This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json) Hash identifier: nrQIe5nMoTEVPx0ITu3XPCMDIJdDdwlBKxSHSVscAEc= Subject key identifier: 3F:52:FC:F3:8B:46:23:38:D4:C7:F1:B9:F9:24:F9:7F:19:A8:72:DF Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c Certificate serial: 019B70A3BB12975D603699FD1475B35CFA61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft Manifest number: 179F Signing time: Tue 30 Dec 2025 19:02:16 +0000 Manifest this update: Tue 30 Dec 2025 19:02:16 +0000 Manifest next update: Wed 31 Dec 2025 19:02:16 +0000 Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: 6JKQjtvMNEcTBlrKv8KLmpSkxiF8+QggHQWpXIXigx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:bb:12:97:5d:60:36:99:fd:14:75:b3:5c:fa:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c Validity Not Before: Dec 30 19:02:16 2025 GMT Not After : Dec 31 19:02:16 2025 GMT Subject: CN=3f52fcf38b462338d4c7f1b9f924f97f19a872df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2c:b0:21:27:de:6f:91:19:00:e8:09:5a:54: 90:6d:1e:54:ee:32:eb:55:de:cf:70:47:f7:b1:95: 3e:af:4d:90:5f:db:69:98:4e:e3:69:fd:e2:af:9b: f3:d1:99:3c:b1:2c:b1:5b:ca:1b:fc:bb:af:31:fd: f9:af:76:9e:d8:2c:b8:b6:87:1f:b9:0e:8e:20:6d: 11:78:7b:84:95:85:51:99:67:e2:6e:b0:45:33:cd: d3:cc:b7:2d:a8:ca:a3:42:c6:03:9e:bd:d7:bd:93: 82:ab:e1:b2:e2:73:f6:59:ba:fd:37:ba:7e:2a:e5: 15:c5:b3:6d:16:64:79:6a:d3:fe:49:ea:8a:71:d9: 25:c3:c5:54:ad:39:35:b2:f1:e6:39:bd:7b:b1:d5: 11:2a:b9:5e:6c:79:1e:26:34:44:46:e5:9e:a3:f1: 79:cb:47:5b:ed:86:46:7e:6e:85:ae:c4:73:49:b6: c4:9f:b0:17:43:50:01:46:6a:5c:22:19:17:3a:79: 22:08:3a:6e:c9:d0:f6:5b:f7:ad:51:0d:27:d3:25: fe:a7:24:1f:a5:a2:70:d4:85:bb:dc:8c:e2:21:90: 6f:8a:bf:65:de:97:a3:fd:57:50:18:16:10:cd:bf: be:43:a7:08:8e:80:35:46:8f:7d:06:49:fb:e4:3d: a3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:52:FC:F3:8B:46:23:38:D4:C7:F1:B9:F9:24:F9:7F:19:A8:72:DF X509v3 Authority Key Identifier: keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:51:41:0a:f9:c0:58:36:46:ab:3b:ce:30:74:3f:8a:81:c8: 1c:45:ed:a8:4c:d2:d9:2b:8a:46:b5:ea:b4:a5:96:27:ab:35: e1:ba:60:fa:07:6b:47:9d:d8:3d:24:8f:35:18:cd:63:1f:69: 25:2c:79:8f:c0:ee:96:f8:ce:37:65:bc:1e:de:2d:15:3b:30: c8:9c:6b:ae:c7:5f:61:a9:dc:ce:f4:06:3f:51:74:11:0e:98: 03:bd:37:42:65:b8:c0:60:7b:85:4e:62:a1:cf:c2:38:0f:5e: f0:f1:e6:85:de:db:f6:c9:00:9e:b2:bb:74:bf:41:a4:38:6b: 5a:e4:a4:b9:9e:34:e7:4d:48:03:86:51:b0:82:d4:b4:bf:f6: 34:4f:2a:0d:d4:81:08:40:1f:39:13:0d:60:0a:5c:e1:65:08: 8f:15:f5:00:88:c6:b0:07:e9:60:f6:5b:27:48:e3:f7:fd:c3: 7b:39:f4:78:f9:bc:02:ae:90:4b:21:08:74:f7:63:23:03:09: 16:d2:e0:e0:83:bc:2b:d4:49:89:da:e8:3a:02:22:57:d1:b1: bb:7e:33:4b:06:46:21:d9:07:ad:ea:45:b4:47:85:38:4a:23: 9a:e5:51:1e:fa:60:25:e7:55:ba:45:13:af:97:a6:57:21:6f: f9:6d:02:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo7sSl11gNpn9FHWzXPphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTA2MzM3MzkyNDNmNzFhMjllZWQxOGRjMTNkMDA2NzZj N2NlM2MwHhcNMjUxMjMwMTkwMjE2WhcNMjUxMjMxMTkwMjE2WjAzMTEwLwYDVQQD EygzZjUyZmNmMzhiNDYyMzM4ZDRjN2YxYjlmOTI0Zjk3ZjE5YTg3MmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiywISfeb5EZAOgJWlSQbR5U7jLr Vd7PcEf3sZU+r02QX9tpmE7jaf3ir5vz0Zk8sSyxW8ob/LuvMf35r3ae2Cy4tocf uQ6OIG0ReHuElYVRmWfibrBFM83TzLctqMqjQsYDnr3XvZOCq+Gy4nP2Wbr9N7p+ KuUVxbNtFmR5atP+SeqKcdklw8VUrTk1svHmOb17sdURKrlebHkeJjRERuWeo/F5 y0db7YZGfm6FrsRzSbbEn7AXQ1ABRmpcIhkXOnkiCDpuydD2W/etUQ0n0yX+pyQf paJw1IW73IziIZBvir9l3pej/VdQGBYQzb++Q6cIjoA1Ro99Bkn75D2jKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9S/POLRiM41Mfxufkk+X8ZqHLfMB8GA1UdIwQY MBaAFBgQYzc5JD9xop7tGNwT0AZ2x848MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEt ZWQzZjJmNzBjZjE0LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEtZWQzZjJmNzBjZjE0 LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVFBCvnA WDZGqzvOMHQ/ioHIHEXtqEzS2SuKRrXqtKWWJ6s14bpg+gdrR53YPSSPNRjNYx9p JSx5j8DulvjON2W8Ht4tFTswyJxrrsdfYanczvQGP1F0EQ6YA703QmW4wGB7hU5i oc/COA9e8PHmhd7b9skAnrK7dL9BpDhrWuSkuZ40501IA4ZRsILUtL/2NE8qDdSB CEAfORMNYApc4WUIjxX1AIjGsAfpYPZbJ0jj9/3Dezn0ePm8Aq6QSyEIdPdjIwMJ FtLg4IO8K9RJidroOgIiV9Gxu34zSwZGIdkHrepFtEeFOEojmuVRHvpgJedVukUT r5emVyFv+W0Cbg== -----END CERTIFICATE-----Generated at Wed Dec 31 03:42:57 2025 by rpki-client