This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft File: gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json) Hash identifier: g8iURHvtuwuiLOTlwkhCHJMxwVBdvkmt4P9GZvXxkcw= Subject key identifier: E2:10:A1:2C:75:68:18:05:EE:1D:D8:9A:E6:3A:4E:E6:1C:55:18:4D Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4 Certificate issuer: /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4 Certificate serial: 019AF3F70F4A060D3CFC87BA9952609B4DF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:00:45 +0000 Manifest this update: Sat 06 Dec 2025 14:00:45 +0000 Manifest next update: Sun 07 Dec 2025 14:00:45 +0000 Files and hashes: 1: EgJWkP_ATvd-WaK0hqp6IaIW95g.roa (hash: Qp/vVw2n2OIqo8aQ+vDa79aTq8YN8BxSb8x/nDkT+pg=) 2: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: kQRfDD1QLh3ox7RQb1dUuX0Qfz/yn1IcQKzbjDAiA7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:0f:4a:06:0d:3c:fc:87:ba:99:52:60:9b:4d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4 Validity Not Before: Dec 6 14:00:45 2025 GMT Not After : Dec 7 14:00:45 2025 GMT Subject: CN=e210a12c75681805ee1dd89ae63a4ee61c55184d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:34:f2:74:8f:dd:05:5d:9b:ea:99:3c:a1: 1c:5d:dc:cf:83:e9:9f:e6:ae:b6:77:32:b1:18:43: 34:1e:ca:ca:6b:c2:28:ef:e1:ed:73:ed:0d:49:24: a7:df:f6:83:a8:98:1e:1e:95:91:69:01:5c:2e:41: 4b:8f:6b:dd:78:61:1c:f8:37:d4:3f:19:6a:c3:e5: d2:db:ec:93:e7:b2:29:fc:58:f5:b4:14:d3:08:06: 86:59:c6:22:7c:b0:ca:32:a5:fc:1b:43:09:cb:13: 6d:3b:d5:4f:c3:38:aa:72:61:ca:3f:2f:a4:b0:87: 35:61:0d:83:65:74:11:63:81:5b:23:4f:a8:73:f9: a3:77:fc:1a:76:c2:db:02:e1:81:11:10:d2:5b:20: 29:f6:7e:17:4d:c4:ee:db:f7:9b:12:08:57:c8:e9: fd:07:3b:09:2c:e8:ae:53:51:e6:a7:32:11:a1:b4: 8b:8a:59:b7:6f:f6:0c:c1:a8:23:37:c3:58:66:e3: ae:23:29:2d:a9:89:4e:10:e9:27:30:5b:d6:ae:b4: 80:b6:c0:35:7a:16:1c:7b:52:b1:97:38:1e:d2:9d: 87:d3:79:25:7f:c6:56:bb:4b:ca:73:d0:71:16:df: 64:b5:3a:ab:ec:2f:3b:03:d0:7b:fd:63:78:40:13: cf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:10:A1:2C:75:68:18:05:EE:1D:D8:9A:E6:3A:4E:E6:1C:55:18:4D X509v3 Authority Key Identifier: keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:34:a1:11:c6:bd:31:ed:0a:fe:e4:96:09:55:e0:0a:03:24: 90:7a:6a:63:0a:37:50:0a:35:61:f3:af:c3:53:29:6c:77:2c: 47:bf:6a:8a:3f:ff:21:b8:10:e6:96:26:71:2c:e6:5c:aa:ea: e3:37:33:8b:2b:a9:64:35:a4:6d:3b:84:f7:d7:1f:78:71:4e: 8b:1c:23:1a:49:e5:02:6b:bc:e2:00:4f:3a:be:ad:50:2e:4b: ad:74:01:73:49:bf:e1:ba:46:2b:17:fb:4a:28:ce:ef:94:75: e4:f5:d5:ac:c3:7e:a4:4e:4a:85:cc:5e:9d:8f:0c:a2:d3:f8: 8a:ec:c7:22:3f:d1:02:1f:a9:bc:17:6c:fc:e0:a6:97:69:0f: eb:f8:af:4d:29:8c:71:26:90:33:f6:db:1a:f0:4e:5c:d0:d9: 21:7c:ba:91:34:fc:b1:c3:1a:06:ed:66:8b:9c:37:9a:53:d2: 69:95:99:73:25:e3:21:35:19:77:73:1d:50:35:e8:9c:ea:55: b7:99:aa:e1:6b:be:7a:c3:9f:a2:9f:3e:1a:fc:21:2a:0f:82: 0d:f2:6e:2d:45:3e:51:c0:5c:30:9b:37:fe:e1:84:34:4d:11: 9b:d5:8e:2f:83:fd:cd:f2:50:57:08:50:25:60:14:82:a7:ae: 82:1e:85:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9w9KBg08/Ie6mVJgm030MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzFhZWQ3NGFhZDA2YjFiODVjNWJhNjc3OWMxNjFmNGE1 MmIzYzQwHhcNMjUxMjA2MTQwMDQ1WhcNMjUxMjA3MTQwMDQ1WjAzMTEwLwYDVQQD EyhlMjEwYTEyYzc1NjgxODA1ZWUxZGQ4OWFlNjNhNGVlNjFjNTUxODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeI08nSP3QVdm+qZPKEcXdzPg+mf 5q62dzKxGEM0HsrKa8Io7+Htc+0NSSSn3/aDqJgeHpWRaQFcLkFLj2vdeGEc+DfU Pxlqw+XS2+yT57Ip/Fj1tBTTCAaGWcYifLDKMqX8G0MJyxNtO9VPwziqcmHKPy+k sIc1YQ2DZXQRY4FbI0+oc/mjd/wadsLbAuGBERDSWyAp9n4XTcTu2/ebEghXyOn9 BzsJLOiuU1HmpzIRobSLilm3b/YMwagjN8NYZuOuIyktqYlOEOknMFvWrrSAtsA1 ehYce1Kxlzge0p2H03klf8ZWu0vKc9BxFt9ktTqr7C87A9B7/WN4QBPPcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIQoSx1aBgF7h3YmuY6TuYcVRhNMB8GA1UdIwQY MBaAFIHBrtdKrQaxuFxbpnecFh9KUrPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NHdTEwcXRCckc0WEZ1bWQ1d1dIMHBTczhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wOTE1Y2YtYzZkOC00MTAwLTkwYjMt OWQ1M2FjMmY4ZTdmLzEvZ2NHdTEwcXRCckc0WEZ1bWQ1d1dIMHBTczhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8wOTE1Y2YtYzZkOC00MTAwLTkwYjMtOWQ1M2FjMmY4ZTdm LzEvZ2NHdTEwcXRCckc0WEZ1bWQ1d1dIMHBTczhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzShEca9 Me0K/uSWCVXgCgMkkHpqYwo3UAo1YfOvw1MpbHcsR79qij//IbgQ5pYmcSzmXKrq 4zcziyupZDWkbTuE99cfeHFOixwjGknlAmu84gBPOr6tUC5LrXQBc0m/4bpGKxf7 SijO75R15PXVrMN+pE5KhcxenY8MotP4iuzHIj/RAh+pvBds/OCml2kP6/ivTSmM cSaQM/bbGvBOXNDZIXy6kTT8scMaBu1mi5w3mlPSaZWZcyXjITUZd3MdUDXonOpV t5mq4Wu+esOfop8+GvwhKg+CDfJuLUU+UcBcMJs3/uGENE0Rm9WOL4P9zfJQVwhQ JWAUgqeugh6Fww== -----END CERTIFICATE-----Generated at Sat Dec 6 20:59:47 2025 by rpki-client