2:3F:0B:46:C7:5A:9A:6A:8B:4B:3C:77 X509v3 Authority Key Identifier: keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:58:77:fa:cf:c7:d8:b7:41:a5:ff:c3:63:0c:00:81:5e:af: 00:86:d3:9a:78:06:35:0d:97:ed:9d:18:a5:98:8a:b0:2e:14: c7:6f:7e:ab:b7:3a:3c:4d:ce:1d:64:c4:a9:b7:f4:d4:3b:e1: 84:03:68:5f:b6:06:31:10:31:9a:14:09:ad:55:a7:28:e1:4e: 85:7d:d8:15:32:e1:94:50:11:0c:45:8b:13:41:a5:7d:16:ff: 76:6a:35:93:80:34:8b:fe:33:d0:ea:af:f0:2c:02:b8:6e:96: fa:a2:cd:7e:6c:ac:32:24:6c:0e:75:eb:4a:04:31:aa:f8:12: 29:c1:3c:20:79:37:f5:eb:c4:d7:94:2a:5b:6d:e0:2b:14:d9: ac:23:62:0b:e0:06:5f:e7:59:3c:f7:5f:00:c8:38:a7:6f:be: 56:0e:2c:c8:ba:7e:db:72:ed:0f:0f:57:0d:a6:bf:5e:42:82: 40:c6:3e:ed:c6:14:d4:a8:9a:99:57:c0:10:20:fd:ca:e3:ae: a3:b8:0c:b5:33:d2:81:a8:95:56:0a:53:45:6c:e6:84:bc:44: 8e:fa:97:c4:e5:ac:74:31:1a:b4:68:44:c8:a2:a0:ac:da:7b: 32:32:41:ec:82:fe:be:8e:71:bc:98:ea:7b:70:f5:ec:69:e0: ef:f0:6d:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA3tZBp8YCtbH6PzyA3ZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MWU0ZDYwODE1MmZjMjQ0YWZmZmJhMmRjNzJiODUxYjE5 YjI1MjcwHhcNMjUxMjIzMDcwMTQwWhcNMjUxMjI0MDcwMTQwWjAzMTEwLwYDVQQD Eyg3NGFjMGFjYTM0MDcxZGZiYzIzZjBiNDZjNzVhOWE2YThiNGIzYzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xEKgdzUORx4qUUngUDisWUu7Km+ NPILoCr1A2suKc9HsfzXeE8fQ7QZlZebQfTKiAO/ZLCdtm3jP2sivggP2AMO13W/ X3NdtpsK1JtW4wk1TE4/jkoPOu1BZz0vHPIq3cFdG54lZxt1tf0ZnnXhLX6T1myj gau5Ttd0WpEHDJQX05aWQH0iYbcBj9BygLqDGZqFVO0hpUH5IQy222vHPyJpqrux cn9KvAlremsB32emb8X/jaKv6qCFmwHRXcTBO8NVhfR/Xkaz688+yKwbOsrwp8/2 416cT7oEVJZxDPD1UemRAVqMYQLqBAt7hqXAqZbLT2rPIHbP7DBmFQPwPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSsCso0Bx37wj8LRsdammqLSzx3MB8GA1UdIwQY MBaAFBgeTWCBUvwkSv/7otxyuFGxmyUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjIt MzIyMDhkNTQ0YTg0LzEvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjItMzIyMDhkNTQ0YTg0 LzEvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClh3+s/H 2LdBpf/DYwwAgV6vAIbTmngGNQ2X7Z0YpZiKsC4Ux29+q7c6PE3OHWTEqbf01Dvh hANoX7YGMRAxmhQJrVWnKOFOhX3YFTLhlFARDEWLE0GlfRb/dmo1k4A0i/4z0Oqv 8CwCuG6W+qLNfmysMiRsDnXrSgQxqvgSKcE8IHk39evE15QqW23gKxTZrCNiC+AG X+dZPPdfAMg4p2++Vg4syLp+23LtDw9XDaa/XkKCQMY+7cYU1KiamVfAECD9yuOu o7gMtTPSgaiVVgpTRWzmhLxEjvqXxOWsdDEatGhEyKKgrNp7MjJB7IL+vo5xvJjq e3D17Gng7/BtHA== -----END CERTIFICATE-----Generated at Tue Dec 23 10:59:19 2025 by rpki-client