This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json) Hash identifier: 9qHpjVipZ7B/57v0DjBtEI3SQfhfRKBRaFG0FwQJL2o= Subject key identifier: 4A:43:F4:02:85:F9:7E:62:51:03:24:1B:B8:1C:5B:9A:AA:CD:CA:D6 Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a Certificate serial: 019B5004FFAD2ACB27FD6C954C2FCDB2B62B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft Manifest number: 0E7A Signing time: Wed 24 Dec 2025 11:01:03 +0000 Manifest this update: Wed 24 Dec 2025 11:01:03 +0000 Manifest next update: Thu 25 Dec 2025 11:01:03 +0000 Files and hashes: 1: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: SL3uyWYCO0x00zyWlC1Vk+Vy6k/0J5XRWVcLVb+inMA=) 2: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (hash: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=) 3: oXajxfRbk6N8eRRiT_ohkuBIZx0.roa (hash: pxyqg3KNDxfYN2gXtBCfn7xtRncbmC2U24gMFivJT6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:04:ff:ad:2a:cb:27:fd:6c:95:4c:2f:cd:b2:b6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a Validity Not Before: Dec 24 11:01:03 2025 GMT Not After : Dec 25 11:01:03 2025 GMT Subject: CN=4a43f40285f97e625103241bb81c5b9aaacdcad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:4d:49:21:80:7e:e6:61:30:56:4e:37:8d: 70:6f:60:95:15:f0:a1:91:f7:b4:82:bb:54:88:ff: b7:25:42:98:c4:76:3e:84:85:13:94:d0:8e:7e:5b: 1e:d6:16:6c:de:28:9a:14:95:e7:b2:e3:0b:5a:93: 38:c0:2c:ef:92:a9:24:cd:19:5d:86:79:f8:f2:be: b5:89:f1:ee:06:44:62:1a:91:07:7e:61:e2:3d:e5: cf:cf:6d:81:6b:7e:f7:fc:fd:0d:e8:ec:6c:2f:7e: 6e:c8:99:1b:5b:08:59:66:d0:56:58:3f:db:5e:2f: bc:0a:5e:7d:0d:79:50:61:3d:f4:8b:44:3d:de:d3: 17:af:8d:bd:62:32:24:9d:34:85:21:82:44:9f:a2: 25:68:19:b4:cc:3b:8c:c3:43:ec:bb:3b:bb:2a:f1: ac:d4:a3:53:09:01:b3:9a:8a:e4:dd:ca:cf:33:75: 0b:56:4c:16:e1:ba:c2:8f:e0:69:1d:dc:97:85:94: a9:c7:e3:41:e0:d8:4a:6f:4c:90:86:ec:a0:72:2d: 69:6a:47:2c:21:c2:b4:33:f2:4f:7d:f5:a5:cd:12: ae:24:d7:92:a0:64:74:bb:0f:66:bb:2a:73:84:f5: f7:3c:8d:74:06:05:0e:22:e3:73:7e:ab:55:e3:5a: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:43:F4:02:85:F9:7E:62:51:03:24:1B:B8:1C:5B:9A:AA:CD:CA:D6 X509v3 Authority Key Identifier: keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:79:83:95:83:5d:c5:d0:e2:ca:33:e8:ba:5b:c2:ca:d6:27: 4a:95:de:43:40:63:9e:a5:de:a4:11:69:6f:19:2a:85:ff:76: 83:50:fc:3a:06:63:09:2d:eb:09:71:fb:b4:6e:f2:64:25:f8: 83:d5:c7:47:41:f1:27:9d:2a:71:0b:72:9a:cd:8b:d9:96:54: 8b:6d:7b:52:b2:07:39:dc:0c:74:44:53:06:17:98:76:ce:fb: 1f:e3:29:76:bb:d5:b9:cf:de:7b:a5:74:de:fe:26:45:13:cd: dc:6b:41:cd:5c:1b:95:f8:d9:77:2e:03:0d:0e:a5:7d:b5:2b: 24:ae:8b:4f:71:cf:43:79:84:43:2e:9d:22:74:7a:86:2a:bb: 3a:23:1b:03:b1:c0:7e:e2:e7:50:cc:b0:21:53:0c:4f:ce:38: 58:6b:66:f1:ed:f1:c8:2f:da:48:20:b3:ac:46:a1:ab:36:39: aa:1c:e0:03:a9:35:e8:e9:74:c2:c3:82:2c:17:e2:00:a4:e0: 30:1d:f2:c0:78:c6:b3:18:ee:ed:8a:65:7a:82:94:84:f1:f8: 45:40:ce:24:ef:ad:68:fe:53:9c:79:d6:01:e2:8a:ef:3f:05: 2c:5e:54:20:0a:42:86:06:2c:c8:63:d9:e1:3a:07:1a:73:e8: 6c:4a:b2:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBP+tKssn/WyVTC/NsrYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDZkMmQ0MGZiMWQ1YjJjZjk1NDI5YmZiOTMxOWZjMmIx Y2MyNGEwHhcNMjUxMjI0MTEwMTAzWhcNMjUxMjI1MTEwMTAzWjAzMTEwLwYDVQQD Eyg0YTQzZjQwMjg1Zjk3ZTYyNTEwMzI0MWJiODFjNWI5YWFhY2RjYWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWtNSSGAfuZhMFZON41wb2CVFfCh kfe0grtUiP+3JUKYxHY+hIUTlNCOflse1hZs3iiaFJXnsuMLWpM4wCzvkqkkzRld hnn48r61ifHuBkRiGpEHfmHiPeXPz22Ba373/P0N6OxsL35uyJkbWwhZZtBWWD/b Xi+8Cl59DXlQYT30i0Q93tMXr429YjIknTSFIYJEn6IlaBm0zDuMw0Psuzu7KvGs 1KNTCQGzmork3crPM3ULVkwW4brCj+BpHdyXhZSpx+NB4NhKb0yQhuygci1pakcs IcK0M/JPffWlzRKuJNeSoGR0uw9muypzhPX3PI10BgUOIuNzfqtV41rDiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpD9AKF+X5iUQMkG7gcW5qqzcrWMB8GA1UdIwQY MBaAFBrW0tQPsdWyz5VCm/uTGfwrHMJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82MWZhM2ItNDcyNC00MDE0LTg4MTct YmQ3MWVmZmI5YjM5LzEvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82MWZhM2ItNDcyNC00MDE0LTg4MTctYmQ3MWVmZmI5YjM5 LzEvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnmDlYNd xdDiyjPoulvCytYnSpXeQ0BjnqXepBFpbxkqhf92g1D8OgZjCS3rCXH7tG7yZCX4 g9XHR0HxJ50qcQtyms2L2ZZUi217UrIHOdwMdERTBheYds77H+MpdrvVuc/ee6V0 3v4mRRPN3GtBzVwblfjZdy4DDQ6lfbUrJK6LT3HPQ3mEQy6dInR6hiq7OiMbA7HA fuLnUMywIVMMT844WGtm8e3xyC/aSCCzrEahqzY5qhzgA6k16Ol0wsOCLBfiAKTg MB3ywHjGsxju7YpleoKUhPH4RUDOJO+taP5TnHnWAeKK7z8FLF5UIApChgYsyGPZ 4ToHGnPobEqy7w== -----END CERTIFICATE-----Generated at Wed Dec 24 13:37:19 2025 by rpki-client