This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft File: GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json) Hash identifier: gLUqOhyTxUpgVDX7socPPgp/j3TocwI5LP2sVUYKgWU= Subject key identifier: 9C:92:5F:31:4C:09:8A:57:8F:82:16:D2:A5:7F:C3:08:D2:BA:7F:D6 Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D Certificate issuer: /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d Certificate serial: 019AF0889CFB3FC4ADDE0B37578B9FA340BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft Manifest number: 1038 Signing time: Fri 05 Dec 2025 22:01:16 +0000 Manifest this update: Fri 05 Dec 2025 22:01:16 +0000 Manifest next update: Sat 06 Dec 2025 22:01:16 +0000 Files and hashes: 1: GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa (hash: UpOJI3oK6cWcuZSPYztLiL8Ogsz4qyqADulp7DywRZk=) 2: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: 7qX7qCwT2SXo58QGZ6Mk4MC9Mppe3lilh7A0cB7rQQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:9c:fb:3f:c4:ad:de:0b:37:57:8b:9f:a3:40:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d Validity Not Before: Dec 5 22:01:16 2025 GMT Not After : Dec 6 22:01:16 2025 GMT Subject: CN=9c925f314c098a578f8216d2a57fc308d2ba7fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:eb:a2:c7:9c:b6:2f:34:9b:46:de:30:66: 7a:d9:8a:2f:0d:52:48:9d:4c:fb:05:c6:8b:52:a4: 57:8d:9f:59:bf:1d:8e:87:65:40:e3:2d:0a:1e:4d: f1:49:7d:a1:2e:d4:d1:90:7d:d7:75:ae:1a:e8:6b: 7d:ee:9f:1f:58:5f:1d:4f:5c:9d:a0:31:0f:82:ac: d3:ac:53:b2:a7:ec:0d:f1:4e:23:87:fd:01:90:95: 3d:5e:55:15:1c:d6:7d:3d:02:fd:50:8a:7e:f3:af: 13:60:08:cb:21:60:e7:70:08:5f:a6:9a:33:86:a5: c6:cb:da:24:d4:6e:d5:a7:5f:92:2f:94:91:d1:2b: c9:12:28:c7:38:44:4a:3d:c7:15:55:ce:ed:c8:c1: 75:09:af:7c:59:85:67:34:04:b7:6b:51:fb:a9:a5: da:af:44:d7:61:f9:5e:60:c8:c7:dc:f6:65:f8:16: 91:89:d3:e8:6d:0b:c2:cf:4f:05:fd:6b:3c:d6:3b: f7:9d:44:8b:92:4c:0a:df:43:a3:b3:4b:d6:b2:0c: d9:e3:b0:b1:7d:60:41:8c:86:d7:83:5a:e7:27:04: b0:94:b2:29:07:7d:77:6f:ba:ef:4f:99:5b:03:65: 73:4f:f1:9d:1a:27:ad:ad:69:75:e1:97:0d:3a:78: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:92:5F:31:4C:09:8A:57:8F:82:16:D2:A5:7F:C3:08:D2:BA:7F:D6 X509v3 Authority Key Identifier: keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:42:41:c1:c8:e6:3a:cb:3c:e1:9d:33:29:f8:14:b4:40:cf: 0c:3a:3c:78:e2:63:13:54:f6:cd:53:8a:d4:ed:10:55:2a:de: 22:0c:73:40:94:0a:fb:e1:44:46:44:77:a0:81:ae:b2:be:47: 56:ed:6a:31:41:dc:ef:2c:79:5c:28:f0:17:7e:ce:4a:c1:75: 65:16:1e:2e:09:3b:43:e4:a3:0f:a1:c9:7e:4d:00:6b:95:da: d8:1f:f8:cb:24:97:2d:6d:68:27:36:99:12:f4:73:6f:06:42: 23:76:e9:96:3b:ba:04:33:99:5d:ff:81:8d:5b:b8:6d:5a:e8: 92:53:3d:a4:5e:1c:4a:63:70:a9:d5:b1:d0:4c:d6:66:e9:06: 10:af:2c:41:de:37:19:14:f8:82:a9:15:ea:13:3f:45:7e:af: 42:32:b1:17:01:e5:18:87:a6:b6:0a:bc:77:55:a9:30:37:93: 54:48:50:c1:c9:7f:b0:64:aa:e0:ea:d5:06:6a:cb:88:ed:11: 1e:43:e9:63:cd:0a:b5:b0:91:cd:7a:8f:23:4e:ca:69:41:b5: 4b:7e:49:c2:6e:cf:47:7e:a7:ba:b9:84:dd:9c:f7:2d:03:0d: 4b:32:ca:9e:7c:1e:56:1a:a0:19:5d:23:4b:44:e2:ec:e7:4f: e2:9e:27:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiJz7P8St3gs3V4ufo0C+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjJlMWZjNDAwYmJmOWRjYjIwNjZhZGUzZGJmZTVjOWVh YjJlN2QwHhcNMjUxMjA1MjIwMTE2WhcNMjUxMjA2MjIwMTE2WjAzMTEwLwYDVQQD Eyg5YzkyNWYzMTRjMDk4YTU3OGY4MjE2ZDJhNTdmYzMwOGQyYmE3ZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfnrosecti80m0beMGZ62YovDVJI nUz7BcaLUqRXjZ9Zvx2Oh2VA4y0KHk3xSX2hLtTRkH3Xda4a6Gt97p8fWF8dT1yd oDEPgqzTrFOyp+wN8U4jh/0BkJU9XlUVHNZ9PQL9UIp+868TYAjLIWDncAhfppoz hqXGy9ok1G7Vp1+SL5SR0SvJEijHOERKPccVVc7tyMF1Ca98WYVnNAS3a1H7qaXa r0TXYfleYMjH3PZl+BaRidPobQvCz08F/Ws81jv3nUSLkkwK30Ojs0vWsgzZ47Cx fWBBjIbXg1rnJwSwlLIpB313b7rvT5lbA2VzT/GdGietrWl14ZcNOniPGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJySXzFMCYpXj4IW0qV/wwjSun/WMB8GA1UdIwQY MBaAFBmy4fxAC7+dyyBmrePb/lyeqy59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYt MGRhOWFlODQ1OGRiLzEvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYtMGRhOWFlODQ1OGRi LzEvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0JBwcjm Oss84Z0zKfgUtEDPDDo8eOJjE1T2zVOK1O0QVSreIgxzQJQK++FERkR3oIGusr5H Vu1qMUHc7yx5XCjwF37OSsF1ZRYeLgk7Q+SjD6HJfk0Aa5Xa2B/4yySXLW1oJzaZ EvRzbwZCI3bplju6BDOZXf+BjVu4bVroklM9pF4cSmNwqdWx0EzWZukGEK8sQd43 GRT4gqkV6hM/RX6vQjKxFwHlGIemtgq8d1WpMDeTVEhQwcl/sGSq4OrVBmrLiO0R HkPpY80KtbCRzXqPI07KaUG1S35Jwm7PR36nurmE3Zz3LQMNSzLKnnweVhqgGV0j S0Ti7OdP4p4nmg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:58 2025 by rpki-client