This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json) Hash identifier: Ra4rjmkiNmZwcrtkU/7B8VyR8bqfgk/yFcRt9K/LcFk= Subject key identifier: 1E:37:4D:EE:99:39:10:76:7E:8B:FD:27:86:73:4E:22:19:04:EF:C5 Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29 Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429 Certificate serial: 019B3C7FA1894BA9DA82CE815A6E64FBB9D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:02:35 +0000 Manifest this update: Sat 20 Dec 2025 16:02:35 +0000 Manifest next update: Sun 21 Dec 2025 16:02:35 +0000 Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=) 2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: MPgqpJ3Sm2oNO1/9y9BlWLutAV4rOcPRy8keCy1xvWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:a1:89:4b:a9:da:82:ce:81:5a:6e:64:fb:b9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429 Validity Not Before: Dec 20 16:02:35 2025 GMT Not After : Dec 21 16:02:35 2025 GMT Subject: CN=1e374dee993910767e8bfd2786734e221904efc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:d8:07:e5:cd:60:f4:09:a0:dd:6e:15:14: 12:47:7b:f7:e4:0e:30:56:6e:9a:aa:a9:62:4a:b1: 91:29:63:9d:33:4f:ab:ad:01:11:ec:9c:44:83:bb: a1:50:7d:de:4a:4f:98:1a:53:76:5a:8c:e9:fd:a9: 0c:6f:59:e0:38:6d:99:26:fa:ab:84:60:ab:b9:b6: 9d:64:19:95:03:1f:8d:ea:27:2a:76:45:b5:97:74: 3c:67:b8:1e:a2:8e:ac:72:70:b0:92:46:dd:66:cc: b2:2b:e9:00:0d:3b:e4:20:71:54:6b:dd:77:30:0a: 84:54:24:7e:fc:a4:eb:1f:1f:86:28:e6:f3:c4:7c: 2d:8d:16:56:a4:1d:43:b1:6c:7c:bd:22:19:ea:f5: 95:7f:e9:46:90:63:90:a3:a5:f0:de:33:e9:85:6a: 62:d3:a7:09:34:67:e2:ba:f3:1b:1e:34:d0:cf:05: 32:3b:cd:1e:e5:be:e4:ca:9b:e5:07:eb:84:cd:fa: 77:13:25:b2:63:bb:8b:0a:f5:f6:33:5c:46:6d:d6: e7:4b:18:2c:f1:87:e0:85:a8:e8:c5:3f:4a:25:72: b1:9e:96:60:15:a3:bc:42:6b:a1:c6:15:7c:e9:f1: ca:83:59:ba:d5:2a:7f:cc:18:49:e0:36:5b:e8:81: 87:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:37:4D:EE:99:39:10:76:7E:8B:FD:27:86:73:4E:22:19:04:EF:C5 X509v3 Authority Key Identifier: keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3d:77:ee:e4:bb:b5:51:b4:91:01:e3:6a:94:ad:b8:d2:03: b6:15:e2:1d:9e:10:ea:51:4f:84:28:d1:e6:ca:fb:19:54:38: 28:fe:46:69:df:c2:90:18:20:de:2c:e6:7e:80:df:f2:76:e4: 3d:41:4b:c9:de:5e:4a:36:25:3b:1f:d0:0c:46:4d:c1:bd:07: bd:86:d3:c5:70:eb:ff:99:a3:a6:54:86:d0:16:e0:cd:20:30: 1a:d9:4c:05:56:93:82:ec:c7:f1:d3:0c:44:93:1f:fe:15:28: f5:96:ca:35:fc:fd:39:5f:e0:15:12:a6:c7:0b:62:1e:bb:d3: ad:d3:27:8a:4e:ea:9d:1a:58:91:4d:68:c5:1d:f5:52:05:15: c6:34:b3:a1:83:29:31:2b:13:85:21:07:a6:88:a0:ba:0b:99: 8a:f2:47:06:df:2c:21:cd:62:66:e7:93:53:8f:43:25:92:5e: 52:d4:81:bd:05:48:49:97:ec:bc:0e:e9:fa:8d:d4:8f:19:6c: 50:c8:a2:41:d5:07:00:d2:a1:73:ed:60:b9:e1:e4:48:4c:70: da:fe:54:7c:42:a2:7b:35:f5:b4:bd:6e:eb:7f:c9:f1:60:0f: 35:33:51:10:bb:53:c4:d5:dc:78:84:44:90:49:b8:8f:71:c6: 81:94:dc:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f6GJS6nags6BWm5k+7nYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2EzOTg5MGY5N2Y3MjgxNTJiY2Q4NWMyMzZkOGU1ZmY0 NjA0MjkwHhcNMjUxMjIwMTYwMjM1WhcNMjUxMjIxMTYwMjM1WjAzMTEwLwYDVQQD EygxZTM3NGRlZTk5MzkxMDc2N2U4YmZkMjc4NjczNGUyMjE5MDRlZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzbYB+XNYPQJoN1uFRQSR3v35A4w Vm6aqqliSrGRKWOdM0+rrQER7JxEg7uhUH3eSk+YGlN2Wozp/akMb1ngOG2ZJvqr hGCrubadZBmVAx+N6icqdkW1l3Q8Z7geoo6scnCwkkbdZsyyK+kADTvkIHFUa913 MAqEVCR+/KTrHx+GKObzxHwtjRZWpB1DsWx8vSIZ6vWVf+lGkGOQo6Xw3jPphWpi 06cJNGfiuvMbHjTQzwUyO80e5b7kypvlB+uEzfp3EyWyY7uLCvX2M1xGbdbnSxgs 8YfghajoxT9KJXKxnpZgFaO8QmuhxhV86fHKg1m61Sp/zBhJ4DZb6IGHOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB43Te6ZORB2fov9J4ZzTiIZBO/FMB8GA1UdIwQY MBaAFBnKOYkPl/coFSvNhcI22OX/RgQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWIt NzdlZmJjMzYyNTAzLzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWItNzdlZmJjMzYyNTAz LzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKD137uS7 tVG0kQHjapStuNIDthXiHZ4Q6lFPhCjR5sr7GVQ4KP5Gad/CkBgg3izmfoDf8nbk PUFLyd5eSjYlOx/QDEZNwb0HvYbTxXDr/5mjplSG0BbgzSAwGtlMBVaTguzH8dMM RJMf/hUo9ZbKNfz9OV/gFRKmxwtiHrvTrdMnik7qnRpYkU1oxR31UgUVxjSzoYMp MSsThSEHpoiguguZivJHBt8sIc1iZueTU49DJZJeUtSBvQVISZfsvA7p+o3Ujxls UMiiQdUHANKhc+1gueHkSExw2v5UfEKiezX1tL1u63/J8WAPNTNRELtTxNXceIRE kEm4j3HGgZTcyA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:37:13 2025 by rpki-client