This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft File: GCJVGHajpiZZn0Z8eucJuBwU30k.mft (raw, json) Hash identifier: 8E2LqRVqSvDZiFH7cX573pbFhTFAn4cvozw8AGlIdgo= Subject key identifier: 0E:CE:77:DD:A0:A0:B3:F6:C7:16:BF:A3:86:CE:D3:70:5D:C2:06:DC Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49 Certificate issuer: /CN=1822551876a3a626599f467c7ae709b81c14df49 Certificate serial: 019AFEB38E24EF52EC3925892969DCD9AA83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft Manifest number: 0FC3 Signing time: Mon 08 Dec 2025 16:02:51 +0000 Manifest this update: Mon 08 Dec 2025 16:02:51 +0000 Manifest next update: Tue 09 Dec 2025 16:02:51 +0000 Files and hashes: 1: GCJVGHajpiZZn0Z8eucJuBwU30k.crl (hash: WObnszwSWmlTzpPOnpJQsRMQVRd5QzcJmDSo4mR/IPA=) 2: zPNwPn3PfVOL4wGom7HVDS4IKn8.roa (hash: zy7voOzOVbZPTN+jLWETC47nf/PEol3aN9sp5d/kZvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 15:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:b3:8e:24:ef:52:ec:39:25:89:29:69:dc:d9:aa:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49 Validity Not Before: Dec 8 16:02:51 2025 GMT Not After : Dec 9 16:02:51 2025 GMT Subject: CN=0ece77dda0a0b3f6c716bfa386ced3705dc206dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:e6:89:85:31:08:c5:ff:64:ac:dc:e7:b9: 52:94:5e:d7:d0:4d:eb:a2:02:f8:58:10:2c:5b:42: 03:83:44:01:5a:cb:f8:5b:84:fc:ed:2b:77:33:22: 1c:22:fb:19:68:36:12:da:11:d6:64:5e:00:9e:92: f7:56:2b:cf:f2:ee:8b:54:e9:a2:30:3a:9b:13:86: b1:c1:b8:37:57:fb:c4:6b:76:d1:bc:6c:c9:68:18: 68:88:95:f6:5c:a4:47:36:24:b7:72:b6:d9:ce:c2: d2:92:4b:12:ed:e7:83:fd:bc:13:25:16:5f:3d:27: 23:ef:d6:de:25:c5:15:26:3f:16:23:cd:0f:4c:9d: 3e:7f:36:cf:e7:02:84:3b:71:22:b5:be:4b:33:b3: d7:6a:62:28:4f:bd:0a:3d:fd:59:1b:56:c3:2d:95: 17:8c:cc:27:39:5b:ca:5b:b1:8f:55:7e:07:31:a0: ff:33:10:8e:8f:e0:93:0a:0f:63:11:86:ec:8c:dd: 8d:11:66:e3:e9:49:01:9b:d2:05:50:0f:b4:10:99: 73:a4:62:3f:0d:7e:18:8a:58:95:70:43:39:db:f6: 30:a5:c4:0c:e5:91:84:39:c6:13:f9:26:3e:8d:3a: 13:78:67:1e:a9:7f:6a:a8:36:b9:63:85:6c:b0:81: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CE:77:DD:A0:A0:B3:F6:C7:16:BF:A3:86:CE:D3:70:5D:C2:06:DC X509v3 Authority Key Identifier: keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:78:d7:2f:d5:80:51:7c:6a:2b:28:e7:2c:ae:68:4d:88:ce: 5b:44:38:00:67:c6:52:7a:2d:3c:44:1c:0c:83:a2:7c:4f:ce: 71:5d:b2:e6:83:c2:c3:bb:89:6f:5a:d8:39:9c:6b:7e:26:d7: c5:58:8a:01:09:83:b1:c0:b7:65:63:4c:29:73:16:e0:fa:18: e7:06:6b:5c:f9:6b:63:eb:fc:5a:18:a0:1f:eb:76:90:8c:e4: bd:47:c1:44:5a:87:f4:4f:7c:f2:f9:29:2c:81:a9:03:97:cf: b1:db:e9:8a:13:62:0d:9e:95:f2:f0:ed:c4:a3:66:6d:23:10: 7c:64:fd:33:ae:73:33:15:7b:d2:44:14:1c:22:4c:5b:cd:a3: d1:9b:de:b7:69:ab:44:91:b3:e5:a5:fc:23:a2:ae:ea:94:a4: 1d:ef:c7:8c:de:0a:cb:4d:68:80:70:be:d0:6e:90:1e:0e:1e: d9:9d:6c:33:5c:07:50:f4:36:f4:98:fa:d7:e8:24:7b:88:51: 5a:58:18:d7:0f:bd:a5:ca:94:83:11:f8:bf:91:d6:8f:e5:13: e3:81:f0:95:60:b5:1e:27:19:a2:82:ab:93:05:f5:62:6d:a5: 0f:88:a5:b7:7c:aa:2e:4a:81:88:47:20:ff:38:e7:f9:d4:96: 60:1e:28:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr+s44k71LsOSWJKWnc2aqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MjI1NTE4NzZhM2E2MjY1OTlmNDY3YzdhZTcwOWI4MWMx NGRmNDkwHhcNMjUxMjA4MTYwMjUxWhcNMjUxMjA5MTYwMjUxWjAzMTEwLwYDVQQD EygwZWNlNzdkZGEwYTBiM2Y2YzcxNmJmYTM4NmNlZDM3MDVkYzIwNmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyDmiYUxCMX/ZKzc57lSlF7X0E3r ogL4WBAsW0IDg0QBWsv4W4T87St3MyIcIvsZaDYS2hHWZF4AnpL3VivP8u6LVOmi MDqbE4axwbg3V/vEa3bRvGzJaBhoiJX2XKRHNiS3crbZzsLSkksS7eeD/bwTJRZf PScj79beJcUVJj8WI80PTJ0+fzbP5wKEO3Eitb5LM7PXamIoT70KPf1ZG1bDLZUX jMwnOVvKW7GPVX4HMaD/MxCOj+CTCg9jEYbsjN2NEWbj6UkBm9IFUA+0EJlzpGI/ DX4YiliVcEM52/YwpcQM5ZGEOcYT+SY+jToTeGceqX9qqDa5Y4VssIHW0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7Od92goLP2xxa/o4bO03BdwgbcMB8GA1UdIwQY MBaAFBgiVRh2o6YmWZ9GfHrnCbgcFN9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0NKVkdIYWpwaVpabjBaOGV1Y0p1QndVMzBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iYzY2OTQtMTQxNy00OWZlLWI0YzUt NDEyYjQ3NjdhYzQ1LzEvR0NKVkdIYWpwaVpabjBaOGV1Y0p1QndVMzBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iYzY2OTQtMTQxNy00OWZlLWI0YzUtNDEyYjQ3NjdhYzQ1 LzEvR0NKVkdIYWpwaVpabjBaOGV1Y0p1QndVMzBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXjXL9WA UXxqKyjnLK5oTYjOW0Q4AGfGUnotPEQcDIOifE/OcV2y5oPCw7uJb1rYOZxrfibX xViKAQmDscC3ZWNMKXMW4PoY5wZrXPlrY+v8WhigH+t2kIzkvUfBRFqH9E988vkp LIGpA5fPsdvpihNiDZ6V8vDtxKNmbSMQfGT9M65zMxV70kQUHCJMW82j0Zvet2mr RJGz5aX8I6Ku6pSkHe/HjN4Ky01ogHC+0G6QHg4e2Z1sM1wHUPQ29Jj61+gke4hR WlgY1w+9pcqUgxH4v5HWj+UT44HwlWC1HicZooKrkwX1Ym2lD4ilt3yqLkqBiEcg /zjn+dSWYB4o7w== -----END CERTIFICATE-----Generated at Mon Dec 8 17:22:57 2025 by rpki-client