This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json) Hash identifier: +vwwx8KVtGVnJhy+pCfMXZn+udrxcDpNDk988nW1XqI= Subject key identifier: 0B:01:0A:51:99:83:CF:BF:98:78:DF:DB:33:94:23:F1:4D:E4:24:1B Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c Certificate serial: 019B4438C968E66C17A92509CB2A701A3C8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft Manifest number: 1788 Signing time: Mon 22 Dec 2025 04:02:10 +0000 Manifest this update: Mon 22 Dec 2025 04:02:10 +0000 Manifest next update: Tue 23 Dec 2025 04:02:10 +0000 Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: uV3f7yJ4wLtRBErsJ2GLAZ6+amRStuK9JfaY7DyeXPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:c9:68:e6:6c:17:a9:25:09:cb:2a:70:1a:3c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c Validity Not Before: Dec 22 04:02:10 2025 GMT Not After : Dec 23 04:02:10 2025 GMT Subject: CN=0b010a519983cfbf9878dfdb339423f14de4241b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:18:ab:79:1d:36:67:45:31:b7:11:65:58: 11:37:de:35:4a:13:35:85:62:3e:ea:0d:0b:4b:43: 4d:0c:13:c8:ae:7c:d6:5f:34:59:4b:5e:e9:0c:58: 2b:44:a3:e9:1b:11:cd:50:44:09:b3:55:b9:2b:f7: b9:ed:9c:86:a3:58:ea:dc:06:b4:ce:98:d7:c1:eb: 56:0a:32:ef:87:86:fa:e3:0e:32:fe:ea:e3:60:d7: 59:96:8e:82:1e:fe:ba:6e:80:6a:b5:f3:c9:22:05: ff:22:ef:4a:59:30:e5:c2:12:5e:75:93:a4:5c:bd: 86:a6:1e:29:53:15:23:f4:51:c8:b5:24:7b:0d:1f: 51:62:d0:60:eb:9f:6d:56:fc:d0:a4:e8:66:fa:88: aa:12:c1:2c:40:5b:aa:cd:9e:be:5d:d2:24:f2:10: cc:26:1b:be:ef:c6:f9:3a:c1:8b:ce:ce:23:04:3b: d1:a1:35:6b:a0:ae:f1:92:4f:c0:e9:17:b0:f7:b8: 1e:7f:9d:29:62:23:17:8e:a1:0c:00:9b:6f:19:0a: 56:49:00:49:95:d5:06:29:43:81:76:1d:8a:60:e8: 3a:29:38:28:65:bc:e2:24:9c:59:21:79:83:54:84: 3d:35:62:a9:8f:98:46:73:5c:90:1d:47:4f:46:09: 15:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:01:0A:51:99:83:CF:BF:98:78:DF:DB:33:94:23:F1:4D:E4:24:1B X509v3 Authority Key Identifier: keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:83:5e:08:2c:be:3e:c8:9a:c9:35:aa:38:47:e8:cd:13:50: cf:c5:2b:09:3e:e4:58:2e:a2:b2:47:cb:1f:11:49:5d:1c:c6: 82:54:c2:1d:48:4b:78:e1:a1:fe:3a:af:a4:c0:fe:71:fe:0d: bf:13:9e:a2:0c:47:33:69:b8:f8:76:5a:3b:90:4a:21:46:82: 1e:a5:b0:29:df:e4:ce:c7:94:c6:9c:b0:2e:d7:56:a8:45:5a: ee:29:68:e3:75:b7:98:0e:15:de:0e:d8:79:0b:df:06:36:c1: c4:cd:fc:f2:64:ad:0b:40:52:ec:d4:b7:11:a5:28:59:0a:ee: 50:4c:33:80:bd:11:32:14:a6:ad:d8:c4:2c:11:77:dc:7e:58: 24:71:af:66:6e:af:30:4f:c1:2b:ff:1d:a0:7a:63:69:ac:16: 9b:f9:2a:88:88:df:37:ac:9f:04:ef:21:9f:75:fa:9e:37:0b: bb:80:37:7e:2f:f3:60:81:cb:1a:ef:53:e3:9a:75:cd:71:88: 1e:ca:05:77:e2:e9:83:d3:08:38:b6:28:88:00:20:32:ca:14: 5e:3a:96:f4:b8:08:1a:19:8e:52:fb:87:80:38:37:86:b2:0f: 36:0d:6d:5c:9d:c5:c3:e7:a1:88:f7:89:00:81:4b:4b:5d:a6: b9:58:09:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOMlo5mwXqSUJyypwGjyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTA2MzM3MzkyNDNmNzFhMjllZWQxOGRjMTNkMDA2NzZj N2NlM2MwHhcNMjUxMjIyMDQwMjEwWhcNMjUxMjIzMDQwMjEwWjAzMTEwLwYDVQQD EygwYjAxMGE1MTk5ODNjZmJmOTg3OGRmZGIzMzk0MjNmMTRkZTQyNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp0Yq3kdNmdFMbcRZVgRN941ShM1 hWI+6g0LS0NNDBPIrnzWXzRZS17pDFgrRKPpGxHNUEQJs1W5K/e57ZyGo1jq3Aa0 zpjXwetWCjLvh4b64w4y/urjYNdZlo6CHv66boBqtfPJIgX/Iu9KWTDlwhJedZOk XL2Gph4pUxUj9FHItSR7DR9RYtBg659tVvzQpOhm+oiqEsEsQFuqzZ6+XdIk8hDM Jhu+78b5OsGLzs4jBDvRoTVroK7xkk/A6Rew97gef50pYiMXjqEMAJtvGQpWSQBJ ldUGKUOBdh2KYOg6KTgoZbziJJxZIXmDVIQ9NWKpj5hGc1yQHUdPRgkV3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsBClGZg8+/mHjf2zOUI/FN5CQbMB8GA1UdIwQY MBaAFBgQYzc5JD9xop7tGNwT0AZ2x848MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEt ZWQzZjJmNzBjZjE0LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEtZWQzZjJmNzBjZjE0 LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoNeCCy+ PsiayTWqOEfozRNQz8UrCT7kWC6iskfLHxFJXRzGglTCHUhLeOGh/jqvpMD+cf4N vxOeogxHM2m4+HZaO5BKIUaCHqWwKd/kzseUxpywLtdWqEVa7ilo43W3mA4V3g7Y eQvfBjbBxM388mStC0BS7NS3EaUoWQruUEwzgL0RMhSmrdjELBF33H5YJHGvZm6v ME/BK/8doHpjaawWm/kqiIjfN6yfBO8hn3X6njcLu4A3fi/zYIHLGu9T45p1zXGI HsoFd+Lpg9MIOLYoiAAgMsoUXjqW9LgIGhmOUvuHgDg3hrIPNg1tXJ3Fw+ehiPeJ AIFLS12muVgJgg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:48:55 2025 by rpki-client