This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json) Hash identifier: vYYwfeGnhkfCQ3dl0mdYCaIfI1NYoTJ7bAjY04A/OPk= Subject key identifier: EE:E8:74:0C:C4:A3:FA:75:33:5F:1F:25:2E:96:C2:5C:AB:A9:9F:BB Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F Certificate issuer: /CN=19337ca56de7c3b977875369ecde53852515746f Certificate serial: 019B4770185404BEFDBE553D1B82437ADF4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft Manifest number: 12DD Signing time: Mon 22 Dec 2025 19:01:27 +0000 Manifest this update: Mon 22 Dec 2025 19:01:27 +0000 Manifest next update: Tue 23 Dec 2025 19:01:27 +0000 Files and hashes: 1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: cnz8Q52AK60+1WNILodrV1PZpgV270ck7B+YwGUcKm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:70:18:54:04:be:fd:be:55:3d:1b:82:43:7a:df:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19337ca56de7c3b977875369ecde53852515746f Validity Not Before: Dec 22 19:01:27 2025 GMT Not After : Dec 23 19:01:27 2025 GMT Subject: CN=eee8740cc4a3fa75335f1f252e96c25caba99fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:6b:0e:86:7f:ef:c3:93:16:40:84:c5:a6: cf:5c:c8:9e:4c:4f:9f:7f:31:b6:12:09:cd:7e:c7: 90:9b:e4:f4:6d:4c:39:8b:f3:37:85:85:e1:77:b3: 32:a4:39:30:a7:9f:db:a4:35:34:ca:07:18:d8:da: 86:3e:fc:d9:f2:8d:0c:fd:3a:0b:50:52:d5:9d:0a: 5f:7d:1d:61:b1:de:27:e3:50:67:74:e8:af:82:cc: 14:1e:f9:65:5c:69:21:3f:02:60:7f:c5:cb:6f:75: fc:16:06:6b:85:17:d5:6b:65:7b:04:c5:db:e8:e7: 9a:ea:41:1e:28:75:83:ac:2d:f5:46:b2:be:20:0e: 42:94:54:41:6b:34:83:1c:24:28:24:0f:52:fe:9a: dd:00:98:8c:59:e1:0b:40:29:1a:36:f1:3f:52:b7: 9b:35:25:55:f3:ce:b8:78:47:0c:f6:40:54:03:58: 89:d0:f5:af:67:0b:7f:ae:89:0b:99:a9:f3:14:f0: e3:c3:23:29:8a:53:c8:da:f0:c5:96:c7:6f:56:49: 51:10:03:b4:d5:92:c2:a1:92:c1:af:46:42:25:ea: b0:20:02:b6:4b:27:5f:58:e4:f7:e3:b2:6e:0f:37: 0f:1b:e0:c8:55:ca:55:38:28:be:5b:f6:40:62:c8: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E8:74:0C:C4:A3:FA:75:33:5F:1F:25:2E:96:C2:5C:AB:A9:9F:BB X509v3 Authority Key Identifier: keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:0a:76:2b:96:88:6f:02:ea:34:4d:c3:e6:b2:62:30:6b:af: 92:e4:32:c4:1d:e7:96:70:59:74:e5:47:51:a4:c0:56:e5:c7: a6:ba:29:51:77:08:e2:f2:cc:d8:7b:2f:b5:1a:e4:20:a7:0a: 6e:63:57:ec:91:6f:f2:10:bf:bc:71:76:70:70:9f:e4:5b:24: 55:27:dd:10:d5:79:04:1c:cb:01:36:69:73:93:d4:5b:22:3d: 39:ee:04:c4:61:48:bf:bd:4d:86:62:13:17:b6:b6:b5:8c:75: f9:d8:28:30:df:14:1c:d7:c9:a8:85:f3:39:6d:52:fb:59:e4: 2d:c9:b9:63:bf:48:fb:29:61:8e:07:9e:3d:78:cb:88:46:97: 95:f2:a0:2a:76:74:24:7e:8b:0f:12:04:b8:cf:31:5e:d5:37: 8e:93:5d:ee:88:cf:d7:f9:12:40:c1:16:ba:b7:1b:aa:8f:2b: ae:1d:c0:12:ba:d8:23:07:25:03:0c:a5:c6:81:43:95:26:74: 0d:be:ba:cb:52:28:a7:2c:4e:36:d2:eb:5f:cf:d9:aa:fd:dd: 48:c3:6a:5e:40:19:d5:25:e7:5f:07:f3:99:07:d2:1f:aa:6b: 0b:99:f2:3e:0d:03:fb:eb:9f:fe:09:dd:e9:69:4b:3f:40:ec: 99:02:35:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHcBhUBL79vlU9G4JDet9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MzM3Y2E1NmRlN2MzYjk3Nzg3NTM2OWVjZGU1Mzg1MjUx NTc0NmYwHhcNMjUxMjIyMTkwMTI3WhcNMjUxMjIzMTkwMTI3WjAzMTEwLwYDVQQD EyhlZWU4NzQwY2M0YTNmYTc1MzM1ZjFmMjUyZTk2YzI1Y2FiYTk5ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHtrDoZ/78OTFkCExabPXMieTE+f fzG2EgnNfseQm+T0bUw5i/M3hYXhd7MypDkwp5/bpDU0ygcY2NqGPvzZ8o0M/ToL UFLVnQpffR1hsd4n41BndOivgswUHvllXGkhPwJgf8XLb3X8FgZrhRfVa2V7BMXb 6Oea6kEeKHWDrC31RrK+IA5ClFRBazSDHCQoJA9S/prdAJiMWeELQCkaNvE/Ureb NSVV8864eEcM9kBUA1iJ0PWvZwt/rokLmanzFPDjwyMpilPI2vDFlsdvVklREAO0 1ZLCoZLBr0ZCJeqwIAK2SydfWOT347JuDzcPG+DIVcpVOCi+W/ZAYsjHCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7odAzEo/p1M18fJS6WwlyrqZ+7MB8GA1UdIwQY MBaAFBkzfKVt58O5d4dTaezeU4UlFXRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOGQ4MzMtZjM5Ni00YjFmLWEwZTMt NTZiODgxMWU0OTI2LzEvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iOGQ4MzMtZjM5Ni00YjFmLWEwZTMtNTZiODgxMWU0OTI2 LzEvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQp2K5aI bwLqNE3D5rJiMGuvkuQyxB3nlnBZdOVHUaTAVuXHpropUXcI4vLM2HsvtRrkIKcK bmNX7JFv8hC/vHF2cHCf5FskVSfdENV5BBzLATZpc5PUWyI9Oe4ExGFIv71NhmIT F7a2tYx1+dgoMN8UHNfJqIXzOW1S+1nkLcm5Y79I+ylhjgeePXjLiEaXlfKgKnZ0 JH6LDxIEuM8xXtU3jpNd7ojP1/kSQMEWurcbqo8rrh3AErrYIwclAwylxoFDlSZ0 Db66y1IopyxONtLrX8/Zqv3dSMNqXkAZ1SXnXwfzmQfSH6prC5nyPg0D++uf/gnd 6WlLP0DsmQI1Ew== -----END CERTIFICATE-----Generated at Mon Dec 22 20:30:22 2025 by rpki-client