This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft File: GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json) Hash identifier: xyjQoWF1xIQOQIcZ50srF8brqeGVRO3nQo9hH4EGxBI= Subject key identifier: 73:AC:56:C7:FB:B3:8D:F8:B8:7F:69:85:62:B6:C5:8C:4C:7F:E0:AA Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74 Certificate issuer: /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474 Certificate serial: 019AF5AED292178BFC00D828C2D3A9D894CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft Manifest number: 0C0E Signing time: Sat 06 Dec 2025 22:01:06 +0000 Manifest this update: Sat 06 Dec 2025 22:01:06 +0000 Manifest next update: Sun 07 Dec 2025 22:01:06 +0000 Files and hashes: 1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: 1gY7lIrr1ipNkAqkhVUTS7YFWTmSYhmgQPniGl5Ctq8=) 2: ddpb_wuKnMlAr7zHGIm8AB82iUA.roa (hash: B1F9vY9BeWV/mZWmkHXRYrhz+CLltzOE+dJil3lfRag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:d2:92:17:8b:fc:00:d8:28:c2:d3:a9:d8:94:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474 Validity Not Before: Dec 6 22:01:06 2025 GMT Not After : Dec 7 22:01:06 2025 GMT Subject: CN=73ac56c7fbb38df8b87f698562b6c58c4c7fe0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:b9:d2:8e:e9:ae:83:36:fb:5d:fb:97:ea: 85:29:82:04:a1:41:6d:ef:63:8e:ff:eb:0a:88:10: 82:81:68:4f:74:ea:65:ef:94:2d:ea:3f:f8:1d:3d: cb:a9:21:f1:a9:94:a0:6c:35:67:3a:63:52:f4:a3: 2e:ec:3b:64:97:23:0a:f8:67:54:d6:eb:b0:e0:75: 00:3a:d2:09:0b:4e:5d:74:03:43:35:14:4a:00:89: 7f:73:b6:0b:39:2c:78:3c:b1:36:8d:5a:ef:f7:cf: cd:64:0b:ea:b5:08:82:4a:e1:e0:6a:a0:a9:16:01: 7c:d0:ed:91:af:ac:a4:65:d0:8d:bf:d1:3f:b8:05: 57:79:ea:fc:bd:36:59:51:2e:09:88:78:4c:46:07: f1:7c:45:36:c6:fe:86:20:d6:c3:f7:48:b9:b5:c9: a1:62:f9:b3:7f:4d:b1:d7:ab:d7:0f:90:07:3f:ff: ff:09:64:eb:86:ed:c1:2e:54:c0:20:4a:9d:ff:d1: 9e:fd:d6:23:9c:b0:43:75:03:b0:2c:3e:00:57:2e: 05:f1:df:72:5d:88:88:2b:af:1d:d5:79:74:26:8c: 4b:46:55:53:20:a1:f4:50:d1:49:8d:7b:bf:7b:ca: cd:e0:e9:57:49:b8:a1:91:b3:83:db:89:ad:78:42: 1f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AC:56:C7:FB:B3:8D:F8:B8:7F:69:85:62:B6:C5:8C:4C:7F:E0:AA X509v3 Authority Key Identifier: keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:11:41:3c:48:c6:d8:7d:03:78:a4:a8:a6:ec:1d:b3:cb:73: 58:64:65:1d:68:2d:48:aa:07:3c:f5:d2:28:e4:0e:18:c7:0e: be:e8:26:86:08:dd:b3:72:f6:31:05:a5:03:3f:e0:ee:c8:d4: fa:60:a0:a5:b0:19:e2:c1:3c:b8:fd:29:27:c9:4b:2e:32:8e: 43:89:80:5b:72:e2:51:a0:68:15:0e:ec:d7:70:1f:6e:1c:a4: 05:db:ad:b3:f0:16:ea:fb:90:74:f4:01:c2:61:ab:44:2a:ac: cc:32:ed:51:51:15:d1:06:4f:0e:5a:38:66:16:46:fb:0a:03: ef:7c:73:40:6e:8c:fa:e5:6c:56:58:72:00:8a:0b:3e:45:34: 18:ad:f4:87:3f:bc:91:c2:62:9c:63:a8:2b:53:b1:36:1c:5a: eb:e3:b0:7f:ee:ed:0b:ed:a7:d6:10:d9:8d:ed:43:56:46:ce: 5d:ae:c5:00:3d:74:7a:7b:f4:d5:b2:8c:49:e8:8b:f9:17:89: 81:c2:25:57:49:f4:2b:4e:28:86:0a:b0:73:a6:c7:1f:37:c2: c8:6c:a2:39:1e:0a:c9:12:3a:61:d4:24:6f:8c:fe:2f:77:ec: 33:2d:f0:e9:f8:11:61:78:71:04:43:d4:d1:12:45:6b:0e:ff: ca:f3:a6:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rtKSF4v8ANgowtOp2JTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YzFiYjNmYjEzNmFiZjQwN2EwYTUxYTRhMDc2NTE3NGZm ZGY0NzQwHhcNMjUxMjA2MjIwMTA2WhcNMjUxMjA3MjIwMTA2WjAzMTEwLwYDVQQD Eyg3M2FjNTZjN2ZiYjM4ZGY4Yjg3ZjY5ODU2MmI2YzU4YzRjN2ZlMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVG50o7proM2+137l+qFKYIEoUFt 72OO/+sKiBCCgWhPdOpl75Qt6j/4HT3LqSHxqZSgbDVnOmNS9KMu7DtklyMK+GdU 1uuw4HUAOtIJC05ddANDNRRKAIl/c7YLOSx4PLE2jVrv98/NZAvqtQiCSuHgaqCp FgF80O2Rr6ykZdCNv9E/uAVXeer8vTZZUS4JiHhMRgfxfEU2xv6GINbD90i5tcmh Yvmzf02x16vXD5AHP///CWTrhu3BLlTAIEqd/9Ge/dYjnLBDdQOwLD4AVy4F8d9y XYiIK68d1Xl0JoxLRlVTIKH0UNFJjXu/e8rN4OlXSbihkbOD24mteEIfRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOsVsf7s434uH9phWK2xYxMf+CqMB8GA1UdIwQY MBaAFBnBuz+xNqv0B6ClGkoHZRdP/fR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEt ZGFkMThkNWIyYTNjLzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEtZGFkMThkNWIyYTNj LzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghFBPEjG 2H0DeKSopuwds8tzWGRlHWgtSKoHPPXSKOQOGMcOvugmhgjds3L2MQWlAz/g7sjU +mCgpbAZ4sE8uP0pJ8lLLjKOQ4mAW3LiUaBoFQ7s13AfbhykBduts/AW6vuQdPQB wmGrRCqszDLtUVEV0QZPDlo4ZhZG+woD73xzQG6M+uVsVlhyAIoLPkU0GK30hz+8 kcJinGOoK1OxNhxa6+Owf+7tC+2n1hDZje1DVkbOXa7FAD10env01bKMSeiL+ReJ gcIlV0n0K04ohgqwc6bHHzfCyGyiOR4KyRI6YdQkb4z+L3fsMy3w6fgRYXhxBEPU 0RJFaw7/yvOmFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:19 2025 by rpki-client