This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft File: gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json) Hash identifier: xIIVrycPtSMRTpFwsttOUF7pEVNuZ9DODQ5x+UGK5yI= Subject key identifier: 86:36:31:08:DE:C2:A3:41:AF:C4:AC:53:74:A4:F5:5B:92:2D:02:79 Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26 Certificate issuer: /CN=81c00cc8c73d1141c89254ed556a8d012ca90226 Certificate serial: 019B53AC0246A3FBFE04C3770E87FAE10132 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft Manifest number: 09E1 Signing time: Thu 25 Dec 2025 04:02:20 +0000 Manifest this update: Thu 25 Dec 2025 04:02:20 +0000 Manifest next update: Fri 26 Dec 2025 04:02:20 +0000 Files and hashes: 1: Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa (hash: A6c2c+PXtuhOYqewWMvzWTg68sLONrRYQPMKhm+zXUU=) 2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: pmHqbyP9bpsDaa1QowxFrZMrSI1rrryshzHPo+k1SVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:02:46:a3:fb:fe:04:c3:77:0e:87:fa:e1:01:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226 Validity Not Before: Dec 25 04:02:20 2025 GMT Not After : Dec 26 04:02:20 2025 GMT Subject: CN=86363108dec2a341afc4ac5374a4f55b922d0279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:0d:62:f9:a7:c7:36:55:a0:dd:f6:b9:1e: 4b:38:f9:77:a0:b3:9d:4d:f4:68:59:9b:b6:80:0c: b3:74:1c:42:e4:76:0e:93:28:80:3c:00:e2:f6:53: fd:ad:00:f9:a0:0a:6b:be:84:fe:ab:7f:4d:c8:6d: bf:ab:dd:69:0b:98:bc:8f:3b:92:75:e4:a7:c4:aa: 52:ac:56:86:e8:f3:34:e8:bd:48:59:6b:30:33:06: f8:ff:e6:fe:e9:e4:7b:08:eb:87:83:d8:a3:5a:ec: dd:12:ea:63:13:70:15:bd:c3:58:84:f0:fb:2f:1f: a4:c2:e5:f7:44:e3:93:70:c5:2b:19:92:f3:03:bd: 6a:f5:9c:89:d0:eb:43:bd:24:84:a2:99:3e:8e:83: 85:4a:a5:4e:00:d3:18:2b:4e:c2:3a:eb:b9:2d:af: bd:a3:57:07:4b:df:3c:98:03:7b:c9:ff:9f:0c:65: 94:64:e9:1c:89:34:e9:2b:a2:34:02:f7:f5:e1:67: 3e:6d:19:16:b7:a8:76:5c:0a:56:9d:e0:62:e6:d1: 04:30:ce:d2:d4:4c:b1:21:b7:b2:e2:97:ed:d3:d3: e3:0a:3b:7f:d4:28:99:89:23:a1:85:5c:3a:d9:80: 94:15:3f:c4:3f:24:dd:1f:44:7a:30:22:6a:a6:04: 69:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:36:31:08:DE:C2:A3:41:AF:C4:AC:53:74:A4:F5:5B:92:2D:02:79 X509v3 Authority Key Identifier: keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:58:64:8c:fc:8d:92:44:ac:2c:8e:a7:d1:d1:ee:91:19:85: 93:59:61:29:a6:6e:dc:a4:79:91:07:4a:f8:64:73:87:be:7b: ec:a2:f2:9f:b9:95:2f:b8:6c:d2:7d:c3:91:e1:6f:ac:0f:22: 2a:61:f7:57:70:bd:a2:42:e4:87:7a:35:84:3a:56:3a:7e:32: 74:97:64:79:2f:b1:54:27:53:f4:b2:bc:95:c5:47:d9:68:5d: 6b:37:83:2d:f0:50:a1:8d:3c:98:1d:8f:ab:d6:a0:1f:60:41: dd:68:98:f1:c0:89:15:36:fb:65:a9:4c:3b:4e:b0:cf:8e:40: 38:05:8c:56:4b:aa:5b:fc:84:e6:97:18:4c:0d:f6:51:55:61: ba:20:24:94:5c:7a:8a:e0:f2:8b:7f:1e:09:b9:64:32:82:e0: 2e:4c:9a:b3:90:e0:21:6d:9b:12:2e:5d:4e:6f:5b:13:7b:35: 69:9d:18:81:42:2d:ae:47:c5:5d:d2:62:0a:c1:74:17:e7:20: 2a:17:f6:42:30:c4:8b:d5:e6:2b:c1:91:d8:ea:54:99:d2:cf: 61:0a:06:4b:89:f3:06:fb:0d:51:9e:22:46:10:96:ff:de:ef: 93:1a:0c:22:bb:79:6e:b0:e0:88:fc:9b:9c:ea:ce:51:2d:ce: ee:53:60:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrAJGo/v+BMN3Dof64QEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzAwY2M4YzczZDExNDFjODkyNTRlZDU1NmE4ZDAxMmNh OTAyMjYwHhcNMjUxMjI1MDQwMjIwWhcNMjUxMjI2MDQwMjIwWjAzMTEwLwYDVQQD Eyg4NjM2MzEwOGRlYzJhMzQxYWZjNGFjNTM3NGE0ZjU1YjkyMmQwMjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra8NYvmnxzZVoN32uR5LOPl3oLOd TfRoWZu2gAyzdBxC5HYOkyiAPADi9lP9rQD5oAprvoT+q39NyG2/q91pC5i8jzuS deSnxKpSrFaG6PM06L1IWWswMwb4/+b+6eR7COuHg9ijWuzdEupjE3AVvcNYhPD7 Lx+kwuX3ROOTcMUrGZLzA71q9ZyJ0OtDvSSEopk+joOFSqVOANMYK07COuu5La+9 o1cHS988mAN7yf+fDGWUZOkciTTpK6I0Avf14Wc+bRkWt6h2XApWneBi5tEEMM7S 1EyxIbey4pft09PjCjt/1CiZiSOhhVw62YCUFT/EPyTdH0R6MCJqpgRpSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIY2MQjewqNBr8SsU3Sk9VuSLQJ5MB8GA1UdIwQY MBaAFIHADMjHPRFByJJU7VVqjQEsqQImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUt OTA1Mjc2YzVjNDE0LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUtOTA1Mjc2YzVjNDE0 LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1hkjPyN kkSsLI6n0dHukRmFk1lhKaZu3KR5kQdK+GRzh7577KLyn7mVL7hs0n3DkeFvrA8i KmH3V3C9okLkh3o1hDpWOn4ydJdkeS+xVCdT9LK8lcVH2WhdazeDLfBQoY08mB2P q9agH2BB3WiY8cCJFTb7ZalMO06wz45AOAWMVkuqW/yE5pcYTA32UVVhuiAklFx6 iuDyi38eCblkMoLgLkyas5DgIW2bEi5dTm9bE3s1aZ0YgUItrkfFXdJiCsF0F+cg Khf2QjDEi9XmK8GR2OpUmdLPYQoGS4nzBvsNUZ4iRhCW/97vkxoMIrt5brDgiPyb nOrOUS3O7lNgnQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:26:23 2025 by rpki-client