This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft File: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft (raw, json) Hash identifier: O/jvHJTHK08S4GaxewQHwAC43k448kYdxvyMQjAqgYY= Subject key identifier: 8E:47:55:69:9C:96:F0:A4:4E:F0:BE:0A:A2:C3:4F:52:97:20:F4:79 Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4 Certificate issuer: /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4 Certificate serial: 019B3A222C56D35EABF39F01D460A319B644 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft Manifest number: 0BD0 Signing time: Sat 20 Dec 2025 05:01:16 +0000 Manifest this update: Sat 20 Dec 2025 05:01:16 +0000 Manifest next update: Sun 21 Dec 2025 05:01:16 +0000 Files and hashes: 1: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl (hash: Tpk4RGfCZXRLf70x8LRlj3DsFFcGSk3X1XXDPuGuY5w=) 2: vczBs4Goi10ecTWa3tK1YBxJ8fE.roa (hash: gc2DMvIse8l38XyQwNHPrj9Yz7w21wzufb/ypACqbDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:2c:56:d3:5e:ab:f3:9f:01:d4:60:a3:19:b6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4 Validity Not Before: Dec 20 05:01:16 2025 GMT Not After : Dec 21 05:01:16 2025 GMT Subject: CN=8e4755699c96f0a44ef0be0aa2c34f529720f479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:ae:99:e2:b9:3e:4c:75:ac:1e:e1:ad:1b: 51:fc:0a:76:ea:e1:e6:62:43:3e:eb:c2:16:84:5d: 50:d5:ad:d6:b7:4c:0c:6c:fc:e2:2c:ae:2b:01:bc: 58:a9:f8:ac:13:cf:67:c4:2d:5a:00:c2:21:9d:64: ec:0c:27:ee:a0:20:a2:d9:8b:f5:39:7a:17:50:9e: 62:19:19:3d:58:2d:85:a1:ab:f5:3a:15:e5:12:88: 40:62:99:25:1c:e5:1b:56:91:13:92:74:52:b9:7b: a4:23:0e:c6:87:41:92:7e:17:bf:b0:97:04:9e:8a: d1:44:98:8a:56:d1:15:1d:c0:b2:5d:db:e4:d7:40: d6:8b:21:84:6e:79:4e:6e:c2:ae:0a:e7:b1:98:9d: ef:4e:e6:be:e2:b4:97:51:f0:fc:19:a9:fb:3a:5f: 13:51:9c:ad:6e:7e:18:17:73:c7:1d:5f:05:d2:22: 9b:b7:ed:13:c4:51:21:e9:fb:a5:e8:59:d2:fb:dc: 44:e3:d1:35:ac:fa:b1:54:5f:bd:46:0d:43:65:8f: 25:f1:f2:d5:cb:cf:13:b6:6c:01:7c:17:fd:7d:26: ff:f5:df:38:8e:c8:cc:d7:53:ec:a6:4e:7c:6e:28: f5:52:d5:d7:18:d4:27:c1:5f:4d:1c:e2:52:2f:43: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:47:55:69:9C:96:F0:A4:4E:F0:BE:0A:A2:C3:4F:52:97:20:F4:79 X509v3 Authority Key Identifier: keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ee:84:72:58:5d:df:19:cf:5c:f6:2d:bf:58:2b:cf:95:37: fb:05:a4:05:55:08:eb:94:f7:b1:04:83:68:2a:24:2c:88:bc: ec:3f:93:8f:7f:3a:6b:63:e9:2b:52:ce:9c:55:b1:f5:1f:af: 61:a1:d9:b0:f5:3d:82:fd:12:14:1c:d3:33:ce:90:17:d3:70: f3:0e:b7:d4:a6:12:93:ba:99:89:af:43:54:11:36:c8:38:98: 6b:cd:43:0c:60:c7:3f:c6:27:21:ce:dc:2c:79:71:08:c3:ba: a3:b7:5d:b4:e1:d5:3e:9d:aa:11:29:e7:9f:de:20:3f:4e:3d: f9:5f:81:f3:30:c9:de:fd:fd:ef:8f:e9:86:0e:59:2b:66:6b: 4a:13:7d:0a:89:88:90:73:d6:c7:2f:f9:85:65:54:57:91:e2: 49:6a:3e:ee:02:8b:72:d4:3d:81:25:54:35:e3:bc:be:cb:b8: 25:be:38:1a:c9:6e:63:12:b6:0f:84:a1:e7:15:a5:7d:5b:22: 9b:63:64:da:24:bc:1a:f0:a1:8c:f3:50:ab:06:62:1b:cd:fb: a0:5a:44:c4:f3:72:35:3c:db:15:ee:4e:2a:e0:5b:ce:0b:0c: b3:93:79:5d:47:88:94:51:29:c4:ae:de:4d:6d:7c:09:bd:e8: cd:74:bd:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IixW016r858B1GCjGbZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2U0ODhlZmEzYzE4NGY0YWNiMmZjMzBlYjFhNzFmYTEx NmY5YjQwHhcNMjUxMjIwMDUwMTE2WhcNMjUxMjIxMDUwMTE2WjAzMTEwLwYDVQQD Eyg4ZTQ3NTU2OTljOTZmMGE0NGVmMGJlMGFhMmMzNGY1Mjk3MjBmNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufOumeK5Pkx1rB7hrRtR/Ap26uHm YkM+68IWhF1Q1a3Wt0wMbPziLK4rAbxYqfisE89nxC1aAMIhnWTsDCfuoCCi2Yv1 OXoXUJ5iGRk9WC2Foav1OhXlEohAYpklHOUbVpETknRSuXukIw7Gh0GSfhe/sJcE norRRJiKVtEVHcCyXdvk10DWiyGEbnlObsKuCuexmJ3vTua+4rSXUfD8Gan7Ol8T UZytbn4YF3PHHV8F0iKbt+0TxFEh6ful6FnS+9xE49E1rPqxVF+9Rg1DZY8l8fLV y88TtmwBfBf9fSb/9d84jsjM11Pspk58bij1UtXXGNQnwV9NHOJSL0P0zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5HVWmclvCkTvC+CqLDT1KXIPR5MB8GA1UdIwQY MBaAFBnOSI76PBhPSssvww6xpx+hFvm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2M1SWp2bzhHRTlLeXlfRERyR25INkVXLWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZmVmNzEtOTIyZS00NDQ4LWIzN2Qt Zjc0MGI5ZTFjNDgwLzEvR2M1SWp2bzhHRTlLeXlfRERyR25INkVXLWJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wZmVmNzEtOTIyZS00NDQ4LWIzN2QtZjc0MGI5ZTFjNDgw LzEvR2M1SWp2bzhHRTlLeXlfRERyR25INkVXLWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOO6Eclhd 3xnPXPYtv1grz5U3+wWkBVUI65T3sQSDaCokLIi87D+Tj386a2PpK1LOnFWx9R+v YaHZsPU9gv0SFBzTM86QF9Nw8w631KYSk7qZia9DVBE2yDiYa81DDGDHP8YnIc7c LHlxCMO6o7ddtOHVPp2qESnnn94gP049+V+B8zDJ3v3974/phg5ZK2ZrShN9ComI kHPWxy/5hWVUV5HiSWo+7gKLctQ9gSVUNeO8vsu4Jb44GsluYxK2D4Sh5xWlfVsi m2Nk2iS8GvChjPNQqwZiG837oFpExPNyNTzbFe5OKuBbzgsMs5N5XUeIlFEpxK7e TW18Cb3ozXS9nw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:08:41 2025 by rpki-client