This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File: GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier: dlt9drHKr801S0zp32SaeTAgTWI8gTzgTRZYXRU0PrY=
Subject key identifier: A6:15:FB:4E:23:27:9E:BF:B5:67:31:1E:5F:7A:28:0E:9E:6D:32:30
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer: /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial: 019B0F6E6F1A5482FB430FBA85345AF6BAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number: 0456
Signing time: Thu 11 Dec 2025 22:00:54 +0000
Manifest this update: Thu 11 Dec 2025 22:00:54 +0000
Manifest next update: Fri 12 Dec 2025 22:00:54 +0000
Files and hashes: 1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: Ss/UHvUGwtkNatCcoLNbWzR6IwTorLS17otHjNREm3U=)
2: _uaKTHKtfWhbGfsoaUqVE21BcaI.roa (hash: ZcgIbRy8eNOQQ+FS3+GJOt3y/shZQUFy7iI8KMgc4tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 19:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0f:6e:6f:1a:54:82:fb:43:0f:ba:85:34:5a:f6:ba:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Validity
Not Before: Dec 11 22:00:54 2025 GMT
Not After : Dec 12 22:00:54 2025 GMT
Subject: CN=a615fb4e23279ebfb567311e5f7a280e9e6d3230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:9c:13:df:9a:52:1f:4b:5e:c6:63:37:fc:
e5:4b:91:49:0d:84:56:2e:ac:9c:66:b3:2a:c7:1c:
d8:49:fc:0d:63:7c:a1:08:06:eb:d0:83:db:6b:74:
b1:4e:2c:59:8a:b8:67:be:e8:a4:1e:d1:7d:1d:79:
51:0b:dc:69:e3:5f:5d:c0:42:00:b0:da:12:be:f0:
05:9d:97:dc:a5:96:66:e1:8e:48:00:a6:88:3d:be:
0f:9a:eb:cd:de:6e:61:70:d9:13:2c:74:db:95:90:
00:95:6a:43:31:9f:c3:dd:b8:80:f3:3b:5e:b6:04:
e7:84:d3:10:7a:bb:5c:81:d1:47:43:2b:a7:a9:1d:
cf:e8:a9:61:99:fc:6f:c4:15:9f:8a:d0:b8:f0:66:
62:fa:02:82:5a:e7:3a:58:76:a8:ed:0c:19:45:a8:
14:e3:8a:97:fb:a6:ab:1a:a8:a9:b7:0b:0a:11:bd:
7c:c1:47:7e:b0:83:01:5a:51:fe:cf:c3:14:60:4a:
53:6c:91:f1:66:e0:bc:88:9e:f6:89:71:5e:91:1a:
b6:f4:79:51:4b:1a:42:8d:f4:bc:96:6a:d2:f5:c2:
b3:52:6f:66:d9:66:55:ca:61:3a:09:1c:22:42:9e:
75:c6:f8:90:a5:d5:73:da:c9:25:ad:9e:6e:03:76:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:15:FB:4E:23:27:9E:BF:B5:67:31:1E:5F:7A:28:0E:9E:6D:32:30
X509v3 Authority Key Identifier:
keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7e:bd:f9:1c:a1:32:74:7c:0b:11:8c:00:b9:fc:3f:61:93:
7a:4f:e0:81:3a:44:e6:db:de:14:50:c3:bd:7f:db:7e:6b:60:
7b:99:1d:49:81:0a:65:0a:dc:b9:fc:56:75:43:23:94:45:16:
68:d3:a7:8c:35:85:11:ca:e1:c8:99:5a:2b:41:33:9a:82:3c:
9c:4a:04:88:c2:b0:6b:6d:78:fe:74:27:c6:2e:22:a7:41:d8:
76:87:92:82:69:97:f5:df:3a:5c:58:1f:be:e2:34:ef:2d:cd:
75:f2:7b:ba:e0:d1:37:f8:d3:94:ab:e9:dc:66:72:04:53:40:
77:89:4a:82:ef:07:10:2b:62:c0:a4:9d:06:cf:43:88:b3:9e:
2d:0d:f0:57:26:9a:70:b4:b6:63:41:77:9d:ab:95:d0:91:3d:
9a:cc:ea:49:9b:b9:6a:39:1d:96:43:2f:c8:9e:77:57:57:fa:
6c:7f:da:ee:e0:9d:b3:db:23:6a:40:ac:a8:d5:79:65:84:bc:
3b:6d:b9:a2:0f:6a:7b:1b:30:87:ba:23:b3:c9:77:c5:e4:c4:
17:70:05:0d:bf:64:6c:32:d0:3e:ee:1a:cf:49:aa:b9:6e:e0:
2d:4d:91:21:b1:37:4b:bb:57:3f:78:6f:f0:63:66:f5:73:45:
5d:8f:a6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:41:45 2025 by rpki-client