This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json) Hash identifier: vlo430Tx2mbxYhfPM7hovA0OQawzrKJeRXBOxeFZdEk= Subject key identifier: B5:34:AD:EA:FC:73:F3:0F:0F:7B:E4:2E:35:A3:1E:16:D0:EE:23:CB Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab Certificate serial: 019AF240052A3A95C0A118FA0069F1186580 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: whEbO4jozX05gPsCWZlUMYdFufaYeearLuTLhthsynM=) 2: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (hash: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:05:2a:3a:95:c0:a1:18:fa:00:69:f1:18:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=b534adeafc73f30f0f7be42e35a31e16d0ee23cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:e8:23:8c:49:5a:c3:5d:9b:84:9f:05:d6: d3:93:10:88:45:80:2b:78:fd:ae:92:23:c8:0d:5e: d2:23:17:b5:3b:19:c4:9d:90:dc:8e:42:f4:fe:6a: c1:9b:78:af:a3:39:cf:65:5a:ce:54:6f:27:b5:d1: a6:73:92:6f:0d:5d:5c:b4:72:74:3f:5b:bb:13:65: 44:52:fd:de:61:e4:f4:d8:62:11:8f:a6:e5:de:1f: 1c:1e:af:06:16:5f:0d:0f:4a:1a:56:67:23:a9:11: cb:15:b0:af:1b:af:30:84:93:b6:aa:68:49:79:51: e0:90:4f:b7:43:b1:32:ba:a8:04:f1:23:0c:03:f6: fd:92:19:a5:55:1f:1d:85:de:9a:33:b2:cd:88:86: 41:1b:18:f4:9e:19:f8:4d:96:79:00:48:3f:09:7e: 3a:cd:3b:d9:2f:18:46:6f:97:7b:1f:4b:eb:56:b3: 38:bd:31:b2:4b:0c:af:1c:86:24:8d:4e:73:25:0b: 8f:70:fa:a7:5f:6e:2c:d9:0e:48:8e:94:97:cf:41: 7e:98:50:32:a7:a8:0b:4e:da:6b:e3:2a:5f:04:89: 9c:64:db:50:6b:41:1b:7e:a3:02:a7:60:bf:0b:2d: 82:d3:43:a5:5a:99:04:3a:22:d8:8c:e5:38:d3:ed: 2a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:34:AD:EA:FC:73:F3:0F:0F:7B:E4:2E:35:A3:1E:16:D0:EE:23:CB X509v3 Authority Key Identifier: keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:99:e7:21:ab:f3:c3:ec:dd:8a:b2:33:3b:e8:19:e5:0f:de: 88:a1:3b:dd:e0:61:41:19:2e:cd:66:52:a2:96:28:31:98:b5: 53:e5:85:90:3a:d5:ba:84:4f:b6:e3:eb:3a:5b:b6:de:81:a4: 88:ab:84:c8:ad:83:23:35:b5:62:fc:73:00:30:27:a7:4d:36: e7:7b:47:24:7b:6c:11:96:b0:31:3e:6e:a4:09:78:ef:54:5b: d9:db:43:31:e3:34:f7:96:44:7e:cc:bc:36:a0:e2:84:6b:93: c2:a4:cd:0b:ca:47:92:1b:df:ff:4f:09:d6:ad:cb:9d:6c:cf: 3e:58:42:06:05:ed:66:16:f5:f6:6c:a2:2e:a6:2b:d4:4c:15: ef:02:87:e8:6c:f0:ab:e7:28:62:a7:12:5b:bf:10:d1:71:d0: a9:fc:0c:e0:3b:00:7a:ae:58:36:04:e6:9f:22:42:b2:c0:36: fb:6b:d7:df:58:74:90:8f:ad:9d:a1:b4:81:24:27:6a:fc:bc: a4:b2:c0:65:e8:95:1f:17:94:a7:8d:4e:a1:62:18:e1:e0:0c: 8a:78:6e:fb:20:e0:6d:fb:a3:84:2c:54:59:b3:3b:5d:8e:af: 51:fe:58:ec:63:25:c3:79:29:ab:5c:de:89:fc:74:1a:aa:79: 76:74:02:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAUqOpXAoRj6AGnxGGWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2E2NTQ5ZDI2NGY4OTk4YWU4YThkYmJkNjVhOTY0NTA0 ODk2YWIwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EyhiNTM0YWRlYWZjNzNmMzBmMGY3YmU0MmUzNWEzMWUxNmQwZWUyM2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpHoI4xJWsNdm4SfBdbTkxCIRYAr eP2ukiPIDV7SIxe1OxnEnZDcjkL0/mrBm3ivoznPZVrOVG8ntdGmc5JvDV1ctHJ0 P1u7E2VEUv3eYeT02GIRj6bl3h8cHq8GFl8ND0oaVmcjqRHLFbCvG68whJO2qmhJ eVHgkE+3Q7EyuqgE8SMMA/b9khmlVR8dhd6aM7LNiIZBGxj0nhn4TZZ5AEg/CX46 zTvZLxhGb5d7H0vrVrM4vTGySwyvHIYkjU5zJQuPcPqnX24s2Q5IjpSXz0F+mFAy p6gLTtpr4ypfBImcZNtQa0EbfqMCp2C/Cy2C00OlWpkEOiLYjOU40+0qeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU0rer8c/MPD3vkLjWjHhbQ7iPLMB8GA1UdIwQY MBaAFBnKZUnSZPiZiuio271lqWRQSJarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEt NWU3MDBkZDZiOWVlLzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEtNWU3MDBkZDZiOWVl LzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpnnIavz w+zdirIzO+gZ5Q/eiKE73eBhQRkuzWZSopYoMZi1U+WFkDrVuoRPtuPrOlu23oGk iKuEyK2DIzW1YvxzADAnp00253tHJHtsEZawMT5upAl471Rb2dtDMeM095ZEfsy8 NqDihGuTwqTNC8pHkhvf/08J1q3LnWzPPlhCBgXtZhb19myiLqYr1EwV7wKH6Gzw q+coYqcSW78Q0XHQqfwM4DsAeq5YNgTmnyJCssA2+2vX31h0kI+tnaG0gSQnavy8 pLLAZeiVHxeUp41OoWIY4eAMinhu+yDgbfujhCxUWbM7XY6vUf5Y7GMlw3kpq1ze ifx0Gqp5dnQCSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:03 2025 by rpki-client