This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft File: GckfHLCHQjKgT7wJK6poiszsydc.mft (raw, json) Hash identifier: dxgzDxblbtxDq+RthnmERaH687INk3LlyP/neRoQLO8= Subject key identifier: 4E:E6:85:AA:2D:D0:35:4F:21:6E:25:81:3B:18:D3:B2:89:21:D1:A3 Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7 Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7 Certificate serial: 019AF352147FB65AC7B863C511E6AB20F6E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 11:00:33 +0000 Manifest this update: Sat 06 Dec 2025 11:00:33 +0000 Manifest next update: Sun 07 Dec 2025 11:00:33 +0000 Files and hashes: 1: GckfHLCHQjKgT7wJK6poiszsydc.crl (hash: jPQX/VYgUS2+SkxiPI/cJ3jn75xbKP7qqBdTaYtvkiA=) 2: vIkXi13duBYnSxCNLM5pa4ja5hM.roa (hash: AZhzU1QaQiAy9JJdY72EUz3F5Q2aGcy4usPFgiaTx0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:14:7f:b6:5a:c7:b8:63:c5:11:e6:ab:20:f6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7 Validity Not Before: Dec 6 11:00:33 2025 GMT Not After : Dec 7 11:00:33 2025 GMT Subject: CN=4ee685aa2dd0354f216e25813b18d3b28921d1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1c:b5:6e:63:c7:64:6d:32:c4:76:ad:fa:ab: 47:e4:2d:30:37:33:54:34:cd:25:6f:4f:9f:3b:41: 61:12:fb:19:8f:fc:4f:70:05:e8:0e:14:56:26:7b: 7f:a8:33:5d:5b:dd:1e:6e:f4:b2:fc:af:b2:93:79: 5c:68:d0:9c:ef:a2:c7:a8:0c:0f:29:5a:60:25:d6: d2:f9:e1:7d:9d:ea:b9:81:f8:0e:80:a9:f4:c7:10: 36:29:db:11:83:e4:e6:0d:29:da:b2:d7:00:82:bc: af:a4:bd:00:b4:b0:bf:00:f9:95:10:6f:d3:6e:c9: 48:77:eb:f4:c6:ab:17:13:02:04:94:31:28:40:25: 1b:c8:aa:a0:f2:11:dd:64:c0:58:9f:dc:53:2a:57: d1:ab:da:e6:cd:2c:3d:69:61:e0:cd:cb:bb:5d:e4: 2a:34:35:47:bc:c3:c3:1c:96:d0:b2:38:d7:43:b0: 24:b3:21:13:02:6b:fa:97:9c:a5:44:a4:83:2b:88: 2b:cf:0e:fe:86:be:ed:72:6a:06:b8:e8:0d:08:14: 45:15:13:40:a0:50:d3:88:d7:96:33:c5:5a:0a:69: 37:f6:d6:5d:20:94:cf:e8:1f:c6:c9:db:28:da:cc: 7a:79:67:63:7d:4f:10:46:8c:45:46:2c:41:1f:1e: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E6:85:AA:2D:D0:35:4F:21:6E:25:81:3B:18:D3:B2:89:21:D1:A3 X509v3 Authority Key Identifier: keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ef:b5:31:92:6e:a3:a6:f7:c4:be:1a:32:04:67:27:49:3b: 66:49:a1:87:c1:12:f3:41:98:6a:9e:c0:ad:9b:a0:87:2a:cf: 9e:40:e2:a8:1b:ca:ea:54:54:93:20:20:b2:b9:87:d5:b8:53: 63:c2:b6:ec:6f:20:fc:f9:2e:3e:8b:5f:9c:dc:21:05:2e:f1: e8:3f:d6:7c:69:48:fa:5f:48:1c:05:ab:39:c6:e1:5b:38:54: b1:5c:d3:8c:41:51:48:9f:69:1b:92:1e:6d:ab:e7:5b:7a:c6: 3a:55:33:88:01:6d:7f:e8:d4:32:0e:5d:52:25:13:39:ec:42: af:19:b0:38:3a:ef:ef:8e:e6:f7:af:36:f2:cf:94:bd:3f:25: 2a:f8:e2:9e:36:6a:99:0e:28:f4:6a:a0:8f:c4:d9:47:23:e5: a3:32:66:df:ab:43:82:45:23:ff:df:5f:a8:9f:f6:0d:42:ea: 2f:e1:90:53:2f:95:55:0e:d8:c7:e1:09:0b:5b:a0:80:96:85: 6d:07:2a:29:c6:bd:a7:43:93:9a:70:29:4f:b0:f7:ff:be:3a: 64:fe:c0:dd:e7:fe:c0:60:0c:ed:f2:65:bf:0b:0a:b8:98:54: f9:5a:8d:f0:a7:f0:46:70:2f:c9:51:a3:3d:0a:18:c7:6b:1a: f5:96:26:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhR/tlrHuGPFEearIPbjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YzkxZjFjYjA4NzQyMzJhMDRmYmMwOTJiYWE2ODhhY2Nl Y2M5ZDcwHhcNMjUxMjA2MTEwMDMzWhcNMjUxMjA3MTEwMDMzWjAzMTEwLwYDVQQD Eyg0ZWU2ODVhYTJkZDAzNTRmMjE2ZTI1ODEzYjE4ZDNiMjg5MjFkMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixy1bmPHZG0yxHat+qtH5C0wNzNU NM0lb0+fO0FhEvsZj/xPcAXoDhRWJnt/qDNdW90ebvSy/K+yk3lcaNCc76LHqAwP KVpgJdbS+eF9neq5gfgOgKn0xxA2KdsRg+TmDSnastcAgryvpL0AtLC/APmVEG/T bslId+v0xqsXEwIElDEoQCUbyKqg8hHdZMBYn9xTKlfRq9rmzSw9aWHgzcu7XeQq NDVHvMPDHJbQsjjXQ7AksyETAmv6l5ylRKSDK4grzw7+hr7tcmoGuOgNCBRFFRNA oFDTiNeWM8VaCmk39tZdIJTP6B/Gydso2sx6eWdjfU8QRoxFRixBHx6NKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7mhaot0DVPIW4lgTsY07KJIdGjMB8GA1UdIwQY MBaAFBnJHxywh0IyoE+8CSuqaIrM7MnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NrZkhMQ0hRaktnVDd3Sks2cG9pc3pzeWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wNDYzMzctNGYxZi00NDRlLTgzZDct MDU0ZDY1ZDcyNDdmLzEvR2NrZkhMQ0hRaktnVDd3Sks2cG9pc3pzeWRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8wNDYzMzctNGYxZi00NDRlLTgzZDctMDU0ZDY1ZDcyNDdm LzEvR2NrZkhMQ0hRaktnVDd3Sks2cG9pc3pzeWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAe+1MZJu o6b3xL4aMgRnJ0k7Zkmhh8ES80GYap7ArZughyrPnkDiqBvK6lRUkyAgsrmH1bhT Y8K27G8g/PkuPotfnNwhBS7x6D/WfGlI+l9IHAWrOcbhWzhUsVzTjEFRSJ9pG5Ie bavnW3rGOlUziAFtf+jUMg5dUiUTOexCrxmwODrv747m96828s+UvT8lKvjinjZq mQ4o9Gqgj8TZRyPlozJm36tDgkUj/99fqJ/2DULqL+GQUy+VVQ7Yx+EJC1uggJaF bQcqKca9p0OTmnApT7D3/746ZP7A3ef+wGAM7fJlvwsKuJhU+VqN8KfwRnAvyVGj PQoYx2sa9ZYmbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:24 2025 by rpki-client