This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json) Hash identifier: ca0IQ/Qac7Pf+9247tSouX+lccSXp11SZ196TGpkFZg= Subject key identifier: 80:CC:80:90:85:FC:63:ED:C2:C1:C2:76:A9:1E:08:45:65:A1:91:7E Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab Certificate serial: 019B3F7F607BEEE37CEF3E6DB3BDE90DA0AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 06:01:10 +0000 Manifest this update: Sun 21 Dec 2025 06:01:10 +0000 Manifest next update: Mon 22 Dec 2025 06:01:10 +0000 Files and hashes: 1: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: PAkaTPRFnjcz4pblXvW4aArPOmkBgHPCLNINaoeG95A=) 2: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (hash: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:60:7b:ee:e3:7c:ef:3e:6d:b3:bd:e9:0d:a0:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab Validity Not Before: Dec 21 06:01:10 2025 GMT Not After : Dec 22 06:01:10 2025 GMT Subject: CN=80cc809085fc63edc2c1c276a91e084565a1917e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:65:6d:a0:29:a9:c8:f7:56:a0:8e:81:f0: a3:b5:bf:07:95:f4:7a:56:42:8f:87:69:e9:a1:02: d2:05:79:4f:2b:e4:9a:1b:c1:57:01:5d:0c:2b:63: 53:e7:ae:6e:c9:78:64:ab:d1:de:d3:78:ae:14:91: a5:bb:80:a7:f1:a7:4c:bb:40:b0:ab:0e:06:17:50: 99:1f:43:50:f5:47:1f:fd:5c:40:e2:80:41:ed:c5: 8b:a9:60:fc:42:05:cf:94:14:19:d3:f0:9d:1e:7f: f3:b4:6b:2f:64:53:29:36:a1:e7:02:3d:8d:39:c8: 41:2c:db:ce:e7:7d:f6:59:bb:3e:71:61:20:25:21: c4:bb:4c:0b:5e:10:ee:c5:fa:3c:04:e4:4f:cc:a2: 36:26:06:51:71:05:84:bc:d0:ba:7c:c5:78:1e:6f: 84:ab:32:b8:2d:b8:2e:e0:f3:a8:51:16:2c:15:ac: 1d:11:2c:88:43:ad:b6:93:ad:56:30:dc:47:c1:37: 96:ba:a2:05:c7:b5:00:5e:96:62:ea:fd:8a:0e:5b: 7a:59:95:b8:9a:e7:e4:e5:b9:97:61:4b:63:08:7f: 73:31:75:49:46:25:46:2a:9f:f2:b6:26:6a:d0:f1: 5b:dc:3c:91:18:90:dd:11:b6:c0:06:1a:5b:dc:53: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CC:80:90:85:FC:63:ED:C2:C1:C2:76:A9:1E:08:45:65:A1:91:7E X509v3 Authority Key Identifier: keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:be:dd:95:f1:d6:f8:04:31:2d:0c:71:0e:60:d3:b1:e1:62: 7b:ff:62:b8:56:78:cb:5e:dd:eb:a3:59:c5:07:a2:38:82:b6: 09:2d:36:04:2e:82:2f:0f:53:df:79:f3:00:02:3d:54:14:15: 05:fb:7c:45:8d:be:c3:da:fb:a5:d2:5c:5b:38:63:eb:71:40: 78:20:ef:04:05:d9:43:4c:c9:68:df:f0:e7:60:7a:dd:08:84: 6b:41:a9:4e:fc:f4:97:3b:6c:ef:6e:c2:46:e6:d6:21:67:3e: 8b:3f:8c:5b:d0:c0:3a:9d:7d:3a:d7:be:8f:ac:e9:ac:e8:2d: a0:f4:4d:31:89:98:8d:37:cb:84:c6:f9:ee:76:3c:fd:e7:25: ce:5e:f1:8f:95:a7:a8:ee:c4:b3:70:28:f1:26:01:ee:8a:ed: 84:e1:df:12:54:92:db:89:07:af:0a:85:cf:d9:48:7b:cd:0f: 26:f9:a9:6f:ef:92:17:54:d3:f6:93:bb:91:ab:70:76:11:24: f0:0e:e7:28:15:d5:e6:85:01:d6:8a:5a:33:59:dc:70:1f:4c: 8e:51:83:40:c8:a3:8f:f7:3e:19:3b:44:f1:a3:bb:f6:67:54: 3f:dc:13:f9:ce:ff:28:ff:05:8b:5d:4c:c2:a7:96:b7:e2:d3: 21:06:7e:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f2B77uN87z5ts73pDaCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2E2NTQ5ZDI2NGY4OTk4YWU4YThkYmJkNjVhOTY0NTA0 ODk2YWIwHhcNMjUxMjIxMDYwMTEwWhcNMjUxMjIyMDYwMTEwWjAzMTEwLwYDVQQD Eyg4MGNjODA5MDg1ZmM2M2VkYzJjMWMyNzZhOTFlMDg0NTY1YTE5MTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV5lbaApqcj3VqCOgfCjtb8HlfR6 VkKPh2npoQLSBXlPK+SaG8FXAV0MK2NT565uyXhkq9He03iuFJGlu4Cn8adMu0Cw qw4GF1CZH0NQ9Ucf/VxA4oBB7cWLqWD8QgXPlBQZ0/CdHn/ztGsvZFMpNqHnAj2N OchBLNvO5332Wbs+cWEgJSHEu0wLXhDuxfo8BORPzKI2JgZRcQWEvNC6fMV4Hm+E qzK4Lbgu4POoURYsFawdESyIQ622k61WMNxHwTeWuqIFx7UAXpZi6v2KDlt6WZW4 mufk5bmXYUtjCH9zMXVJRiVGKp/ytiZq0PFb3DyRGJDdEbbABhpb3FPJuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDMgJCF/GPtwsHCdqkeCEVloZF+MB8GA1UdIwQY MBaAFBnKZUnSZPiZiuio271lqWRQSJarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEt NWU3MDBkZDZiOWVlLzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEtNWU3MDBkZDZiOWVl LzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb7dlfHW +AQxLQxxDmDTseFie/9iuFZ4y17d66NZxQeiOIK2CS02BC6CLw9T33nzAAI9VBQV Bft8RY2+w9r7pdJcWzhj63FAeCDvBAXZQ0zJaN/w52B63QiEa0GpTvz0lzts727C RubWIWc+iz+MW9DAOp19Ote+j6zprOgtoPRNMYmYjTfLhMb57nY8/eclzl7xj5Wn qO7Es3Ao8SYB7orthOHfElSS24kHrwqFz9lIe80PJvmpb++SF1TT9pO7katwdhEk 8A7nKBXV5oUB1opaM1nccB9MjlGDQMijj/c+GTtE8aO79mdUP9wT+c7/KP8Fi11M wqeWt+LTIQZ+Cw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:32:26 2025 by rpki-client