This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft File: gCVbZMlsAQvaN98j2JJo6OR0jdM.mft (raw, json) Hash identifier: HUkDoK8Y9jo+dbCcvtq+EUQH9GrgPtDVQjiouI5RC4A= Subject key identifier: 39:CA:60:7B:53:D9:FB:CD:95:76:D7:21:1A:31:EC:72:B3:4F:97:6F Authority key identifier: 80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3 Certificate issuer: /CN=80255b64c96c010bda37df23d89268e8e4748dd3 Certificate serial: 019AF209A6832D3A9E22790EB6E549301911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft Manifest number: 0948 Signing time: Sat 06 Dec 2025 05:01:49 +0000 Manifest this update: Sat 06 Dec 2025 05:01:49 +0000 Manifest next update: Sun 07 Dec 2025 05:01:49 +0000 Files and hashes: 1: gCVbZMlsAQvaN98j2JJo6OR0jdM.crl (hash: I/Oc8JChNSp2/VjEjlwH674crlmSIDOikLS4/xt4ckE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a6:83:2d:3a:9e:22:79:0e:b6:e5:49:30:19:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80255b64c96c010bda37df23d89268e8e4748dd3 Validity Not Before: Dec 6 05:01:49 2025 GMT Not After : Dec 7 05:01:49 2025 GMT Subject: CN=39ca607b53d9fbcd9576d7211a31ec72b34f976f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:c6:62:54:a6:06:2c:f2:a6:8f:11:de:19: fc:5e:0d:77:04:d0:ca:27:98:6e:13:6d:aa:6a:eb: 72:9a:80:cf:e6:2d:1c:b9:f9:f2:d0:46:30:a7:8c: c4:ad:2f:35:7c:7f:f5:4d:b0:2c:be:de:dd:70:b0: 6c:56:98:9c:53:24:c4:ef:f3:7d:fb:6e:30:bc:f3: 62:fb:7c:4b:ec:4c:cc:dc:29:87:22:79:83:b3:dd: 11:49:dd:bb:32:d7:fc:84:07:1a:ce:16:9e:b6:da: 6e:a9:c6:1c:75:f3:33:27:51:16:63:8c:f7:68:50: 79:85:d9:9e:3b:72:2b:b6:2f:c5:7f:d8:b3:11:00: a6:cd:66:f4:49:30:f9:57:14:27:b0:14:48:d7:f6: 50:9d:b4:17:01:e5:90:7f:54:9b:a0:ee:a8:8d:21: 13:71:94:5e:96:02:14:b1:25:62:dd:a5:3d:e1:5d: 4b:18:a4:7c:9f:96:0f:fd:ca:90:4f:18:f5:38:fc: 84:b9:af:03:19:b8:8d:63:05:2f:a8:20:9e:d4:a5: 3d:3d:28:3e:15:5f:1e:15:ff:88:be:3a:fd:32:b6: cd:c5:2a:7d:5f:dc:fa:34:94:01:b7:88:f9:99:bb: 19:d1:81:37:42:b5:0c:3a:f1:38:50:ab:8f:47:d1: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CA:60:7B:53:D9:FB:CD:95:76:D7:21:1A:31:EC:72:B3:4F:97:6F X509v3 Authority Key Identifier: keyid:80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f6:4f:9f:4f:bf:51:3f:5a:3d:76:c5:2a:b8:a7:54:39:01: f4:fd:61:6b:bd:7c:ca:12:64:1a:86:c7:14:17:06:0c:98:d1: 3b:27:23:23:d9:bc:24:fd:22:6c:1a:9b:02:b8:23:49:d9:f0: 78:b6:dd:be:76:90:9c:73:6e:65:9e:62:cd:99:7f:01:5c:c1: 18:df:df:bc:eb:a0:70:9f:dc:34:77:51:68:e1:81:8e:d9:aa: d9:96:20:ad:b5:af:17:d0:39:45:0a:c5:68:6b:03:9f:3b:3a: cd:74:fb:65:a3:14:e6:0e:c3:ce:4b:78:1c:84:33:51:10:6c: 40:38:e4:5a:c1:bc:58:91:61:1d:95:b3:56:df:e1:0b:38:38: 80:65:37:bd:84:36:25:3a:c8:d3:a9:25:cb:92:f6:1a:9c:de: 85:38:0a:2d:75:02:4f:b0:23:3f:a4:43:ca:08:1f:8e:fa:2a: 54:76:d3:1e:8f:6f:f2:b9:47:0b:1a:9f:74:24:c3:b8:f8:0d: 95:0d:7d:2f:cd:b3:85:95:4c:97:b3:5a:a4:31:cf:e9:7a:7c: eb:73:8b:8f:f6:65:bc:04:37:61:50:cb:be:59:0b:6a:8e:05: 2e:71:46:fc:a1:7f:0b:7c:6c:61:98:8c:d9:9a:dd:de:6a:cb: 53:ff:21:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaaDLTqeInkOtuVJMBkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMjU1YjY0Yzk2YzAxMGJkYTM3ZGYyM2Q4OTI2OGU4ZTQ3 NDhkZDMwHhcNMjUxMjA2MDUwMTQ5WhcNMjUxMjA3MDUwMTQ5WjAzMTEwLwYDVQQD EygzOWNhNjA3YjUzZDlmYmNkOTU3NmQ3MjExYTMxZWM3MmIzNGY5NzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhXGYlSmBizypo8R3hn8Xg13BNDK J5huE22qautymoDP5i0cufny0EYwp4zErS81fH/1TbAsvt7dcLBsVpicUyTE7/N9 +24wvPNi+3xL7EzM3CmHInmDs90RSd27Mtf8hAcazhaettpuqcYcdfMzJ1EWY4z3 aFB5hdmeO3Irti/Ff9izEQCmzWb0STD5VxQnsBRI1/ZQnbQXAeWQf1SboO6ojSET cZRelgIUsSVi3aU94V1LGKR8n5YP/cqQTxj1OPyEua8DGbiNYwUvqCCe1KU9PSg+ FV8eFf+Ivjr9MrbNxSp9X9z6NJQBt4j5mbsZ0YE3QrUMOvE4UKuPR9EHYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnKYHtT2fvNlXbXIRox7HKzT5dvMB8GA1UdIwQY MBaAFIAlW2TJbAEL2jffI9iSaOjkdI3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xODc2MWUtMjU2NC00MjBlLWFmZjUt NjM1ZTY1YjhiOTJlLzEvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8xODc2MWUtMjU2NC00MjBlLWFmZjUtNjM1ZTY1YjhiOTJl LzEvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/ZPn0+/ UT9aPXbFKrinVDkB9P1ha718yhJkGobHFBcGDJjROycjI9m8JP0ibBqbArgjSdnw eLbdvnaQnHNuZZ5izZl/AVzBGN/fvOugcJ/cNHdRaOGBjtmq2ZYgrbWvF9A5RQrF aGsDnzs6zXT7ZaMU5g7Dzkt4HIQzURBsQDjkWsG8WJFhHZWzVt/hCzg4gGU3vYQ2 JTrI06kly5L2GpzehTgKLXUCT7AjP6RDyggfjvoqVHbTHo9v8rlHCxqfdCTDuPgN lQ19L82zhZVMl7NapDHP6Xp863OLj/ZlvAQ3YVDLvlkLao4FLnFG/KF/C3xsYZiM 2Zrd3mrLU/8hSg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:30 2025 by rpki-client