This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft File: Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json) Hash identifier: niUtbHLF6Qh9JgMQ6aheIaSo+bduUie+tbdnvMVXRJ8= Subject key identifier: 1B:8F:96:AF:6E:A0:C4:27:8D:28:0D:8A:03:0B:FB:9B:20:50:41:4C Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D Certificate issuer: /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d Certificate serial: 019AF276F22954B1621FD5C89709F3C058DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft Manifest number: 0E19 Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: zWiY5Y9sqBf5gq4wigUlC9aPAtLYR6pjbeeFrwbhoI4=) 2: wgqGPrQ_-bw3hixVEwizAzoQxVg.roa (hash: OO7KjGdS9CoJvjniou0pMLR7aRYh6Lu4ZGS86Oi0yRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f2:29:54:b1:62:1f:d5:c8:97:09:f3:c0:58:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=1b8f96af6ea0c4278d280d8a030bfb9b2050414c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:40:88:7f:2a:a8:d1:ba:21:98:57:bf:48: 24:9b:06:51:4b:c5:eb:55:bc:f7:fe:14:44:1b:fa: bc:e6:aa:50:35:28:bc:05:74:a3:bc:d2:51:1d:e2: 27:d5:92:22:6a:91:a5:4d:47:0e:de:02:82:f8:65: 5c:e6:0f:52:02:1f:e3:ca:9b:c5:dc:71:72:fb:31: e4:96:a6:73:8f:15:ee:85:78:72:47:bc:19:a0:a3: 0d:fd:8f:7f:5b:82:e0:67:3c:72:41:95:a4:64:2f: b1:d6:2f:4e:e8:64:a9:ee:97:37:51:52:f2:17:ba: 01:56:29:62:30:b0:70:ef:2b:02:d3:d4:5f:b8:f3: db:88:6f:6e:62:30:1d:e1:97:3a:62:6b:50:4b:b1: 97:8b:68:5e:de:c5:ef:8d:2c:66:ea:6a:db:bd:16: 40:d5:ec:62:d0:af:89:ae:a4:91:d3:e5:8c:69:ac: 80:bb:87:e0:8a:d1:bc:9d:79:09:76:e0:d7:e0:16: de:76:c7:87:d4:ac:8a:58:3b:7e:b0:d2:4d:65:b3: 39:1a:eb:ec:cb:9d:13:d1:a5:cf:eb:7f:02:6e:3d: 81:2d:15:c8:1c:bd:16:03:1e:0e:ac:46:45:cc:24: 6c:ed:f5:73:a5:00:3c:33:c0:d8:c6:72:8c:c3:13: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8F:96:AF:6E:A0:C4:27:8D:28:0D:8A:03:0B:FB:9B:20:50:41:4C X509v3 Authority Key Identifier: keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:dd:e3:f8:9d:38:1f:75:9f:6c:10:e6:a3:69:b6:14:26:68: 18:4b:1d:d5:50:e2:60:51:c1:47:58:4c:0d:c9:fb:2b:4c:b3: 13:dd:88:b4:97:1f:b2:d9:8a:17:33:c0:1f:73:f8:be:37:f0: 44:e2:ce:9d:05:23:6a:6a:a6:8e:6a:c9:ab:e7:bb:c7:b5:5f: 7d:fd:24:a2:47:fa:20:91:3e:a1:7c:3f:00:3a:21:f5:80:f8: f1:06:df:76:d0:a4:2f:f3:e3:fd:42:6d:99:62:cc:3e:83:31: 21:4a:e6:35:9a:da:db:49:f4:07:6d:95:e2:d7:72:0d:58:93: 48:57:39:9b:a1:c5:a5:2b:75:d9:c4:16:4f:21:a9:da:24:ee: 76:7d:87:bb:23:ea:90:87:cd:0e:94:ff:52:0a:cd:6b:4f:31: f8:23:74:ee:10:01:9f:b8:3f:32:1c:1a:4e:34:1d:dc:26:66: 99:21:58:9f:62:a0:c6:31:2e:92:cc:cd:a2:81:40:6f:7a:52: 6a:67:32:95:42:72:5d:80:96:c6:44:2c:fc:8a:3d:e6:20:0c: a5:53:7e:f7:e8:4b:68:be:bc:46:af:ba:e9:82:95:1f:dc:32: cc:6b:e9:81:40:d9:81:dd:4b:31:56:9d:d4:41:06:cc:88:57: 10:1b:4e:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvIpVLFiH9XIlwnzwFjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2RkODIwNmMxZTM1MmM1MDY1ZTQ4MTc5N2VmNzdhZjBj M2RlOGQwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD EygxYjhmOTZhZjZlYTBjNDI3OGQyODBkOGEwMzBiZmI5YjIwNTA0MTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlxAiH8qqNG6IZhXv0gkmwZRS8Xr Vbz3/hREG/q85qpQNSi8BXSjvNJRHeIn1ZIiapGlTUcO3gKC+GVc5g9SAh/jypvF 3HFy+zHklqZzjxXuhXhyR7wZoKMN/Y9/W4LgZzxyQZWkZC+x1i9O6GSp7pc3UVLy F7oBViliMLBw7ysC09RfuPPbiG9uYjAd4Zc6YmtQS7GXi2he3sXvjSxm6mrbvRZA 1exi0K+JrqSR0+WMaayAu4fgitG8nXkJduDX4BbedseH1KyKWDt+sNJNZbM5Guvs y50T0aXP638Cbj2BLRXIHL0WAx4OrEZFzCRs7fVzpQA8M8DYxnKMwxPniQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuPlq9uoMQnjSgNigML+5sgUEFMMB8GA1UdIwQY MBaAFBnN2CBsHjUsUGXkgXl+93rww96NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mMjUwNjYtOWViYS00M2FjLWJiYjQt N2IxNzc4ZGRmN2E5LzEvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mMjUwNjYtOWViYS00M2FjLWJiYjQtN2IxNzc4ZGRmN2E5 LzEvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt93j+J04 H3WfbBDmo2m2FCZoGEsd1VDiYFHBR1hMDcn7K0yzE92ItJcfstmKFzPAH3P4vjfw ROLOnQUjamqmjmrJq+e7x7Vfff0kokf6IJE+oXw/ADoh9YD48QbfdtCkL/Pj/UJt mWLMPoMxIUrmNZra20n0B22V4tdyDViTSFc5m6HFpSt12cQWTyGp2iTudn2HuyPq kIfNDpT/UgrNa08x+CN07hABn7g/MhwaTjQd3CZmmSFYn2KgxjEukszNooFAb3pS amcylUJyXYCWxkQs/Io95iAMpVN+9+hLaL68Rq+66YKVH9wyzGvpgUDZgd1LMVad 1EEGzIhXEBtO2w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:08 2025 by rpki-client