This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json) Hash identifier: 5YtrOZfyWypovciPiAhqyMFFC8cahmZrL/UkLrjnR58= Subject key identifier: 36:42:75:C1:55:67:A7:81:86:13:B3:4E:36:83:C0:F6:BE:89:CC:D6 Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a Certificate serial: 019AFCFA49027A18A8BDE8BF0BED4EF65D40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft Manifest number: 0E4F Signing time: Mon 08 Dec 2025 08:00:52 +0000 Manifest this update: Mon 08 Dec 2025 08:00:52 +0000 Manifest next update: Tue 09 Dec 2025 08:00:52 +0000 Files and hashes: 1: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: wGaSyHlS6RI3cQh/w0j5r2pQkcBCA6ihcHwnNZGtlsY=) 2: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (hash: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=) 3: oXajxfRbk6N8eRRiT_ohkuBIZx0.roa (hash: pxyqg3KNDxfYN2gXtBCfn7xtRncbmC2U24gMFivJT6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:fa:49:02:7a:18:a8:bd:e8:bf:0b:ed:4e:f6:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a Validity Not Before: Dec 8 08:00:52 2025 GMT Not After : Dec 9 08:00:52 2025 GMT Subject: CN=364275c15567a7818613b34e3683c0f6be89ccd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:fe:4b:8f:53:a0:aa:5b:83:ce:77:b5:27: 9c:be:20:f6:1c:99:85:12:98:5b:d1:be:7c:99:46: 8f:be:29:d9:e9:50:3e:18:9b:07:41:90:70:04:8f: ca:27:6d:3c:72:45:a7:67:d2:09:2e:af:d3:42:e3: 28:bf:a5:88:0b:b9:5a:91:90:52:a8:31:d3:d5:02: dd:33:b0:9a:98:2f:4f:ad:01:df:8b:2e:ca:b9:a4: 76:f2:29:22:03:69:06:a8:83:62:d9:85:52:bc:ae: 05:20:b9:45:e9:3d:fa:b6:20:a7:8e:4b:d6:e2:60: 9b:a2:d9:50:40:94:d8:cc:b2:07:b7:7c:65:0a:4f: 17:3f:84:ca:5f:a1:d4:e9:28:d2:75:53:62:1e:2f: f4:79:57:e9:b8:64:8a:6e:3e:af:aa:5f:43:cc:05: 1e:7e:93:59:0e:e9:d9:f8:c8:bc:91:fa:f8:d0:c4: b4:3f:91:f6:54:5d:2c:0b:24:d3:7a:97:89:31:0c: 63:8f:b1:ba:ba:f9:3b:c3:70:e8:fe:3f:01:48:45: c6:76:41:41:a1:a6:af:a8:61:50:21:9f:68:02:1b: ad:ba:9f:16:ed:18:74:0c:21:91:f0:cc:9d:97:9a: ee:67:67:13:c8:15:11:a7:42:3b:90:84:8d:1f:76: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:42:75:C1:55:67:A7:81:86:13:B3:4E:36:83:C0:F6:BE:89:CC:D6 X509v3 Authority Key Identifier: keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e5:da:c2:8d:09:46:b9:33:d7:0d:cf:99:a1:64:34:28:75: 99:36:ff:f4:69:13:d9:40:c6:48:e7:04:5e:e5:4a:7d:bf:e3: fe:84:3f:55:55:ce:36:8b:cc:a4:b6:9e:bc:3e:fd:ce:48:1f: 57:76:a6:0c:ca:e0:34:75:36:8c:75:03:f0:e6:06:06:f7:05: 26:1e:9b:bd:67:f9:8e:05:26:7b:9e:b4:fa:5c:d9:07:c8:07: 71:09:a1:9f:bb:9a:99:c6:3a:76:61:a9:55:b3:3e:35:c4:f4: e5:87:ea:86:7e:3e:ff:7b:5d:e6:70:73:69:c3:b8:33:a6:a7: f2:0c:2d:4c:93:5c:fa:34:bd:1f:a2:c8:3c:f7:a5:56:87:db: 01:1d:8f:53:c1:e8:1b:e0:21:a5:7e:ce:83:4c:82:72:3c:9e: ba:d1:4b:e8:c8:b2:a2:e4:bc:39:31:88:41:39:20:0a:43:58: a3:0a:33:f4:41:2d:5d:64:79:a0:cd:b9:92:c8:41:12:05:72: fb:54:f9:c0:bc:42:33:cc:3e:73:b1:ba:6b:80:24:22:27:ee: 36:6d:bf:1b:14:25:5a:6e:d8:32:9f:e9:f4:16:c0:58:d0:61: c5:70:a7:fa:4e:b3:73:35:49:fa:39:02:20:4b:4a:2b:d3:47: 5e:11:54:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8+kkCehiovei/C+1O9l1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDZkMmQ0MGZiMWQ1YjJjZjk1NDI5YmZiOTMxOWZjMmIx Y2MyNGEwHhcNMjUxMjA4MDgwMDUyWhcNMjUxMjA5MDgwMDUyWjAzMTEwLwYDVQQD EygzNjQyNzVjMTU1NjdhNzgxODYxM2IzNGUzNjgzYzBmNmJlODljY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv7+S49ToKpbg853tSecviD2HJmF Ephb0b58mUaPvinZ6VA+GJsHQZBwBI/KJ208ckWnZ9IJLq/TQuMov6WIC7lakZBS qDHT1QLdM7CamC9PrQHfiy7KuaR28ikiA2kGqINi2YVSvK4FILlF6T36tiCnjkvW 4mCbotlQQJTYzLIHt3xlCk8XP4TKX6HU6SjSdVNiHi/0eVfpuGSKbj6vql9DzAUe fpNZDunZ+Mi8kfr40MS0P5H2VF0sCyTTepeJMQxjj7G6uvk7w3Do/j8BSEXGdkFB oaavqGFQIZ9oAhutup8W7Rh0DCGR8Mydl5ruZ2cTyBURp0I7kISNH3btQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZCdcFVZ6eBhhOzTjaDwPa+iczWMB8GA1UdIwQY MBaAFBrW0tQPsdWyz5VCm/uTGfwrHMJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82MWZhM2ItNDcyNC00MDE0LTg4MTct YmQ3MWVmZmI5YjM5LzEvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82MWZhM2ItNDcyNC00MDE0LTg4MTctYmQ3MWVmZmI5YjM5 LzEvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduXawo0J Rrkz1w3PmaFkNCh1mTb/9GkT2UDGSOcEXuVKfb/j/oQ/VVXONovMpLaevD79zkgf V3amDMrgNHU2jHUD8OYGBvcFJh6bvWf5jgUme560+lzZB8gHcQmhn7uamcY6dmGp VbM+NcT05Yfqhn4+/3td5nBzacO4M6an8gwtTJNc+jS9H6LIPPelVofbAR2PU8Ho G+AhpX7Og0yCcjyeutFL6MiyouS8OTGIQTkgCkNYowoz9EEtXWR5oM25kshBEgVy +1T5wLxCM8w+c7G6a4AkIifuNm2/GxQlWm7YMp/p9BbAWNBhxXCn+k6zczVJ+jkC IEtKK9NHXhFUrQ== -----END CERTIFICATE-----Generated at Mon Dec 8 13:28:35 2025 by rpki-client