This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json) Hash identifier: XQod1bRlFTYYaQvzNkcdEL4W39Up4IyiL4whC6VekKE= Subject key identifier: C1:94:68:B2:62:A2:5E:0C:97:51:FE:06:E1:EE:CE:B4:E0:9C:9A:F6 Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65 Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65 Certificate serial: 019AF12DD37891A98B21C590EDCBA06D04F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft Manifest number: 13AC Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=) 2: dMX9QwbYl-FTlUJ1R8o2dHt-Q3w.roa (hash: e2o3TSPgT1QYuW3l4VAbr/3mKHvbyIxxzpTJ+Xkb62A=) 3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: PP/pz4KBru/5i8a2sTxAhaasDN/l/Ad62EY1X6vDdx8=) 4: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d3:78:91:a9:8b:21:c5:90:ed:cb:a0:6d:04:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65 Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=c19468b262a25e0c9751fe06e1eeceb4e09c9af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:f8:6d:03:e8:ea:ec:05:3a:20:c8:d4:c4: 15:ec:52:17:ae:2e:7b:57:1e:09:51:a0:d0:59:4d: 9e:67:37:ad:55:2e:0d:1c:ed:47:b0:8b:b1:0f:88: ef:53:f9:52:10:2b:de:07:2c:81:56:eb:a6:bd:58: 37:70:5e:79:9b:6e:f8:01:c7:bc:9d:a7:ca:cb:70: 03:97:15:05:3d:1a:e6:44:58:cd:a4:64:cc:7b:b1: 0f:5c:ae:f6:54:90:9d:81:80:39:4b:3b:07:a7:cd: 08:46:35:60:2a:70:44:ca:d1:d6:0a:65:53:de:52: 07:d8:45:26:a0:08:a9:de:e2:30:3a:f3:b4:30:7a: 8a:98:24:dc:03:96:6e:b3:03:47:e7:92:d9:35:c8: a9:60:19:53:14:cb:03:7e:be:e6:72:2f:25:13:ac: ca:bc:fc:25:99:6f:d7:6f:97:a6:36:1b:1f:1f:05: 5e:a1:91:c4:6b:6b:45:ae:e1:d1:9a:97:99:70:61: 48:8b:1f:51:51:b2:6a:ea:70:f5:1c:45:61:d0:29: 63:36:00:d8:2a:3c:b6:86:e1:16:48:95:44:63:06: 17:2f:b5:2e:c6:01:1f:9a:0f:aa:df:c1:ec:43:dc: bf:40:01:ba:80:76:d8:e3:d3:d3:af:32:62:d0:52: 91:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:94:68:B2:62:A2:5E:0C:97:51:FE:06:E1:EE:CE:B4:E0:9C:9A:F6 X509v3 Authority Key Identifier: keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9a:5f:13:62:fc:32:58:a4:69:50:73:a8:43:80:21:3e:48: ff:b2:73:3b:62:cf:00:97:3e:08:ab:d9:99:ff:e2:97:55:f0: e6:2d:c2:2e:f2:1a:73:89:4c:df:31:00:ad:d7:bb:61:76:77: 01:2f:57:95:4f:1f:14:c2:9e:50:7e:c8:ce:d6:70:12:94:90: ef:f7:5d:5b:d2:73:17:34:d3:a1:57:a2:9b:75:b1:5d:c7:ca: dd:f6:b5:4b:af:a6:9b:e7:00:94:c4:c4:c6:0d:c2:08:00:33: 81:ae:14:f3:85:92:b5:9a:f8:74:4b:03:39:e9:02:92:ee:45: bf:b7:6c:87:01:60:80:4f:31:89:4c:c6:8c:d7:18:a1:c6:f5: b2:34:17:0d:12:bf:4a:81:14:3f:28:90:92:41:1f:d3:5e:7c: fd:33:41:5b:82:e7:98:ad:b5:25:9f:92:95:48:e0:69:9f:4e: f0:e4:d4:6d:8c:10:a7:cb:70:26:5f:53:14:57:da:9e:55:6c: 8b:8b:49:f0:23:54:e0:8e:19:b3:eb:05:ae:30:0c:ab:ae:72: 94:9a:69:b7:39:a3:9d:cb:f7:9e:5c:5d:4f:0a:c5:e7:8a:1a: 41:74:0e:4f:e1:f1:54:a4:6a:07:09:cd:28:af:3a:fc:d4:e9: c6:3a:63:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdN4kamLIcWQ7cugbQT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxY2RjMTdkYWQwM2JjYjliYzM0YTllMzc3YWIyMDcwODUy ZGNhNjUwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD EyhjMTk0NjhiMjYyYTI1ZTBjOTc1MWZlMDZlMWVlY2ViNGUwOWM5YWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY34bQPo6uwFOiDI1MQV7FIXri57 Vx4JUaDQWU2eZzetVS4NHO1HsIuxD4jvU/lSECveByyBVuumvVg3cF55m274Ace8 nafKy3ADlxUFPRrmRFjNpGTMe7EPXK72VJCdgYA5SzsHp80IRjVgKnBEytHWCmVT 3lIH2EUmoAip3uIwOvO0MHqKmCTcA5ZuswNH55LZNcipYBlTFMsDfr7mci8lE6zK vPwlmW/Xb5emNhsfHwVeoZHEa2tFruHRmpeZcGFIix9RUbJq6nD1HEVh0CljNgDY Kjy2huEWSJVEYwYXL7UuxgEfmg+q38HsQ9y/QAG6gHbY49PTrzJi0FKRcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGUaLJiol4Ml1H+BuHuzrTgnJr2MB8GA1UdIwQY MBaAFIHNwX2tA7y5vDSp43erIHCFLcplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAt MDE4NGU4MWFlYWQ5LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAtMDE4NGU4MWFlYWQ5 LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJpfE2L8 MlikaVBzqEOAIT5I/7JzO2LPAJc+CKvZmf/il1Xw5i3CLvIac4lM3zEArde7YXZ3 AS9XlU8fFMKeUH7IztZwEpSQ7/ddW9JzFzTToVeim3WxXcfK3fa1S6+mm+cAlMTE xg3CCAAzga4U84WStZr4dEsDOekCku5Fv7dshwFggE8xiUzGjNcYocb1sjQXDRK/ SoEUPyiQkkEf0158/TNBW4LnmK21JZ+SlUjgaZ9O8OTUbYwQp8twJl9TFFfanlVs i4tJ8CNU4I4Zs+sFrjAMq65ylJpptzmjncv3nlxdTwrF54oaQXQOT+HxVKRqBwnN KK86/NTpxjpjww== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:13 2025 by rpki-client