This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft File: GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json) Hash identifier: aIbU5p7HWZdXa3bixSRU5oQP66CJ2UV/ZIeTW/fx7k0= Subject key identifier: DA:CB:A8:3D:E3:74:72:31:8A:3B:DD:91:8E:0E:61:DE:F3:14:03:FB Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D Certificate issuer: /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d Certificate serial: 019B0D80697B559FBD4EAD86C56779AC305A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft Manifest number: 0455 Signing time: Thu 11 Dec 2025 13:01:17 +0000 Manifest this update: Thu 11 Dec 2025 13:01:17 +0000 Manifest next update: Fri 12 Dec 2025 13:01:17 +0000 Files and hashes: 1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: 2C/cRfioUhVjtFZJsiWzaXKUL99LaEZxDM8y7qU6iVw=) 2: _uaKTHKtfWhbGfsoaUqVE21BcaI.roa (hash: ZcgIbRy8eNOQQ+FS3+GJOt3y/shZQUFy7iI8KMgc4tI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:69:7b:55:9f:bd:4e:ad:86:c5:67:79:ac:30:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d Validity Not Before: Dec 11 13:01:17 2025 GMT Not After : Dec 12 13:01:17 2025 GMT Subject: CN=dacba83de37472318a3bdd918e0e61def31403fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:3c:a4:43:04:c9:1a:4b:51:19:da:f6:da: 24:94:e4:b4:c0:a8:53:28:ec:46:d9:20:72:19:2e: 63:d1:bb:b4:b1:8d:bc:b2:da:b5:0c:6e:01:de:2d: 8c:ed:50:ae:dd:26:df:ab:45:66:da:86:8b:a3:21: 20:69:d9:e2:5f:11:0d:23:d8:70:48:4b:f2:d0:5f: 76:8b:d2:d8:89:9a:19:f6:18:1f:9c:ea:02:eb:cc: e0:4d:0a:14:ef:fd:8b:91:3c:1f:c2:46:7f:98:f4: 7c:af:df:8f:2e:ec:e5:66:ad:b6:76:59:cc:58:ae: 5f:9d:77:b9:31:38:93:52:e0:8f:93:35:ea:72:5f: 3c:ed:0e:a8:48:a6:a7:2a:ba:62:f6:8d:39:d2:f2: 39:55:65:70:39:e9:4c:22:90:17:ab:c3:0c:7a:72: 71:6c:ec:4c:a1:31:df:ce:b2:2d:cc:71:81:07:aa: e5:67:dd:7b:03:24:73:5d:55:ee:92:81:09:5a:f0: e2:b0:b2:7e:a7:17:6d:c4:8c:fd:46:68:38:98:56: 09:25:d4:cc:4a:a9:bb:cb:22:bc:27:42:cc:52:3c: 31:4b:17:bc:8d:64:f5:f1:a0:ae:9e:a8:ea:f0:06: f2:73:e3:7f:a7:c2:7f:da:bb:2a:be:be:c8:c0:ec: 47:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CB:A8:3D:E3:74:72:31:8A:3B:DD:91:8E:0E:61:DE:F3:14:03:FB X509v3 Authority Key Identifier: keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8f:86:4d:ab:a6:72:2e:26:ac:3d:0e:ee:43:f9:ae:a7:60: f3:9c:15:30:ed:1c:77:e8:77:33:87:78:53:df:81:7c:52:57: 7c:8d:86:5b:17:43:65:d5:4d:c9:3f:1e:7e:e4:ff:01:67:f3: 82:ff:a4:91:eb:b5:27:38:e5:20:56:e5:c9:cf:cd:75:4e:18: d9:a7:44:c1:35:41:e9:07:4d:47:17:29:60:4a:9f:65:14:cc: e9:da:9a:b5:00:7f:8e:5d:fd:bf:9c:81:a6:29:ce:29:5f:4e: 1b:09:b1:0d:47:f0:60:37:5d:36:b2:6c:17:97:03:40:33:76: 15:02:69:e8:b6:23:6b:de:65:79:04:aa:a8:ae:a3:4e:92:d8: 71:eb:a4:9f:74:bf:c0:b2:9a:2c:ae:b9:59:f9:79:5c:ad:6c: 32:e5:d4:03:8c:df:76:29:34:ae:1b:84:bb:75:f0:e3:aa:67: 35:14:1c:69:c4:8f:c4:9b:a9:98:99:6d:46:a3:e8:33:be:e8: 76:2e:bc:02:b4:b6:86:9d:a4:e2:44:0a:c0:bd:fe:03:64:08: d8:fb:ab:42:bb:ae:6a:79:58:90:ea:3a:76:de:f7:5e:8f:34: 7d:8b:1b:a4:70:ce:7e:f6:da:b7:b2:68:f9:34:c9:36:57:f7: 18:e0:85:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgGl7VZ+9Tq2GxWd5rDBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MjI0MWMyYTRjZDFiMDhiZjViYTU0MTJkNDkxYzQ5Yzhl Yjg3OGQwHhcNMjUxMjExMTMwMTE3WhcNMjUxMjEyMTMwMTE3WjAzMTEwLwYDVQQD EyhkYWNiYTgzZGUzNzQ3MjMxOGEzYmRkOTE4ZTBlNjFkZWYzMTQwM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb48pEMEyRpLURna9toklOS0wKhT KOxG2SByGS5j0bu0sY28stq1DG4B3i2M7VCu3Sbfq0Vm2oaLoyEgadniXxENI9hw SEvy0F92i9LYiZoZ9hgfnOoC68zgTQoU7/2LkTwfwkZ/mPR8r9+PLuzlZq22dlnM WK5fnXe5MTiTUuCPkzXqcl887Q6oSKanKrpi9o050vI5VWVwOelMIpAXq8MMenJx bOxMoTHfzrItzHGBB6rlZ917AyRzXVXukoEJWvDisLJ+pxdtxIz9Rmg4mFYJJdTM Sqm7yyK8J0LMUjwxSxe8jWT18aCunqjq8Abyc+N/p8J/2rsqvr7IwOxHLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrLqD3jdHIxijvdkY4OYd7zFAP7MB8GA1UdIwQY MBaAFBgiQcKkzRsIv1ulQS1JHEnI64eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEt YjJkMjY4ZTJjYjc4LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEtYjJkMjY4ZTJjYjc4 LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASo+GTaum ci4mrD0O7kP5rqdg85wVMO0cd+h3M4d4U9+BfFJXfI2GWxdDZdVNyT8efuT/AWfz gv+kkeu1JzjlIFblyc/NdU4Y2adEwTVB6QdNRxcpYEqfZRTM6dqatQB/jl39v5yB pinOKV9OGwmxDUfwYDddNrJsF5cDQDN2FQJp6LYja95leQSqqK6jTpLYceukn3S/ wLKaLK65Wfl5XK1sMuXUA4zfdik0rhuEu3Xw46pnNRQcacSPxJupmJltRqPoM77o di68ArS2hp2k4kQKwL3+A2QI2PurQruuanlYkOo6dt73Xo80fYsbpHDOfvbat7Jo +TTJNlf3GOCFMA== -----END CERTIFICATE-----Generated at Thu Dec 11 16:28:51 2025 by rpki-client