This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json) Hash identifier: R/+EuPPqGDiV0r/J1v75UoJWfaGSwPF7m5yAMs9XkVs= Subject key identifier: 80:02:D2:CB:B1:AD:B2:1D:66:06:2D:28:3A:1F:15:90:45:D1:F0:4B Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10 Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10 Certificate serial: 019B397D5F76187CA50BBA5C6E4997DD6004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 02:01:16 +0000 Manifest this update: Sat 20 Dec 2025 02:01:16 +0000 Manifest next update: Sun 21 Dec 2025 02:01:16 +0000 Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: qo/9Og5LYdydTJLp7vjWT8SX+43uFNOlCOPewiGj+p4=) 2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:5f:76:18:7c:a5:0b:ba:5c:6e:49:97:dd:60:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10 Validity Not Before: Dec 20 02:01:16 2025 GMT Not After : Dec 21 02:01:16 2025 GMT Subject: CN=8002d2cbb1adb21d66062d283a1f159045d1f04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:77:1b:f2:9e:9a:1c:32:ff:55:a9:bc:78: b7:80:bc:61:18:3e:2c:d6:9b:41:48:d5:57:f8:95: 1a:2b:0d:4d:9a:e4:1c:95:2e:20:43:84:a8:a2:81: bd:52:83:0a:de:53:5c:93:59:1c:2d:6c:8b:4f:27: 4e:09:72:34:8b:fa:72:e7:b1:b6:b3:46:97:66:f3: 3f:a3:81:17:96:59:87:a5:5f:f3:14:78:f0:d7:aa: c9:e3:40:e3:93:78:38:8d:fa:f0:4d:35:a2:0c:91: a3:84:93:11:80:4c:53:1e:26:59:ba:a6:d4:96:b2: c2:b4:87:3b:91:44:1f:2b:c6:ee:51:3e:29:16:fa: ad:5c:18:8d:01:a2:28:34:b0:a2:cc:38:fb:7c:9a: 21:07:49:45:1a:2a:16:ed:3f:2b:5d:aa:c6:05:1a: 6f:be:cd:a1:5e:5b:33:35:0d:b4:ca:88:13:2b:a8: 13:92:22:06:b8:bc:78:e4:29:7f:80:6c:fc:ad:9b: 53:b9:84:08:26:5f:f2:2c:88:5a:d2:d3:51:37:43: cc:33:5c:30:7a:bc:ed:cf:d9:93:92:ee:46:11:70: ce:36:6b:b2:ff:c4:cd:6d:44:dc:84:1e:ff:e6:e4: 58:63:08:d0:17:af:16:5c:45:6e:e2:da:13:f7:ec: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:02:D2:CB:B1:AD:B2:1D:66:06:2D:28:3A:1F:15:90:45:D1:F0:4B X509v3 Authority Key Identifier: keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ad:1f:be:72:f2:af:40:e2:7c:05:ce:e1:e3:fc:cb:cb:60: 33:65:6a:a2:de:c5:38:ef:4c:9e:f9:f6:65:55:fe:6d:9c:38: 3a:9f:7a:88:ef:36:a1:17:0b:27:43:a9:20:ae:3d:fb:16:4a: a5:dc:a2:b7:78:ff:2a:16:37:ae:83:f6:c3:91:c9:b2:c0:f7: ad:6d:97:15:92:52:0d:48:e9:61:ab:8c:00:3e:df:60:51:96: fe:6f:9f:e2:71:a4:41:b1:e0:e8:aa:8d:94:73:15:dc:cf:c8: 5c:b4:6d:0f:8c:22:fc:05:3e:bc:8e:7d:cc:24:a1:ea:0d:d4: 8c:cd:04:90:d5:e8:14:71:5b:c8:bb:06:b9:1a:5e:aa:57:84: b4:98:14:fa:8d:35:bf:46:72:4f:72:67:00:71:c5:a0:f8:86: 2b:30:82:51:47:59:d7:59:71:d8:7a:67:28:ca:a5:88:60:f7: a1:be:86:f8:af:40:f0:a7:9c:0b:4a:b0:6e:82:b2:07:50:52: bc:3b:26:ef:22:48:70:0d:8f:75:b8:89:2d:34:88:02:5e:71: ab:54:b1:b2:b7:5b:be:f7:d5:b1:05:eb:09:2e:2c:7c:dd:81: ff:f8:5e:07:36:bd:2f:21:03:02:49:a2:1f:9b:f3:23:fe:2f: e0:58:9a:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fV92GHylC7pcbkmX3WAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTA3MzE0NWI5MjZlOWE2OTA1ZWJhOTE4ZTIxZWI0Y2Yx Y2FlMTAwHhcNMjUxMjIwMDIwMTE2WhcNMjUxMjIxMDIwMTE2WjAzMTEwLwYDVQQD Eyg4MDAyZDJjYmIxYWRiMjFkNjYwNjJkMjgzYTFmMTU5MDQ1ZDFmMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvt3G/Kemhwy/1WpvHi3gLxhGD4s 1ptBSNVX+JUaKw1NmuQclS4gQ4SoooG9UoMK3lNck1kcLWyLTydOCXI0i/py57G2 s0aXZvM/o4EXllmHpV/zFHjw16rJ40Djk3g4jfrwTTWiDJGjhJMRgExTHiZZuqbU lrLCtIc7kUQfK8buUT4pFvqtXBiNAaIoNLCizDj7fJohB0lFGioW7T8rXarGBRpv vs2hXlszNQ20yogTK6gTkiIGuLx45Cl/gGz8rZtTuYQIJl/yLIha0tNRN0PMM1ww erztz9mTku5GEXDONmuy/8TNbUTchB7/5uRYYwjQF68WXEVu4toT9+yCkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAC0suxrbIdZgYtKDofFZBF0fBLMB8GA1UdIwQY MBaAFBpQcxRbkm6aaQXrqRjiHrTPHK4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQt MWExNDNlOTcxY2VlLzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQtMWExNDNlOTcxY2Vl LzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAa0fvnLy r0DifAXO4eP8y8tgM2Vqot7FOO9Mnvn2ZVX+bZw4Op96iO82oRcLJ0OpIK49+xZK pdyit3j/KhY3roP2w5HJssD3rW2XFZJSDUjpYauMAD7fYFGW/m+f4nGkQbHg6KqN lHMV3M/IXLRtD4wi/AU+vI59zCSh6g3UjM0EkNXoFHFbyLsGuRpeqleEtJgU+o01 v0ZyT3JnAHHFoPiGKzCCUUdZ11lx2HpnKMqliGD3ob6G+K9A8KecC0qwboKyB1BS vDsm7yJIcA2PdbiJLTSIAl5xq1SxsrdbvvfVsQXrCS4sfN2B//heBza9LyEDAkmi H5vzI/4v4FiaHw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:32:49 2025 by rpki-client