This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json) Hash identifier: FBHtodcz8sVpoE/2myswAauZVWpPtwPk9gbm3AuS0JU= Subject key identifier: 47:B2:9E:B8:F9:73:59:C2:7A:C7:8F:9B:DC:0E:D4:68:DF:2D:9C:6C Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10 Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10 Certificate serial: 019AF2092F967A46BF5E9179E4D6CEE9FFF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:19 +0000 Manifest this update: Sat 06 Dec 2025 05:01:19 +0000 Manifest next update: Sun 07 Dec 2025 05:01:19 +0000 Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: MpQj61P393dpvtC8YFLKJ+TaZ1MaJF04O4UdHeLIC7I=) 2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2f:96:7a:46:bf:5e:91:79:e4:d6:ce:e9:ff:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10 Validity Not Before: Dec 6 05:01:19 2025 GMT Not After : Dec 7 05:01:19 2025 GMT Subject: CN=47b29eb8f97359c27ac78f9bdc0ed468df2d9c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:83:c5:3d:c8:6c:69:18:12:b9:81:93:14:88: c7:2c:6e:17:68:78:e9:5f:af:7a:03:5c:28:4d:ce: 8b:a4:9d:ea:f5:fb:5d:e2:32:4a:2a:05:8d:7e:79: f5:9f:41:74:08:99:4f:ce:38:2b:6d:f6:09:c4:80: d8:75:6a:fb:6f:b3:ce:61:5b:6d:a0:dd:c6:58:ab: 15:d3:56:02:df:ba:3b:3f:d1:1a:cc:d1:bf:c9:c8: f8:c0:f1:91:db:26:4d:45:fd:b5:8d:9e:28:b0:df: f8:b5:6a:df:bb:fb:60:ec:e8:25:34:5f:a4:15:84: 07:95:f2:41:87:18:df:94:11:5e:ae:8f:c4:14:90: 7c:1d:63:12:be:24:43:a4:ab:50:94:bf:a6:f4:df: 16:5d:b9:62:92:26:ed:1c:50:d3:05:f9:4a:10:e5: 33:b7:6c:35:e8:f9:33:e2:4b:d3:3a:bc:51:e3:37: cf:cf:b3:33:b1:c4:5b:01:60:a7:90:86:11:a4:d2: 9b:f8:98:66:00:e9:96:c0:62:66:46:87:1a:6c:6c: c3:ed:71:b3:23:10:17:cc:c2:a0:ae:4b:83:63:93: 52:9a:aa:e9:be:49:4e:98:3c:f5:1f:1d:44:d7:2c: 2a:9d:52:30:97:eb:80:80:6e:ec:b3:87:05:e0:0d: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B2:9E:B8:F9:73:59:C2:7A:C7:8F:9B:DC:0E:D4:68:DF:2D:9C:6C X509v3 Authority Key Identifier: keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0e:1f:05:f2:78:c9:a0:7f:47:b0:d9:3d:c4:6e:0e:36:c0: 84:4e:f8:f3:74:bb:a5:3c:32:38:d1:08:f4:07:7a:3d:92:7b: a4:0c:14:76:c3:50:f3:b5:e6:23:ce:ad:a0:24:7b:fe:9b:15: d4:e1:6d:a9:4d:d2:3d:d8:c3:13:4f:de:87:ab:c7:fe:7f:6e: f4:be:70:7c:19:36:fd:a3:e0:89:f9:85:08:43:66:ca:46:b4: a8:58:f0:09:de:df:e8:e0:47:29:4c:98:07:ee:26:bc:61:f3: 23:5c:5b:b1:e4:99:e4:0c:7a:db:74:70:c7:91:09:2f:e5:64: 56:e0:b3:7d:d8:be:12:89:a9:68:09:36:6e:6d:b0:9a:f4:8a: 98:1a:69:36:f0:f7:cd:d1:c7:db:fc:bb:c2:37:c0:cb:17:e7: 1d:c0:96:ed:ee:c2:79:2a:77:5d:c1:26:75:19:50:a6:6f:9c: 62:88:cf:05:c2:90:6f:c6:e5:a6:47:8d:72:0d:36:0a:ba:0b: d4:7e:29:cb:93:ce:14:ba:4a:c6:47:a3:fc:ff:66:07:11:64: 65:8d:42:c2:fc:74:1e:01:a0:65:93:b5:7b:c4:85:aa:41:6d: 7e:0a:73:54:1f:3d:85:ee:7a:a9:dd:5b:4e:c0:2c:c1:01:72: c4:1e:79:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCS+Weka/XpF55NbO6f/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTA3MzE0NWI5MjZlOWE2OTA1ZWJhOTE4ZTIxZWI0Y2Yx Y2FlMTAwHhcNMjUxMjA2MDUwMTE5WhcNMjUxMjA3MDUwMTE5WjAzMTEwLwYDVQQD Eyg0N2IyOWViOGY5NzM1OWMyN2FjNzhmOWJkYzBlZDQ2OGRmMmQ5YzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYPFPchsaRgSuYGTFIjHLG4XaHjp X696A1woTc6LpJ3q9ftd4jJKKgWNfnn1n0F0CJlPzjgrbfYJxIDYdWr7b7POYVtt oN3GWKsV01YC37o7P9EazNG/ycj4wPGR2yZNRf21jZ4osN/4tWrfu/tg7OglNF+k FYQHlfJBhxjflBFero/EFJB8HWMSviRDpKtQlL+m9N8WXblikibtHFDTBflKEOUz t2w16Pkz4kvTOrxR4zfPz7MzscRbAWCnkIYRpNKb+JhmAOmWwGJmRocabGzD7XGz IxAXzMKgrkuDY5NSmqrpvklOmDz1Hx1E1ywqnVIwl+uAgG7ss4cF4A3DXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeynrj5c1nCesePm9wO1GjfLZxsMB8GA1UdIwQY MBaAFBpQcxRbkm6aaQXrqRjiHrTPHK4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQt MWExNDNlOTcxY2VlLzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQtMWExNDNlOTcxY2Vl LzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdA4fBfJ4 yaB/R7DZPcRuDjbAhE7483S7pTwyONEI9Ad6PZJ7pAwUdsNQ87XmI86toCR7/psV 1OFtqU3SPdjDE0/eh6vH/n9u9L5wfBk2/aPgifmFCENmyka0qFjwCd7f6OBHKUyY B+4mvGHzI1xbseSZ5Ax623Rwx5EJL+VkVuCzfdi+EompaAk2bm2wmvSKmBppNvD3 zdHH2/y7wjfAyxfnHcCW7e7CeSp3XcEmdRlQpm+cYojPBcKQb8blpkeNcg02CroL 1H4py5POFLpKxkej/P9mBxFkZY1Cwvx0HgGgZZO1e8SFqkFtfgpzVB89he56qd1b TsAswQFyxB55zg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:42 2025 by rpki-client