This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft File: GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft (raw, json) Hash identifier: NkDbQorDy+YVTtRbmu/LzXRXTavQobJY3Zi6ophSPVI= Subject key identifier: A9:56:34:5E:21:10:D8:1D:3E:17:B7:63:DE:65:65:0C:34:2A:94:C2 Authority key identifier: 18:2D:69:63:F8:F8:04:58:D8:41:CA:AE:F1:58:B9:92:AB:40:59:C7 Certificate issuer: /CN=182d6963f8f80458d841caaef158b992ab4059c7 Certificate serial: 019AFCC38F4611976434729CE81229F438B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft Manifest number: 1763 Signing time: Mon 08 Dec 2025 07:01:05 +0000 Manifest this update: Mon 08 Dec 2025 07:01:05 +0000 Manifest next update: Tue 09 Dec 2025 07:01:05 +0000 Files and hashes: 1: GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl (hash: U2TmXIH27Blv+xsPRq9LLU8eV60HzHXJhCPM6V6Hfoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:8f:46:11:97:64:34:72:9c:e8:12:29:f4:38:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=182d6963f8f80458d841caaef158b992ab4059c7 Validity Not Before: Dec 8 07:01:05 2025 GMT Not After : Dec 9 07:01:05 2025 GMT Subject: CN=a956345e2110d81d3e17b763de65650c342a94c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:58:3a:0a:d7:54:80:47:fd:f5:9a:93:e9:5f: 80:13:d0:4f:27:0c:87:09:75:54:77:63:2c:9f:82: b0:b7:61:4d:f9:41:a8:a0:99:85:a0:21:59:e9:a2: 0e:dd:f4:33:1c:19:d0:d8:46:e9:f6:90:ef:df:05: 6f:3c:0d:ab:c2:b1:36:d1:48:24:54:23:02:66:fa: f3:b6:4f:83:37:fd:75:b9:80:d4:a7:c5:5d:e9:0b: d8:64:6b:11:89:b2:6e:18:8d:12:d6:f9:bd:a4:29: 55:20:42:3c:7c:5f:7e:f5:87:03:e9:16:3c:75:ae: 48:0e:06:05:5e:67:15:0e:ba:e3:80:5c:7a:47:35: 73:a6:15:eb:58:f6:aa:ce:9b:84:2e:21:c4:bc:d0: 1c:3d:90:7c:75:fb:bf:f8:b9:0e:fc:7d:22:90:cf: 94:ff:29:68:af:46:4c:ad:20:fe:96:2d:4f:39:fc: 56:b3:6c:b3:db:89:84:0d:c2:34:51:74:88:77:d6: 7f:2a:a4:b9:81:84:b0:5d:cf:21:89:49:02:ae:8a: 22:e7:a0:06:ce:95:db:c7:42:30:97:5b:9a:23:d6: 7e:cb:28:d9:4f:3b:a5:aa:c2:cd:11:a9:86:f7:25: c4:ba:d2:ec:8c:5c:df:c8:25:cb:75:20:06:38:bc: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:56:34:5E:21:10:D8:1D:3E:17:B7:63:DE:65:65:0C:34:2A:94:C2 X509v3 Authority Key Identifier: keyid:18:2D:69:63:F8:F8:04:58:D8:41:CA:AE:F1:58:B9:92:AB:40:59:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:1c:51:a7:27:9e:2b:69:c5:08:ae:ff:10:da:5b:5d:08:ed: 7a:24:0d:8f:02:72:59:8c:11:fc:6a:9b:f7:0c:07:87:da:88: c9:59:5b:60:5c:93:bb:37:d0:b6:2c:7a:b5:43:30:75:47:7c: 73:a4:3e:49:a1:4c:9f:7b:9b:bb:72:88:a6:42:9a:5b:b6:49: f5:fb:06:70:97:12:db:54:bf:ba:ee:39:ca:37:d3:4a:da:78: 1e:39:48:1c:c0:7f:bf:2f:fb:fe:a4:b3:d9:3a:df:6f:e9:0f: 9d:13:18:0b:b4:ea:fa:8e:7a:b4:43:a5:86:69:64:df:6f:9d: b6:fd:bb:ad:19:9d:5c:40:49:21:3d:ee:28:c3:eb:5f:45:7f: 8d:09:05:f6:6f:9e:e8:7a:d4:ca:2a:85:08:f7:bc:aa:45:01: a4:e6:96:da:8f:ce:dd:6c:fa:9e:d7:61:de:0d:50:b7:cd:41: 81:20:ad:9f:4d:c3:2e:da:78:de:86:e5:c8:ce:b8:03:28:d5: 50:e7:9c:07:ee:bd:af:43:4f:27:d2:a0:47:c9:0e:ba:d6:c0: ee:81:a1:45:fd:5d:cc:62:8f:31:4e:b2:6a:55:bc:72:26:f8: 2a:75:7c:68:4f:1f:3c:c1:b7:1b:16:c0:76:c1:5e:34:93:6e: a9:2e:67:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w49GEZdkNHKc6BIp9DiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MmQ2OTYzZjhmODA0NThkODQxY2FhZWYxNThiOTkyYWI0 MDU5YzcwHhcNMjUxMjA4MDcwMTA1WhcNMjUxMjA5MDcwMTA1WjAzMTEwLwYDVQQD EyhhOTU2MzQ1ZTIxMTBkODFkM2UxN2I3NjNkZTY1NjUwYzM0MmE5NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFg6CtdUgEf99ZqT6V+AE9BPJwyH CXVUd2Msn4Kwt2FN+UGooJmFoCFZ6aIO3fQzHBnQ2Ebp9pDv3wVvPA2rwrE20Ugk VCMCZvrztk+DN/11uYDUp8Vd6QvYZGsRibJuGI0S1vm9pClVIEI8fF9+9YcD6RY8 da5IDgYFXmcVDrrjgFx6RzVzphXrWPaqzpuELiHEvNAcPZB8dfu/+LkO/H0ikM+U /ylor0ZMrSD+li1POfxWs2yz24mEDcI0UXSId9Z/KqS5gYSwXc8hiUkCrooi56AG zpXbx0Iwl1uaI9Z+yyjZTzulqsLNEamG9yXEutLsjFzfyCXLdSAGOLzpvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlWNF4hENgdPhe3Y95lZQw0KpTCMB8GA1UdIwQY MBaAFBgtaWP4+ARY2EHKrvFYuZKrQFnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0MxcFlfajRCRmpZUWNxdThWaTVrcXRBV2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xZjA0OTMtYzRiZi00OWYyLTk3ZWYt MTI0MzhhOWRjMjZkLzEvR0MxcFlfajRCRmpZUWNxdThWaTVrcXRBV2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8xZjA0OTMtYzRiZi00OWYyLTk3ZWYtMTI0MzhhOWRjMjZk LzEvR0MxcFlfajRCRmpZUWNxdThWaTVrcXRBV2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhxRpyee K2nFCK7/ENpbXQjteiQNjwJyWYwR/Gqb9wwHh9qIyVlbYFyTuzfQtix6tUMwdUd8 c6Q+SaFMn3ubu3KIpkKaW7ZJ9fsGcJcS21S/uu45yjfTStp4HjlIHMB/vy/7/qSz 2Trfb+kPnRMYC7Tq+o56tEOlhmlk32+dtv27rRmdXEBJIT3uKMPrX0V/jQkF9m+e 6HrUyiqFCPe8qkUBpOaW2o/O3Wz6ntdh3g1Qt81BgSCtn03DLtp43oblyM64AyjV UOecB+69r0NPJ9KgR8kOutbA7oGhRf1dzGKPMU6yalW8cib4KnV8aE8fPMG3GxbA dsFeNJNuqS5n0g== -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:39 2025 by rpki-client