This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json) Hash identifier: f3Nn0hwd69VRhD98Mq/QHnbqhVT3vDK91hDWLruJ+C4= Subject key identifier: 53:64:A6:99:3B:56:F8:D6:40:32:E4:5D:B8:B2:AB:9A:12:B6:49:B9 Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F Certificate issuer: /CN=19337ca56de7c3b977875369ecde53852515746f Certificate serial: 019B6FFDEF5FE998D6A90AA055C52BC2AB7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft Manifest number: 12F2 Signing time: Tue 30 Dec 2025 16:01:11 +0000 Manifest this update: Tue 30 Dec 2025 16:01:11 +0000 Manifest next update: Wed 31 Dec 2025 16:01:11 +0000 Files and hashes: 1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: 4Nu2BO8iawwzzZ6z6CkX/lOH3F0BhTzZzClgTHHlvDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:ef:5f:e9:98:d6:a9:0a:a0:55:c5:2b:c2:ab:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19337ca56de7c3b977875369ecde53852515746f Validity Not Before: Dec 30 16:01:11 2025 GMT Not After : Dec 31 16:01:11 2025 GMT Subject: CN=5364a6993b56f8d64032e45db8b2ab9a12b649b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:5d:00:a8:44:7b:4f:76:45:47:03:18:04: 71:f1:db:67:4c:d5:24:d6:b1:4a:08:9c:87:77:79: 69:bb:e5:9e:29:9f:d8:c3:a8:f5:69:7c:0d:1c:68: 32:5f:23:86:cf:a1:92:1a:40:23:e3:f5:fd:7f:ed: 0f:97:8c:74:b2:2e:07:f3:33:e0:f4:5e:aa:77:67: fc:1b:3e:47:84:94:d3:54:c9:df:15:e2:ce:bd:d8: 3c:57:dd:d1:95:97:de:0c:a0:f1:d1:99:c0:1d:0b: fa:e3:fa:f7:a5:a3:d9:3d:3f:2c:6b:1e:31:2f:1c: 42:ad:57:2e:a6:5c:5d:80:5e:bb:14:b0:a8:6f:20: 91:9a:61:ac:e6:02:0d:11:ee:68:61:da:08:48:33: 74:9e:27:24:a3:75:53:7e:1e:76:6a:d2:2d:b6:b8: 68:ff:bf:01:56:4d:2a:e9:c0:bf:73:46:ad:b5:f0: a0:f0:70:29:1f:40:75:b0:04:b1:6f:ae:3d:7f:c0: c3:c1:b4:bc:70:b1:c9:c4:8d:c8:2b:0b:90:0a:0f: 53:6f:54:1f:17:8b:c6:cb:a2:cf:0c:fc:e3:bf:1f: 49:61:12:4b:ad:99:ac:da:b3:5a:f6:68:ff:38:b7: 0d:c2:44:9c:74:8a:c7:b5:74:a9:c2:83:1f:be:4b: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:64:A6:99:3B:56:F8:D6:40:32:E4:5D:B8:B2:AB:9A:12:B6:49:B9 X509v3 Authority Key Identifier: keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0c:1d:ab:44:5e:2f:da:75:ec:00:eb:39:53:3e:b9:9f:a9: fe:b9:8c:b2:42:81:e0:93:c1:b5:7d:45:31:e1:86:06:eb:c8: 0f:f7:19:bf:b5:68:f2:a5:ac:57:b8:69:84:10:92:1f:17:75: fe:83:1f:d0:c8:6a:38:9b:c5:fe:02:eb:40:c0:7a:8a:05:a3: 4f:3a:a0:db:69:a6:a4:cf:18:a2:e2:f2:12:65:e7:61:04:ff: 59:45:d1:72:94:8e:ee:79:af:4f:05:97:0f:5d:84:c3:4d:43: 68:02:ac:56:7d:e4:63:f5:16:64:0e:2d:bd:26:22:d5:fa:df: 4f:32:c0:b6:8c:46:4d:d8:f1:b0:c4:b8:c2:54:16:a3:cf:55: 5d:6c:fe:5e:d9:36:cf:9b:94:3b:a4:29:b5:9e:d1:d5:09:3d: 33:9d:fa:ce:8a:62:ff:a9:56:7e:99:0a:9b:ff:35:14:93:b8: 5b:31:4a:70:db:2f:54:c8:96:3f:a6:51:3e:5b:b8:b0:71:b1: 3b:04:43:7e:54:ba:3b:67:35:23:de:65:3f:24:9f:4c:5d:5a: 7f:bd:9d:fc:1f:bd:b3:de:73:dd:67:fb:7a:0a:6f:e6:2c:2e: a5:e9:c6:fa:6c:54:71:dd:6e:a4:96:92:46:54:c9:2a:b7:97: 29:16:48:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/e9f6ZjWqQqgVcUrwqt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MzM3Y2E1NmRlN2MzYjk3Nzg3NTM2OWVjZGU1Mzg1MjUx NTc0NmYwHhcNMjUxMjMwMTYwMTExWhcNMjUxMjMxMTYwMTExWjAzMTEwLwYDVQQD Eyg1MzY0YTY5OTNiNTZmOGQ2NDAzMmU0NWRiOGIyYWI5YTEyYjY0OWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0tdAKhEe092RUcDGARx8dtnTNUk 1rFKCJyHd3lpu+WeKZ/Yw6j1aXwNHGgyXyOGz6GSGkAj4/X9f+0Pl4x0si4H8zPg 9F6qd2f8Gz5HhJTTVMnfFeLOvdg8V93RlZfeDKDx0ZnAHQv64/r3paPZPT8sax4x LxxCrVcuplxdgF67FLCobyCRmmGs5gINEe5oYdoISDN0nicko3VTfh52atIttrho /78BVk0q6cC/c0attfCg8HApH0B1sASxb649f8DDwbS8cLHJxI3IKwuQCg9Tb1Qf F4vGy6LPDPzjvx9JYRJLrZms2rNa9mj/OLcNwkScdIrHtXSpwoMfvksk+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNkppk7VvjWQDLkXbiyq5oStkm5MB8GA1UdIwQY MBaAFBkzfKVt58O5d4dTaezeU4UlFXRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOGQ4MzMtZjM5Ni00YjFmLWEwZTMt NTZiODgxMWU0OTI2LzEvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iOGQ4MzMtZjM5Ni00YjFmLWEwZTMtNTZiODgxMWU0OTI2 LzEvR1ROOHBXM253N2wzaDFOcDdONVRoU1VWZEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAwdq0Re L9p17ADrOVM+uZ+p/rmMskKB4JPBtX1FMeGGBuvID/cZv7Vo8qWsV7hphBCSHxd1 /oMf0MhqOJvF/gLrQMB6igWjTzqg22mmpM8YouLyEmXnYQT/WUXRcpSO7nmvTwWX D12Ew01DaAKsVn3kY/UWZA4tvSYi1frfTzLAtoxGTdjxsMS4wlQWo89VXWz+Xtk2 z5uUO6QptZ7R1Qk9M536zopi/6lWfpkKm/81FJO4WzFKcNsvVMiWP6ZRPlu4sHGx OwRDflS6O2c1I95lPySfTF1af72d/B+9s95z3Wf7egpv5iwupenG+mxUcd1upJaS RlTJKreXKRZIFg== -----END CERTIFICATE-----Generated at Tue Dec 30 22:02:48 2025 by rpki-client