This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json) Hash identifier: 9i4BPhagAIZqJKsnE6siwZr7IFs/eexQ1wJzGEjSuys= Subject key identifier: 54:1E:F1:2E:0E:AF:56:52:BE:78:D0:0D:AA:35:22:F0:C2:0C:24:56 Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29 Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429 Certificate serial: 019B3E6D74B96FB5FCA85978F9D9CC3F1363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 01:01:59 +0000 Manifest this update: Sun 21 Dec 2025 01:01:59 +0000 Manifest next update: Mon 22 Dec 2025 01:01:59 +0000 Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=) 2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: yJogVd1Tx6w88d0elsD2KVr32Gxw2ofpSv0e9ZtkZJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:74:b9:6f:b5:fc:a8:59:78:f9:d9:cc:3f:13:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429 Validity Not Before: Dec 21 01:01:59 2025 GMT Not After : Dec 22 01:01:59 2025 GMT Subject: CN=541ef12e0eaf5652be78d00daa3522f0c20c2456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:97:c6:89:1e:58:56:ee:a9:6e:a6:22:6d: d4:03:d8:4d:09:18:22:e8:65:cc:5c:0b:77:a9:97: c5:a6:42:f0:67:8b:61:62:96:93:ff:83:84:48:32: ae:ed:f9:13:0d:f9:0b:b7:1d:de:da:c7:c8:8a:f1: 18:f4:96:cb:de:ff:13:27:6f:c6:3c:5b:66:ef:0b: 1a:6d:29:97:f6:ee:42:9b:41:23:cf:97:95:ca:c5: c7:4e:df:c8:34:45:69:46:32:cd:dc:e9:5d:da:82: 9e:96:1f:7c:9d:60:06:27:84:df:e0:0e:86:e2:6c: b2:f9:cd:c1:3f:21:04:fb:56:d5:10:7b:2a:0b:1f: 60:f3:65:1a:8d:4a:3c:53:eb:8a:88:d2:91:9c:71: 8d:ae:2d:1c:bf:6e:5d:24:4c:3d:04:8d:88:43:30: 1a:9b:9a:35:9e:9f:7a:93:90:e6:ae:b0:e0:2b:59: 13:52:8b:54:00:98:bc:5c:20:0f:15:d5:60:93:fd: e6:97:61:bc:50:7f:b6:ab:3d:67:45:d7:2b:09:d2: 58:1e:15:ba:a2:5e:45:6f:98:19:3a:46:d2:bc:1a: 43:59:65:83:ce:8f:c1:f4:21:08:d0:c8:ff:1a:45: 96:ce:93:79:be:3c:a2:d0:8e:02:31:01:b4:91:fd: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1E:F1:2E:0E:AF:56:52:BE:78:D0:0D:AA:35:22:F0:C2:0C:24:56 X509v3 Authority Key Identifier: keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:00:82:bb:74:70:9c:2e:49:88:ca:a8:72:3a:1b:bb:ba:cd: 98:68:e6:e3:ff:fd:37:a1:c8:6e:cd:37:0d:e3:b7:07:58:00: cd:85:02:f3:c7:80:52:50:e8:07:94:44:e8:0e:4e:25:b2:db: 17:76:dd:31:ba:27:c6:00:57:a8:2e:ec:a5:dd:13:0f:cf:b5: 26:57:ab:94:86:17:44:e9:77:6c:f9:4f:f4:1f:9f:26:0d:1b: a5:93:e9:de:3b:bd:84:c5:9b:c0:35:fd:69:d5:5f:43:98:53: ba:75:ea:02:25:dd:d4:6b:7a:7f:72:07:ec:81:d4:d0:4f:c7: 07:ce:bc:f5:d1:f1:c5:58:66:89:17:5e:0b:d1:e8:fd:17:78: 26:52:a3:9f:65:e2:f7:b6:50:89:75:06:8e:4d:7b:43:a3:12: e7:3b:5f:ce:2a:a2:90:ef:9f:c5:4a:b9:4c:4a:86:fd:39:ba: 35:77:2d:9c:79:a1:ba:07:67:a2:54:50:04:2f:39:6c:65:da: 14:4e:85:4f:20:14:76:ae:6b:f2:e8:9b:13:4f:f3:b8:fe:ea: 74:8a:6a:c1:dd:44:a0:2f:ba:9b:4d:19:2c:79:c7:ce:95:56: ea:04:63:f2:95:84:33:85:93:04:87:ee:f5:41:c8:5d:4f:80: e0:48:15:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bXS5b7X8qFl4+dnMPxNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2EzOTg5MGY5N2Y3MjgxNTJiY2Q4NWMyMzZkOGU1ZmY0 NjA0MjkwHhcNMjUxMjIxMDEwMTU5WhcNMjUxMjIyMDEwMTU5WjAzMTEwLwYDVQQD Eyg1NDFlZjEyZTBlYWY1NjUyYmU3OGQwMGRhYTM1MjJmMGMyMGMyNDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGmXxokeWFbuqW6mIm3UA9hNCRgi 6GXMXAt3qZfFpkLwZ4thYpaT/4OESDKu7fkTDfkLtx3e2sfIivEY9JbL3v8TJ2/G PFtm7wsabSmX9u5Cm0Ejz5eVysXHTt/INEVpRjLN3Old2oKelh98nWAGJ4Tf4A6G 4myy+c3BPyEE+1bVEHsqCx9g82UajUo8U+uKiNKRnHGNri0cv25dJEw9BI2IQzAa m5o1np96k5DmrrDgK1kTUotUAJi8XCAPFdVgk/3ml2G8UH+2qz1nRdcrCdJYHhW6 ol5Fb5gZOkbSvBpDWWWDzo/B9CEI0Mj/GkWWzpN5vjyi0I4CMQG0kf0WnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQe8S4Or1ZSvnjQDao1IvDCDCRWMB8GA1UdIwQY MBaAFBnKOYkPl/coFSvNhcI22OX/RgQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWIt NzdlZmJjMzYyNTAzLzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWItNzdlZmJjMzYyNTAz LzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiACCu3Rw nC5JiMqocjobu7rNmGjm4//9N6HIbs03DeO3B1gAzYUC88eAUlDoB5RE6A5OJbLb F3bdMbonxgBXqC7spd0TD8+1JlerlIYXROl3bPlP9B+fJg0bpZPp3ju9hMWbwDX9 adVfQ5hTunXqAiXd1Gt6f3IH7IHU0E/HB8689dHxxVhmiRdeC9Ho/Rd4JlKjn2Xi 97ZQiXUGjk17Q6MS5ztfziqikO+fxUq5TEqG/Tm6NXctnHmhugdnolRQBC85bGXa FE6FTyAUdq5r8uibE0/zuP7qdIpqwd1EoC+6m00ZLHnHzpVW6gRj8pWEM4WTBIfu 9UHIXU+A4EgVDg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:28:00 2025 by rpki-client