This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft File: GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json) Hash identifier: k/IGXMnAperfmjMshEDACnaC6vjgX0BBfVVEo0k70T4= Subject key identifier: 14:5D:54:7C:74:04:1E:62:57:9A:DA:3F:7E:CA:6A:62:0F:45:14:5C Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76 Certificate issuer: /CN=19c9109406bda1266e56f666e8c98358d743dd76 Certificate serial: 019AF12D95D9F0F2268BAEDF8C0EC3214B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft Manifest number: 0EC1 Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: hORUg5JBel8zpIAGz+GzHUBzDIMIdiEfujJyuer7P6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:95:d9:f0:f2:26:8b:ae:df:8c:0e:c3:21:4b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76 Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=145d547c74041e62579ada3f7eca6a620f45145c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:2a:41:0f:68:fe:2f:ca:ae:95:d9:52:b8: c4:db:1a:09:e7:fe:1c:df:35:17:66:33:b4:93:1c: b0:b1:25:a0:6a:c0:74:5d:e8:0c:9f:66:13:51:cc: d7:a1:1b:fd:da:c9:c2:f9:c9:11:56:aa:8e:dd:2d: db:90:7f:e2:36:a3:04:43:54:e7:7d:db:d8:ca:54: 28:58:19:f4:bf:6b:da:60:28:0d:5f:ca:0a:45:8a: 7b:bf:7e:bb:e8:fa:a4:25:4c:d4:c2:60:93:d8:d0: ec:d7:f4:85:ab:f0:e1:2a:30:ed:4f:ab:81:c7:b2: 41:a8:57:31:b8:30:02:0c:4d:68:a2:6d:34:08:68: f9:1f:c8:77:bf:6c:dc:66:1a:75:b7:b0:54:db:fd: aa:2f:5d:12:5c:0c:83:d5:a6:91:5b:98:2f:14:68: 01:9e:3c:08:67:54:47:f5:0b:ef:ee:95:2e:9e:5a: 79:45:03:8b:8a:c0:c6:e0:48:2c:6d:5e:90:c1:77: 05:91:e0:e1:8e:df:a3:94:af:d1:2f:60:0c:ac:6b: 1e:f8:87:0e:35:24:b4:9b:a4:f7:3c:af:2e:cd:39: 2c:96:ae:c8:5a:da:38:95:ed:bc:eb:6f:8b:58:c3: 88:f1:6c:04:a0:81:c7:9b:85:95:fc:f4:0d:94:f1: 69:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5D:54:7C:74:04:1E:62:57:9A:DA:3F:7E:CA:6A:62:0F:45:14:5C X509v3 Authority Key Identifier: keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:be:6b:2f:52:82:de:fe:6e:4b:d5:52:2e:60:8b:59:b6:2c: ab:d2:c8:8e:9a:ac:97:72:ea:08:44:ff:85:28:cd:7b:8f:2d: fb:2d:46:98:5a:b2:78:c9:00:82:b7:8b:39:ba:a2:ec:df:cc: c1:9a:ca:97:1f:96:84:ab:f4:e1:0d:c1:3a:e9:ff:40:b7:b4: 63:27:74:ba:39:e8:be:8d:01:16:ec:63:de:0b:7f:35:c2:01: bd:97:e7:69:97:e5:0e:25:90:f1:5c:d0:14:78:45:44:97:f4: 34:52:d3:0f:2f:1d:73:33:9e:3b:cc:f9:f4:3d:94:48:d9:32: 30:89:5c:91:0c:78:db:ea:2d:dc:33:9b:92:52:b0:70:ba:2e: f8:71:26:6c:77:6b:f5:9f:5c:bf:62:ab:fd:6b:d9:bd:2f:c8: 85:d6:b1:c3:3e:00:ed:aa:55:d9:9a:ed:56:bc:07:3b:2e:19: 4b:aa:4b:4e:a7:53:cb:87:99:f0:d5:da:98:a9:b8:25:26:de: 23:16:f2:de:c1:a6:79:92:a0:5c:23:d4:c1:8d:53:15:60:bd: 1d:5d:a6:c2:65:f8:ac:83:35:91:4b:5e:55:1c:e6:54:aa:ec: 76:25:e5:0b:c4:32:92:43:ac:98:d2:6e:36:9f:3d:22:38:bd: 79:94:6c:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZXZ8PImi67fjA7DIUtZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YzkxMDk0MDZiZGExMjY2ZTU2ZjY2NmU4Yzk4MzU4ZDc0 M2RkNzYwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD EygxNDVkNTQ3Yzc0MDQxZTYyNTc5YWRhM2Y3ZWNhNmE2MjBmNDUxNDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjsqQQ9o/i/KrpXZUrjE2xoJ5/4c 3zUXZjO0kxywsSWgasB0XegMn2YTUczXoRv92snC+ckRVqqO3S3bkH/iNqMEQ1Tn fdvYylQoWBn0v2vaYCgNX8oKRYp7v3676PqkJUzUwmCT2NDs1/SFq/DhKjDtT6uB x7JBqFcxuDACDE1oom00CGj5H8h3v2zcZhp1t7BU2/2qL10SXAyD1aaRW5gvFGgB njwIZ1RH9Qvv7pUunlp5RQOLisDG4EgsbV6QwXcFkeDhjt+jlK/RL2AMrGse+IcO NSS0m6T3PK8uzTkslq7IWto4le2862+LWMOI8WwEoIHHm4WV/PQNlPFpRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRdVHx0BB5iV5raP37KamIPRRRcMB8GA1UdIwQY MBaAFBnJEJQGvaEmblb2ZujJg1jXQ912MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NrUWxBYTlvU1p1VnZabTZNbURXTmREM1hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iN2NhNTktM2VhZS00ZTBlLThjZjYt ZGViNzVkZjM5MGRlLzEvR2NrUWxBYTlvU1p1VnZabTZNbURXTmREM1hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9iN2NhNTktM2VhZS00ZTBlLThjZjYtZGViNzVkZjM5MGRl LzEvR2NrUWxBYTlvU1p1VnZabTZNbURXTmREM1hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZb5rL1KC 3v5uS9VSLmCLWbYsq9LIjpqsl3LqCET/hSjNe48t+y1GmFqyeMkAgreLObqi7N/M wZrKlx+WhKv04Q3BOun/QLe0Yyd0ujnovo0BFuxj3gt/NcIBvZfnaZflDiWQ8VzQ FHhFRJf0NFLTDy8dczOeO8z59D2USNkyMIlckQx42+ot3DObklKwcLou+HEmbHdr 9Z9cv2Kr/WvZvS/Ihdaxwz4A7apV2ZrtVrwHOy4ZS6pLTqdTy4eZ8NXamKm4JSbe Ixby3sGmeZKgXCPUwY1TFWC9HV2mwmX4rIM1kUteVRzmVKrsdiXlC8QykkOsmNJu Np89Iji9eZRsDg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:52 2025 by rpki-client