This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft File: GLbl-LQJfB26dKICIGFFk5_x4do.mft (raw, json) Hash identifier: 8CjO0rWyxondp63SA05vthsLXQusV9PgV6HmC5inOvg= Subject key identifier: BB:25:EB:08:04:6B:80:54:90:FC:53:06:4E:55:94:21:1A:D7:F5:47 Authority key identifier: 18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA Certificate issuer: /CN=18b6e5f8b4097c1dba74a202206145939ff1e1da Certificate serial: 019B61D3D2342C30BF92EAB93B58713652F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft Manifest number: 1196 Signing time: Sat 27 Dec 2025 22:00:30 +0000 Manifest this update: Sat 27 Dec 2025 22:00:30 +0000 Manifest next update: Sun 28 Dec 2025 22:00:30 +0000 Files and hashes: 1: GLbl-LQJfB26dKICIGFFk5_x4do.crl (hash: bQONofZWX+A+u8A3d5RcnBGybqGY/N+ya/Wj+OeacWc=) 2: HBHAqT8jajsD1nwf_6k2IJVgvHo.roa (hash: Y84KjLE8NtO9vOG8nx25z9ZTKrfTK1iHhME9/Rj/s64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d3:d2:34:2c:30:bf:92:ea:b9:3b:58:71:36:52:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b6e5f8b4097c1dba74a202206145939ff1e1da Validity Not Before: Dec 27 22:00:30 2025 GMT Not After : Dec 28 22:00:30 2025 GMT Subject: CN=bb25eb08046b805490fc53064e5594211ad7f547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:d6:fb:2c:d1:8b:a2:a6:e2:44:1b:fb:ed: c6:1b:57:4d:4d:bb:24:c6:13:8c:bf:e0:8e:2c:8c: 5d:0f:cb:91:0c:d8:cb:6a:99:1b:be:2d:59:e5:0e: 46:89:47:a2:43:db:6f:a2:7e:82:ea:f4:bc:d7:89: 5b:f8:75:57:6d:68:36:fe:a8:7f:b4:cf:54:3d:c4: 54:83:d0:49:4c:83:25:15:8d:00:08:93:39:4e:4d: 5d:b6:88:e4:b5:94:1f:10:f9:a8:88:d0:f4:bb:4c: 5a:13:ea:5a:7d:0d:ec:b1:23:ce:73:73:6d:e7:53: b2:17:2b:01:58:31:b0:7e:52:d0:a9:40:ab:9b:ae: a9:47:3c:27:bd:ec:b7:20:77:3b:bf:1a:c0:be:f8: c5:91:c3:ce:1e:53:eb:0d:32:fd:db:cb:f2:c7:8b: ed:ff:35:2e:76:89:90:70:77:d9:49:3d:73:36:c7: a7:50:e7:bb:14:8a:d1:c1:1a:e7:9c:a2:d5:87:0c: 14:3c:25:08:ef:3e:80:f6:8a:3f:5d:57:92:17:e8: 77:ce:36:f7:d9:82:85:f4:a0:d8:e1:f4:50:f7:07: b4:80:12:6d:86:e5:72:fc:d6:8b:95:2e:05:3b:57: 3c:85:40:2a:e7:06:04:d8:15:26:36:aa:a5:9c:c3: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:25:EB:08:04:6B:80:54:90:FC:53:06:4E:55:94:21:1A:D7:F5:47 X509v3 Authority Key Identifier: keyid:18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fe:2d:9c:be:27:d5:7f:05:5f:42:af:df:79:84:8d:a3:01: 52:52:8d:41:58:76:91:62:08:14:10:8f:99:72:0a:4e:83:04: ef:1a:61:02:9c:e1:8d:6f:bd:34:74:69:3a:46:ac:6b:93:bf: d8:66:4c:dc:c6:e1:13:30:91:66:f4:31:93:81:3b:e4:12:73: 6d:b3:0b:1f:47:b1:ef:48:fe:a9:95:a1:02:41:7e:25:72:d8: 6a:d9:48:9a:d5:04:ce:f0:6f:16:ac:13:a8:08:db:f9:74:88: 81:1c:11:71:1a:0f:c2:55:72:5e:01:c1:57:ce:4a:fa:bb:12: 9a:c6:a6:f3:68:53:10:24:8c:5d:83:c6:98:97:8c:17:c5:d2: 06:5d:16:64:1a:33:cd:e9:90:ad:74:87:ca:99:45:8d:e8:fe: b2:c9:fe:f7:f9:75:b1:39:b9:e9:f3:cf:db:0a:2c:0a:c6:6e: 39:e3:89:be:0a:fe:e1:48:f2:48:6b:3d:40:ab:52:45:a2:d3: 5a:26:83:90:67:65:8b:0e:9d:17:73:1b:d1:00:ee:45:69:56: e0:fc:6a:9c:be:25:bf:a3:24:ab:71:a4:be:7c:73:54:f0:86: 50:41:59:30:4c:52:e1:27:bf:15:9c:6a:90:76:db:1d:f9:63: 09:d2:f2:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth09I0LDC/kuq5O1hxNlLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YjZlNWY4YjQwOTdjMWRiYTc0YTIwMjIwNjE0NTkzOWZm MWUxZGEwHhcNMjUxMjI3MjIwMDMwWhcNMjUxMjI4MjIwMDMwWjAzMTEwLwYDVQQD EyhiYjI1ZWIwODA0NmI4MDU0OTBmYzUzMDY0ZTU1OTQyMTFhZDdmNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj7W+yzRi6Km4kQb++3GG1dNTbsk xhOMv+COLIxdD8uRDNjLapkbvi1Z5Q5GiUeiQ9tvon6C6vS814lb+HVXbWg2/qh/ tM9UPcRUg9BJTIMlFY0ACJM5Tk1dtojktZQfEPmoiND0u0xaE+pafQ3ssSPOc3Nt 51OyFysBWDGwflLQqUCrm66pRzwnvey3IHc7vxrAvvjFkcPOHlPrDTL928vyx4vt /zUudomQcHfZST1zNsenUOe7FIrRwRrnnKLVhwwUPCUI7z6A9oo/XVeSF+h3zjb3 2YKF9KDY4fRQ9we0gBJthuVy/NaLlS4FO1c8hUAq5wYE2BUmNqqlnMMZZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsl6wgEa4BUkPxTBk5VlCEa1/VHMB8GA1UdIwQY MBaAFBi25fi0CXwdunSiAiBhRZOf8eHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MzE2MGQtMTcxNC00NGYyLTliZTQt YTdkNDI1M2IyNzFmLzEvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83MzE2MGQtMTcxNC00NGYyLTliZTQtYTdkNDI1M2IyNzFm LzEvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/4tnL4n 1X8FX0Kv33mEjaMBUlKNQVh2kWIIFBCPmXIKToME7xphApzhjW+9NHRpOkasa5O/ 2GZM3MbhEzCRZvQxk4E75BJzbbMLH0ex70j+qZWhAkF+JXLYatlImtUEzvBvFqwT qAjb+XSIgRwRcRoPwlVyXgHBV85K+rsSmsam82hTECSMXYPGmJeMF8XSBl0WZBoz zemQrXSHyplFjej+ssn+9/l1sTm56fPP2wosCsZuOeOJvgr+4UjySGs9QKtSRaLT WiaDkGdliw6dF3Mb0QDuRWlW4PxqnL4lv6Mkq3GkvnxzVPCGUEFZMExS4Se/FZxq kHbbHfljCdLyKg== -----END CERTIFICATE-----Generated at Sun Dec 28 08:01:43 2025 by rpki-client