This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft File: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft (raw, json) Hash identifier: /yDmUVbXO8n4PBozATcsA+HE4pNu43gTSY1UQpI1AoU= Subject key identifier: C8:3D:87:44:B3:BA:B4:D0:85:AB:BB:99:98:6D:31:FB:A1:02:F7:F4 Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4 Certificate issuer: /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4 Certificate serial: 019AF2AD4D57EAE2A892EF1AB078D663DF99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft Manifest number: 0BAB Signing time: Sat 06 Dec 2025 08:00:35 +0000 Manifest this update: Sat 06 Dec 2025 08:00:35 +0000 Manifest next update: Sun 07 Dec 2025 08:00:35 +0000 Files and hashes: 1: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl (hash: hulOSJ+v8UmTRHdctvMY7pqAsh1bbQ9FzmJyyIontvg=) 2: vczBs4Goi10ecTWa3tK1YBxJ8fE.roa (hash: gc2DMvIse8l38XyQwNHPrj9Yz7w21wzufb/ypACqbDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4d:57:ea:e2:a8:92:ef:1a:b0:78:d6:63:df:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4 Validity Not Before: Dec 6 08:00:35 2025 GMT Not After : Dec 7 08:00:35 2025 GMT Subject: CN=c83d8744b3bab4d085abbb99986d31fba102f7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e1:6b:b1:a7:12:98:9d:88:35:15:4e:92:ac: 1a:e3:83:48:b1:b7:f0:eb:d3:65:1a:d8:97:f2:1f: 99:1d:db:b5:d8:ec:e1:2e:cf:89:c6:ad:61:80:91: 81:1d:d8:db:0d:97:5e:1b:29:e7:ce:15:6b:96:bb: b4:bd:89:49:65:09:d4:57:67:b9:29:c5:b5:bd:ef: 37:b7:74:d7:17:25:e8:48:dd:9c:85:1a:20:b3:cf: 06:f5:19:27:cd:92:f8:c2:8c:d4:ff:2e:46:84:09: 2c:90:5f:7a:49:e0:cb:76:ea:85:b0:90:57:66:64: 6a:a1:f7:c2:45:91:a8:92:9c:9b:bb:3f:a1:02:17: fd:18:e0:fe:71:0e:d0:be:97:cc:ba:1d:21:f3:7c: ba:a0:d2:f1:a8:6c:71:14:22:8c:8b:bb:3a:e3:05: d2:35:1a:51:5a:a1:58:7f:08:d2:fc:1e:c9:10:79: 2c:9d:9c:60:7e:63:68:78:82:61:dd:1e:16:66:8d: 1e:7e:97:31:a9:ec:e0:0a:64:b1:75:57:45:25:cc: 23:20:61:11:b1:d0:65:33:2c:9a:9a:2e:b0:26:cd: d2:41:59:a0:1e:e7:3a:96:59:b4:f1:5a:48:dc:e6: c0:c1:7c:03:ef:66:35:d5:a2:90:ce:a0:a4:84:cd: e1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3D:87:44:B3:BA:B4:D0:85:AB:BB:99:98:6D:31:FB:A1:02:F7:F4 X509v3 Authority Key Identifier: keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:29:68:bb:b9:17:0d:a6:f7:05:f0:ac:17:e8:22:f0:2c:40: 60:b8:68:bb:e9:c9:1c:c8:4b:b5:a8:23:da:75:18:59:a4:4f: de:d3:aa:1a:ee:ce:9e:4b:9a:c5:19:17:ac:0d:82:ca:a3:e7: f9:6e:8c:f0:cd:ce:37:9b:24:85:48:d3:31:44:d1:be:03:65: fb:94:a5:db:b8:40:19:0a:dd:a7:6c:44:d9:7b:f2:55:96:5d: 79:b1:48:60:f3:0f:1f:c5:8f:bb:e8:42:00:6a:30:af:63:ae: 5d:92:c2:cb:84:16:ba:e1:22:13:c3:ef:ae:e5:a2:cb:24:16: c3:85:31:ed:3d:12:09:aa:55:41:ed:8b:ea:08:35:54:2e:52: 86:4c:db:02:3a:c2:9d:2b:63:af:ec:99:a6:92:06:d2:84:cd: 1f:1d:98:d9:24:58:62:10:aa:03:c0:20:ee:c8:22:1f:3a:3b: 50:d6:c2:83:3e:17:ca:73:55:ab:fb:66:86:77:44:15:b2:61: c9:bb:b4:4a:87:23:ea:a5:0b:11:51:64:e9:cc:7f:f7:69:4e: a5:8d:3c:26:0c:dd:65:a0:ac:de:49:f8:8c:3e:42:e2:69:0e: 51:f0:61:fd:33:18:e5:ec:a7:b6:6c:81:3c:0f:8f:e7:29:75: c2:3d:7f:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrU1X6uKoku8asHjWY9+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2U0ODhlZmEzYzE4NGY0YWNiMmZjMzBlYjFhNzFmYTEx NmY5YjQwHhcNMjUxMjA2MDgwMDM1WhcNMjUxMjA3MDgwMDM1WjAzMTEwLwYDVQQD EyhjODNkODc0NGIzYmFiNGQwODVhYmJiOTk5ODZkMzFmYmExMDJmN2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOFrsacSmJ2INRVOkqwa44NIsbfw 69NlGtiX8h+ZHdu12OzhLs+Jxq1hgJGBHdjbDZdeGynnzhVrlru0vYlJZQnUV2e5 KcW1ve83t3TXFyXoSN2chRogs88G9RknzZL4wozU/y5GhAkskF96SeDLduqFsJBX ZmRqoffCRZGokpybuz+hAhf9GOD+cQ7QvpfMuh0h83y6oNLxqGxxFCKMi7s64wXS NRpRWqFYfwjS/B7JEHksnZxgfmNoeIJh3R4WZo0efpcxqezgCmSxdVdFJcwjIGER sdBlMyyami6wJs3SQVmgHuc6llm08VpI3ObAwXwD72Y11aKQzqCkhM3hfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMg9h0SzurTQhau7mZhtMfuhAvf0MB8GA1UdIwQY MBaAFBnOSI76PBhPSssvww6xpx+hFvm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2M1SWp2bzhHRTlLeXlfRERyR25INkVXLWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZmVmNzEtOTIyZS00NDQ4LWIzN2Qt Zjc0MGI5ZTFjNDgwLzEvR2M1SWp2bzhHRTlLeXlfRERyR25INkVXLWJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wZmVmNzEtOTIyZS00NDQ4LWIzN2QtZjc0MGI5ZTFjNDgw LzEvR2M1SWp2bzhHRTlLeXlfRERyR25INkVXLWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQClou7kX Dab3BfCsF+gi8CxAYLhou+nJHMhLtagj2nUYWaRP3tOqGu7OnkuaxRkXrA2CyqPn +W6M8M3ON5skhUjTMUTRvgNl+5Sl27hAGQrdp2xE2XvyVZZdebFIYPMPH8WPu+hC AGowr2OuXZLCy4QWuuEiE8PvruWiyyQWw4Ux7T0SCapVQe2L6gg1VC5ShkzbAjrC nStjr+yZppIG0oTNHx2Y2SRYYhCqA8Ag7sgiHzo7UNbCgz4XynNVq/tmhndEFbJh ybu0Socj6qULEVFk6cx/92lOpY08JgzdZaCs3kn4jD5C4mkOUfBh/TMY5eyntmyB PA+P5yl1wj1/WQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:10 2025 by rpki-client