This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft File: GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft (raw, json) Hash identifier: vNtzIG6k7A05+9uBwcjzUvTyDWTFwAeiQP3r9P67cp0= Subject key identifier: 25:05:1B:0E:73:7E:28:92:11:64:38:EA:6D:7A:2A:EB:93:C4:AD:73 Authority key identifier: 18:2D:69:63:F8:F8:04:58:D8:41:CA:AE:F1:58:B9:92:AB:40:59:C7 Certificate issuer: /CN=182d6963f8f80458d841caaef158b992ab4059c7 Certificate serial: 019B2552A3C2740F5479CB47CAD8813F388F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft Manifest number: 1778 Signing time: Tue 16 Dec 2025 04:02:11 +0000 Manifest this update: Tue 16 Dec 2025 04:02:11 +0000 Manifest next update: Wed 17 Dec 2025 04:02:11 +0000 Files and hashes: 1: GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl (hash: TcbyJRGobR9PedcSfEa44Pp5C7AIbOf5lqWVOJumWdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:a3:c2:74:0f:54:79:cb:47:ca:d8:81:3f:38:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=182d6963f8f80458d841caaef158b992ab4059c7 Validity Not Before: Dec 16 04:02:11 2025 GMT Not After : Dec 17 04:02:11 2025 GMT Subject: CN=25051b0e737e2892116438ea6d7a2aeb93c4ad73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:b1:d7:be:7d:43:47:17:bd:cb:ca:55:c2: d6:c4:1c:42:ae:a1:c7:1c:60:03:f2:e5:20:97:7f: f1:c6:31:66:d0:d0:a6:5c:33:ee:97:c6:b3:a4:3b: ff:b3:9c:40:95:9c:f7:dc:4a:62:b6:f6:f2:38:b9: 3e:ff:e6:7b:16:8b:95:e1:c3:67:3e:83:b4:ee:e1: 06:a5:f7:74:d8:c2:44:0f:f2:14:75:19:e6:f5:da: 55:07:54:da:86:4e:d2:fa:6b:2c:fb:f9:4a:78:cc: fa:61:01:73:1d:f5:69:07:d5:03:b8:9a:e0:52:4d: f1:b0:7a:49:d2:7e:17:3c:83:91:10:cf:5c:0c:b9: 45:df:c0:09:a0:04:bc:a1:91:81:bb:a1:16:84:97: bd:3d:76:a7:9b:a5:64:dc:89:33:07:0a:0d:06:9e: 47:8b:17:cb:28:73:b6:2b:63:a5:72:7a:37:2f:a6: 89:f5:95:45:cf:b2:86:6b:5d:79:75:38:19:c4:69: a6:2b:ef:9e:c8:1b:3f:70:61:6c:bd:4a:d4:ff:c2: fe:ec:c6:12:2f:16:a2:e5:ff:ca:a9:f4:44:9c:b4: bb:e1:fa:a7:a5:d6:ac:ec:96:b2:4a:ba:af:63:f5: a2:b5:15:db:d8:dc:20:0f:3c:6e:77:ef:4e:f6:17: 4f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:05:1B:0E:73:7E:28:92:11:64:38:EA:6D:7A:2A:EB:93:C4:AD:73 X509v3 Authority Key Identifier: keyid:18:2D:69:63:F8:F8:04:58:D8:41:CA:AE:F1:58:B9:92:AB:40:59:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:37:db:6c:d0:f6:e6:2e:7b:35:f7:01:b8:ce:6a:f0:4a:c3: bf:17:a0:12:bf:70:25:a7:05:f1:7c:11:82:98:2d:d5:6e:dd: 0f:98:3d:64:64:cc:68:1d:2b:0f:13:f8:67:eb:51:5f:55:42: 84:cd:1c:c6:ce:cc:30:70:15:da:4e:1f:1a:af:f1:76:2c:b6: 38:b2:63:82:93:97:5a:58:43:e4:aa:53:b6:c5:18:b2:b1:45: f6:e5:62:3e:4d:5c:d3:aa:74:25:8f:08:81:b4:50:3b:03:77: 1b:e3:bc:2d:ce:2e:f6:3c:c1:fe:67:cd:b5:2e:c4:4c:79:39: 20:69:93:1b:b5:91:3f:13:35:90:66:cf:4b:1c:c8:66:eb:b1: 9f:d2:d6:fc:96:e8:14:10:fc:92:ea:3d:60:f0:f4:f1:0f:38: d1:60:c8:fd:b8:f0:da:57:62:d8:76:f3:fd:78:85:88:1a:e3: 7c:07:69:35:97:8b:f4:78:6c:97:91:51:7a:a3:d1:bc:3c:ef: c7:9a:78:e8:6e:2e:cf:e5:51:5b:31:8d:36:e0:8e:be:54:72: b2:b3:9e:bc:f7:e4:5c:24:84:20:33:db:4b:aa:dd:64:ad:6f: 90:d1:48:28:4f:d6:b6:4b:8d:b1:76:79:49:36:24:dd:73:19: 3b:4a:3d:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUqPCdA9UectHytiBPziPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MmQ2OTYzZjhmODA0NThkODQxY2FhZWYxNThiOTkyYWI0 MDU5YzcwHhcNMjUxMjE2MDQwMjExWhcNMjUxMjE3MDQwMjExWjAzMTEwLwYDVQQD EygyNTA1MWIwZTczN2UyODkyMTE2NDM4ZWE2ZDdhMmFlYjkzYzRhZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Kx1759Q0cXvcvKVcLWxBxCrqHH HGAD8uUgl3/xxjFm0NCmXDPul8azpDv/s5xAlZz33EpitvbyOLk+/+Z7FouV4cNn PoO07uEGpfd02MJED/IUdRnm9dpVB1Tahk7S+mss+/lKeMz6YQFzHfVpB9UDuJrg Uk3xsHpJ0n4XPIOREM9cDLlF38AJoAS8oZGBu6EWhJe9PXanm6Vk3IkzBwoNBp5H ixfLKHO2K2Olcno3L6aJ9ZVFz7KGa115dTgZxGmmK++eyBs/cGFsvUrU/8L+7MYS Lxai5f/KqfREnLS74fqnpdas7JaySrqvY/WitRXb2NwgDzxud+9O9hdP9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUFGw5zfiiSEWQ46m16KuuTxK1zMB8GA1UdIwQY MBaAFBgtaWP4+ARY2EHKrvFYuZKrQFnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0MxcFlfajRCRmpZUWNxdThWaTVrcXRBV2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xZjA0OTMtYzRiZi00OWYyLTk3ZWYt MTI0MzhhOWRjMjZkLzEvR0MxcFlfajRCRmpZUWNxdThWaTVrcXRBV2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8xZjA0OTMtYzRiZi00OWYyLTk3ZWYtMTI0MzhhOWRjMjZk LzEvR0MxcFlfajRCRmpZUWNxdThWaTVrcXRBV2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDfbbND2 5i57NfcBuM5q8ErDvxegEr9wJacF8XwRgpgt1W7dD5g9ZGTMaB0rDxP4Z+tRX1VC hM0cxs7MMHAV2k4fGq/xdiy2OLJjgpOXWlhD5KpTtsUYsrFF9uViPk1c06p0JY8I gbRQOwN3G+O8Lc4u9jzB/mfNtS7ETHk5IGmTG7WRPxM1kGbPSxzIZuuxn9LW/Jbo FBD8kuo9YPD08Q840WDI/bjw2ldi2Hbz/XiFiBrjfAdpNZeL9Hhsl5FReqPRvDzv x5p46G4uz+VRWzGNNuCOvlRysrOevPfkXCSEIDPbS6rdZK1vkNFIKE/WtkuNsXZ5 STYk3XMZO0o9XA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:26:08 2025 by rpki-client