This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json) Hash identifier: 34RSXjQne7NwfZ+N3cXfxd8b2cxLUJ8RkwmKmVTwaRk= Subject key identifier: 9D:5C:9B:78:F6:11:51:7B:F5:10:95:10:F0:34:16:40:F1:74:B0:93 Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57 Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57 Certificate serial: 019B63548583FFE3FFFAD1000FEF60B9D15D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft Manifest number: 090C Signing time: Sun 28 Dec 2025 05:00:42 +0000 Manifest this update: Sun 28 Dec 2025 05:00:42 +0000 Manifest next update: Mon 29 Dec 2025 05:00:42 +0000 Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: qSnxAOg+eb9WqwAk6wGyV06P95rtqf2HKGdhyVFB4jc=) 2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:54:85:83:ff:e3:ff:fa:d1:00:0f:ef:60:b9:d1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57 Validity Not Before: Dec 28 05:00:42 2025 GMT Not After : Dec 29 05:00:42 2025 GMT Subject: CN=9d5c9b78f611517bf5109510f0341640f174b093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:2c:86:1e:50:68:57:13:79:ab:fb:3b:4b: 21:ad:c0:07:98:29:26:65:80:8a:c0:e4:77:45:51: 14:49:11:24:8d:88:20:f5:8e:99:49:ce:0e:f1:7c: 2e:75:45:b2:e4:06:a8:04:ac:81:88:5c:19:e3:e2: bc:ca:01:f8:3b:94:59:4a:7a:3a:03:2f:9a:da:1c: 71:ce:27:47:f1:ea:57:d8:0e:73:c6:2b:4b:ea:11: 35:fd:cd:57:af:37:67:d1:42:69:7a:41:66:ba:d5: df:ea:8b:e5:25:12:ed:37:f0:e0:7a:eb:db:cc:66: 3f:1e:c3:71:31:71:3d:44:c6:e7:ea:99:30:84:93: 13:eb:3d:ff:de:cb:aa:d0:95:62:42:49:56:32:95: 18:7f:08:bf:a5:d3:9b:fa:5a:99:91:b1:32:8e:6b: 67:53:fc:6f:92:fa:48:de:37:75:6b:71:69:e9:92: fc:eb:ce:63:cc:e8:21:80:a0:0c:42:9b:46:53:52: 0d:22:d7:40:7c:c9:0e:de:ad:e3:74:c2:3e:7f:4b: 37:3a:e8:ba:0f:d2:81:6d:43:05:13:c1:1e:87:60: 33:30:70:94:3a:ca:6d:67:8d:b8:ef:8b:68:97:cc: 05:e4:9a:fe:1a:02:0a:49:f4:18:4c:9e:38:fe:f0: 50:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5C:9B:78:F6:11:51:7B:F5:10:95:10:F0:34:16:40:F1:74:B0:93 X509v3 Authority Key Identifier: keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:af:bf:f6:39:a7:df:96:a8:9b:38:93:23:8d:52:b3:99:87: fd:1e:55:a6:5f:d3:3b:fe:65:96:32:f2:74:fd:1a:d7:87:84: f3:80:50:23:a9:f3:7b:89:76:b0:0d:08:c5:11:f6:c5:3c:7c: a2:e1:6b:24:13:d8:de:62:4c:76:99:e8:b1:08:25:07:75:50: 22:4f:f9:0d:64:bf:86:23:17:1e:36:6b:c0:51:9e:c0:b1:2e: 4f:3d:7a:57:6e:35:11:8d:68:3c:ed:88:0a:2d:43:db:01:28: 75:ed:b8:92:b9:94:9f:f3:83:46:cc:92:59:3b:a8:9c:2c:07: 25:14:e6:8f:96:f9:c7:57:42:52:79:3d:d2:5e:f4:f1:d4:99: a5:1c:78:70:99:1d:14:61:8a:97:c6:15:38:21:82:d8:90:91: ab:e5:63:03:69:0a:e9:6a:7d:55:e3:3b:5b:ae:b8:30:ca:52: 21:74:f0:74:ab:a7:d4:27:66:35:22:f9:a1:23:0c:39:b3:18: 28:df:6e:5d:62:95:a8:fa:ca:30:ea:87:59:75:c9:a1:77:87: ac:10:f3:eb:49:cd:09:bc:97:ce:95:98:80:ee:e2:94:a7:52: 53:0a:78:5c:2f:42:d5:5e:85:76:c7:58:5d:89:ac:96:6e:b0: 72:10:b2:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjVIWD/+P/+tEAD+9gudFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2JkMGE0MTM2Mjk0MjE1YjFjMjQzYjBmMDIxOGNmZGQ1 NjVkNTcwHhcNMjUxMjI4MDUwMDQyWhcNMjUxMjI5MDUwMDQyWjAzMTEwLwYDVQQD Eyg5ZDVjOWI3OGY2MTE1MTdiZjUxMDk1MTBmMDM0MTY0MGYxNzRiMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkwshh5QaFcTeav7O0shrcAHmCkm ZYCKwOR3RVEUSREkjYgg9Y6ZSc4O8XwudUWy5AaoBKyBiFwZ4+K8ygH4O5RZSno6 Ay+a2hxxzidH8epX2A5zxitL6hE1/c1Xrzdn0UJpekFmutXf6ovlJRLtN/Dgeuvb zGY/HsNxMXE9RMbn6pkwhJMT6z3/3suq0JViQklWMpUYfwi/pdOb+lqZkbEyjmtn U/xvkvpI3jd1a3Fp6ZL8685jzOghgKAMQptGU1INItdAfMkO3q3jdMI+f0s3Oui6 D9KBbUMFE8Eeh2AzMHCUOsptZ42474tol8wF5Jr+GgIKSfQYTJ44/vBQ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1cm3j2EVF79RCVEPA0FkDxdLCTMB8GA1UdIwQY MBaAFBnL0KQTYpQhWxwkOw8CGM/dVl1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYt ZWNlNzgyNjc4N2I0LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYtZWNlNzgyNjc4N2I0 LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACK+/9jmn 35aomziTI41Ss5mH/R5Vpl/TO/5lljLydP0a14eE84BQI6nze4l2sA0IxRH2xTx8 ouFrJBPY3mJMdpnosQglB3VQIk/5DWS/hiMXHjZrwFGewLEuTz16V241EY1oPO2I Ci1D2wEode24krmUn/ODRsySWTuonCwHJRTmj5b5x1dCUnk90l708dSZpRx4cJkd FGGKl8YVOCGC2JCRq+VjA2kK6Wp9VeM7W664MMpSIXTwdKun1CdmNSL5oSMMObMY KN9uXWKVqPrKMOqHWXXJoXeHrBDz60nNCbyXzpWYgO7ilKdSUwp4XC9C1V6FdsdY XYmslm6wchCyig== -----END CERTIFICATE-----Generated at Sun Dec 28 08:07:56 2025 by rpki-client