This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json) Hash identifier: iKs4lrfetHLPUqi1C7tyVvTgI1XUc9UhCDoj7KxHM1o= Subject key identifier: 86:F9:DD:04:64:85:2B:CD:41:E6:89:50:E6:7E:EF:B2:C0:45:CA:D9 Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 019AF05125CD60332D0BB2FA80AE1E0EBC35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft Manifest number: 16C3 Signing time: Fri 05 Dec 2025 21:00:41 +0000 Manifest this update: Fri 05 Dec 2025 21:00:41 +0000 Manifest next update: Sat 06 Dec 2025 21:00:41 +0000 Files and hashes: 1: 1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa (hash: WJKUvuV0JjUpEwzD0WN1y14bM/NihUUNvR+FCbd/Y2g=) 2: 5_qbUTNJTKmDx-VPoCyg5GiF_44.roa (hash: upLH1FeLhYFLc3B1AG7zDO/VAd2waobao5HIF19Yrvo=) 3: InIRujvheMSnuntsvHJjTs5su2U.roa (hash: IqMDfUGWehH9FGcRRehcGH1gUKY9FO7UHo3vHht1RFY=) 4: YYbT8lbyVWv6yQ3daL3nywYGpE0.roa (hash: H/Qcg0aplqNTHmTWbVVGR+IQ4V4ag89xamHIQ20iGuk=) 5: dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa (hash: vHyoYTb8eVOfU/syk4YrhtN9pnkC2H/rIICxrgnsNBI=) 6: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: 9WaifGqCAAHUs2zbpAxIVut/UKRoQyIdFBealQmOnGE=) 7: gio6F55GO42GZsRq8FQUo7P8nrk.roa (hash: 80TfPfy6fsm8Hf2Ac1l9Gq3x9An3ECfANZIa/nM0IVY=) 8: hPi3Yz-IQfnghVcK_tG22EcMbZk.roa (hash: eBUVvaZgDfjhvtgjU9lOaAKzUUmY7IXYS3AoPIKzIbQ=) 9: ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa (hash: jwUnq34H3x2DDYiun7O3jFMVM618SNic53iAmXCX+Z4=) 10: lWJoF_swBr2Lu5mO-Q5os-z2oAU.roa (hash: GwiPt4R6jhk5qWspCacWYlKa/6jGmdnZmiVjiKnYhHQ=) 11: pocLo2IUa96EYAO9rbTb3m68VAo.roa (hash: Z7HB26uR5mWKPIqwiHiyjqm7+3tugkPZzITbgrY+cl4=) 12: sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa (hash: tTSTzWjgCJKHY0qcH5mPggHS+UBYeFmuuzH6UrgFPas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:25:cd:60:33:2d:0b:b2:fa:80:ae:1e:0e:bc:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Dec 5 21:00:41 2025 GMT Not After : Dec 6 21:00:41 2025 GMT Subject: CN=86f9dd0464852bcd41e68950e67eefb2c045cad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:b1:7f:05:1a:f1:d1:f7:1b:8b:81:f9:15: 31:61:05:95:8e:a8:60:58:c8:3f:ce:42:d6:40:39: f7:b2:9a:ab:f1:66:36:c5:bf:3a:be:68:ec:c9:b5: 38:b6:0f:d8:c6:0d:09:42:de:7f:58:27:cc:6a:72: 9c:da:ee:39:ff:3d:eb:76:e2:e2:9f:d1:01:dd:e5: ab:a1:76:ec:33:26:9d:5b:55:91:76:e7:a6:ff:f6: b3:d4:1b:0a:23:63:14:50:6a:e1:34:35:8b:2e:c3: 5c:82:ca:b4:0c:20:22:b3:e4:77:e4:13:96:19:7a: 0c:eb:fe:34:48:30:c3:eb:33:e0:e9:28:72:f1:9d: cc:5b:79:a7:2a:73:e4:d9:0d:e2:80:2f:89:02:81: 98:6c:57:0c:d6:cb:34:f9:9c:90:d6:5a:11:1c:13: ef:26:ef:e2:24:da:94:21:12:55:7a:12:cb:7a:dc: 22:1c:ec:4e:7b:5a:27:30:66:30:85:ec:71:73:74: f7:ac:79:58:34:95:c7:2a:f9:fd:de:30:32:6b:0c: 00:73:02:37:5b:60:c0:39:4e:ea:3e:8c:b2:1f:95: 11:4f:ef:f2:42:85:55:dd:95:ae:ac:11:9b:51:a6: 6e:63:0d:5b:44:89:b0:2e:b7:81:ed:f9:18:71:2c: e3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F9:DD:04:64:85:2B:CD:41:E6:89:50:E6:7E:EF:B2:C0:45:CA:D9 X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a5:5c:a7:ca:f1:b5:f2:b1:72:62:59:ab:c9:0d:81:47:63: 48:2b:ec:2d:e8:36:4e:9f:8c:67:5e:12:53:5c:f9:a9:13:2f: 5d:86:90:9e:f2:04:fd:47:ad:12:e2:6f:93:7b:39:1c:a1:8f: 23:05:62:ce:4d:5f:bf:03:c6:60:a1:8d:2e:3e:18:89:b2:ae: e1:89:19:9d:99:97:67:a0:ae:fb:52:ca:cb:45:07:5e:15:ee: b2:a5:d6:d0:3f:64:78:e8:b6:92:48:6d:a9:b2:01:82:1a:9d: 99:eb:e1:13:b2:2d:55:d9:6f:96:0e:b6:9f:ed:b1:04:30:9c: 10:f6:39:ff:4e:76:75:a1:dc:86:65:6e:7d:13:f1:72:9f:7a: c0:64:63:30:4d:39:60:a3:7a:b5:68:f9:f5:4f:c5:74:71:15: 19:a3:ff:97:6b:ef:b5:bb:47:eb:c1:f3:e1:83:78:fd:d7:8d: 8a:29:2a:2f:3b:06:b2:ab:53:59:24:04:a3:03:6d:2f:1b:e7: 4f:93:81:49:cc:11:57:6f:41:e8:74:cc:f9:ef:70:d5:0a:a0: 50:8e:e8:cc:ef:3f:a2:19:dc:a4:ff:15:f9:87:b4:e7:5b:d3: 78:bf:86:6e:88:46:24:62:c2:dc:d0:de:6c:7f:5f:18:68:e8: 2b:4c:f0:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUSXNYDMtC7L6gK4eDrw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjUxMjA1MjEwMDQxWhcNMjUxMjA2MjEwMDQxWjAzMTEwLwYDVQQD Eyg4NmY5ZGQwNDY0ODUyYmNkNDFlNjg5NTBlNjdlZWZiMmMwNDVjYWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4axfwUa8dH3G4uB+RUxYQWVjqhg WMg/zkLWQDn3spqr8WY2xb86vmjsybU4tg/Yxg0JQt5/WCfManKc2u45/z3rduLi n9EB3eWroXbsMyadW1WRduem//az1BsKI2MUUGrhNDWLLsNcgsq0DCAis+R35BOW GXoM6/40SDDD6zPg6Shy8Z3MW3mnKnPk2Q3igC+JAoGYbFcM1ss0+ZyQ1loRHBPv Ju/iJNqUIRJVehLLetwiHOxOe1onMGYwhexxc3T3rHlYNJXHKvn93jAyawwAcwI3 W2DAOU7qPoyyH5URT+/yQoVV3ZWurBGbUaZuYw1bRImwLreB7fkYcSzjbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIb53QRkhSvNQeaJUOZ+77LARcrZMB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6Vcp8rx tfKxcmJZq8kNgUdjSCvsLeg2Tp+MZ14SU1z5qRMvXYaQnvIE/UetEuJvk3s5HKGP IwVizk1fvwPGYKGNLj4YibKu4YkZnZmXZ6Cu+1LKy0UHXhXusqXW0D9keOi2kkht qbIBghqdmevhE7ItVdlvlg62n+2xBDCcEPY5/052daHchmVufRPxcp96wGRjME05 YKN6tWj59U/FdHEVGaP/l2vvtbtH68Hz4YN4/deNiikqLzsGsqtTWSQEowNtLxvn T5OBScwRV29B6HTM+e9w1QqgUI7ozO8/ohncpP8V+Ye051vTeL+GbohGJGLC3NDe bH9fGGjoK0zwrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:28 2025 by rpki-client