This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json) Hash identifier: Ehe4YlxrH6D8Zy5fl47PHhBdXCjQa7NNqIkiDevRX44= Subject key identifier: EB:7C:5B:6C:27:A8:62:AC:4B:00:02:7D:F3:51:C8:54:4C:59:9A:56 Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d Certificate serial: 019B81CD16861AB1AE158FD2C48B1FA2B265 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft Manifest number: CB Signing time: Sat 03 Jan 2026 03:00:59 +0000 Manifest this update: Sat 03 Jan 2026 03:00:59 +0000 Manifest next update: Sun 04 Jan 2026 03:00:59 +0000 Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: mcWzv1+eJwVXtV1JAyrWkcEtR4VRKNI8UIFTYaD2yNg=) 2: OQhQ0ERvOy6cUfsHeSPtDIxPLy0.roa (hash: ZP0fbWow0Y5xEJaJhTl8fSb35nDS4+b7RNqWl3nyzwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:cd:16:86:1a:b1:ae:15:8f:d2:c4:8b:1f:a2:b2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d Validity Not Before: Jan 3 03:00:59 2026 GMT Not After : Jan 4 03:00:59 2026 GMT Subject: CN=eb7c5b6c27a862ac4b00027df351c8544c599a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:d4:40:1f:89:48:f2:ad:1c:dd:82:6e:c3: 4d:70:50:68:c2:ae:8b:f0:61:66:4f:fc:7a:f0:26: e4:9f:9c:a3:c6:be:d0:04:2a:21:53:ad:59:45:78: d8:5a:5a:a2:17:9b:a1:55:ec:1f:10:bb:9b:55:92: 66:28:13:2a:0c:57:59:30:a9:44:ea:dd:66:7c:1a: 49:d6:7f:76:71:9a:81:84:7c:76:b5:d5:e8:95:6b: 58:2b:85:77:22:3d:b6:5a:6e:ab:03:7b:2d:17:83: 84:a1:02:ad:bd:4d:68:e7:17:44:69:18:64:90:ed: c9:86:62:50:8e:92:58:86:a8:16:f9:a1:92:99:b1: 9a:d8:ca:a3:f3:c2:b1:12:ad:25:7b:2f:20:22:dd: ce:39:f6:2c:de:10:6c:27:ef:2e:c8:f8:84:3b:9f: 58:82:84:b3:04:78:e0:54:69:a1:e7:75:db:1b:c2: 87:4b:70:40:5e:d0:db:f5:7d:c8:84:9e:4c:e9:a7: bf:62:0d:8c:6d:17:79:2a:3e:57:98:11:d8:eb:57: 56:d5:3a:71:48:4c:7b:0d:0f:75:89:33:a1:f6:b6: 7f:2a:2c:00:3b:d2:0c:fe:b2:94:ea:87:23:11:53: ce:27:00:60:47:ad:86:eb:ad:97:ad:1d:0e:76:2e: 7e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7C:5B:6C:27:A8:62:AC:4B:00:02:7D:F3:51:C8:54:4C:59:9A:56 X509v3 Authority Key Identifier: keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f7:f1:bc:1c:c5:50:99:2d:3a:60:82:d2:30:a1:0c:35:62: 5d:83:19:ad:16:e0:d3:25:81:28:7b:a5:84:c3:43:05:2b:2a: 64:d4:68:aa:19:5d:53:26:86:5d:54:41:21:a3:02:ef:37:b7: 35:a8:4e:8f:46:9b:a1:d0:fc:89:4e:2c:6a:a8:35:33:51:1f: 4a:e3:66:ec:5a:fd:42:3e:bd:fc:ef:59:1f:56:68:25:ae:4b: e1:09:f9:af:80:35:fd:4a:ca:a3:f1:a2:a4:5e:1d:84:3c:63: ff:68:f2:50:81:b5:87:4e:d0:04:71:78:c5:00:60:fe:5f:96: e6:26:be:95:9c:a6:49:09:83:08:4c:c1:6a:2b:3b:95:f3:63: 58:16:b4:52:37:1f:a0:28:62:a7:c0:f8:04:88:5f:10:05:6e: 55:21:78:16:c3:68:70:1d:6a:5e:6a:49:ac:12:c5:c7:71:10: 8f:7e:46:d5:05:97:1e:05:00:bd:ad:7b:81:2f:b7:32:37:a5: 94:40:45:c0:18:7c:3f:30:fb:41:cd:4a:aa:c6:17:51:97:cc: 81:9a:98:9c:08:7e:b1:6e:e1:42:66:6d:f4:16:75:f3:dd:b5: ae:e3:1e:03:5a:a6:fe:8d:08:b3:e0:ee:13:d5:c1:94:e2:61: cb:d4:a7:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBzRaGGrGuFY/SxIsforJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzBhNzIxZDFiNTNlZDkxZDg1YjZjNTM1YWM3MmI0OTA0 ZjljM2QwHhcNMjYwMTAzMDMwMDU5WhcNMjYwMTA0MDMwMDU5WjAzMTEwLwYDVQQD EyhlYjdjNWI2YzI3YTg2MmFjNGIwMDAyN2RmMzUxYzg1NDRjNTk5YTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5bUQB+JSPKtHN2CbsNNcFBowq6L 8GFmT/x68Cbkn5yjxr7QBCohU61ZRXjYWlqiF5uhVewfELubVZJmKBMqDFdZMKlE 6t1mfBpJ1n92cZqBhHx2tdXolWtYK4V3Ij22Wm6rA3stF4OEoQKtvU1o5xdEaRhk kO3JhmJQjpJYhqgW+aGSmbGa2Mqj88KxEq0ley8gIt3OOfYs3hBsJ+8uyPiEO59Y goSzBHjgVGmh53XbG8KHS3BAXtDb9X3IhJ5M6ae/Yg2MbRd5Kj5XmBHY61dW1Tpx SEx7DQ91iTOh9rZ/KiwAO9IM/rKU6ocjEVPOJwBgR62G662XrR0Odi5+8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt8W2wnqGKsSwACffNRyFRMWZpWMB8GA1UdIwQY MBaAFBpwpyHRtT7ZHYW2xTWscrSQT5w9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25DbklkRzFQdGtkaGJiRk5heHl0SkJQbkQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wZTA5NWItNjg5MS00NWM1LWEzYTEt ZjBjNGViMTU0MjYxLzEvR25DbklkRzFQdGtkaGJiRk5heHl0SkJQbkQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wZTA5NWItNjg5MS00NWM1LWEzYTEtZjBjNGViMTU0MjYx LzEvR25DbklkRzFQdGtkaGJiRk5heHl0SkJQbkQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPfxvBzF UJktOmCC0jChDDViXYMZrRbg0yWBKHulhMNDBSsqZNRoqhldUyaGXVRBIaMC7ze3 NahOj0abodD8iU4saqg1M1EfSuNm7Fr9Qj69/O9ZH1ZoJa5L4Qn5r4A1/UrKo/Gi pF4dhDxj/2jyUIG1h07QBHF4xQBg/l+W5ia+lZymSQmDCEzBais7lfNjWBa0Ujcf oChip8D4BIhfEAVuVSF4FsNocB1qXmpJrBLFx3EQj35G1QWXHgUAva17gS+3Mjel lEBFwBh8PzD7Qc1KqsYXUZfMgZqYnAh+sW7hQmZt9BZ18921ruMeA1qm/o0Is+Du E9XBlOJhy9Snsg== -----END CERTIFICATE-----Generated at Sat Jan 3 08:09:55 2026 by rpki-client