This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft File: GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json) Hash identifier: wkg+HEgWjqN8kI20j2umRZg+YaOiHkT9vnERiQvQ7fI= Subject key identifier: 98:0D:60:02:4D:42:3D:E1:8E:06:2E:FB:B0:07:F2:A4:D3:C7:CC:61 Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D Certificate issuer: /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d Certificate serial: 019B3DC77F9064D8F0C6A5527B161F91C2D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft Manifest number: 1060 Signing time: Sat 20 Dec 2025 22:00:42 +0000 Manifest this update: Sat 20 Dec 2025 22:00:42 +0000 Manifest next update: Sun 21 Dec 2025 22:00:42 +0000 Files and hashes: 1: GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa (hash: UpOJI3oK6cWcuZSPYztLiL8Ogsz4qyqADulp7DywRZk=) 2: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: Le9P4w7eK2p9KH1NC2fQH2z6eyruD7YaQcZsho7nwTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:7f:90:64:d8:f0:c6:a5:52:7b:16:1f:91:c2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d Validity Not Before: Dec 20 22:00:42 2025 GMT Not After : Dec 21 22:00:42 2025 GMT Subject: CN=980d60024d423de18e062efbb007f2a4d3c7cc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:29:c2:69:11:45:49:86:9d:77:5e:7e:ad:d7: 24:97:92:fa:8b:fc:2d:70:b2:5b:61:d2:72:68:18: 99:c2:a0:31:ab:02:c8:01:f8:75:94:e1:95:6d:4c: 92:20:c4:c3:ac:06:51:a1:3b:92:8a:02:13:ec:28: 6f:67:2f:a7:50:d9:a2:95:f2:a5:27:c2:28:6e:24: 80:9d:e7:06:37:47:01:05:82:88:6f:50:05:b2:71: 60:60:6a:e1:09:ef:fd:94:68:74:69:22:72:2e:42: 9a:2c:6c:5c:4e:0d:27:ad:63:02:f6:8d:6f:d4:0d: 4e:6a:a1:b8:1e:23:11:03:3c:b5:40:74:a2:5c:7e: d8:a7:e8:64:7b:3f:58:86:37:23:46:b6:34:0d:6d: f0:17:64:4a:0d:0e:c3:d8:82:ac:28:a5:e3:8b:38: 37:a0:e1:08:3d:d4:fc:2c:de:0e:f3:7a:ab:4b:24: f3:26:dd:fe:a8:7e:2c:43:af:0d:79:a9:ee:aa:ea: d3:2c:a0:68:84:4d:4f:e7:f3:32:f8:d9:0d:af:b3: 97:cd:00:91:4a:a6:75:7c:b4:6d:bb:53:c4:8f:1e: ab:c3:08:f6:7f:56:41:0a:5a:7d:7f:fb:9d:9e:c6: 5b:e8:ef:41:7e:8c:23:29:96:07:1c:ee:85:26:3e: 54:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0D:60:02:4D:42:3D:E1:8E:06:2E:FB:B0:07:F2:A4:D3:C7:CC:61 X509v3 Authority Key Identifier: keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5b:9c:3c:39:a1:dd:36:ce:86:5e:9f:8f:c2:9a:80:e5:80: 55:c1:3b:ab:d6:63:ca:ae:51:59:ac:1c:86:1e:bc:c3:c6:e4: 23:f2:2f:37:29:99:fb:18:95:2c:b5:a8:63:0a:13:be:63:9e: d3:22:ee:aa:76:22:50:c1:2a:b4:6f:c9:72:b2:91:49:c6:b9: a2:e0:c1:80:9b:d4:dd:9f:7b:ec:09:69:76:fa:cc:f3:4e:df: 12:37:3e:24:36:84:98:e4:d7:11:19:76:2c:f1:81:4d:d2:21: 01:68:7f:d2:ed:1d:ce:63:76:03:1d:7c:a3:26:ff:0b:cd:82: 8d:18:e8:93:ed:22:29:81:c8:c6:99:31:18:7d:2a:ad:99:00: 4c:fb:75:3a:b0:d5:77:da:8e:c0:d6:0d:59:cc:b1:1e:88:63: dc:a5:82:24:ef:f3:98:3a:f1:28:7e:35:7a:61:10:c4:28:be: cd:31:cc:50:31:26:71:e6:2b:8f:19:17:b9:84:76:4a:3c:74: ce:30:33:ea:af:2d:55:d9:b2:79:66:6a:24:17:aa:d0:17:4b: 7c:a1:37:2b:47:f7:72:e7:63:40:68:8e:3d:32:cf:96:59:de: 37:40:3e:1e:e4:89:55:e6:bd:7b:83:d5:3b:23:c8:4d:e5:ce: 51:03:06:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3+QZNjwxqVSexYfkcLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjJlMWZjNDAwYmJmOWRjYjIwNjZhZGUzZGJmZTVjOWVh YjJlN2QwHhcNMjUxMjIwMjIwMDQyWhcNMjUxMjIxMjIwMDQyWjAzMTEwLwYDVQQD Eyg5ODBkNjAwMjRkNDIzZGUxOGUwNjJlZmJiMDA3ZjJhNGQzYzdjYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkinCaRFFSYadd15+rdckl5L6i/wt cLJbYdJyaBiZwqAxqwLIAfh1lOGVbUySIMTDrAZRoTuSigIT7ChvZy+nUNmilfKl J8IobiSAnecGN0cBBYKIb1AFsnFgYGrhCe/9lGh0aSJyLkKaLGxcTg0nrWMC9o1v 1A1OaqG4HiMRAzy1QHSiXH7Yp+hkez9YhjcjRrY0DW3wF2RKDQ7D2IKsKKXjizg3 oOEIPdT8LN4O83qrSyTzJt3+qH4sQ68NeanuqurTLKBohE1P5/My+NkNr7OXzQCR SqZ1fLRtu1PEjx6rwwj2f1ZBClp9f/udnsZb6O9BfowjKZYHHO6FJj5UPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgNYAJNQj3hjgYu+7AH8qTTx8xhMB8GA1UdIwQY MBaAFBmy4fxAC7+dyyBmrePb/lyeqy59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYt MGRhOWFlODQ1OGRiLzEvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYtMGRhOWFlODQ1OGRi LzEvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1ucPDmh 3TbOhl6fj8KagOWAVcE7q9Zjyq5RWawchh68w8bkI/IvNymZ+xiVLLWoYwoTvmOe 0yLuqnYiUMEqtG/JcrKRSca5ouDBgJvU3Z977AlpdvrM807fEjc+JDaEmOTXERl2 LPGBTdIhAWh/0u0dzmN2Ax18oyb/C82CjRjok+0iKYHIxpkxGH0qrZkATPt1OrDV d9qOwNYNWcyxHohj3KWCJO/zmDrxKH41emEQxCi+zTHMUDEmceYrjxkXuYR2Sjx0 zjAz6q8tVdmyeWZqJBeq0BdLfKE3K0f3cudjQGiOPTLPllneN0A+HuSJVea9e4PV OyPITeXOUQMGCQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:26:28 2025 by rpki-client