This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json) Hash identifier: +kfOOtitHjjZl2/g43XIyOE8tp6petSY88cPYTJz0L0= Subject key identifier: A9:9B:CE:A1:98:24:27:11:3D:8F:F7:30:28:01:96:E8:EB:61:B5:99 Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d Certificate serial: 019AF31B804DC1F36E61ECC2A6D3EF3020C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:00:56 +0000 Manifest this update: Sat 06 Dec 2025 10:00:56 +0000 Manifest next update: Sun 07 Dec 2025 10:00:56 +0000 Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: bHR1dxc02EiNTKpMwSK8MtW9EPTSfjpeK8o/ot334Ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:80:4d:c1:f3:6e:61:ec:c2:a6:d3:ef:30:20:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d Validity Not Before: Dec 6 10:00:56 2025 GMT Not After : Dec 7 10:00:56 2025 GMT Subject: CN=a99bcea1982427113d8ff730280196e8eb61b599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:85:a0:e0:d3:04:6a:40:09:f8:32:4b:05: 29:d2:04:55:66:81:ac:82:78:da:83:2f:bb:7f:82: 5c:e1:10:c9:1a:79:ac:e9:18:44:dd:09:c9:f0:7e: 06:0c:57:e0:a2:2a:46:63:0a:5d:34:48:ae:48:ee: d8:ac:18:9f:97:9e:8f:f3:38:06:ba:9b:5c:cc:86: f1:60:8a:31:d3:e0:22:ef:2d:98:2b:62:a4:00:3c: 77:36:b9:0c:86:59:fd:8a:24:55:ea:32:b1:ef:20: 68:bb:b5:86:93:6d:41:d0:1b:23:8e:6e:a6:4f:6c: 3a:c7:ef:3a:cd:5c:d6:47:15:bf:1d:36:cd:9b:12: f0:74:f6:56:f1:62:db:94:38:1c:30:98:de:aa:9f: 86:4d:cc:57:29:61:6f:21:4c:51:90:26:1f:28:01: 12:dc:9c:4d:b9:a8:02:c9:63:a6:1c:ac:0d:52:94: 99:47:c7:ac:b4:ed:8f:9c:ff:da:a7:bb:c0:0f:66: 25:cc:66:b6:63:9b:ba:e3:b2:23:58:01:70:b6:3d: 0e:06:47:f0:0a:df:10:8d:95:ee:33:aa:1c:57:fd: 14:6b:c8:99:d4:82:16:4f:40:d0:f4:ba:61:fd:bb: ef:34:70:93:d8:31:1e:04:60:61:0b:2c:f7:8e:ce: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9B:CE:A1:98:24:27:11:3D:8F:F7:30:28:01:96:E8:EB:61:B5:99 X509v3 Authority Key Identifier: keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0e:c8:04:bc:fa:c0:d6:7f:c8:18:2a:de:97:e1:cc:41:e3: 03:8a:10:da:f9:cf:7b:26:f7:6f:f1:cd:57:7b:95:6b:38:4d: 9f:86:f7:af:54:7d:18:19:5a:8b:81:7b:84:1b:da:52:57:b0: 90:e1:51:4d:0c:9b:f9:31:d4:f2:bd:7e:0e:ec:84:23:e2:7e: 47:60:90:ab:4b:d6:8d:6d:84:85:49:4a:7a:5c:b4:1c:c1:b7: 47:78:45:79:6a:81:35:b9:00:01:87:d9:01:32:86:03:cd:20: d8:97:c1:c1:f0:ad:ac:51:8e:59:b2:42:56:3c:c8:b1:c6:e0: 85:bc:de:1c:39:a8:49:43:3c:2e:3c:4a:a2:7b:c7:38:8e:3b: fb:4a:c9:86:d5:a1:c4:fa:24:e0:35:40:a8:95:86:7f:04:c2: fb:bb:3a:75:28:f8:c3:4c:88:b4:ce:64:ab:6c:8a:e3:0f:18: 6d:68:85:fb:e0:d7:57:ba:a3:13:2a:10:af:03:f8:f4:da:65: d3:82:1f:cc:1a:d2:b0:94:a7:d5:ee:90:8b:1b:53:3d:bc:3f: a4:49:e3:f3:38:b2:01:80:b0:cd:d0:e0:ac:7a:d5:7f:c7:ac: cb:6e:0b:8d:32:85:ed:c2:f6:82:bc:09:85:ec:f7:70:34:33: be:3f:c0:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4BNwfNuYezCptPvMCDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZDk3OWY4OTJmZWI4MTk5NzZhMjVmZTk0N2Y1ZDdhZjM3 ZWNjN2QwHhcNMjUxMjA2MTAwMDU2WhcNMjUxMjA3MTAwMDU2WjAzMTEwLwYDVQQD EyhhOTliY2VhMTk4MjQyNzExM2Q4ZmY3MzAyODAxOTZlOGViNjFiNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyyFoODTBGpACfgySwUp0gRVZoGs gnjagy+7f4Jc4RDJGnms6RhE3QnJ8H4GDFfgoipGYwpdNEiuSO7YrBifl56P8zgG uptczIbxYIox0+Ai7y2YK2KkADx3NrkMhln9iiRV6jKx7yBou7WGk21B0Bsjjm6m T2w6x+86zVzWRxW/HTbNmxLwdPZW8WLblDgcMJjeqp+GTcxXKWFvIUxRkCYfKAES 3JxNuagCyWOmHKwNUpSZR8estO2PnP/ap7vAD2YlzGa2Y5u647IjWAFwtj0OBkfw Ct8QjZXuM6ocV/0Ua8iZ1IIWT0DQ9Lph/bvvNHCT2DEeBGBhCyz3js4H5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmbzqGYJCcRPY/3MCgBlujrYbWZMB8GA1UdIwQY MBaAFBjZefiS/rgZl2ol/pR/XXrzfsx9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05sNS1KTC11Qm1YYWlYLWxIOWRldk4tekgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9mNTBiOTAtZjAzMS00MTJlLWEwNDAt YWU2YWJjZTU5YWMxLzEvR05sNS1KTC11Qm1YYWlYLWxIOWRldk4tekgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9mNTBiOTAtZjAzMS00MTJlLWEwNDAtYWU2YWJjZTU5YWMx LzEvR05sNS1KTC11Qm1YYWlYLWxIOWRldk4tekgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQ7IBLz6 wNZ/yBgq3pfhzEHjA4oQ2vnPeyb3b/HNV3uVazhNn4b3r1R9GBlai4F7hBvaUlew kOFRTQyb+THU8r1+DuyEI+J+R2CQq0vWjW2EhUlKely0HMG3R3hFeWqBNbkAAYfZ ATKGA80g2JfBwfCtrFGOWbJCVjzIscbghbzeHDmoSUM8LjxKonvHOI47+0rJhtWh xPok4DVAqJWGfwTC+7s6dSj4w0yItM5kq2yK4w8YbWiF++DXV7qjEyoQrwP49Npl 04IfzBrSsJSn1e6QixtTPbw/pEnj8ziyAYCwzdDgrHrVf8esy24LjTKF7cL2grwJ hez3cDQzvj/Abg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:44 2025 by rpki-client