This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json) Hash identifier: LVg0NEINiwPDO4D70var1CiLH0L7Xwhuq4tJ+4BZZw4= Subject key identifier: 5C:31:BA:FD:05:07:DA:8D:A9:30:A1:3E:77:21:65:96:43:A3:F4:EA Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c Certificate serial: 019B38A23966CA40E0A918C9F97BC3DD5601 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 22:01:53 +0000 Manifest this update: Fri 19 Dec 2025 22:01:53 +0000 Manifest next update: Sat 20 Dec 2025 22:01:53 +0000 Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: jNteib0wwawLziHjJje3xK7wgGVZp5Ypq49JRWqTHiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:39:66:ca:40:e0:a9:18:c9:f9:7b:c3:dd:56:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c Validity Not Before: Dec 19 22:01:53 2025 GMT Not After : Dec 20 22:01:53 2025 GMT Subject: CN=5c31bafd0507da8da930a13e7721659643a3f4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:85:c5:88:a7:3b:33:98:3b:78:65:64:8e: f8:18:ae:58:da:a7:72:06:b2:6f:70:47:e8:8a:f1: e4:02:7f:84:55:d2:a2:b7:c7:ed:8a:ab:ae:65:68: b6:5e:dd:6b:68:4f:bd:65:b1:37:b0:65:a8:fb:fc: f8:ba:7e:2c:f5:c7:0b:04:1d:38:d7:72:21:b4:08: 0d:4a:df:b0:f1:b2:57:48:e0:23:57:49:71:f2:01: 37:a2:f0:fd:09:6e:66:85:44:4d:b9:6d:33:c7:02: 04:97:66:44:61:18:42:24:e2:0b:e4:72:2d:46:2c: d1:fd:ab:d6:93:c7:10:01:e8:e1:cc:8b:24:30:98: a0:e5:c7:b5:66:1a:31:bf:bf:e9:8e:4e:98:12:51: 92:e0:33:2e:c7:2c:44:0a:24:23:6c:fe:33:ae:40: 32:c4:af:81:99:19:64:2e:f3:0a:2f:f1:25:e0:b2: 5a:f6:2c:f4:29:a9:98:9f:be:63:cd:ad:23:a5:2d: 6f:89:81:2b:17:ff:0b:98:9c:cf:22:2c:b6:0a:63: f4:9e:8a:df:3f:7e:75:d6:48:ea:84:68:f6:a1:4f: f7:d5:c1:69:b8:4c:44:6f:66:fa:d9:34:74:fc:78: 71:df:98:13:d0:63:d7:03:32:59:21:20:85:a2:d8: 96:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:31:BA:FD:05:07:DA:8D:A9:30:A1:3E:77:21:65:96:43:A3:F4:EA X509v3 Authority Key Identifier: keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:46:0f:80:4a:c0:a5:6f:1a:ba:f8:1d:bb:dc:62:87:7c:52: a4:7d:31:82:14:3f:4a:98:6a:9a:99:73:3d:1a:c6:86:e5:fa: be:80:46:92:22:fc:90:b2:eb:00:13:37:79:6a:7d:a0:1d:ba: 92:09:6d:59:eb:72:12:f5:29:e9:99:33:2f:eb:31:25:7a:75: 25:6e:2e:32:20:17:fc:30:b4:10:91:66:48:9e:f4:df:f8:7b: a0:6f:1a:6e:a2:40:bd:7a:a5:e7:1a:12:4f:cf:d3:bc:ad:72: be:44:b8:85:3b:b4:d1:0c:43:ad:cc:30:5a:74:7a:73:16:45: 72:c5:6f:ee:f0:90:21:d6:7c:1c:92:3f:7e:0b:25:88:3c:1d: 53:57:27:f7:11:a8:ea:69:c3:5e:d9:1c:62:43:2d:fa:36:27: 66:92:d5:b6:37:8c:af:40:ed:56:86:5d:29:c4:9e:e2:f6:31: 27:7d:a1:de:84:70:11:16:fe:42:ed:71:81:96:31:4c:cc:d0: 07:d5:68:ff:cb:f8:4c:49:0e:44:f1:10:0d:22:aa:77:1f:5e: 79:ea:10:6d:07:7f:60:75:8a:57:b2:ca:63:1b:5a:8f:34:04: d9:23:d3:17:29:68:ec:04:2c:8b:04:d6:d3:80:52:16:5b:dd: e7:8a:1e:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ojlmykDgqRjJ+XvD3VYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTA2MzM3MzkyNDNmNzFhMjllZWQxOGRjMTNkMDA2NzZj N2NlM2MwHhcNMjUxMjE5MjIwMTUzWhcNMjUxMjIwMjIwMTUzWjAzMTEwLwYDVQQD Eyg1YzMxYmFmZDA1MDdkYThkYTkzMGExM2U3NzIxNjU5NjQzYTNmNGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7GFxYinOzOYO3hlZI74GK5Y2qdy BrJvcEfoivHkAn+EVdKit8ftiquuZWi2Xt1raE+9ZbE3sGWo+/z4un4s9ccLBB04 13IhtAgNSt+w8bJXSOAjV0lx8gE3ovD9CW5mhURNuW0zxwIEl2ZEYRhCJOIL5HIt RizR/avWk8cQAejhzIskMJig5ce1Zhoxv7/pjk6YElGS4DMuxyxECiQjbP4zrkAy xK+BmRlkLvMKL/El4LJa9iz0KamYn75jza0jpS1viYErF/8LmJzPIiy2CmP0norf P3511kjqhGj2oU/31cFpuExEb2b62TR0/Hhx35gT0GPXAzJZISCFotiWWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwxuv0FB9qNqTChPnchZZZDo/TqMB8GA1UdIwQY MBaAFBgQYzc5JD9xop7tGNwT0AZ2x848MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEt ZWQzZjJmNzBjZjE0LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEtZWQzZjJmNzBjZjE0 LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkYPgErA pW8auvgdu9xih3xSpH0xghQ/SphqmplzPRrGhuX6voBGkiL8kLLrABM3eWp9oB26 kgltWetyEvUp6ZkzL+sxJXp1JW4uMiAX/DC0EJFmSJ703/h7oG8abqJAvXql5xoS T8/TvK1yvkS4hTu00QxDrcwwWnR6cxZFcsVv7vCQIdZ8HJI/fgsliDwdU1cn9xGo 6mnDXtkcYkMt+jYnZpLVtjeMr0DtVoZdKcSe4vYxJ32h3oRwERb+Qu1xgZYxTMzQ B9Vo/8v4TEkORPEQDSKqdx9eeeoQbQd/YHWKV7LKYxtajzQE2SPTFylo7AQsiwTW 04BSFlvd54oevQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:19:37 2025 by rpki-client