This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft File: Gcxj87NPFwGJ0HPIi31lL3Azofw.mft (raw, json) Hash identifier: hWKesSRSyAQ2VoVMkS0I2U8trscOYQ+ngke8ESQRLYY= Subject key identifier: 35:DF:F8:70:92:C4:77:26:33:74:65:60:3B:F5:F2:51:27:86:EA:E3 Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC Certificate issuer: /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc Certificate serial: 019AF23FB78AD90CE75FB9C41B26E3C7E6A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft Manifest number: 04E6 Signing time: Sat 06 Dec 2025 06:00:53 +0000 Manifest this update: Sat 06 Dec 2025 06:00:53 +0000 Manifest next update: Sun 07 Dec 2025 06:00:53 +0000 Files and hashes: 1: Gcxj87NPFwGJ0HPIi31lL3Azofw.crl (hash: 9Zbn5aGVS3gfAsERCiLDO4Fo1+d09THruYwoYKcHH/g=) 2: IxKO1sckpqS-dgvNPKRBcb8eshM.roa (hash: uEU07qhrl+Za2wGXi4sRKxgBjhrxWB1aBaC5IFmE9YY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b7:8a:d9:0c:e7:5f:b9:c4:1b:26:e3:c7:e6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc Validity Not Before: Dec 6 06:00:53 2025 GMT Not After : Dec 7 06:00:53 2025 GMT Subject: CN=35dff87092c47726337465603bf5f2512786eae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:43:c9:e9:03:ed:d5:3d:60:c7:93:1a:1b:a5: 85:b6:3f:b1:32:35:a7:0e:24:10:01:7b:ca:9f:0c: ba:92:55:6e:ed:34:84:02:fb:aa:0e:71:ab:3b:23: 12:18:41:aa:17:cb:14:92:c4:16:c6:e0:07:42:59: e0:44:21:ed:bc:1e:b3:8a:6a:5c:12:bd:e7:02:dc: db:2e:b1:b1:27:64:ee:39:93:51:e7:d4:1d:24:b5: 95:26:ae:8c:18:71:c5:e6:a3:3e:4d:8e:40:2c:32: f2:0e:3f:f3:7e:1d:55:a7:f2:09:fb:80:53:1d:a0: 88:86:42:98:0f:85:51:b5:2c:69:b9:35:f1:aa:6c: 24:91:58:4f:20:5a:59:61:a2:2e:81:a5:f1:e6:8d: 31:8d:2e:6f:48:cd:19:d9:85:63:03:5f:09:fc:85: 92:b8:ce:53:95:ff:0d:dc:28:a6:df:dd:fc:01:9d: e9:51:a7:b7:0d:8d:02:5b:02:b0:97:59:55:8b:3e: 8b:77:22:95:da:66:1f:2a:95:b0:50:49:f7:9d:ad: 05:a1:50:86:b5:4c:d5:52:34:e8:a3:cb:ef:75:08: de:7c:bc:24:b4:f8:33:61:eb:bb:9b:d8:ae:47:40: 52:1b:c8:8a:bf:6f:e3:da:2f:dd:5d:bd:7f:a0:e4: 75:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DF:F8:70:92:C4:77:26:33:74:65:60:3B:F5:F2:51:27:86:EA:E3 X509v3 Authority Key Identifier: keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8c:a8:a9:d6:8e:e3:f4:b2:3d:0a:1e:63:06:53:b6:38:f9: 20:93:f1:64:27:69:69:2f:35:d9:99:f0:13:7b:22:0f:82:de: 7a:75:55:75:01:07:3e:3c:3f:db:ac:e4:d0:0e:04:4f:34:33: d3:16:70:61:f4:82:28:75:15:ac:0f:4e:31:72:05:13:9f:f0: 94:17:92:1f:55:25:35:fe:2f:2a:9b:ed:35:ca:3c:98:08:70: 5a:a3:85:48:7f:cf:cd:8a:26:04:fe:1a:2f:ef:5a:9f:90:4d: b0:3d:65:36:26:46:4c:09:b5:51:25:26:bb:ff:c3:de:c9:77: 76:35:cb:74:b5:f7:d9:8e:71:67:d6:2f:67:5b:45:41:74:46: 50:ff:45:df:a5:ef:58:0d:3d:1b:18:fb:1e:48:79:db:68:d2: 60:c4:7a:37:58:60:fd:b2:96:e6:72:8b:3b:3d:09:71:f6:7c: a8:d6:0d:60:f4:8d:31:e1:0a:a8:03:d6:4d:b9:b5:a1:52:59: 79:90:d6:98:37:9e:ed:8b:cf:b6:75:58:69:20:20:83:31:78: 42:fc:54:55:36:a8:e0:96:17:06:c3:46:98:d8:07:8c:48:b2: 45:0c:a3:09:e9:82:5f:d1:ab:34:e0:85:5e:c1:60:30:ce:0a: fd:b2:91:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7eK2QznX7nEGybjx+agMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2M2M2YzYjM0ZjE3MDE4OWQwNzNjODhiN2Q2NTJmNzAz M2ExZmMwHhcNMjUxMjA2MDYwMDUzWhcNMjUxMjA3MDYwMDUzWjAzMTEwLwYDVQQD EygzNWRmZjg3MDkyYzQ3NzI2MzM3NDY1NjAzYmY1ZjI1MTI3ODZlYWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkPJ6QPt1T1gx5MaG6WFtj+xMjWn DiQQAXvKnwy6klVu7TSEAvuqDnGrOyMSGEGqF8sUksQWxuAHQlngRCHtvB6zimpc Er3nAtzbLrGxJ2TuOZNR59QdJLWVJq6MGHHF5qM+TY5ALDLyDj/zfh1Vp/IJ+4BT HaCIhkKYD4VRtSxpuTXxqmwkkVhPIFpZYaIugaXx5o0xjS5vSM0Z2YVjA18J/IWS uM5Tlf8N3Cim3938AZ3pUae3DY0CWwKwl1lViz6LdyKV2mYfKpWwUEn3na0FoVCG tUzVUjToo8vvdQjefLwktPgzYeu7m9iuR0BSG8iKv2/j2i/dXb1/oOR1IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXf+HCSxHcmM3RlYDv18lEnhurjMB8GA1UdIwQY MBaAFBnMY/OzTxcBidBzyIt9ZS9wM6H8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2N4ajg3TlBGd0dKMEhQSWkzMWxMM0F6b2Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82YmRlOWUtNmVkOC00N2Q1LTlkOWMt NTRkNzg0ZWZiYjdhLzEvR2N4ajg3TlBGd0dKMEhQSWkzMWxMM0F6b2Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS82YmRlOWUtNmVkOC00N2Q1LTlkOWMtNTRkNzg0ZWZiYjdh LzEvR2N4ajg3TlBGd0dKMEhQSWkzMWxMM0F6b2Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYyoqdaO 4/SyPQoeYwZTtjj5IJPxZCdpaS812ZnwE3siD4LeenVVdQEHPjw/26zk0A4ETzQz 0xZwYfSCKHUVrA9OMXIFE5/wlBeSH1UlNf4vKpvtNco8mAhwWqOFSH/PzYomBP4a L+9an5BNsD1lNiZGTAm1USUmu//D3sl3djXLdLX32Y5xZ9YvZ1tFQXRGUP9F36Xv WA09Gxj7Hkh522jSYMR6N1hg/bKW5nKLOz0JcfZ8qNYNYPSNMeEKqAPWTbm1oVJZ eZDWmDee7YvPtnVYaSAggzF4QvxUVTao4JYXBsNGmNgHjEiyRQyjCemCX9GrNOCF XsFgMM4K/bKRAA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:50 2025 by rpki-client