This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft File: gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json) Hash identifier: BOD1QnxwfKUQzq9yvHvdrkYV+hjsZZZmkv1Kq/cMfW8= Subject key identifier: 78:F2:38:52:2C:C6:34:95:8C:D8:42:39:4A:EC:B3:78:BF:F6:AA:55 Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26 Certificate issuer: /CN=81c00cc8c73d1141c89254ed556a8d012ca90226 Certificate serial: 019B405B1BA99A560BD2C67F5C799E556050 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft Manifest number: 09D7 Signing time: Sun 21 Dec 2025 10:01:11 +0000 Manifest this update: Sun 21 Dec 2025 10:01:11 +0000 Manifest next update: Mon 22 Dec 2025 10:01:11 +0000 Files and hashes: 1: Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa (hash: A6c2c+PXtuhOYqewWMvzWTg68sLONrRYQPMKhm+zXUU=) 2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: SO6nlWqgkV4lGPRggzPJmJLyUN38umMT46JOjt+VObs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:1b:a9:9a:56:0b:d2:c6:7f:5c:79:9e:55:60:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226 Validity Not Before: Dec 21 10:01:11 2025 GMT Not After : Dec 22 10:01:11 2025 GMT Subject: CN=78f238522cc634958cd842394aecb378bff6aa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:b0:9b:e7:46:56:ee:5c:99:53:1e:1d:71: ce:64:78:3d:7a:92:6d:80:67:53:72:bb:58:9d:34: 7f:3d:86:46:f8:39:b9:83:eb:70:ef:57:09:19:05: f6:bc:d6:d3:b7:c3:d4:d9:a7:f1:f3:b4:55:b3:51: fd:33:0c:ff:8b:46:4f:e4:79:7d:03:82:e5:e9:e2: 0e:97:14:b9:c7:6d:29:39:f2:b1:31:55:5d:7c:70: 03:2a:cf:64:b7:46:a6:91:12:28:e1:ed:86:64:61: b4:f2:69:0e:6c:16:a5:a9:1e:00:d9:82:7e:5a:51: f1:02:55:fd:4b:96:2c:b0:22:a2:35:65:d8:c6:fd: 53:5a:9a:54:45:79:cc:90:e3:74:d2:f9:6a:a3:9a: a3:7b:e9:d4:a1:6c:90:f8:78:79:31:e7:37:f7:e4: ea:fc:25:2c:ef:4b:7d:bd:65:fe:1d:1f:a2:ff:ed: 1b:9a:66:b8:c9:8b:4b:52:fd:29:06:ad:8a:c3:1b: f7:2b:2b:9a:18:c5:b7:2d:35:b5:73:b5:42:4b:a8: 6b:18:72:d8:a0:21:3e:6d:5f:69:c4:ee:98:16:71: e4:d7:c5:c9:19:de:9b:f1:56:37:fc:f5:c0:4f:14: fc:e4:12:7a:74:d5:0b:0d:86:29:57:60:62:e2:e2: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F2:38:52:2C:C6:34:95:8C:D8:42:39:4A:EC:B3:78:BF:F6:AA:55 X509v3 Authority Key Identifier: keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f8:1f:c1:ca:f1:d7:b1:b1:cf:86:ae:73:e0:da:38:62:6e: cf:46:b5:b9:94:71:02:5f:d7:65:19:2a:f1:05:5d:4d:33:c0: b4:7e:75:41:d1:84:d2:37:71:ee:83:43:61:0e:9f:7c:33:5e: fa:73:d7:2d:ce:88:2a:98:da:9a:2e:c2:d1:aa:a5:b0:f9:e4: 60:12:15:64:f0:f8:eb:ca:90:7a:14:09:5a:6a:97:90:8f:9a: f9:47:40:c0:98:3a:af:04:03:62:b6:53:b6:7d:3e:fb:35:4e: 5b:51:49:fe:0d:2e:7e:6b:0c:88:ad:3c:78:8f:3a:4d:83:de: 7c:0c:32:8e:95:db:7b:bc:3d:a5:af:e4:2d:37:09:33:d4:68: b5:59:4b:6f:0f:9e:6a:4f:43:34:0b:50:30:72:9e:96:36:f4: 1c:b4:38:d0:3d:61:f7:2e:a1:df:b9:f2:ec:d6:ef:c6:35:89: 62:13:1c:26:37:de:eb:76:0a:67:75:b3:48:35:ad:29:e3:64: 8e:f5:f4:81:1a:7f:06:b7:56:66:d8:78:5f:63:0d:f4:2c:d2: 20:ae:c7:45:84:83:92:e9:8d:b4:73:3c:89:8b:bd:25:98:de: d6:12:55:41:fb:6e:4b:f7:7b:0b:e6:48:51:28:fa:70:46:0f: dc:6e:04:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxupmlYL0sZ/XHmeVWBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzAwY2M4YzczZDExNDFjODkyNTRlZDU1NmE4ZDAxMmNh OTAyMjYwHhcNMjUxMjIxMTAwMTExWhcNMjUxMjIyMTAwMTExWjAzMTEwLwYDVQQD Eyg3OGYyMzg1MjJjYzYzNDk1OGNkODQyMzk0YWVjYjM3OGJmZjZhYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVuwm+dGVu5cmVMeHXHOZHg9epJt gGdTcrtYnTR/PYZG+Dm5g+tw71cJGQX2vNbTt8PU2afx87RVs1H9Mwz/i0ZP5Hl9 A4Ll6eIOlxS5x20pOfKxMVVdfHADKs9kt0amkRIo4e2GZGG08mkObBalqR4A2YJ+ WlHxAlX9S5YssCKiNWXYxv1TWppURXnMkON00vlqo5qje+nUoWyQ+Hh5Mec39+Tq /CUs70t9vWX+HR+i/+0bmma4yYtLUv0pBq2Kwxv3KyuaGMW3LTW1c7VCS6hrGHLY oCE+bV9pxO6YFnHk18XJGd6b8VY3/PXATxT85BJ6dNULDYYpV2Bi4uLXAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjyOFIsxjSVjNhCOUrss3i/9qpVMB8GA1UdIwQY MBaAFIHADMjHPRFByJJU7VVqjQEsqQImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUt OTA1Mjc2YzVjNDE0LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUtOTA1Mjc2YzVjNDE0 LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/gfwcrx 17Gxz4auc+DaOGJuz0a1uZRxAl/XZRkq8QVdTTPAtH51QdGE0jdx7oNDYQ6ffDNe +nPXLc6IKpjami7C0aqlsPnkYBIVZPD468qQehQJWmqXkI+a+UdAwJg6rwQDYrZT tn0++zVOW1FJ/g0ufmsMiK08eI86TYPefAwyjpXbe7w9pa/kLTcJM9RotVlLbw+e ak9DNAtQMHKeljb0HLQ40D1h9y6h37ny7NbvxjWJYhMcJjfe63YKZ3WzSDWtKeNk jvX0gRp/BrdWZth4X2MN9CzSIK7HRYSDkumNtHM8iYu9JZje1hJVQftuS/d7C+ZI USj6cEYP3G4EqA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:50:05 2025 by rpki-client