This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json) Hash identifier: lNe1YCj3qsknpKyjJfsNwPQIh3ZNzUwmYCO300YTCww= Subject key identifier: 74:3F:96:C7:10:DD:49:6E:2F:35:10:7B:84:70:4A:E8:C2:54:BC:A7 Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c Certificate serial: 019AF50B851E79B111B8532070B199FBD074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 19:02:43 +0000 Manifest this update: Sat 06 Dec 2025 19:02:43 +0000 Manifest next update: Sun 07 Dec 2025 19:02:43 +0000 Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: PB5EU4d1FR6GMN2eJqEhJHEerqLwYvhz6fwOkh6Gx+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:85:1e:79:b1:11:b8:53:20:70:b1:99:fb:d0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c Validity Not Before: Dec 6 19:02:43 2025 GMT Not After : Dec 7 19:02:43 2025 GMT Subject: CN=743f96c710dd496e2f35107b84704ae8c254bca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:96:97:23:0c:56:ed:71:fb:97:08:9e:aa:a0: 69:46:24:de:c1:2f:ff:84:f1:fd:3e:c8:f1:6d:eb: 85:f4:02:de:eb:52:a5:5e:ec:ff:20:2a:dc:27:b8: 4b:21:87:94:60:90:c4:05:19:89:18:89:e7:af:51: c8:ec:c8:a9:6e:8a:cd:0d:2d:b6:6f:f5:cf:31:c7: 10:d0:2c:c7:29:55:6d:73:bc:fe:a4:35:8a:a6:28: 7f:a6:f2:37:1e:72:40:46:27:22:0e:50:ce:77:a6: e9:62:52:96:37:3c:ed:19:4a:61:bc:b6:56:51:c8: 83:58:8e:9b:a3:60:2e:c7:bc:41:24:c4:d8:c0:fc: 61:e9:cf:a4:5c:92:23:85:09:54:f3:58:b6:1b:ed: 80:1f:8c:4e:7c:c1:35:24:10:0a:e9:a9:ff:c7:2f: 35:25:36:8b:b6:db:4e:bb:9a:85:c6:e5:02:e6:3b: d4:19:ae:80:1e:40:c2:e5:89:4a:4a:6d:54:4f:8f: a7:ee:4b:11:5b:e0:7a:30:c8:c3:0d:e9:43:b6:cb: 0b:48:e7:01:39:32:29:89:8d:9e:a9:a2:de:5c:fc: ad:e4:4e:b1:63:dd:26:78:0c:f4:ef:27:d4:73:0a: 8c:26:08:ac:c7:ba:82:7a:8a:4d:ea:22:6c:40:24: a2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3F:96:C7:10:DD:49:6E:2F:35:10:7B:84:70:4A:E8:C2:54:BC:A7 X509v3 Authority Key Identifier: keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:1d:ba:05:f7:51:4e:18:6d:a9:e1:3c:42:88:fe:93:45:9f: e2:46:20:fe:18:4b:d1:b2:19:b3:f0:45:89:1d:73:40:f8:78: d2:fd:fa:0b:8f:f2:63:db:94:70:d0:9f:48:fa:8c:62:2d:aa: b0:57:23:11:26:98:88:75:c6:42:91:e6:e4:27:50:b4:e2:40: 5e:9c:11:5b:73:2d:50:1f:23:5f:e0:bc:e7:9b:f9:e7:d0:67: 29:9d:fa:7d:35:b7:11:06:13:b7:27:5a:cd:f9:df:a6:f8:11: 2b:c2:0c:76:03:1f:0b:b3:30:04:ae:f2:3e:4f:b6:a7:89:45: 50:a7:49:ee:0a:22:a5:ed:af:0d:10:41:ac:e4:3e:92:a8:52: c2:b9:4c:b1:ad:ea:d9:a7:4d:8f:32:4a:df:86:6e:a8:44:06: 67:b6:a9:d1:db:59:1d:c0:a9:e3:53:1b:ed:e9:4a:03:bc:98: a9:f0:5d:fe:1c:fd:93:d7:2a:a6:af:74:d4:78:9d:75:91:10: 14:78:48:aa:89:b6:f9:0d:29:d8:6a:e3:dc:1f:86:1b:6b:ba: 8d:41:4b:b5:28:41:62:4b:8d:ae:3e:2f:5f:09:ff:93:fe:95: 0f:d4:9d:c0:8e:68:eb:33:ae:d7:cb:91:91:01:7c:1b:a1:f3: 54:2d:e1:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C4UeebERuFMgcLGZ+9B0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTA2MzM3MzkyNDNmNzFhMjllZWQxOGRjMTNkMDA2NzZj N2NlM2MwHhcNMjUxMjA2MTkwMjQzWhcNMjUxMjA3MTkwMjQzWjAzMTEwLwYDVQQD Eyg3NDNmOTZjNzEwZGQ0OTZlMmYzNTEwN2I4NDcwNGFlOGMyNTRiY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZaXIwxW7XH7lwieqqBpRiTewS// hPH9PsjxbeuF9ALe61KlXuz/ICrcJ7hLIYeUYJDEBRmJGInnr1HI7MipborNDS22 b/XPMccQ0CzHKVVtc7z+pDWKpih/pvI3HnJARiciDlDOd6bpYlKWNzztGUphvLZW UciDWI6bo2Aux7xBJMTYwPxh6c+kXJIjhQlU81i2G+2AH4xOfME1JBAK6an/xy81 JTaLtttOu5qFxuUC5jvUGa6AHkDC5YlKSm1UT4+n7ksRW+B6MMjDDelDtssLSOcB OTIpiY2eqaLeXPyt5E6xY90meAz07yfUcwqMJgisx7qCeopN6iJsQCSiowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQ/lscQ3UluLzUQe4RwSujCVLynMB8GA1UdIwQY MBaAFBgQYzc5JD9xop7tGNwT0AZ2x848MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEt ZWQzZjJmNzBjZjE0LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9kYTdjYmItMjM2My00ZDgzLWFkMDEtZWQzZjJmNzBjZjE0 LzEvR0JCak56a2tQM0dpbnUwWTNCUFFCbmJIemp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIB26BfdR ThhtqeE8Qoj+k0Wf4kYg/hhL0bIZs/BFiR1zQPh40v36C4/yY9uUcNCfSPqMYi2q sFcjESaYiHXGQpHm5CdQtOJAXpwRW3MtUB8jX+C855v559BnKZ36fTW3EQYTtyda zfnfpvgRK8IMdgMfC7MwBK7yPk+2p4lFUKdJ7goipe2vDRBBrOQ+kqhSwrlMsa3q 2adNjzJK34ZuqEQGZ7ap0dtZHcCp41Mb7elKA7yYqfBd/hz9k9cqpq901HiddZEQ FHhIqom2+Q0p2Grj3B+GG2u6jUFLtShBYkuNrj4vXwn/k/6VD9SdwI5o6zOu18uR kQF8G6HzVC3hWw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:54 2025 by rpki-client