This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft File: gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json) Hash identifier: p9x+wQruuwDKIPw7Cm8drEP/+hsFa4NOSeMMvsxBHTo= Subject key identifier: B0:B8:BE:CB:88:C0:FD:FA:D8:A0:F6:4E:EB:8F:4D:5E:60:DE:5A:D9 Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 Certificate issuer: /CN=81c11512eee8fed91c422f33b658d68bc34eb780 Certificate serial: 019B0EC9BA942E558FCD976347834C8C3751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft Manifest number: 0B20 Signing time: Thu 11 Dec 2025 19:01:00 +0000 Manifest this update: Thu 11 Dec 2025 19:01:00 +0000 Manifest next update: Fri 12 Dec 2025 19:01:00 +0000 Files and hashes: 1: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: trtXo8ZJ6u5Uy/9Ksr8syZ3zI3NUcJlygiENgB7OySk=) 2: oBBYy0ld98gJluOgW3OE5ry-1bI.roa (hash: cDSWMJxoBmliysmmQ82PR5LMpFN2xHzw2hwrTiHsQ+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:ba:94:2e:55:8f:cd:97:63:47:83:4c:8c:37:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780 Validity Not Before: Dec 11 19:01:00 2025 GMT Not After : Dec 12 19:01:00 2025 GMT Subject: CN=b0b8becb88c0fdfad8a0f64eeb8f4d5e60de5ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:c0:6b:f1:bf:34:69:95:20:4e:82:63:7d: 38:57:8e:d1:24:a1:fe:f7:c7:fe:e4:23:18:d1:70: 7c:6a:a4:ad:bd:de:c9:4a:38:7c:1b:7d:38:89:49: 90:11:d6:b5:bb:9a:21:4c:44:d5:59:dc:8d:8e:98: ab:75:f2:ea:a9:aa:a0:9b:31:62:02:95:09:a4:03: d5:91:a0:a4:3f:28:f6:d9:6a:c7:06:63:85:42:6b: 4b:70:e8:9b:06:f2:ac:fc:0c:e6:b0:88:d2:f5:c1: cf:fd:f8:e3:e5:8e:4b:15:71:b5:92:a3:72:f8:3e: fc:8d:93:d6:5c:07:32:6e:b4:89:51:5f:86:3a:60: 3e:c3:99:d6:db:c3:fd:60:1b:4c:4e:99:69:4a:9d: 2e:8d:8e:26:ca:2f:34:76:d3:f4:af:b5:6d:85:77: 2c:db:f4:07:1a:b4:f1:07:d8:1f:ef:fa:80:8d:64: e7:bd:ea:41:e8:4e:70:4c:9d:69:15:a0:38:c7:ad: 82:4d:3a:84:fc:6f:69:bd:8d:94:d8:29:f6:68:2b: 17:a9:47:40:04:84:85:f2:ef:82:9b:1f:4c:25:73: 47:7a:43:5c:cc:72:de:00:33:7b:1b:c7:76:53:87: 9b:a7:f8:62:2a:0f:16:55:c2:2a:d8:4f:9b:33:f8: cd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B8:BE:CB:88:C0:FD:FA:D8:A0:F6:4E:EB:8F:4D:5E:60:DE:5A:D9 X509v3 Authority Key Identifier: keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a1:d5:90:a0:1c:17:98:21:6d:c1:e4:64:df:cc:a0:77:46: 45:5c:c0:e4:ea:da:7c:74:49:5b:ae:24:25:29:25:f0:0a:27: 5f:08:7a:3f:15:b5:ba:71:8d:f3:43:5d:5f:d4:c3:7b:1a:a8: f1:d3:17:d6:29:f4:9b:3d:b0:56:36:16:e7:48:eb:85:19:af: b5:83:48:50:60:37:16:f7:1e:d7:cf:f6:fb:0b:c9:57:f8:2d: 2c:f7:47:71:bd:aa:d9:4a:12:47:0c:40:aa:cd:3f:1f:66:9d: c7:40:39:82:b9:72:b0:22:ba:b3:64:bb:5c:19:b9:3f:6c:d2: 1e:53:5e:dc:72:70:7d:67:f4:71:f1:3f:e7:3a:f2:e2:bd:08: 82:2d:94:c7:63:7d:b1:5f:f1:da:e0:70:11:b1:88:b8:33:30: 26:f8:7d:db:3b:81:7e:db:f4:00:f2:e8:be:d2:b3:78:98:bf: ec:c4:2d:45:69:30:3a:21:b7:e4:f6:42:47:0f:a2:2f:f2:6f: e1:48:e2:99:ff:ea:85:90:ef:a6:56:9b:0d:a4:0c:99:0c:20: 87:4e:78:56:82:c7:d1:f6:cc:99:a3:f3:2b:68:64:4b:49:73: 3d:c8:59:d3:0a:fe:bc:e0:f3:11:8d:7d:6e:b9:bb:b3:98:df: 20:37:5d:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOybqULlWPzZdjR4NMjDdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzExNTEyZWVlOGZlZDkxYzQyMmYzM2I2NThkNjhiYzM0 ZWI3ODAwHhcNMjUxMjExMTkwMTAwWhcNMjUxMjEyMTkwMTAwWjAzMTEwLwYDVQQD EyhiMGI4YmVjYjg4YzBmZGZhZDhhMGY2NGVlYjhmNGQ1ZTYwZGU1YWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFbAa/G/NGmVIE6CY304V47RJKH+ 98f+5CMY0XB8aqStvd7JSjh8G304iUmQEda1u5ohTETVWdyNjpirdfLqqaqgmzFi ApUJpAPVkaCkPyj22WrHBmOFQmtLcOibBvKs/AzmsIjS9cHP/fjj5Y5LFXG1kqNy +D78jZPWXAcybrSJUV+GOmA+w5nW28P9YBtMTplpSp0ujY4myi80dtP0r7VthXcs 2/QHGrTxB9gf7/qAjWTnvepB6E5wTJ1pFaA4x62CTTqE/G9pvY2U2Cn2aCsXqUdA BISF8u+Cmx9MJXNHekNczHLeADN7G8d2U4ebp/hiKg8WVcIq2E+bM/jNUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLC4vsuIwP362KD2TuuPTV5g3lrZMB8GA1UdIwQY MBaAFIHBFRLu6P7ZHEIvM7ZY1ovDTreAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUt ZTIzYWQ3OTliMWQxLzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUtZTIzYWQ3OTliMWQx LzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKHVkKAc F5ghbcHkZN/MoHdGRVzA5OrafHRJW64kJSkl8AonXwh6PxW1unGN80NdX9TDexqo 8dMX1in0mz2wVjYW50jrhRmvtYNIUGA3Fvce18/2+wvJV/gtLPdHcb2q2UoSRwxA qs0/H2adx0A5grlysCK6s2S7XBm5P2zSHlNe3HJwfWf0cfE/5zry4r0Igi2Ux2N9 sV/x2uBwEbGIuDMwJvh92zuBftv0APLovtKzeJi/7MQtRWkwOiG35PZCRw+iL/Jv 4Ujimf/qhZDvplabDaQMmQwgh054VoLH0fbMmaPzK2hkS0lzPchZ0wr+vODzEY19 brm7s5jfIDdduA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:17 2025 by rpki-client