This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json) Hash identifier: XwV7CNceEzqWfEjo72xx6tRusW6TT/Xf5fQUtst8/Xo= Subject key identifier: EF:B1:27:D0:2D:E7:76:FB:1D:B4:E2:74:13:4F:F5:3D:07:1E:5B:E0 Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90 Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990 Certificate serial: 019B32D68123D3F21E3B550792DB391456DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft Manifest number: 13B2 Signing time: Thu 18 Dec 2025 19:01:17 +0000 Manifest this update: Thu 18 Dec 2025 19:01:17 +0000 Manifest next update: Fri 19 Dec 2025 19:01:17 +0000 Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: kSSm3RXfHvr08s0k5ytAAOv+H2Z9+MOgl17QftEui/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:81:23:d3:f2:1e:3b:55:07:92:db:39:14:56:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990 Validity Not Before: Dec 18 19:01:17 2025 GMT Not After : Dec 19 19:01:17 2025 GMT Subject: CN=efb127d02de776fb1db4e274134ff53d071e5be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:61:6b:f6:52:b3:34:7c:8f:47:6d:a7:1c:3f: 4b:fe:3d:07:a6:cf:83:77:90:5e:3b:0c:e5:15:4f: a3:af:15:5e:2e:e9:f5:5a:fb:28:84:59:d0:f1:ef: 4e:8f:2d:4c:08:ce:61:16:93:49:2c:27:bd:69:7d: a0:93:4e:b5:d9:48:30:13:06:38:38:12:67:31:02: 33:39:18:49:2f:5a:d1:d7:50:7d:14:0b:d0:4f:bd: df:62:2e:00:59:80:6f:7f:c0:f1:fc:57:c7:98:9a: 69:35:6f:bb:e1:17:e4:9e:f9:1d:f9:2b:86:d0:be: e2:93:ad:d6:83:90:d5:73:d1:d5:69:05:3f:e7:12: ed:26:59:2a:99:a6:ee:89:35:56:3e:0e:1c:b9:11: 8f:a2:ec:e6:c8:0c:25:96:d1:7e:f7:f0:39:87:e3: 8d:59:73:f5:f9:8e:4f:06:39:d1:9f:77:4e:bc:9c: fd:9c:6b:e7:8e:9e:a0:7d:c8:ce:75:d3:eb:8d:db: 76:a9:b7:dc:9d:8a:55:55:08:4e:18:c3:a0:fc:fc: 0f:84:cc:9d:b8:b1:f9:37:a5:2f:a1:ea:1e:fe:ff: 1f:e2:4e:e5:02:a4:bc:57:bd:ba:45:40:c5:c7:33: 9f:39:11:b3:06:64:d1:42:cf:63:c4:b5:97:88:2c: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B1:27:D0:2D:E7:76:FB:1D:B4:E2:74:13:4F:F5:3D:07:1E:5B:E0 X509v3 Authority Key Identifier: keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:cc:c4:75:f9:91:2b:2a:ae:46:d0:c8:0e:8e:75:80:48:a2: 6e:63:22:ed:3f:aa:ea:18:cf:4c:f7:02:61:4c:fb:c9:74:3d: 1c:f4:15:66:45:2e:56:67:ba:81:f1:c4:65:4d:7f:93:ac:e0: 7e:1c:f0:50:58:b6:fa:64:b2:ec:83:55:16:0f:98:8b:05:a7: 21:8f:4b:4c:4f:f1:08:dc:41:7b:8d:53:ed:30:f8:27:37:20: d8:ca:b8:41:73:2d:a9:a4:4f:08:87:ad:93:84:9f:70:8b:3f: a8:65:f7:9b:8c:2b:6e:1e:12:4c:6e:75:c3:b2:72:d5:7c:15: 12:33:09:39:e3:be:60:c8:8e:1b:80:af:2a:aa:4b:07:88:66: 07:ec:16:eb:f8:8e:04:68:dd:48:9f:b2:64:df:f8:3f:4a:45: c2:9a:45:fc:a3:b6:0d:a6:9d:94:ee:01:cb:ba:bd:ae:99:7f: 39:64:e6:68:b8:69:92:f1:e3:98:2a:e8:eb:d5:74:7e:7e:91: 6f:8c:7a:5c:46:61:86:1b:f2:29:8d:6e:fa:b0:c0:56:09:ee: 3b:b4:47:13:ee:24:81:45:6b:e3:db:33:ba:f2:d9:66:ef:22: 56:0f:ce:a3:7f:6e:9d:b4:5b:06:d7:c0:b0:07:e9:64:63:fa: ec:b6:4d:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1oEj0/IeO1UHkts5FFbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTcxNzVlYWFlMTBiMTZhNDE1M2I3MGE1Y2ZkNzY4Yzdi NTE5OTAwHhcNMjUxMjE4MTkwMTE3WhcNMjUxMjE5MTkwMTE3WjAzMTEwLwYDVQQD EyhlZmIxMjdkMDJkZTc3NmZiMWRiNGUyNzQxMzRmZjUzZDA3MWU1YmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+WFr9lKzNHyPR22nHD9L/j0Hps+D d5BeOwzlFU+jrxVeLun1WvsohFnQ8e9Ojy1MCM5hFpNJLCe9aX2gk0612UgwEwY4 OBJnMQIzORhJL1rR11B9FAvQT73fYi4AWYBvf8Dx/FfHmJppNW+74Rfknvkd+SuG 0L7ik63Wg5DVc9HVaQU/5xLtJlkqmabuiTVWPg4cuRGPouzmyAwlltF+9/A5h+ON WXP1+Y5PBjnRn3dOvJz9nGvnjp6gfcjOddPrjdt2qbfcnYpVVQhOGMOg/PwPhMyd uLH5N6Uvoeoe/v8f4k7lAqS8V726RUDFxzOfORGzBmTRQs9jxLWXiCxfsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+xJ9At53b7HbTidBNP9T0HHlvgMB8GA1UdIwQY MBaAFBgXF16q4QsWpBU7cKXP12jHtRmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83YjE4NDgtNzRmMS00OTdkLTlmZjYt NWQyMTM0OGE2M2M4LzEvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83YjE4NDgtNzRmMS00OTdkLTlmZjYtNWQyMTM0OGE2M2M4 LzEvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8zEdfmR KyquRtDIDo51gEiibmMi7T+q6hjPTPcCYUz7yXQ9HPQVZkUuVme6gfHEZU1/k6zg fhzwUFi2+mSy7INVFg+YiwWnIY9LTE/xCNxBe41T7TD4Jzcg2Mq4QXMtqaRPCIet k4SfcIs/qGX3m4wrbh4STG51w7Jy1XwVEjMJOeO+YMiOG4CvKqpLB4hmB+wW6/iO BGjdSJ+yZN/4P0pFwppF/KO2DaadlO4By7q9rpl/OWTmaLhpkvHjmCro69V0fn6R b4x6XEZhhhvyKY1u+rDAVgnuO7RHE+4kgUVr49szuvLZZu8iVg/Oo39unbRbBtfA sAfpZGP67LZNzQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:07:00 2025 by rpki-client