This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json) Hash identifier: oZ1n6mEO7BGDjeMBxZIBJLrjpjDOQMeqqfEXriDp9W0= Subject key identifier: 92:23:07:54:9F:34:8A:4C:72:1D:01:16:FF:1F:C3:75:6E:F1:16:A9 Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65 Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65 Certificate serial: 019B0E24AB7BA04AC27E275AE1B209DFC5FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft Manifest number: 13BB Signing time: Thu 11 Dec 2025 16:00:42 +0000 Manifest this update: Thu 11 Dec 2025 16:00:42 +0000 Manifest next update: Fri 12 Dec 2025 16:00:42 +0000 Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=) 2: dMX9QwbYl-FTlUJ1R8o2dHt-Q3w.roa (hash: e2o3TSPgT1QYuW3l4VAbr/3mKHvbyIxxzpTJ+Xkb62A=) 3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: 2CIrzmQtnNZDJ+CcTFou8zkqzhoCR7S6zVT0TGzxZBs=) 4: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:ab:7b:a0:4a:c2:7e:27:5a:e1:b2:09:df:c5:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65 Validity Not Before: Dec 11 16:00:42 2025 GMT Not After : Dec 12 16:00:42 2025 GMT Subject: CN=922307549f348a4c721d0116ff1fc3756ef116a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:83:1d:f7:76:04:84:80:d9:b4:d5:1e:5b: 5b:cc:c0:01:55:1e:5f:78:21:b5:79:07:13:8b:f4: ea:df:76:f8:1a:92:80:37:12:dd:46:80:77:4c:54: b2:f7:1f:6b:85:97:c7:7c:fd:57:ef:d3:a6:58:e4: 10:20:18:39:ce:05:6c:57:73:3d:2a:66:89:80:e8: c7:dc:dd:d7:92:4c:74:3a:06:aa:bc:c3:78:88:7d: b5:4f:56:c1:6a:2d:70:50:34:68:17:9b:91:5f:58: f8:49:82:66:01:51:b9:9b:a3:99:78:09:46:79:a1: 4a:8a:f2:8c:e5:d5:f4:09:7c:20:01:5e:f0:a4:7b: 61:55:e3:56:a7:5f:a0:bf:fa:13:cd:3f:76:c3:90: b1:f4:f4:80:39:3b:8e:b2:76:7a:b2:69:65:6e:32: d1:cb:c8:3e:53:a6:7f:b9:3c:ea:ed:55:e4:b7:2d: 5a:f2:65:be:6a:70:2e:11:79:0d:f8:b0:44:bc:78: c5:a6:f5:ee:46:45:2c:b8:4e:4f:7d:fb:97:7c:bd: 33:8a:55:f9:20:83:37:db:e1:c5:fd:50:a4:72:f4: ef:3a:c5:37:b0:3c:9d:d7:fb:d3:9e:d9:0d:54:81: 32:cf:2a:d9:8e:03:5b:0c:8b:15:c2:5e:75:6f:cb: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:23:07:54:9F:34:8A:4C:72:1D:01:16:FF:1F:C3:75:6E:F1:16:A9 X509v3 Authority Key Identifier: keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c8:c2:d8:cf:87:c2:5f:03:a8:3a:1d:8e:e9:1c:5c:32:c4: 05:d3:d3:30:db:6c:5d:7a:10:c7:06:f8:3d:00:a2:eb:99:23: 84:0b:99:a6:57:99:cc:9a:a5:f8:ef:b2:58:01:94:59:b2:a1: 4d:65:36:ea:05:ec:60:47:3f:b2:91:3a:23:c6:e8:6c:57:10: 6e:18:73:d3:f2:8f:a6:e4:fc:f2:b3:2a:4d:a2:50:b4:78:3a: 9d:17:35:6f:61:06:5f:84:62:60:f5:55:69:77:d1:b1:5c:58: 21:c4:0d:07:a9:27:53:a3:aa:45:0d:58:f2:4e:66:8d:6a:64: cd:14:5b:71:dd:f7:ed:24:04:02:de:dd:22:b6:24:d4:78:85: 2c:24:86:52:b5:7f:b9:f1:a5:f7:61:f5:ed:46:3c:af:07:27: 3e:58:3d:61:7f:ff:47:0e:58:5b:a6:ce:8d:ec:d4:a9:2c:3f: 6c:62:f7:a4:81:3e:f0:3e:5a:fb:42:59:18:ee:65:27:f9:4b: e1:bf:9e:b4:7f:b6:c6:58:42:9d:a0:c6:f3:04:59:30:a0:53: c6:29:db:ea:1f:a8:87:48:87:fb:42:2f:e7:0f:25:ea:68:40: f8:1f:c2:63:a1:e4:33:02:e8:2f:03:c5:0e:7c:60:23:50:fe: a3:6b:9f:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJKt7oErCfida4bIJ38X9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxY2RjMTdkYWQwM2JjYjliYzM0YTllMzc3YWIyMDcwODUy ZGNhNjUwHhcNMjUxMjExMTYwMDQyWhcNMjUxMjEyMTYwMDQyWjAzMTEwLwYDVQQD Eyg5MjIzMDc1NDlmMzQ4YTRjNzIxZDAxMTZmZjFmYzM3NTZlZjExNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcuDHfd2BISA2bTVHltbzMABVR5f eCG1eQcTi/Tq33b4GpKANxLdRoB3TFSy9x9rhZfHfP1X79OmWOQQIBg5zgVsV3M9 KmaJgOjH3N3Xkkx0OgaqvMN4iH21T1bBai1wUDRoF5uRX1j4SYJmAVG5m6OZeAlG eaFKivKM5dX0CXwgAV7wpHthVeNWp1+gv/oTzT92w5Cx9PSAOTuOsnZ6smllbjLR y8g+U6Z/uTzq7VXkty1a8mW+anAuEXkN+LBEvHjFpvXuRkUsuE5PffuXfL0zilX5 IIM32+HF/VCkcvTvOsU3sDyd1/vTntkNVIEyzyrZjgNbDIsVwl51b8uzUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIjB1SfNIpMch0BFv8fw3Vu8RapMB8GA1UdIwQY MBaAFIHNwX2tA7y5vDSp43erIHCFLcplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAt MDE4NGU4MWFlYWQ5LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAtMDE4NGU4MWFlYWQ5 LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncjC2M+H wl8DqDodjukcXDLEBdPTMNtsXXoQxwb4PQCi65kjhAuZpleZzJql+O+yWAGUWbKh TWU26gXsYEc/spE6I8bobFcQbhhz0/KPpuT88rMqTaJQtHg6nRc1b2EGX4RiYPVV aXfRsVxYIcQNB6knU6OqRQ1Y8k5mjWpkzRRbcd337SQEAt7dIrYk1HiFLCSGUrV/ ufGl92H17UY8rwcnPlg9YX//Rw5YW6bOjezUqSw/bGL3pIE+8D5a+0JZGO5lJ/lL 4b+etH+2xlhCnaDG8wRZMKBTxinb6h+oh0iH+0Iv5w8l6mhA+B/CY6HkMwLoLwPF DnxgI1D+o2ufgw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:36:36 2025 by rpki-client