This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json) Hash identifier: ueAaXaOZicH0NYr+TDAq9bapIlUHhQgMUBGjXSoo3lA= Subject key identifier: 08:11:AF:F4:81:6C:20:C7:FA:F1:B7:1B:F4:6C:E1:B5:B4:46:38:AA Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90 Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990 Certificate serial: 019AF12E51398EC54D1AAE40568379DD6AB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft Manifest number: 1390 Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: 5lhE901B3i0nOvhf0JkqJh5iAKdP6EKDepqM507Qesc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:51:39:8e:c5:4d:1a:ae:40:56:83:79:dd:6a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990 Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=0811aff4816c20c7faf1b71bf46ce1b5b44638aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:89:b8:d1:2e:56:75:f8:1d:a6:6a:a6:c0:f7: ba:f6:33:42:66:95:89:59:68:c5:cf:52:2e:80:af: 5d:f5:c4:94:3b:a6:89:fd:73:c8:fe:eb:80:73:99: 15:f8:9c:36:b3:ff:9f:75:4c:07:77:0e:2d:db:d5: 3f:3c:9f:b9:9c:f0:89:31:da:37:b0:c2:3e:6a:17: de:11:f3:98:27:d4:39:a8:61:31:90:79:7f:51:88: e5:cb:f3:74:14:ac:ab:10:8f:78:f8:61:44:c0:6e: 88:ae:b6:ba:ec:aa:cd:91:f5:4a:19:ef:1b:4d:0e: e9:a3:49:42:a8:0d:ef:a8:f1:79:ba:41:4a:1e:31: 72:d3:6f:56:bc:4b:92:36:66:94:d9:dd:58:71:50: e5:d2:11:26:c1:7b:37:bf:01:60:01:91:5b:35:bc: 29:11:3d:7e:8a:85:20:6a:43:e8:3a:92:19:a9:dc: ac:a5:c2:91:67:1f:f6:c4:70:d5:07:bc:27:eb:70: 91:c8:21:4c:29:8d:70:11:19:d6:c0:30:47:89:bc: b7:75:cd:d0:5b:6d:1d:08:95:8b:9c:40:70:89:33: 7d:d4:33:8a:e9:6b:4d:84:08:12:46:1f:4a:99:09: ae:ae:98:41:ad:20:f6:1e:9f:d2:eb:8e:4c:a1:fa: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:11:AF:F4:81:6C:20:C7:FA:F1:B7:1B:F4:6C:E1:B5:B4:46:38:AA X509v3 Authority Key Identifier: keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e5:5f:e4:ff:01:83:c6:d3:38:44:2f:c6:1f:12:65:7a:cd: 4c:d2:18:eb:cd:63:1f:c9:1e:d8:a8:49:68:04:af:69:8c:36: 32:87:93:88:0f:30:ca:d4:1a:a1:60:38:71:04:33:d3:ee:4a: 1c:b3:5e:df:31:7a:df:cb:79:a2:b7:18:7a:f6:db:13:ec:2e: 91:e2:61:f0:8a:52:8e:14:e9:bb:27:46:5e:16:8f:0a:01:a8: 5f:44:0c:89:ca:58:91:d8:fa:cd:17:92:d3:be:81:3a:35:ef: 1f:69:c6:84:3a:7e:93:38:af:12:00:de:71:de:c7:ca:84:16: c4:c6:30:c3:6e:13:43:7e:e6:cf:60:db:a0:fe:35:c2:63:fa: 09:b3:db:60:ee:52:77:15:c9:f8:33:51:a1:d5:a6:6e:52:6d: 21:a6:cd:7a:bd:b9:9f:09:0b:3d:07:13:bc:c7:3f:a1:f0:f3: 15:3c:12:a7:f9:7b:f0:30:0c:8c:81:1a:79:e8:49:da:de:86: cc:13:15:e0:33:96:c1:60:52:ac:ae:e3:84:10:69:3e:35:d1: fc:a9:14:74:e4:97:bb:dd:47:92:05:d9:67:93:b1:27:db:2f: 7d:b3:d7:8d:c5:92:a6:4c:3b:aa:fc:a2:b3:74:88:b9:de:9b: 67:9e:a5:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlE5jsVNGq5AVoN53WqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTcxNzVlYWFlMTBiMTZhNDE1M2I3MGE1Y2ZkNzY4Yzdi NTE5OTAwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD EygwODExYWZmNDgxNmMyMGM3ZmFmMWI3MWJmNDZjZTFiNWI0NDYzOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4m40S5WdfgdpmqmwPe69jNCZpWJ WWjFz1IugK9d9cSUO6aJ/XPI/uuAc5kV+Jw2s/+fdUwHdw4t29U/PJ+5nPCJMdo3 sMI+ahfeEfOYJ9Q5qGExkHl/UYjly/N0FKyrEI94+GFEwG6Irra67KrNkfVKGe8b TQ7po0lCqA3vqPF5ukFKHjFy029WvEuSNmaU2d1YcVDl0hEmwXs3vwFgAZFbNbwp ET1+ioUgakPoOpIZqdyspcKRZx/2xHDVB7wn63CRyCFMKY1wERnWwDBHiby3dc3Q W20dCJWLnEBwiTN91DOK6WtNhAgSRh9KmQmurphBrSD2Hp/S645MofpKdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgRr/SBbCDH+vG3G/Rs4bW0RjiqMB8GA1UdIwQY MBaAFBgXF16q4QsWpBU7cKXP12jHtRmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83YjE4NDgtNzRmMS00OTdkLTlmZjYt NWQyMTM0OGE2M2M4LzEvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83YjE4NDgtNzRmMS00OTdkLTlmZjYtNWQyMTM0OGE2M2M4 LzEvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeVf5P8B g8bTOEQvxh8SZXrNTNIY681jH8ke2KhJaASvaYw2MoeTiA8wytQaoWA4cQQz0+5K HLNe3zF638t5orcYevbbE+wukeJh8IpSjhTpuydGXhaPCgGoX0QMicpYkdj6zReS 076BOjXvH2nGhDp+kzivEgDecd7HyoQWxMYww24TQ37mz2DboP41wmP6CbPbYO5S dxXJ+DNRodWmblJtIabNer25nwkLPQcTvMc/ofDzFTwSp/l78DAMjIEaeehJ2t6G zBMV4DOWwWBSrK7jhBBpPjXR/KkUdOSXu91HkgXZZ5OxJ9svfbPXjcWSpkw7qvyi s3SIud6bZ56l2A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:32 2025 by rpki-client