This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json) Hash identifier: eWDLIaVprqlFr49naatVMYAGMpeXTbfpdNNVW1efbbo= Subject key identifier: F4:45:0C:98:BF:EA:46:78:1B:A2:C6:E0:8B:0B:FF:43:0D:4B:F5:5D Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57 Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57 Certificate serial: 019B34FB70185E9354B2A9B86E199A3E4DED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft Manifest number: 08F4 Signing time: Fri 19 Dec 2025 05:00:51 +0000 Manifest this update: Fri 19 Dec 2025 05:00:51 +0000 Manifest next update: Sat 20 Dec 2025 05:00:51 +0000 Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: nAduw+A1cGhIyqn9CCTj4mQbfmUO2W59prZuzkO34d8=) 2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:70:18:5e:93:54:b2:a9:b8:6e:19:9a:3e:4d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57 Validity Not Before: Dec 19 05:00:51 2025 GMT Not After : Dec 20 05:00:51 2025 GMT Subject: CN=f4450c98bfea46781ba2c6e08b0bff430d4bf55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:18:67:28:2b:25:ba:ee:af:c4:94:f9:26: ff:d0:40:39:7d:1c:c8:37:3d:bf:bd:81:99:6e:87: c3:75:04:10:28:31:d9:a9:55:87:c2:7e:fd:28:dd: 37:cd:7d:5c:18:72:94:57:fb:dc:fb:70:22:3b:ff: 42:37:35:13:3b:2c:e7:28:5e:96:79:d4:d2:66:31: f2:55:86:56:a2:fe:03:45:45:c5:75:25:f7:95:3f: a6:27:3b:3e:8a:67:1b:75:5d:72:df:b3:a4:4f:57: 13:1c:65:6a:d3:70:47:e8:54:ae:ee:ad:33:a2:1c: e0:0c:a1:c6:e2:33:60:61:7f:df:0e:e7:b3:df:fa: 2e:ca:c3:90:db:a8:5f:e8:8e:5f:dd:74:1f:10:ef: 47:4a:1f:44:a0:5d:99:ae:b6:47:a8:5e:f1:9d:c8: 70:39:d2:9f:3c:05:6a:7b:52:3e:3a:20:33:2b:96: 02:c9:6b:2e:20:36:4b:eb:c1:e6:c8:47:ac:80:5a: 7a:e1:e7:bc:ae:8e:d4:f4:0e:a4:11:e3:ab:21:60: d1:db:05:1e:ee:3f:ad:05:43:51:09:e8:6b:ba:43: 30:e8:83:62:e5:66:93:7a:d5:f9:5e:35:7c:61:66: bf:6f:d6:19:d2:a2:7b:e6:32:7b:e4:77:ab:b9:13: 51:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:45:0C:98:BF:EA:46:78:1B:A2:C6:E0:8B:0B:FF:43:0D:4B:F5:5D X509v3 Authority Key Identifier: keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:27:8d:a9:f1:38:2f:8b:18:85:ee:3d:2f:4a:7a:5a:a7:07: d4:83:2e:59:37:dc:be:2e:69:63:ac:70:ac:50:c1:72:6a:64: f8:5b:2f:f9:70:a6:2e:f4:ee:cc:cd:75:6c:73:8d:9a:cb:7f: f1:94:1f:51:04:de:19:95:95:39:5f:95:e3:18:03:55:f7:58: f7:4f:82:03:96:d9:48:83:71:f0:93:02:00:b5:bc:f7:71:37: be:04:ce:c5:0c:4f:88:6d:e5:58:86:53:05:67:40:71:d6:39: a2:b2:84:a9:96:50:3c:9d:38:23:07:a5:c2:72:84:08:7d:86: 42:3b:8d:5c:d4:59:8a:7a:f5:96:d4:b9:60:54:2f:a9:f3:63: 51:f7:ba:f4:a1:90:6c:c9:05:c5:c8:08:97:b7:cf:09:a6:54: f8:e4:80:c3:27:3f:dc:73:3e:b6:7e:e2:f7:1e:20:eb:84:94: 77:55:53:d0:87:83:03:ed:f2:c8:f3:4d:6b:ac:a2:91:f7:25: 2c:da:46:5f:72:da:6a:d6:2e:0c:03:b5:a2:4d:f0:d1:24:7f: 08:24:13:73:b1:bc:bb:15:e3:03:97:bb:75:ec:ab:51:54:01: 14:28:ef:24:39:9a:64:e5:3f:99:f2:67:a8:59:13:a4:61:43: 1e:16:45:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+3AYXpNUsqm4bhmaPk3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2JkMGE0MTM2Mjk0MjE1YjFjMjQzYjBmMDIxOGNmZGQ1 NjVkNTcwHhcNMjUxMjE5MDUwMDUxWhcNMjUxMjIwMDUwMDUxWjAzMTEwLwYDVQQD EyhmNDQ1MGM5OGJmZWE0Njc4MWJhMmM2ZTA4YjBiZmY0MzBkNGJmNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn0YZygrJbrur8SU+Sb/0EA5fRzI Nz2/vYGZbofDdQQQKDHZqVWHwn79KN03zX1cGHKUV/vc+3AiO/9CNzUTOyznKF6W edTSZjHyVYZWov4DRUXFdSX3lT+mJzs+imcbdV1y37OkT1cTHGVq03BH6FSu7q0z ohzgDKHG4jNgYX/fDuez3/ouysOQ26hf6I5f3XQfEO9HSh9EoF2ZrrZHqF7xnchw OdKfPAVqe1I+OiAzK5YCyWsuIDZL68HmyEesgFp64ee8ro7U9A6kEeOrIWDR2wUe 7j+tBUNRCehrukMw6INi5WaTetX5XjV8YWa/b9YZ0qJ75jJ75HeruRNRIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRFDJi/6kZ4G6LG4IsL/0MNS/VdMB8GA1UdIwQY MBaAFBnL0KQTYpQhWxwkOw8CGM/dVl1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYt ZWNlNzgyNjc4N2I0LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYtZWNlNzgyNjc4N2I0 LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGieNqfE4 L4sYhe49L0p6WqcH1IMuWTfcvi5pY6xwrFDBcmpk+Fsv+XCmLvTuzM11bHONmst/ 8ZQfUQTeGZWVOV+V4xgDVfdY90+CA5bZSINx8JMCALW893E3vgTOxQxPiG3lWIZT BWdAcdY5orKEqZZQPJ04IwelwnKECH2GQjuNXNRZinr1ltS5YFQvqfNjUfe69KGQ bMkFxcgIl7fPCaZU+OSAwyc/3HM+tn7i9x4g64SUd1VT0IeDA+3yyPNNa6yikfcl LNpGX3LaatYuDAO1ok3w0SR/CCQTc7G8uxXjA5e7deyrUVQBFCjvJDmaZOU/mfJn qFkTpGFDHhZFjQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:33:49 2025 by rpki-client