This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft File: gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json) Hash identifier: /kiKnaRPipKrJrDKXp87rfCXMp6TujFMd3je8ZBXi5c= Subject key identifier: FF:D4:43:81:5E:5E:D8:F7:83:32:FC:47:C4:47:F2:FD:D4:D5:83:BB Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 Certificate issuer: /CN=81c11512eee8fed91c422f33b658d68bc34eb780 Certificate serial: 019AF3C0A6774B494ED18EC87B1447D2E714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft Manifest number: 0B12 Signing time: Sat 06 Dec 2025 13:01:20 +0000 Manifest this update: Sat 06 Dec 2025 13:01:20 +0000 Manifest next update: Sun 07 Dec 2025 13:01:20 +0000 Files and hashes: 1: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: Ad0S88bZ4OkUsrdGL2eXvXge6ytvKTsdH4tBTScC0m0=) 2: oBBYy0ld98gJluOgW3OE5ry-1bI.roa (hash: cDSWMJxoBmliysmmQ82PR5LMpFN2xHzw2hwrTiHsQ+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:a6:77:4b:49:4e:d1:8e:c8:7b:14:47:d2:e7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780 Validity Not Before: Dec 6 13:01:20 2025 GMT Not After : Dec 7 13:01:20 2025 GMT Subject: CN=ffd443815e5ed8f78332fc47c447f2fdd4d583bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:31:fb:36:cd:a4:29:92:57:79:8b:cb:55: be:72:45:05:dc:d8:99:6c:04:4a:95:41:0f:a8:72: 93:23:b9:aa:f4:d8:b4:82:b6:9e:38:95:4b:f9:32: 5f:76:12:5e:67:91:a2:87:09:9d:7b:17:48:04:1f: fe:cf:f4:ca:83:bd:69:87:a8:c6:35:b6:22:68:42: 05:9a:ef:c0:33:87:ad:cf:69:28:8f:04:02:cd:4d: 40:64:55:a7:67:9a:9a:b3:18:65:4a:ca:b4:23:c4: b0:fb:9a:34:fd:de:e5:c8:38:10:46:1e:4b:34:2d: da:ea:f4:e5:a0:86:30:70:81:e1:fd:a4:d6:43:17: 95:32:c0:04:d4:5b:a9:78:f5:89:71:a3:c7:9a:f4: a8:7d:b1:3c:20:38:8b:59:cd:03:b6:aa:e1:6a:28: 63:87:3e:32:c3:8d:f4:a0:50:c3:fd:84:0a:d8:b5: 2f:2e:54:0c:55:2c:82:11:b0:91:59:04:2f:a3:f9: 37:0e:14:15:e9:30:36:40:b7:e0:2a:8b:66:b1:8f: 2f:e3:86:b2:df:dc:2b:99:6a:5d:1b:9b:5e:cd:17: a6:f4:08:1b:84:22:1d:ff:49:48:41:f2:4e:d6:e5: 10:4b:74:f7:02:e0:72:ae:ad:5f:a9:99:f1:70:66: a6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D4:43:81:5E:5E:D8:F7:83:32:FC:47:C4:47:F2:FD:D4:D5:83:BB X509v3 Authority Key Identifier: keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:03:f9:d2:10:fe:24:53:11:cf:15:41:80:d3:e0:59:d8:2d: 3e:e4:78:75:70:1a:be:c9:47:0e:d1:3f:10:a7:51:1e:53:e6: 8a:3a:91:81:cd:f9:c5:ef:03:f7:26:a6:94:9b:99:e5:27:92: 9a:c0:ea:16:02:8b:98:e2:f9:09:15:0d:1c:3b:ff:3a:38:f5: be:61:a4:65:3b:12:0a:ee:f7:f3:bd:71:96:91:f7:e5:cc:8b: d5:68:1a:c2:20:45:41:b5:37:e7:b1:b2:ea:fa:59:78:4a:ad: c7:42:d8:a1:1e:37:d6:31:2b:84:c3:03:d9:77:08:fd:aa:d0: 12:30:76:e8:05:6a:81:d8:9b:36:63:ac:a1:86:74:a4:19:6e: 5d:09:27:6f:99:9e:a8:e3:c5:c0:bd:fa:4f:4b:4b:69:ed:ea: e6:6d:fc:3c:97:16:68:f8:f1:fe:9a:8b:69:00:85:bb:73:ce: 84:78:e9:20:01:ca:f6:b6:d3:b9:7f:7a:fa:62:92:05:fb:c4: 84:78:a9:77:bc:99:c0:ec:a0:ea:c8:80:1c:68:84:3f:83:37: 00:e0:c7:3a:ce:48:0f:e2:c0:94:50:68:2a:5d:bd:08:e1:2d: 76:a8:64:ea:0d:cf:e2:4f:cc:58:0e:11:50:01:74:b8:9f:96: 52:15:7d:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwKZ3S0lO0Y7IexRH0ucUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzExNTEyZWVlOGZlZDkxYzQyMmYzM2I2NThkNjhiYzM0 ZWI3ODAwHhcNMjUxMjA2MTMwMTIwWhcNMjUxMjA3MTMwMTIwWjAzMTEwLwYDVQQD EyhmZmQ0NDM4MTVlNWVkOGY3ODMzMmZjNDdjNDQ3ZjJmZGQ0ZDU4M2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6wx+zbNpCmSV3mLy1W+ckUF3NiZ bARKlUEPqHKTI7mq9Ni0graeOJVL+TJfdhJeZ5GihwmdexdIBB/+z/TKg71ph6jG NbYiaEIFmu/AM4etz2kojwQCzU1AZFWnZ5qasxhlSsq0I8Sw+5o0/d7lyDgQRh5L NC3a6vTloIYwcIHh/aTWQxeVMsAE1FupePWJcaPHmvSofbE8IDiLWc0Dtqrhaihj hz4yw430oFDD/YQK2LUvLlQMVSyCEbCRWQQvo/k3DhQV6TA2QLfgKotmsY8v44ay 39wrmWpdG5tezRem9AgbhCId/0lIQfJO1uUQS3T3AuByrq1fqZnxcGamMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/UQ4FeXtj3gzL8R8RH8v3U1YO7MB8GA1UdIwQY MBaAFIHBFRLu6P7ZHEIvM7ZY1ovDTreAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUt ZTIzYWQ3OTliMWQxLzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUtZTIzYWQ3OTliMWQx LzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQP50hD+ JFMRzxVBgNPgWdgtPuR4dXAavslHDtE/EKdRHlPmijqRgc35xe8D9yamlJuZ5SeS msDqFgKLmOL5CRUNHDv/Ojj1vmGkZTsSCu73871xlpH35cyL1WgawiBFQbU357Gy 6vpZeEqtx0LYoR431jErhMMD2XcI/arQEjB26AVqgdibNmOsoYZ0pBluXQknb5me qOPFwL36T0tLae3q5m38PJcWaPjx/pqLaQCFu3POhHjpIAHK9rbTuX96+mKSBfvE hHipd7yZwOyg6siAHGiEP4M3AODHOs5ID+LAlFBoKl29COEtdqhk6g3P4k/MWA4R UAF0uJ+WUhV9Eg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:19 2025 by rpki-client