This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File: GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier: c9xPTBCk4NIPK4bPTySCagXti4ZOP6UTgNK0SVA1x7k=
Subject key identifier: 61:68:0F:A8:6B:D6:A9:EC:1E:1C:0E:65:D3:3A:AA:41:4E:B0:F7:6F
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer: /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial: 019B3E6C4D5827430CCE48815EEC5BB3A818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number: 1789
Signing time: Sun 21 Dec 2025 01:00:43 +0000
Manifest this update: Sun 21 Dec 2025 01:00:43 +0000
Manifest next update: Mon 22 Dec 2025 01:00:43 +0000
Files and hashes: 1: 3SDO9hGSLXcvKio5nucfHtpBZqo.roa (hash: UySF852N3LzIIXg+WlqkSuDwnOKj/L9pAk/WjttqTkE=)
2: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: uvPA/mNM19O0UMzlOw/ap5HUBo8NL6V316jjc6Nf3Bo=)
3: QYv8HyZwcR2EgwyDNXO4DNm4alY.roa (hash: 4y8aidT7cf46oC9Rb8MtLIG+06WpyEeua6nqGV7vmw0=)
4: t3Zx6p1wvn7jY8kHjzfJnnc7eNg.roa (hash: OLIfG4z0xwuSo4+uWrBPz+WPutgwTrYoDXIoHunSp5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:6c:4d:58:27:43:0c:ce:48:81:5e:ec:5b:b3:a8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
Validity
Not Before: Dec 21 01:00:43 2025 GMT
Not After : Dec 22 01:00:43 2025 GMT
Subject: CN=61680fa86bd6a9ec1e1c0e65d33aaa414eb0f76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:0c:98:f2:b9:fa:dd:0d:3a:a1:89:8f:77:
51:fb:60:e7:59:00:5a:90:11:bc:e7:60:b6:f8:cb:
04:93:53:8b:2d:82:70:3a:54:1f:b7:94:f4:56:03:
05:b0:2c:23:6a:9d:b1:e3:65:04:2f:18:e7:eb:f7:
b3:d9:31:f5:51:95:36:2e:91:72:1e:28:59:d1:d1:
a2:84:9a:0f:cb:b0:e3:6a:89:b2:93:ab:e4:4d:36:
08:d8:89:42:b1:5f:4f:7d:d9:55:2c:41:9a:78:12:
ad:e1:79:0b:9a:64:9a:4c:b7:8b:f1:96:b7:5e:f3:
5d:af:6c:f9:d4:5a:c3:ec:49:42:5b:0f:79:32:96:
b9:34:b0:57:e0:22:e5:e9:2c:cd:34:38:2e:06:0e:
b5:d8:0d:da:d8:cf:2b:69:ea:a4:0d:97:06:b5:31:
ce:ca:9b:57:f8:ce:de:7d:8a:41:8f:23:d6:c9:1b:
05:d3:6c:a3:54:88:a3:aa:1f:d7:ee:28:6c:74:2c:
f7:7e:c9:8f:8e:11:59:12:b4:28:ee:b1:fa:81:3a:
72:58:69:1f:2d:4e:f3:14:32:01:0a:13:b9:23:94:
17:31:8f:0d:16:87:f0:bb:47:78:88:7e:82:f7:de:
a4:4f:fd:cd:75:db:5d:ee:10:4b:be:ae:57:ed:09:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:68:0F:A8:6B:D6:A9:EC:1E:1C:0E:65:D3:3A:AA:41:4E:B0:F7:6F
X509v3 Authority Key Identifier:
keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5a:a8:e9:be:50:90:91:c8:43:76:b8:0b:3d:37:5b:a1:a5:
07:4c:df:d2:c4:71:2b:0b:ec:d5:37:5f:23:a2:ce:18:6c:88:
de:81:0a:08:65:5f:e6:03:34:80:aa:47:98:39:42:29:22:38:
d9:93:94:9a:71:57:93:50:a0:f4:b3:8d:ef:f6:99:8b:cd:78:
a7:d5:47:bd:86:6e:ec:57:be:a3:d4:32:ad:bb:cb:3f:91:5e:
27:5e:e2:ee:16:ac:ab:3a:18:4c:46:05:8e:43:34:2e:08:40:
56:3c:a6:0f:cc:2c:9d:39:4a:be:07:2c:54:d5:a6:7b:a6:03:
ba:20:15:2c:17:ad:fe:b6:2f:bd:59:14:17:2f:a5:82:3f:e9:
67:43:1b:69:95:3e:84:00:af:bf:20:af:6d:42:4c:ee:8e:c5:
24:bd:33:40:ff:94:83:f4:7e:6d:5c:42:d1:60:be:9f:9a:66:
e8:82:15:41:20:a5:a0:83:05:ff:91:69:7a:8f:0e:00:53:be:
b8:10:b7:fa:56:e6:a9:32:c4:da:23:67:a4:32:11:c1:24:c3:
65:9e:8c:1e:95:e6:ed:a5:00:30:1b:cb:9f:2c:a0:ca:5e:1f:
89:d8:c3:5c:4b:40:e7:da:ff:b9:27:e9:aa:9e:ba:34:00:91:
bf:74:91:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+bE1YJ0MMzkiBXuxbs6gYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MWU0ZDYwODE1MmZjMjQ0YWZmZmJhMmRjNzJiODUxYjE5
YjI1MjcwHhcNMjUxMjIxMDEwMDQzWhcNMjUxMjIyMDEwMDQzWjAzMTEwLwYDVQQD
Eyg2MTY4MGZhODZiZDZhOWVjMWUxYzBlNjVkMzNhYWE0MTRlYjBmNzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvooMmPK5+t0NOqGJj3dR+2DnWQBa
kBG852C2+MsEk1OLLYJwOlQft5T0VgMFsCwjap2x42UELxjn6/ez2TH1UZU2LpFy
HihZ0dGihJoPy7Djaomyk6vkTTYI2IlCsV9PfdlVLEGaeBKt4XkLmmSaTLeL8Za3
XvNdr2z51FrD7ElCWw95Mpa5NLBX4CLl6SzNNDguBg612A3a2M8raeqkDZcGtTHO
yptX+M7efYpBjyPWyRsF02yjVIijqh/X7ihsdCz3fsmPjhFZErQo7rH6gTpyWGkf
LU7zFDIBChO5I5QXMY8NFofwu0d4iH6C996kT/3Nddtd7hBLvq5X7QkbUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFoD6hr1qnsHhwOZdM6qkFOsPdvMB8GA1UdIwQY
MBaAFBgeTWCBUvwkSv/7otxyuFGxmyUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjIt
MzIyMDhkNTQ0YTg0LzEvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjItMzIyMDhkNTQ0YTg0
LzEvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFqo6b5Q
kJHIQ3a4Cz03W6GlB0zf0sRxKwvs1TdfI6LOGGyI3oEKCGVf5gM0gKpHmDlCKSI4
2ZOUmnFXk1Cg9LON7/aZi814p9VHvYZu7Fe+o9QyrbvLP5FeJ17i7hasqzoYTEYF
jkM0LghAVjymD8wsnTlKvgcsVNWme6YDuiAVLBet/rYvvVkUFy+lgj/pZ0MbaZU+
hACvvyCvbUJM7o7FJL0zQP+Ug/R+bVxC0WC+n5pm6IIVQSCloIMF/5Fpeo8OAFO+
uBC3+lbmqTLE2iNnpDIRwSTDZZ6MHpXm7aUAMBvLnyygyl4fidjDXEtA59r/uSfp
qp66NACRv3SRgA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 10:04:52 2025 by rpki-client