This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json) Hash identifier: 4Fei4ziiGGZPrWiT95TexIXEY6QP6qJ5xLDpPFyQZYQ= Subject key identifier: BD:8F:54:A7:19:FD:A5:A1:9E:B8:8C:14:B9:29:D8:BA:7F:B4:17:07 Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10 Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10 Certificate serial: 019B5486208BAA5A4084F86D6EA0E874B36D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 08:00:34 +0000 Manifest this update: Thu 25 Dec 2025 08:00:34 +0000 Manifest next update: Fri 26 Dec 2025 08:00:34 +0000 Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: Q7NZKQE8wZa0VlC06SDBXX4RVuNvagDRADcaeNz4Nv4=) 2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:20:8b:aa:5a:40:84:f8:6d:6e:a0:e8:74:b3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10 Validity Not Before: Dec 25 08:00:34 2025 GMT Not After : Dec 26 08:00:34 2025 GMT Subject: CN=bd8f54a719fda5a19eb88c14b929d8ba7fb41707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fa:c5:c2:83:f8:b1:a3:3f:e1:e6:75:52:78: 0b:28:e0:b6:78:23:14:ac:65:8b:d8:08:6e:af:b1: 1a:80:77:d5:a2:a2:d7:ab:8a:01:7c:ab:15:16:e2: c4:22:56:56:47:46:3a:0f:1f:21:22:85:2b:1e:49: b1:6a:cf:50:b8:34:02:48:24:ef:e9:65:b4:30:f0: 16:c7:bb:26:fa:68:73:c2:a3:85:b7:8a:d1:06:6f: 2e:c3:87:16:fd:32:1b:1f:51:c7:2e:5a:dc:f8:fb: e5:80:a7:49:dd:79:27:88:2f:97:52:04:ad:ad:7f: 96:1e:61:88:b1:26:b0:a4:ab:28:ce:e6:2b:82:4f: a2:1a:6e:c8:1b:cb:e8:55:bf:f5:22:9e:90:3b:da: c7:f6:32:e3:43:5e:31:16:10:82:73:48:03:c2:e4: f7:06:7b:c0:ce:f0:e2:a5:3f:4c:b3:3a:bb:a1:ad: a5:87:33:c9:a7:06:01:1f:0d:7b:91:08:21:f1:2e: f0:01:43:35:2d:4b:17:f5:07:9b:dd:17:c8:f1:9d: 55:44:42:f7:cd:32:dd:e6:1e:38:f9:c2:28:26:23: e1:f2:fd:7e:36:f2:f7:56:99:d3:4d:eb:26:e7:52: 44:b5:1d:ff:c1:48:d9:a0:53:4f:80:0f:b9:7c:d4: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8F:54:A7:19:FD:A5:A1:9E:B8:8C:14:B9:29:D8:BA:7F:B4:17:07 X509v3 Authority Key Identifier: keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:cb:74:2e:02:48:fb:9b:f3:6d:67:38:ab:eb:26:30:93:00: 5a:5e:da:32:bc:49:77:32:c1:55:31:2d:b7:cf:6e:f8:d3:67: ef:c0:a9:09:89:fa:47:f7:9b:70:53:63:ff:23:4a:ce:37:4e: a0:69:25:99:ee:4b:58:7e:0e:4b:53:1e:03:2a:0d:4d:64:1d: d1:65:99:45:7d:9e:0d:8f:2d:3c:93:ac:df:44:f1:2d:aa:f7: 0d:00:de:3c:8f:fb:0e:41:96:ac:86:35:30:a1:f7:89:d5:3a: 37:f8:49:52:e1:ed:df:92:24:9b:9c:30:50:c3:0e:31:f5:4f: 6c:15:8f:72:c3:73:f9:e1:69:91:ff:6e:d7:11:91:3a:9d:2b: ff:23:f5:eb:38:c3:9c:f5:aa:ea:d4:56:05:15:a1:16:17:14: 53:6d:90:ff:d6:dc:02:9c:81:81:cf:6c:6f:6e:ad:54:ed:26: 3b:2e:35:e4:67:9f:59:46:65:e1:e1:cf:56:37:5a:c5:82:8c: 74:3d:b7:22:5f:23:55:13:8c:e0:02:07:10:f1:29:28:55:22: 16:4d:8d:8c:6b:7a:ae:36:38:97:e3:48:1d:33:e0:1d:2f:97: 39:34:0b:a7:8f:4f:d4:a3:d3:6e:a9:ca:84:26:32:54:9c:82: 7b:ed:51:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhiCLqlpAhPhtbqDodLNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTA3MzE0NWI5MjZlOWE2OTA1ZWJhOTE4ZTIxZWI0Y2Yx Y2FlMTAwHhcNMjUxMjI1MDgwMDM0WhcNMjUxMjI2MDgwMDM0WjAzMTEwLwYDVQQD EyhiZDhmNTRhNzE5ZmRhNWExOWViODhjMTRiOTI5ZDhiYTdmYjQxNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPrFwoP4saM/4eZ1UngLKOC2eCMU rGWL2Ahur7EagHfVoqLXq4oBfKsVFuLEIlZWR0Y6Dx8hIoUrHkmxas9QuDQCSCTv 6WW0MPAWx7sm+mhzwqOFt4rRBm8uw4cW/TIbH1HHLlrc+PvlgKdJ3XkniC+XUgSt rX+WHmGIsSawpKsozuYrgk+iGm7IG8voVb/1Ip6QO9rH9jLjQ14xFhCCc0gDwuT3 BnvAzvDipT9Mszq7oa2lhzPJpwYBHw17kQgh8S7wAUM1LUsX9Qeb3RfI8Z1VREL3 zTLd5h44+cIoJiPh8v1+NvL3VpnTTesm51JEtR3/wUjZoFNPgA+5fNTfGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2PVKcZ/aWhnriMFLkp2Lp/tBcHMB8GA1UdIwQY MBaAFBpQcxRbkm6aaQXrqRjiHrTPHK4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQt MWExNDNlOTcxY2VlLzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQtMWExNDNlOTcxY2Vl LzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8t0LgJI +5vzbWc4q+smMJMAWl7aMrxJdzLBVTEtt89u+NNn78CpCYn6R/ebcFNj/yNKzjdO oGklme5LWH4OS1MeAyoNTWQd0WWZRX2eDY8tPJOs30TxLar3DQDePI/7DkGWrIY1 MKH3idU6N/hJUuHt35Ikm5wwUMMOMfVPbBWPcsNz+eFpkf9u1xGROp0r/yP16zjD nPWq6tRWBRWhFhcUU22Q/9bcApyBgc9sb26tVO0mOy415GefWUZl4eHPVjdaxYKM dD23Il8jVROM4AIHEPEpKFUiFk2NjGt6rjY4l+NIHTPgHS+XOTQLp49P1KPTbqnK hCYyVJyCe+1RvQ== -----END CERTIFICATE-----Generated at Thu Dec 25 11:15:52 2025 by rpki-client