This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json) Hash identifier: s9bemD8gvdcVZKsahM8+i8Q7Beoch0Khn+a/FtVV2io= Subject key identifier: 26:E0:82:04:C3:CB:B6:49:BD:B4:9F:1B:B2:FD:78:5B:5F:12:B4:42 Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57 Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57 Certificate serial: 019B59ACAB18EC0112FEC2DA66C8E7EA2361 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft Manifest number: 0907 Signing time: Fri 26 Dec 2025 08:00:46 +0000 Manifest this update: Fri 26 Dec 2025 08:00:46 +0000 Manifest next update: Sat 27 Dec 2025 08:00:46 +0000 Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: 6K0XC3ZXQtMBlpDHZTBPpe7puwNCtDI2y/axXC4Iirs=) 2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:ab:18:ec:01:12:fe:c2:da:66:c8:e7:ea:23:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57 Validity Not Before: Dec 26 08:00:46 2025 GMT Not After : Dec 27 08:00:46 2025 GMT Subject: CN=26e08204c3cbb649bdb49f1bb2fd785b5f12b442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:23:bf:6c:99:22:5e:1c:39:7f:af:d7:d4: 60:b2:1d:05:b4:b3:3d:22:02:00:0e:7b:9b:8a:83: fb:af:ce:da:11:43:50:2d:26:56:f2:e8:1e:ca:5a: 6b:d7:51:56:77:57:d2:59:33:b5:73:f7:25:67:12: 4f:fc:86:40:9d:18:44:62:86:fb:75:26:3b:a6:d9: 20:f0:17:38:df:06:b6:4b:4f:6c:94:8f:5f:4b:27: ab:4b:c9:45:7b:64:7a:7e:73:65:b1:f1:02:00:25: 1f:e6:36:f6:31:ce:5c:ce:d0:e2:04:40:07:49:00: 87:16:41:c4:74:30:9b:37:93:42:4b:86:a9:c9:97: 58:72:34:93:a9:b7:d0:cd:36:36:18:44:f6:42:67: 2f:f0:44:43:9a:f1:25:77:42:16:39:3f:1e:df:53: 51:dc:f0:ab:0d:69:13:18:fb:f7:26:ae:e4:e6:39: a5:b9:8c:48:ad:21:48:88:ae:f3:3e:4a:43:27:bb: 86:48:93:28:5a:79:43:2f:d8:61:5a:41:f3:c0:3e: 66:ac:21:fd:ff:0a:e3:e3:6e:55:4e:87:d7:3e:6e: 5f:4f:50:57:49:ae:1a:57:4e:52:25:7a:9b:c5:18: f6:40:93:83:45:00:11:c2:32:8a:12:d6:b5:94:70: f6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E0:82:04:C3:CB:B6:49:BD:B4:9F:1B:B2:FD:78:5B:5F:12:B4:42 X509v3 Authority Key Identifier: keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1b:35:e1:62:fd:36:d5:cc:f0:1a:27:8c:79:b4:13:f2:01: d5:71:6b:b7:d1:21:f7:86:ae:1e:a7:2e:33:70:42:18:17:50: 59:52:4b:85:22:d9:6b:49:22:dc:2b:62:90:c4:c8:6e:6c:31: 77:14:df:70:12:77:fa:af:f6:5c:b7:6b:02:44:75:4b:46:30: bf:4e:c7:8d:b3:0b:07:92:d9:9a:6c:52:5b:a6:c8:04:56:49: ce:89:8d:08:4f:9a:15:90:9d:77:65:0d:6b:a9:2b:84:8b:35: b7:e1:66:79:dd:01:72:a5:95:cf:a3:f4:da:d7:11:51:f9:d6: b8:93:68:81:05:08:8a:cf:5b:1b:36:60:7b:9d:8a:bc:d9:e6: 04:58:0b:1a:38:d1:83:e4:c9:ce:77:3f:45:d9:d2:8d:34:3e: 97:b5:71:94:22:60:0b:24:06:0b:81:e6:d1:13:ae:d5:99:64: c9:91:5a:e6:07:40:e0:c5:13:ab:05:52:72:c9:ca:52:10:8f: dd:56:9c:5e:a9:c5:e2:af:07:c3:9a:e7:53:aa:ea:4d:10:f8: 87:ff:38:4b:d8:1a:b3:cd:0c:e4:b7:7b:0d:ee:a1:bd:ec:a8: df:c5:b7:2a:28:f3:91:88:4e:1f:f5:66:2e:77:11:ef:d7:64: a8:63:4c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKsY7AES/sLaZsjn6iNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2JkMGE0MTM2Mjk0MjE1YjFjMjQzYjBmMDIxOGNmZGQ1 NjVkNTcwHhcNMjUxMjI2MDgwMDQ2WhcNMjUxMjI3MDgwMDQ2WjAzMTEwLwYDVQQD EygyNmUwODIwNGMzY2JiNjQ5YmRiNDlmMWJiMmZkNzg1YjVmMTJiNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xwjv2yZIl4cOX+v19Rgsh0FtLM9 IgIADnubioP7r87aEUNQLSZW8ugeylpr11FWd1fSWTO1c/clZxJP/IZAnRhEYob7 dSY7ptkg8Bc43wa2S09slI9fSyerS8lFe2R6fnNlsfECACUf5jb2Mc5cztDiBEAH SQCHFkHEdDCbN5NCS4apyZdYcjSTqbfQzTY2GET2Qmcv8ERDmvEld0IWOT8e31NR 3PCrDWkTGPv3Jq7k5jmluYxIrSFIiK7zPkpDJ7uGSJMoWnlDL9hhWkHzwD5mrCH9 /wrj425VTofXPm5fT1BXSa4aV05SJXqbxRj2QJODRQARwjKKEta1lHD2jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbgggTDy7ZJvbSfG7L9eFtfErRCMB8GA1UdIwQY MBaAFBnL0KQTYpQhWxwkOw8CGM/dVl1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYt ZWNlNzgyNjc4N2I0LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYtZWNlNzgyNjc4N2I0 LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxs14WL9 NtXM8BonjHm0E/IB1XFrt9Eh94auHqcuM3BCGBdQWVJLhSLZa0ki3CtikMTIbmwx dxTfcBJ3+q/2XLdrAkR1S0Ywv07HjbMLB5LZmmxSW6bIBFZJzomNCE+aFZCdd2UN a6krhIs1t+Fmed0BcqWVz6P02tcRUfnWuJNogQUIis9bGzZge52KvNnmBFgLGjjR g+TJznc/RdnSjTQ+l7VxlCJgCyQGC4Hm0ROu1ZlkyZFa5gdA4MUTqwVScsnKUhCP 3VacXqnF4q8Hw5rnU6rqTRD4h/84S9gas80M5Ld7De6hveyo38W3KijzkYhOH/Vm LncR79dkqGNM3Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:54 2025 by rpki-client