This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft File: gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft (raw, json) Hash identifier: pbNK1GG2CsvvE4wvA1HilgMjM4oy5Rqxcdviqwqws2k= Subject key identifier: 1E:31:F2:30:67:30:7E:14:D0:82:A4:36:9D:5A:78:08:95:16:9A:29 Authority key identifier: 81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5 Certificate issuer: /CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5 Certificate serial: 019B2176BF3B06376FB39B7F9D974EB69362 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft Manifest number: 10E8 Signing time: Mon 15 Dec 2025 10:03:08 +0000 Manifest this update: Mon 15 Dec 2025 10:03:08 +0000 Manifest next update: Tue 16 Dec 2025 10:03:08 +0000 Files and hashes: 1: gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl (hash: rYVzLvS5IFbPf2OV7B79jsn3C5DS6T1LiwjRCjrA8mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:bf:3b:06:37:6f:b3:9b:7f:9d:97:4e:b6:93:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5 Validity Not Before: Dec 15 10:03:08 2025 GMT Not After : Dec 16 10:03:08 2025 GMT Subject: CN=1e31f23067307e14d082a4369d5a780895169a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f7:dd:f8:a6:3a:e9:b1:25:77:7a:e1:a8:c5: 36:38:95:2c:b9:45:cf:d3:8f:62:f0:16:b4:0d:8a: 66:91:e9:39:74:a3:99:9f:87:8f:74:85:63:92:95: 14:85:71:ba:85:88:d3:3d:5f:7b:a9:a9:46:b9:b4: fd:71:7d:89:4d:bc:4a:a7:11:a5:c2:1a:e7:df:0d: 83:23:dc:1d:01:a9:02:d9:06:33:15:85:06:21:a0: 56:a6:ca:82:c6:a0:7a:a8:ee:ff:e4:b7:ea:ce:8f: a4:e3:7e:6f:66:69:40:4b:db:12:54:2b:5b:11:1d: 6a:8a:4f:d6:61:5f:83:87:89:c6:39:73:23:00:ea: 4d:b5:8d:73:f2:1c:ed:46:19:b8:1c:f7:80:f5:09: 00:59:da:83:d9:b7:67:4c:5b:54:33:84:9b:3c:ea: 87:5a:c9:c6:d9:93:2a:4a:de:93:d7:1b:38:fa:a5: 83:52:db:4f:64:01:2f:e2:58:23:6b:16:9b:de:1e: 98:90:0b:a0:56:f6:65:db:07:7b:27:30:e1:45:e7: b3:17:41:2c:09:01:aa:5e:42:9b:f0:e9:ca:94:94: 93:1e:a1:62:39:74:a2:b6:cf:bb:b7:76:36:2c:0d: 13:ca:77:83:60:15:d2:4e:78:90:7e:22:c5:3b:12: d1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:31:F2:30:67:30:7E:14:D0:82:A4:36:9D:5A:78:08:95:16:9A:29 X509v3 Authority Key Identifier: keyid:81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3b:ac:da:dd:c0:b9:2d:6e:ca:21:11:a3:b8:fd:64:98:9a: 91:3d:03:56:7d:f7:10:cb:ca:28:70:11:2b:2f:e8:f1:2d:df: c6:cc:b3:fd:cd:86:2a:b9:38:43:30:9e:2d:1f:23:fe:a4:42: 0d:a1:b0:71:99:60:47:8f:c4:4d:48:d1:8a:2b:d1:73:87:c0: 47:2e:39:d4:e0:d4:42:c5:59:b3:07:c7:69:e6:a0:5c:42:ce: e9:be:c5:bf:08:69:b5:9d:85:e5:46:bc:98:22:a3:6e:a5:5c: fa:5d:80:2a:cc:46:40:1e:c0:78:23:15:c3:a7:9f:f9:c5:a9: a2:8e:66:3f:cd:36:e9:d9:cf:66:4d:c0:38:60:c5:36:6b:be: f6:b9:7f:5d:aa:0c:b8:de:d1:3f:97:2e:4b:52:44:48:12:1f: a3:b8:9c:19:9e:d1:2a:0f:39:67:2c:e9:e3:23:a9:a1:f1:15: 92:9a:f7:b0:93:3c:7a:0c:4b:f6:ac:28:b8:10:98:33:23:91: 4c:54:e1:8d:87:96:71:23:cf:be:13:15:b3:4c:bc:57:51:27: b0:e0:a2:f5:47:33:3d:9f:f4:4d:51:9d:0f:29:1b:67:4a:b5: 7f:da:d7:bf:84:27:07:f3:2c:e1:3d:d6:01:d0:16:7f:86:7f: 41:77:fc:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdr87Bjdvs5t/nZdOtpNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxY2QwMjYyYTIyMWMzNWE2N2NmMTczYTYwZDFlY2Q5YWZh YmRkYjUwHhcNMjUxMjE1MTAwMzA4WhcNMjUxMjE2MTAwMzA4WjAzMTEwLwYDVQQD EygxZTMxZjIzMDY3MzA3ZTE0ZDA4MmE0MzY5ZDVhNzgwODk1MTY5YTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ffd+KY66bEld3rhqMU2OJUsuUXP 049i8Ba0DYpmkek5dKOZn4ePdIVjkpUUhXG6hYjTPV97qalGubT9cX2JTbxKpxGl whrn3w2DI9wdAakC2QYzFYUGIaBWpsqCxqB6qO7/5Lfqzo+k435vZmlAS9sSVCtb ER1qik/WYV+Dh4nGOXMjAOpNtY1z8hztRhm4HPeA9QkAWdqD2bdnTFtUM4SbPOqH WsnG2ZMqSt6T1xs4+qWDUttPZAEv4lgjaxab3h6YkAugVvZl2wd7JzDhReezF0Es CQGqXkKb8OnKlJSTHqFiOXSits+7t3Y2LA0TyneDYBXSTniQfiLFOxLRIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4x8jBnMH4U0IKkNp1aeAiVFpopMB8GA1UdIwQY MBaAFIHNAmKiIcNaZ88XOmDR7Nmvq921MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2MwQ1lxSWh3MXBuenhjNllOSHMyYS1yM2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NDA4MTMtOTE4MC00MDZmLWFmNmEt ZmRkMDk2MmNlYWFiLzEvZ2MwQ1lxSWh3MXBuenhjNllOSHMyYS1yM2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83NDA4MTMtOTE4MC00MDZmLWFmNmEtZmRkMDk2MmNlYWFi LzEvZ2MwQ1lxSWh3MXBuenhjNllOSHMyYS1yM2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDus2t3A uS1uyiERo7j9ZJiakT0DVn33EMvKKHARKy/o8S3fxsyz/c2GKrk4QzCeLR8j/qRC DaGwcZlgR4/ETUjRiivRc4fARy451ODUQsVZswfHaeagXELO6b7FvwhptZ2F5Ua8 mCKjbqVc+l2AKsxGQB7AeCMVw6ef+cWpoo5mP8026dnPZk3AOGDFNmu+9rl/XaoM uN7RP5cuS1JESBIfo7icGZ7RKg85Zyzp4yOpofEVkpr3sJM8egxL9qwouBCYMyOR TFThjYeWcSPPvhMVs0y8V1EnsOCi9UczPZ/0TVGdDykbZ0q1f9rXv4QnB/Ms4T3W AdAWf4Z/QXf8qQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:52 2025 by rpki-client