This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft File: gc-3wMI0noD-5RtHgxU1Es2dodI.mft (raw, json) Hash identifier: EIkxOZOYYsKRDijl7xFflK4mc4aRQqD7CoC/UZlCtDw= Subject key identifier: 4A:B4:56:D2:9C:CF:7D:60:B8:EA:2E:D3:FC:2A:9C:43:1A:1A:53:6A Authority key identifier: 81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2 Certificate issuer: /CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2 Certificate serial: 019B5A8874D0C1E1E0256BDE641900C3470C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft Manifest number: AB Signing time: Fri 26 Dec 2025 12:00:50 +0000 Manifest this update: Fri 26 Dec 2025 12:00:50 +0000 Manifest next update: Sat 27 Dec 2025 12:00:50 +0000 Files and hashes: 1: 7v8gLWZMvev1LFYyajRZfk02rmw.roa (hash: HpBXJYHAduyr0DgBk7sgeTGoEP7DcUURMYEtC0wBawM=) 2: gc-3wMI0noD-5RtHgxU1Es2dodI.crl (hash: MqD3fxFIsv4N0owbnOtBUuottLhaE6F47WkhK6U2hN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:74:d0:c1:e1:e0:25:6b:de:64:19:00:c3:47:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2 Validity Not Before: Dec 26 12:00:50 2025 GMT Not After : Dec 27 12:00:50 2025 GMT Subject: CN=4ab456d29ccf7d60b8ea2ed3fc2a9c431a1a536a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b7:9d:46:51:dc:2b:7e:85:bc:60:a1:71:ea: 9b:c3:31:b3:9e:6e:6e:42:55:59:17:92:5f:3e:c2: 09:6b:f7:5a:9d:d4:7c:11:8b:20:94:72:b1:36:64: 97:88:89:f6:3f:81:8f:82:6f:79:26:33:5f:71:cd: 82:3a:25:15:d4:61:c7:28:d3:3d:e4:57:2a:f1:89: 4b:7b:6f:ea:19:38:d7:77:2a:96:0e:16:e8:8d:12: 56:31:ba:a0:f3:fe:b5:a3:d7:17:22:af:40:bc:c6: 3b:6f:82:8d:6a:7f:8f:c2:48:ca:c3:17:25:2f:48: f7:87:ac:56:70:94:40:1a:b5:a0:10:fb:9b:a5:31: 7a:07:48:2b:c8:7d:90:e7:34:9c:93:bd:0f:c6:ca: d4:bd:7b:ec:ec:b4:1d:ed:63:c4:00:4a:99:08:79: ef:84:ee:00:9e:ca:da:78:3d:30:5a:b5:20:e7:5c: ff:f2:d3:c5:98:87:a0:f9:77:fc:66:9c:7f:32:5f: 19:ee:62:11:0e:8b:88:db:8f:7e:3c:6a:0d:7d:e5: 56:da:7b:0a:ff:f7:f4:a7:96:e1:db:27:fb:99:18: fc:51:d4:e1:9b:9f:bd:d0:97:73:e5:ad:65:10:1c: a3:75:a1:da:b9:92:f2:4d:d0:b2:c7:91:3c:fa:bb: 98:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B4:56:D2:9C:CF:7D:60:B8:EA:2E:D3:FC:2A:9C:43:1A:1A:53:6A X509v3 Authority Key Identifier: keyid:81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d7:18:35:d6:fc:2b:b4:e9:a2:26:cd:db:17:2e:79:38:fa: 8a:14:7e:e2:66:f2:e5:30:9a:e6:3a:47:06:b9:48:2e:64:ac: 02:f8:19:78:da:25:15:f9:c5:d3:9f:3e:43:b0:f7:21:2b:13: 5a:56:a9:72:4c:c6:c7:a6:a8:f8:95:49:b1:15:89:ce:b2:a9: 42:94:b4:3f:47:d8:43:7f:96:3c:83:6b:f7:78:1f:23:d2:fb: 28:50:45:31:9f:05:b1:de:d3:50:54:d6:bb:2b:5b:a9:bd:28: bd:66:cf:1c:88:e9:61:8f:bb:11:eb:66:39:a6:ff:e5:ed:bd: e6:b0:ea:64:84:12:3e:b4:b1:c3:20:04:4d:c4:70:43:38:71: a6:46:38:f5:fa:f1:70:1d:7f:e4:b1:e9:70:c7:dd:aa:d4:f5: 24:cc:63:28:32:c8:3e:db:a1:6e:70:75:b3:a1:9e:31:1f:c3: c2:21:91:13:37:d3:3c:6a:9e:73:57:dc:ef:9b:7a:51:c7:87: ab:1e:c4:53:2c:e4:ce:fe:f3:77:33:2b:f5:59:8c:0f:20:ec: 4c:c8:b7:20:7d:7a:bc:7c:5f:04:1d:af:a4:d8:c2:50:b2:f4: fa:05:56:c5:5e:3c:8a:cb:a8:92:a7:3a:50:15:af:d5:2c:28: 99:ec:c8:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiHTQweHgJWveZBkAw0cMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxY2ZiN2MwYzIzNDllODBmZWU1MWI0NzgzMTUzNTEyY2Q5 ZGExZDIwHhcNMjUxMjI2MTIwMDUwWhcNMjUxMjI3MTIwMDUwWjAzMTEwLwYDVQQD Eyg0YWI0NTZkMjljY2Y3ZDYwYjhlYTJlZDNmYzJhOWM0MzFhMWE1MzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2redRlHcK36FvGChceqbwzGznm5u QlVZF5JfPsIJa/dandR8EYsglHKxNmSXiIn2P4GPgm95JjNfcc2COiUV1GHHKNM9 5Fcq8YlLe2/qGTjXdyqWDhbojRJWMbqg8/61o9cXIq9AvMY7b4KNan+PwkjKwxcl L0j3h6xWcJRAGrWgEPubpTF6B0gryH2Q5zSck70PxsrUvXvs7LQd7WPEAEqZCHnv hO4AnsraeD0wWrUg51z/8tPFmIeg+Xf8Zpx/Ml8Z7mIRDouI249+PGoNfeVW2nsK //f0p5bh2yf7mRj8UdThm5+90Jdz5a1lEByjdaHauZLyTdCyx5E8+ruY1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEq0VtKcz31guOou0/wqnEMaGlNqMB8GA1UdIwQY MBaAFIHPt8DCNJ6A/uUbR4MVNRLNnaHSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMDcyOTctYzQ0My00MjdlLWEwZTct N2RjMDA1N2VkOTZkLzEvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wMDcyOTctYzQ0My00MjdlLWEwZTctN2RjMDA1N2VkOTZk LzEvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNcYNdb8 K7TpoibN2xcueTj6ihR+4mby5TCa5jpHBrlILmSsAvgZeNolFfnF058+Q7D3ISsT WlapckzGx6ao+JVJsRWJzrKpQpS0P0fYQ3+WPINr93gfI9L7KFBFMZ8Fsd7TUFTW uytbqb0ovWbPHIjpYY+7EetmOab/5e295rDqZIQSPrSxwyAETcRwQzhxpkY49frx cB1/5LHpcMfdqtT1JMxjKDLIPtuhbnB1s6GeMR/DwiGREzfTPGqec1fc75t6UceH qx7EUyzkzv7zdzMr9VmMDyDsTMi3IH16vHxfBB2vpNjCULL0+gVWxV48isuokqc6 UBWv1SwomezInA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:55 2025 by rpki-client