This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft File: gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft (raw, json) Hash identifier: TYcH+HVz9xFMdK2IZUQG9rb+wNVRXTKHoBcRwTrCLeA= Subject key identifier: 1B:0E:EC:93:63:FE:13:33:1A:AB:2B:3A:8A:30:85:E0:91:07:DC:C0 Authority key identifier: 80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56 Certificate issuer: /CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56 Certificate serial: 019AF1D24C8DFD53C457FF7E142FDD1D9EBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft Manifest number: 5C Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl (hash: TbQaJ+m99LF7/8CLmqkH1CVhzD83ngaGJsxjQaL/wVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4c:8d:fd:53:c4:57:ff:7e:14:2f:dd:1d:9e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56 Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=1b0eec9363fe13331aab2b3a8a3085e09107dcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:7a:c8:42:4f:f5:03:52:e8:41:22:c6:26: 07:1c:fb:c1:cb:dd:46:67:75:3f:51:86:f8:13:fc: b7:64:fc:22:81:a4:ef:ae:d5:18:94:b2:5c:d8:cf: 16:25:4e:67:82:45:c5:03:da:bb:56:52:b9:e6:de: 1b:d9:5b:ea:55:11:bd:ea:79:cf:76:28:c1:27:18: 2e:8a:5c:03:07:44:1f:b3:43:3f:98:b0:4e:93:e7: d5:f7:b2:8d:5d:1c:1d:6f:49:b9:eb:f5:6f:e5:45: a4:14:58:d6:8f:6d:e0:12:97:0d:3e:4f:27:f5:9f: 95:a4:c7:b9:57:3c:f8:9f:53:52:0b:63:b1:4c:ea: 65:7e:b0:b4:d3:d5:06:ea:b1:8c:3e:53:95:4b:8a: 1f:02:1e:26:93:3a:85:e9:67:54:9e:b3:b5:de:5f: e9:cb:b2:2c:b0:54:2d:60:ba:0b:d8:85:a5:f8:25: 9c:b9:50:e7:6e:e2:08:23:eb:6d:12:16:44:d6:ea: c7:86:4f:dc:f0:44:b4:ab:fd:86:35:89:6e:f4:c4: c6:95:01:3f:05:b1:95:bc:be:e9:f4:f2:9a:c4:8b: 8c:c6:d6:40:65:b8:97:d7:aa:91:65:3e:5a:af:3e: 2c:2c:1d:e0:ed:01:29:c5:6b:d6:9f:8d:08:4b:66: 0b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0E:EC:93:63:FE:13:33:1A:AB:2B:3A:8A:30:85:E0:91:07:DC:C0 X509v3 Authority Key Identifier: keyid:80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:63:b5:21:83:e5:3a:70:e4:91:9a:aa:1d:6b:3c:8d:1e:e3: 45:30:02:7b:d6:54:94:fa:d2:46:a9:bd:77:0a:94:fb:7a:06: 93:e0:c3:a2:61:b9:ec:4a:34:29:73:e4:74:19:7f:62:13:33: 4e:18:cb:57:de:ae:40:32:f2:8c:15:3c:b7:d7:a5:3a:66:55: cf:c3:bc:46:9c:c1:3f:71:cd:25:ce:4b:c6:39:e6:f9:d4:27: 31:db:21:a2:b1:a8:91:2d:7f:d5:2e:35:5b:4c:f8:22:a8:9b: fe:80:31:f4:c1:23:dc:57:cb:ae:9f:0f:62:8d:f2:38:b7:49: 8e:56:8d:38:d3:e0:59:60:8f:55:09:9d:7c:58:05:6e:ca:b6: 9d:f0:66:f9:9a:17:5c:d9:2b:5c:00:93:6c:b9:66:ce:99:32: d4:08:9a:e5:77:40:35:4e:91:89:98:ad:d3:a5:98:68:85:59: 78:4d:86:90:2d:c7:51:a4:ae:02:61:e8:6f:33:29:b5:5c:32: 55:8d:9b:6a:91:57:12:9b:69:63:2b:9b:f6:41:a3:70:4f:6c: 20:43:d6:09:7a:9d:26:b8:97:da:19:89:d9:7d:c7:b2:b4:88: f3:17:1f:e6:c8:5b:c7:f7:86:00:36:d3:10:88:18:0b:0a:42: fa:87:4c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kyN/VPEV/9+FC/dHZ6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMmQyZjg1MDVlMmJhZWVkZjdlMDUwZDI3OTQyZjU0YWM2 YTBhNTYwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD EygxYjBlZWM5MzYzZmUxMzMzMWFhYjJiM2E4YTMwODVlMDkxMDdkY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw256yEJP9QNS6EEixiYHHPvBy91G Z3U/UYb4E/y3ZPwigaTvrtUYlLJc2M8WJU5ngkXFA9q7VlK55t4b2VvqVRG96nnP dijBJxguilwDB0Qfs0M/mLBOk+fV97KNXRwdb0m56/Vv5UWkFFjWj23gEpcNPk8n 9Z+VpMe5Vzz4n1NSC2OxTOplfrC009UG6rGMPlOVS4ofAh4mkzqF6WdUnrO13l/p y7IssFQtYLoL2IWl+CWcuVDnbuIII+ttEhZE1urHhk/c8ES0q/2GNYlu9MTGlQE/ BbGVvL7p9PKaxIuMxtZAZbiX16qRZT5arz4sLB3g7QEpxWvWn40IS2YL3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsO7JNj/hMzGqsrOoowheCRB9zAMB8GA1UdIwQY MBaAFIAtL4UF4rru334FDSeUL1SsagpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0MwdmhRWGl1dTdmZmdVTko1UXZWS3hxQ2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jYTdkODAtYjNhMi00OWRjLTk5OWIt YWQyMDFmMWViMTk0LzEvZ0MwdmhRWGl1dTdmZmdVTko1UXZWS3hxQ2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jYTdkODAtYjNhMi00OWRjLTk5OWItYWQyMDFmMWViMTk0 LzEvZ0MwdmhRWGl1dTdmZmdVTko1UXZWS3hxQ2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWO1IYPl OnDkkZqqHWs8jR7jRTACe9ZUlPrSRqm9dwqU+3oGk+DDomG57Eo0KXPkdBl/YhMz ThjLV96uQDLyjBU8t9elOmZVz8O8RpzBP3HNJc5Lxjnm+dQnMdshorGokS1/1S41 W0z4Iqib/oAx9MEj3FfLrp8PYo3yOLdJjlaNONPgWWCPVQmdfFgFbsq2nfBm+ZoX XNkrXACTbLlmzpky1Aia5XdANU6RiZit06WYaIVZeE2GkC3HUaSuAmHobzMptVwy VY2bapFXEptpYyub9kGjcE9sIEPWCXqdJriX2hmJ2X3HsrSI8xcf5shbx/eGADbT EIgYCwpC+odMxw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:39 2025 by rpki-client