This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json) Hash identifier: 8KyTy+6rOwpaQ7QvuT2eXkroZElpXGy+FUh0wwZ3boA= Subject key identifier: 9B:E2:AA:A7:07:B5:69:EC:5E:44:13:05:D0:AF:08:D3:7D:A8:8A:AA Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10 Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10 Certificate serial: 019B3D59F6E1DB6570F476A0412DB448EADF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 20:01:04 +0000 Manifest this update: Sat 20 Dec 2025 20:01:04 +0000 Manifest next update: Sun 21 Dec 2025 20:01:04 +0000 Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: RJVL5WaczAHuZ8hhcwWJ8I3DrEjx9bXjtSok2+ZrRkA=) 2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:f6:e1:db:65:70:f4:76:a0:41:2d:b4:48:ea:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10 Validity Not Before: Dec 20 20:01:04 2025 GMT Not After : Dec 21 20:01:04 2025 GMT Subject: CN=9be2aaa707b569ec5e441305d0af08d37da88aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:67:62:6d:3e:ba:f2:5d:3e:e3:46:de:0d: e9:66:fa:b4:61:20:91:bd:21:9b:30:c0:ab:af:b4: 67:3b:56:be:67:f6:c3:c3:7f:3f:72:f4:70:2e:72: 8c:4f:a2:3f:ed:88:98:a7:c7:7f:63:9c:37:77:7f: aa:9c:ab:df:98:5c:52:fd:ae:93:e0:45:b6:8b:76: 03:6d:ed:db:52:2e:f8:56:8c:8f:a2:9e:14:bc:56: 2a:e5:6c:8a:00:77:e5:9e:c5:82:8d:d7:93:f1:be: 4e:bc:67:f4:73:64:85:c9:17:75:16:4c:f1:bb:5e: 94:cb:fa:f0:8a:1e:f0:2c:14:ba:f5:09:18:85:e1: 0d:1a:29:f7:3e:41:c6:64:9a:67:e7:5c:27:d6:93: e0:53:ca:1f:78:71:99:6a:8c:45:e6:5c:d8:97:b2: c9:77:ca:0e:39:2d:97:c4:34:c2:8a:c0:e3:be:9a: 30:52:78:2f:71:27:12:49:9b:ec:66:0f:bc:a0:db: f8:3d:a7:05:61:42:ac:2e:e0:22:35:26:0a:18:32: 04:56:ee:e5:48:d9:b5:a8:85:e6:37:78:cb:5f:e8: 4a:02:c0:6e:d3:e9:a5:ef:5f:ad:44:73:99:9c:87: 3b:72:85:01:42:42:b7:94:21:d0:de:74:7c:bc:fa: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E2:AA:A7:07:B5:69:EC:5E:44:13:05:D0:AF:08:D3:7D:A8:8A:AA X509v3 Authority Key Identifier: keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ee:f6:fa:9b:99:4d:4c:8c:ef:33:c6:e3:9d:f8:d1:b6:51: 64:09:95:63:81:bb:ba:4c:93:aa:d2:16:3b:4a:08:43:3b:46: 77:0a:0f:af:a4:ff:fe:d6:ed:2a:2e:54:f2:4c:07:1f:bc:37: df:9c:5c:8e:62:fa:6b:0f:97:bf:6c:40:69:1d:c7:37:84:00: 45:f6:c6:f3:2b:6a:e0:88:f6:44:44:9f:06:cb:4d:07:da:c0: 44:32:e7:9d:0b:f6:e1:4c:29:88:94:ef:49:7d:99:21:8b:a5: bf:1f:5b:e7:c5:b1:07:4f:53:cb:cb:ca:de:c2:af:72:6a:68: 16:76:65:9e:2c:53:d1:f3:dd:d4:88:c7:7d:1c:cd:58:58:c8: 82:13:76:3b:e5:cf:62:d1:a2:2a:38:b2:65:b3:3d:04:f9:2f: bf:f8:10:a2:06:85:5b:9f:5b:84:fa:e9:fa:bc:1c:d7:70:6b: 2e:32:8d:8d:8e:dc:00:ad:20:b8:db:f2:13:e2:db:d6:f5:a3: 28:27:e0:97:1e:b4:89:84:13:34:b2:a7:ba:27:b2:86:43:0a: cd:5b:77:e7:68:ef:87:80:e2:c8:8c:e9:f7:13:01:c7:2d:f0: 31:c9:02:82:19:97:00:16:ca:f3:60:db:15:7b:01:c5:14:8e: 2f:81:0f:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wfbh22Vw9HagQS20SOrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTA3MzE0NWI5MjZlOWE2OTA1ZWJhOTE4ZTIxZWI0Y2Yx Y2FlMTAwHhcNMjUxMjIwMjAwMTA0WhcNMjUxMjIxMjAwMTA0WjAzMTEwLwYDVQQD Eyg5YmUyYWFhNzA3YjU2OWVjNWU0NDEzMDVkMGFmMDhkMzdkYTg4YWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ZnYm0+uvJdPuNG3g3pZvq0YSCR vSGbMMCrr7RnO1a+Z/bDw38/cvRwLnKMT6I/7YiYp8d/Y5w3d3+qnKvfmFxS/a6T 4EW2i3YDbe3bUi74VoyPop4UvFYq5WyKAHflnsWCjdeT8b5OvGf0c2SFyRd1Fkzx u16Uy/rwih7wLBS69QkYheENGin3PkHGZJpn51wn1pPgU8ofeHGZaoxF5lzYl7LJ d8oOOS2XxDTCisDjvpowUngvcScSSZvsZg+8oNv4PacFYUKsLuAiNSYKGDIEVu7l SNm1qIXmN3jLX+hKAsBu0+ml71+tRHOZnIc7coUBQkK3lCHQ3nR8vPrHVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJviqqcHtWnsXkQTBdCvCNN9qIqqMB8GA1UdIwQY MBaAFBpQcxRbkm6aaQXrqRjiHrTPHK4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQt MWExNDNlOTcxY2VlLzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQtMWExNDNlOTcxY2Vl LzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAse72+puZ TUyM7zPG45340bZRZAmVY4G7ukyTqtIWO0oIQztGdwoPr6T//tbtKi5U8kwHH7w3 35xcjmL6aw+Xv2xAaR3HN4QARfbG8ytq4Ij2RESfBstNB9rARDLnnQv24UwpiJTv SX2ZIYulvx9b58WxB09Ty8vK3sKvcmpoFnZlnixT0fPd1IjHfRzNWFjIghN2O+XP YtGiKjiyZbM9BPkvv/gQogaFW59bhPrp+rwc13BrLjKNjY7cAK0guNvyE+Lb1vWj KCfglx60iYQTNLKnuieyhkMKzVt352jvh4DiyIzp9xMBxy3wMckCghmXABbK82Db FXsBxRSOL4EPOw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:04:55 2025 by rpki-client