This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft File: Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json) Hash identifier: NNMP0nsOAR7DcCzQ7WpJ0tO2FyXxSL1OZZR78x7ufko= Subject key identifier: 3B:A9:45:4B:B0:34:27:48:DE:30:DD:6B:D1:A1:78:E7:7E:67:F8:6E Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D Certificate issuer: /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d Certificate serial: 019B3DC7CA80F37FAA13B1153698273F47B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft Manifest number: 0E40 Signing time: Sat 20 Dec 2025 22:01:02 +0000 Manifest this update: Sat 20 Dec 2025 22:01:02 +0000 Manifest next update: Sun 21 Dec 2025 22:01:02 +0000 Files and hashes: 1: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: G+keX5/Jo/YKkkqTF6HJb+Qnpn4WY0n4j6OUXg9oWiE=) 2: wgqGPrQ_-bw3hixVEwizAzoQxVg.roa (hash: OO7KjGdS9CoJvjniou0pMLR7aRYh6Lu4ZGS86Oi0yRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:ca:80:f3:7f:aa:13:b1:15:36:98:27:3f:47:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d Validity Not Before: Dec 20 22:01:02 2025 GMT Not After : Dec 21 22:01:02 2025 GMT Subject: CN=3ba9454bb0342748de30dd6bd1a178e77e67f86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a5:50:6b:7f:36:db:d1:14:19:6e:d8:19:f9: 2c:44:c9:93:84:f2:a7:6e:53:f7:bb:87:22:30:c7: 14:3e:af:79:ba:2c:8f:b5:0a:3f:75:31:f5:20:a6: 6f:8b:2a:c6:3b:b7:c9:f7:61:6a:7a:6e:28:24:4a: 54:b5:28:14:a8:68:b0:4d:1c:4c:f2:a5:af:5a:08: ef:2c:45:c7:32:c6:fd:83:5b:3a:75:e7:33:03:1f: b6:62:52:ac:ea:10:13:0e:15:de:7b:90:0b:84:ea: f1:f2:27:51:62:48:c7:11:9d:9b:6b:b7:34:8b:01: 3a:3b:f3:52:52:02:41:02:11:2c:ed:b4:12:69:5d: 9c:ee:4c:1a:cb:bb:9d:79:f0:c0:32:72:f0:dd:04: 62:98:17:ee:c2:54:7e:ee:1b:46:4c:89:53:e7:2c: f7:47:d8:ad:d5:3a:94:90:04:05:74:2d:6d:32:68: 96:11:92:3a:b8:39:7c:e9:64:b8:01:0e:22:99:f9: e1:22:6d:b6:df:09:31:c9:16:71:55:87:76:3e:2a: 73:fd:55:4f:52:d4:72:0c:cb:2c:d4:97:6c:1a:9a: 59:a2:7b:d0:d8:85:76:df:08:53:e5:9f:8a:84:e8: b9:33:ec:ed:18:af:f5:85:ba:04:83:0d:79:ed:7c: bf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A9:45:4B:B0:34:27:48:DE:30:DD:6B:D1:A1:78:E7:7E:67:F8:6E X509v3 Authority Key Identifier: keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d6:cd:67:b6:46:14:fc:4a:88:a5:d9:b9:95:b7:ce:d6:e8: 11:a2:29:71:f3:16:b4:5d:08:32:35:06:a7:29:b8:e1:dc:db: c7:aa:d2:77:17:3f:a4:43:c2:d0:19:7c:e9:c8:79:44:1c:b6: 7b:c0:4a:d0:39:51:76:c4:38:2b:b1:f8:8d:32:63:48:fa:fb: b0:4e:2e:b9:90:a5:05:2b:b6:73:0f:97:e9:2b:0c:1e:ab:65: b6:b4:4b:7b:a9:5d:2d:0b:ed:30:fb:30:f0:6d:8e:6b:6b:75: 4e:2d:e0:27:5f:ef:e4:7a:37:07:f5:46:55:c3:91:da:15:fa: fc:99:d5:2a:7a:d3:53:95:3f:76:c6:20:21:18:ae:25:11:7a: 2f:9b:80:c1:a9:a1:da:1b:f1:02:36:39:db:5e:11:41:55:d0: e8:6f:d0:b1:28:9a:35:19:25:1b:50:3e:5b:a3:ef:63:79:96: 4d:35:ab:32:38:73:ca:b4:93:26:75:59:5f:42:2d:95:6d:b0: 4a:1e:38:78:ad:8a:03:24:a8:9b:7c:94:0a:de:82:01:40:90: e8:01:f0:4f:56:86:3c:ea:be:07:a0:8e:c1:7a:c7:72:2b:7d: 47:7b:40:83:d6:3c:0c:f4:e6:55:37:13:5a:e9:0f:3a:d6:f7: 3b:d9:7c:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x8qA83+qE7EVNpgnP0e1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2RkODIwNmMxZTM1MmM1MDY1ZTQ4MTc5N2VmNzdhZjBj M2RlOGQwHhcNMjUxMjIwMjIwMTAyWhcNMjUxMjIxMjIwMTAyWjAzMTEwLwYDVQQD EygzYmE5NDU0YmIwMzQyNzQ4ZGUzMGRkNmJkMWExNzhlNzdlNjdmODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaVQa38229EUGW7YGfksRMmThPKn blP3u4ciMMcUPq95uiyPtQo/dTH1IKZviyrGO7fJ92Fqem4oJEpUtSgUqGiwTRxM 8qWvWgjvLEXHMsb9g1s6deczAx+2YlKs6hATDhXee5ALhOrx8idRYkjHEZ2ba7c0 iwE6O/NSUgJBAhEs7bQSaV2c7kway7udefDAMnLw3QRimBfuwlR+7htGTIlT5yz3 R9it1TqUkAQFdC1tMmiWEZI6uDl86WS4AQ4imfnhIm223wkxyRZxVYd2Pipz/VVP UtRyDMss1JdsGppZonvQ2IV23whT5Z+KhOi5M+ztGK/1hboEgw157Xy/nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDupRUuwNCdI3jDda9GheOd+Z/huMB8GA1UdIwQY MBaAFBnN2CBsHjUsUGXkgXl+93rww96NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mMjUwNjYtOWViYS00M2FjLWJiYjQt N2IxNzc4ZGRmN2E5LzEvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mMjUwNjYtOWViYS00M2FjLWJiYjQtN2IxNzc4ZGRmN2E5 LzEvR2MzWUlHd2VOU3hRWmVTQmVYNzNldkREM28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9bNZ7ZG FPxKiKXZuZW3ztboEaIpcfMWtF0IMjUGpym44dzbx6rSdxc/pEPC0Bl86ch5RBy2 e8BK0DlRdsQ4K7H4jTJjSPr7sE4uuZClBSu2cw+X6SsMHqtltrRLe6ldLQvtMPsw 8G2Oa2t1Ti3gJ1/v5Ho3B/VGVcOR2hX6/JnVKnrTU5U/dsYgIRiuJRF6L5uAwamh 2hvxAjY5214RQVXQ6G/QsSiaNRklG1A+W6PvY3mWTTWrMjhzyrSTJnVZX0ItlW2w Sh44eK2KAySom3yUCt6CAUCQ6AHwT1aGPOq+B6COwXrHcit9R3tAg9Y8DPTmVTcT WukPOtb3O9l8WA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:24:45 2025 by rpki-client