This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft File: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft (raw, json) Hash identifier: KNixIKLgzs2wVVLKbvgjWJyFmlTlgwzOOAMPLtkQ3vY= Subject key identifier: D1:D1:2C:2D:FB:17:07:88:4A:A4:26:EF:31:0B:94:09:06:DA:56:BF Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4 Certificate issuer: /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4 Certificate serial: 019B41DB7ADCA95A0C0D43CB15DC97F4A164 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft Manifest number: 0BD4 Signing time: Sun 21 Dec 2025 17:01:01 +0000 Manifest this update: Sun 21 Dec 2025 17:01:01 +0000 Manifest next update: Mon 22 Dec 2025 17:01:01 +0000 Files and hashes: 1: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl (hash: qoK8l7u8q/T478D61xQ18EyhczHyWw5sIQwcpyIFRUA=) 2: vczBs4Goi10ecTWa3tK1YBxJ8fE.roa (hash: gc2DMvIse8l38XyQwNHPrj9Yz7w21wzufb/ypACqbDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:7a:dc:a9:5a:0c:0d:43:cb:15:dc:97:f4:a1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4 Validity Not Before: Dec 21 17:01:01 2025 GMT Not After : Dec 22 17:01:01 2025 GMT Subject: CN=d1d12c2dfb1707884aa426ef310b940906da56bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:36:ed:df:ed:87:02:70:fb:83:6a:6a:f9: 26:ff:e0:0c:17:82:32:92:7e:95:b9:14:64:1f:1a: 12:39:3a:56:b3:a0:1c:b7:04:14:63:12:bf:e4:23: 3f:5d:85:24:2c:45:e2:dc:7f:90:f7:67:61:b7:a6: 5d:3b:49:f4:4a:8b:02:30:3a:73:63:51:d0:1d:d9: 8f:59:ca:26:40:3c:26:47:ed:b1:20:ff:a6:94:51: 7c:74:66:13:14:19:e8:60:b1:6c:fb:89:18:2b:e1: 6d:bb:cc:05:fd:e1:df:3d:fe:d3:06:e7:f1:d7:0a: f6:d9:21:fc:80:f8:84:d6:86:dc:34:e4:65:de:7c: b5:ae:45:d8:26:1f:dc:44:6b:e2:f6:72:f3:86:97: fd:e4:20:99:9d:12:6f:21:1f:39:31:24:00:58:c7: b5:61:9f:6e:e6:cc:1d:a9:20:6d:0d:3c:b3:ab:df: 68:6a:9f:be:63:8f:fe:37:9c:00:67:ad:26:18:9e: 16:3a:f1:9c:38:24:db:96:23:1a:56:1b:77:3d:9a: 24:99:80:dc:09:7b:e6:b8:e6:bc:16:cb:5c:3b:1d: 37:d5:73:4f:5c:5c:1a:56:a6:0c:a6:7b:8e:da:8f: 4f:63:1a:49:69:a4:75:b9:3d:2b:22:49:2f:9e:24: 78:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D1:2C:2D:FB:17:07:88:4A:A4:26:EF:31:0B:94:09:06:DA:56:BF X509v3 Authority Key Identifier: keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:23:b0:a9:af:95:d3:1a:bb:89:90:ad:f5:1d:91:11:11:45: c8:10:af:46:d3:ba:76:d0:a3:9c:ae:8c:40:c3:26:e0:53:5a: d8:6d:60:35:9a:af:e6:9e:35:dc:ff:13:94:72:f4:8b:d8:eb: b9:24:ff:9a:d7:06:23:95:21:a2:e3:ef:27:79:ef:fa:7a:e1: 00:9f:90:2e:23:b5:df:6f:33:a4:d4:03:eb:6d:c9:67:10:e7: 17:6a:57:3f:aa:87:e9:fd:ed:da:20:59:c8:53:e0:c2:99:da: 3e:1c:b0:30:de:ae:c9:f7:f5:50:52:3a:f1:af:7a:d0:33:df: 86:a7:03:3c:dc:f1:ed:c9:d2:f9:0b:41:98:fa:b5:58:64:05: 62:55:32:e8:dd:4c:2f:9c:0d:93:d7:99:8c:e6:e3:67:1c:2c: 26:50:5b:ca:e9:fe:7e:ab:40:e9:7a:b4:8b:5c:34:4e:f4:be: c5:1e:de:62:57:b8:c6:77:0d:77:50:7d:ae:1f:8c:ee:b1:80: 93:af:7e:96:9f:18:b7:b9:36:83:30:87:cb:e3:40:95:9b:9c: a7:08:71:d3:f3:09:2e:53:1f:9b:1d:48:d1:34:9c:db:39:6e: 0b:82:14:2e:e4:be:10:91:4f:a0:b3:94:32:7f:e8:54:7c:be: e8:ae:08:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB23rcqVoMDUPLFdyX9KFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2U0ODhlZmEzYzE4NGY0YWNiMmZjMzBlYjFhNzFmYTEx NmY5YjQwHhcNMjUxMjIxMTcwMTAxWhcNMjUxMjIyMTcwMTAxWjAzMTEwLwYDVQQD EyhkMWQxMmMyZGZiMTcwNzg4NGFhNDI2ZWYzMTBiOTQwOTA2ZGE1NmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvU27d/thwJw+4Nqavkm/+AMF4Iy kn6VuRRkHxoSOTpWs6ActwQUYxK/5CM/XYUkLEXi3H+Q92dht6ZdO0n0SosCMDpz Y1HQHdmPWcomQDwmR+2xIP+mlFF8dGYTFBnoYLFs+4kYK+Ftu8wF/eHfPf7TBufx 1wr22SH8gPiE1obcNORl3ny1rkXYJh/cRGvi9nLzhpf95CCZnRJvIR85MSQAWMe1 YZ9u5swdqSBtDTyzq99oap++Y4/+N5wAZ60mGJ4WOvGcOCTbliMaVht3PZokmYDc CXvmuOa8FstcOx031XNPXFwaVqYMpnuO2o9PYxpJaaR1uT0rIkkvniR4QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHRLC37FweISqQm7zELlAkG2la/MB8GA1UdIwQY MBaAFBnOSI76PBhPSssvww6xpx+hFvm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2M1SWp2bzhHRTlLeXlfRERyR25INkVXLWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZmVmNzEtOTIyZS00NDQ4LWIzN2Qt Zjc0MGI5ZTFjNDgwLzEvR2M1SWp2bzhHRTlLeXlfRERyR25INkVXLWJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wZmVmNzEtOTIyZS00NDQ4LWIzN2QtZjc0MGI5ZTFjNDgw LzEvR2M1SWp2bzhHRTlLeXlfRERyR25INkVXLWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyOwqa+V 0xq7iZCt9R2RERFFyBCvRtO6dtCjnK6MQMMm4FNa2G1gNZqv5p413P8TlHL0i9jr uST/mtcGI5UhouPvJ3nv+nrhAJ+QLiO1328zpNQD623JZxDnF2pXP6qH6f3t2iBZ yFPgwpnaPhywMN6uyff1UFI68a960DPfhqcDPNzx7cnS+QtBmPq1WGQFYlUy6N1M L5wNk9eZjObjZxwsJlBbyun+fqtA6Xq0i1w0TvS+xR7eYle4xncNd1B9rh+M7rGA k69+lp8Yt7k2gzCHy+NAlZucpwhx0/MJLlMfmx1I0TSc2zluC4IULuS+EJFPoLOU Mn/oVHy+6K4IJg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:50:39 2025 by rpki-client