This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft File: GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json) Hash identifier: GIA8vBXHpaqvRJDitOa68vASKfepV749fxMnz/ZugLA= Subject key identifier: F2:F8:25:BA:D0:A8:CF:DB:E1:D7:92:B3:63:3E:17:9A:F4:CC:7B:28 Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74 Certificate issuer: /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474 Certificate serial: 019B5A1ABC2FE903405286C28F4C540621AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft Manifest number: 0C42 Signing time: Fri 26 Dec 2025 10:01:00 +0000 Manifest this update: Fri 26 Dec 2025 10:01:00 +0000 Manifest next update: Sat 27 Dec 2025 10:01:00 +0000 Files and hashes: 1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: a8xsxDz0V6fVjTXXjXYS/lizwP+83idERgeu4svzbxk=) 2: ddpb_wuKnMlAr7zHGIm8AB82iUA.roa (hash: B1F9vY9BeWV/mZWmkHXRYrhz+CLltzOE+dJil3lfRag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:bc:2f:e9:03:40:52:86:c2:8f:4c:54:06:21:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474 Validity Not Before: Dec 26 10:01:00 2025 GMT Not After : Dec 27 10:01:00 2025 GMT Subject: CN=f2f825bad0a8cfdbe1d792b3633e179af4cc7b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e9:8d:c9:4b:5f:2f:6e:03:43:7f:ca:a4:b7: 83:cd:98:1d:b5:a0:bb:03:92:ed:dd:d5:ea:1a:f6: 73:83:16:ba:b3:4b:1f:81:dc:fb:15:fe:5b:f9:bc: 4d:72:24:3d:f7:dc:63:e4:30:04:77:44:01:2a:4a: f1:19:e0:db:2c:e9:86:7e:88:80:4f:07:65:21:7c: a0:c6:28:6a:52:a1:9e:13:42:d3:3b:d4:0f:c0:ec: 01:a1:93:50:55:8a:67:7b:8b:61:00:67:ba:92:dd: bb:70:bf:ae:96:a6:34:0f:66:2d:19:6b:c8:11:41: 2f:c2:24:51:16:f3:f9:6f:0d:bb:bd:93:a9:01:3f: 1d:ed:be:2e:56:3d:d9:c6:c9:5d:3e:20:d7:e2:63: 94:95:24:d1:ce:87:19:97:72:1d:ad:49:25:7b:5e: 83:50:7a:d3:5e:c7:56:73:81:ec:d0:d9:98:85:a1: 76:e7:d3:87:8f:4e:79:75:a7:05:bb:c6:3e:06:33: 9e:66:d9:65:69:2c:aa:96:25:c7:e8:01:92:02:38: d8:87:64:9d:f4:50:4d:32:0d:69:87:40:65:51:d7: 17:78:54:b9:ca:f8:62:2f:1d:72:be:02:46:fd:8e: 81:84:b4:6a:b1:fe:84:74:0f:02:c6:ad:78:89:d3: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F8:25:BA:D0:A8:CF:DB:E1:D7:92:B3:63:3E:17:9A:F4:CC:7B:28 X509v3 Authority Key Identifier: keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:72:bb:fa:bb:df:b6:a2:dd:d5:f7:6a:9c:6d:38:f5:1d:fa: fa:b0:34:4b:79:8e:70:54:6d:6f:6e:bc:d7:ac:04:ff:83:ea: a4:1c:0a:b6:ce:7f:00:b7:ff:9a:f1:d9:f8:49:d9:8e:01:2b: a9:f0:2c:3c:ab:13:a4:37:90:1b:b8:8b:dc:aa:7c:08:55:a4: 30:e7:d4:86:0d:2a:4f:2b:8c:b2:c2:a1:44:ad:fa:8c:fd:d9: 5b:e0:07:3b:9c:96:6c:cb:a4:08:55:b2:eb:a7:ee:d3:a1:7f: b6:04:26:db:28:62:b7:6c:f9:b0:aa:c7:f1:d8:e9:e5:03:fe: 34:74:59:80:fa:37:64:e5:ef:98:ec:8b:86:6c:58:4b:24:9d: 1b:da:b8:9e:c3:0b:8b:81:8e:85:0e:78:37:9f:7d:0f:da:2f: 3e:80:af:f7:cb:ec:fe:ed:c8:b7:3b:f1:a7:c1:3b:4f:b1:72: 4c:36:db:9b:bc:6d:c7:77:eb:64:d3:14:ac:f1:94:b8:8b:dd: f7:33:92:26:d1:54:0e:67:8d:08:34:68:c0:22:e4:cb:fe:2c: ae:fc:cb:07:47:ef:97:37:23:d2:14:99:e1:2e:dd:c4:81:bc: d8:34:d7:90:52:9e:fa:52:9c:79:4c:42:d8:d1:3d:72:d2:84: 78:57:27:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGrwv6QNAUobCj0xUBiGtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YzFiYjNmYjEzNmFiZjQwN2EwYTUxYTRhMDc2NTE3NGZm ZGY0NzQwHhcNMjUxMjI2MTAwMTAwWhcNMjUxMjI3MTAwMTAwWjAzMTEwLwYDVQQD EyhmMmY4MjViYWQwYThjZmRiZTFkNzkyYjM2MzNlMTc5YWY0Y2M3YjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkumNyUtfL24DQ3/KpLeDzZgdtaC7 A5Lt3dXqGvZzgxa6s0sfgdz7Ff5b+bxNciQ999xj5DAEd0QBKkrxGeDbLOmGfoiA TwdlIXygxihqUqGeE0LTO9QPwOwBoZNQVYpne4thAGe6kt27cL+ulqY0D2YtGWvI EUEvwiRRFvP5bw27vZOpAT8d7b4uVj3ZxsldPiDX4mOUlSTRzocZl3IdrUkle16D UHrTXsdWc4Hs0NmYhaF259OHj055dacFu8Y+BjOeZtllaSyqliXH6AGSAjjYh2Sd 9FBNMg1ph0BlUdcXeFS5yvhiLx1yvgJG/Y6BhLRqsf6EdA8Cxq14idPDywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL4JbrQqM/b4deSs2M+F5r0zHsoMB8GA1UdIwQY MBaAFBnBuz+xNqv0B6ClGkoHZRdP/fR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEt ZGFkMThkNWIyYTNjLzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEtZGFkMThkNWIyYTNj LzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXK7+rvf tqLd1fdqnG049R36+rA0S3mOcFRtb26816wE/4PqpBwKts5/ALf/mvHZ+EnZjgEr qfAsPKsTpDeQG7iL3Kp8CFWkMOfUhg0qTyuMssKhRK36jP3ZW+AHO5yWbMukCFWy 66fu06F/tgQm2yhit2z5sKrH8djp5QP+NHRZgPo3ZOXvmOyLhmxYSySdG9q4nsML i4GOhQ54N599D9ovPoCv98vs/u3Itzvxp8E7T7FyTDbbm7xtx3frZNMUrPGUuIvd 9zOSJtFUDmeNCDRowCLky/4srvzLB0fvlzcj0hSZ4S7dxIG82DTXkFKe+lKceUxC 2NE9ctKEeFcnkQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:35 2025 by rpki-client