This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft File: gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json) Hash identifier: j5IUyS07ILYUNP0Uc3bLDUjtx8qthjW+qV+2PIQ0S8k= Subject key identifier: AD:EB:02:51:9F:76:85:92:02:2D:55:D1:AE:76:0C:C2:FC:04:54:90 Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26 Certificate issuer: /CN=81c00cc8c73d1141c89254ed556a8d012ca90226 Certificate serial: 019AF509951C0519214CF772B8F439D25423 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft Manifest number: 09B0 Signing time: Sat 06 Dec 2025 19:00:37 +0000 Manifest this update: Sat 06 Dec 2025 19:00:37 +0000 Manifest next update: Sun 07 Dec 2025 19:00:37 +0000 Files and hashes: 1: Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa (hash: A6c2c+PXtuhOYqewWMvzWTg68sLONrRYQPMKhm+zXUU=) 2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: 5cUf1ROEFKtAtTuqa/VboQdUpWSoPI0FUEBmMjUDgwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:95:1c:05:19:21:4c:f7:72:b8:f4:39:d2:54:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226 Validity Not Before: Dec 6 19:00:37 2025 GMT Not After : Dec 7 19:00:37 2025 GMT Subject: CN=adeb02519f768592022d55d1ae760cc2fc045490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:77:64:66:3d:67:04:b4:6f:99:ec:78:db:d5: 3b:8c:f1:c9:5b:d5:c0:39:c9:86:bc:67:91:f9:2f: 00:db:fd:08:32:67:c2:19:6b:e2:fa:1d:f9:35:13: 36:e0:2f:7b:2a:19:4f:e9:24:2d:8d:31:f1:d8:b2: 1d:99:21:06:12:20:fd:fe:64:a9:16:8e:9f:93:e0: dd:2b:4b:de:fc:e5:1c:44:7f:9b:64:8a:af:4f:41: 4e:2c:49:6c:f3:25:76:f1:85:f5:5b:10:a0:66:a8: 44:4c:49:d5:98:16:c3:2e:68:07:c1:99:ea:a0:18: bc:ba:e8:18:6d:b2:be:b6:9d:c8:dc:5d:de:50:35: c0:12:5c:a7:d7:f4:2c:db:29:64:d3:46:af:9d:c4: 6d:09:aa:c2:f4:54:87:b0:68:54:8e:fb:59:43:f6: eb:34:51:4e:3e:a3:b3:27:3d:79:60:18:0b:9b:b5: ea:e3:e0:ee:22:1f:f7:62:2c:7d:5c:7b:92:21:04: 00:c0:a7:f7:a0:c7:e6:0b:87:c0:d7:40:d2:40:e7: 84:b7:66:ae:c2:e0:6d:9d:78:82:98:c2:4f:6d:48: e2:72:f5:d6:9e:a2:8c:4e:69:58:43:53:89:79:45: 33:e5:5f:e2:be:39:01:7f:9f:cb:45:01:48:00:cb: 29:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EB:02:51:9F:76:85:92:02:2D:55:D1:AE:76:0C:C2:FC:04:54:90 X509v3 Authority Key Identifier: keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ed:4d:85:27:26:d2:db:06:ae:46:17:29:fc:c9:70:a3:5d: 06:51:db:ca:dc:9a:45:d1:12:0a:a9:ce:b6:90:f4:b6:ed:f8: 87:b9:5a:a4:8c:ae:56:09:90:36:f7:41:37:c7:c1:d4:31:94: 0f:ef:d4:84:54:a2:ab:b6:41:b5:b9:db:e9:17:9a:e9:6d:4d: 92:bb:e3:b0:83:38:59:d5:bb:96:1d:74:f4:32:d7:e9:e5:e1: ab:ef:dc:dc:3e:ae:30:fc:f2:bb:2b:24:d7:13:47:7b:a4:c1: 8c:a0:e6:13:90:10:fc:75:a2:2f:ac:04:48:88:18:a7:d5:ba: ea:81:8b:51:02:5e:7b:28:c9:cc:38:a5:7b:51:bd:47:91:c0: e1:6c:ff:13:f4:f0:dd:11:30:99:f0:99:bf:c9:01:96:1d:39: c5:12:e8:ab:0c:47:a1:66:73:7f:03:d9:52:fd:f8:21:a2:c1: 23:fd:36:cf:ea:ec:8a:83:b5:b6:2c:76:75:93:05:44:bb:71: 05:7f:26:41:11:2a:be:b4:0b:b7:f7:d4:5c:1e:22:b2:ad:e3: 83:84:2a:15:9f:3d:a5:07:65:0b:ec:37:21:d3:9e:4a:01:3b: 26:cb:77:b1:9f:b4:37:58:b9:3f:72:eb:75:e4:51:49:7e:62: e3:73:c2:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZUcBRkhTPdyuPQ50lQjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzAwY2M4YzczZDExNDFjODkyNTRlZDU1NmE4ZDAxMmNh OTAyMjYwHhcNMjUxMjA2MTkwMDM3WhcNMjUxMjA3MTkwMDM3WjAzMTEwLwYDVQQD EyhhZGViMDI1MTlmNzY4NTkyMDIyZDU1ZDFhZTc2MGNjMmZjMDQ1NDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HdkZj1nBLRvmex429U7jPHJW9XA OcmGvGeR+S8A2/0IMmfCGWvi+h35NRM24C97KhlP6SQtjTHx2LIdmSEGEiD9/mSp Fo6fk+DdK0ve/OUcRH+bZIqvT0FOLEls8yV28YX1WxCgZqhETEnVmBbDLmgHwZnq oBi8uugYbbK+tp3I3F3eUDXAElyn1/Qs2ylk00avncRtCarC9FSHsGhUjvtZQ/br NFFOPqOzJz15YBgLm7Xq4+DuIh/3Yix9XHuSIQQAwKf3oMfmC4fA10DSQOeEt2au wuBtnXiCmMJPbUjicvXWnqKMTmlYQ1OJeUUz5V/ivjkBf5/LRQFIAMspTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3rAlGfdoWSAi1V0a52DML8BFSQMB8GA1UdIwQY MBaAFIHADMjHPRFByJJU7VVqjQEsqQImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUt OTA1Mjc2YzVjNDE0LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUtOTA1Mjc2YzVjNDE0 LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAO1NhScm 0tsGrkYXKfzJcKNdBlHbytyaRdESCqnOtpD0tu34h7lapIyuVgmQNvdBN8fB1DGU D+/UhFSiq7ZBtbnb6Rea6W1NkrvjsIM4WdW7lh109DLX6eXhq+/c3D6uMPzyuysk 1xNHe6TBjKDmE5AQ/HWiL6wESIgYp9W66oGLUQJeeyjJzDile1G9R5HA4Wz/E/Tw 3REwmfCZv8kBlh05xRLoqwxHoWZzfwPZUv34IaLBI/02z+rsioO1tix2dZMFRLtx BX8mQREqvrQLt/fUXB4isq3jg4QqFZ89pQdlC+w3IdOeSgE7Jst3sZ+0N1i5P3Lr deRRSX5i43PCcg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:13 2025 by rpki-client