This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft File: GCJVGHajpiZZn0Z8eucJuBwU30k.mft (raw, json) Hash identifier: RUlP6VEjcDpf8tfrIu8a4LkUHHyiwvbOHRJ8EJFEXEA= Subject key identifier: 10:CF:62:AF:80:BD:02:2F:5D:45:2B:40:8E:93:A6:E5:53:9D:B2:77 Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49 Certificate issuer: /CN=1822551876a3a626599f467c7ae709b81c14df49 Certificate serial: 019B34C5B523EE26B2B40EE5E12CFCE19591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft Manifest number: 0FDF Signing time: Fri 19 Dec 2025 04:02:10 +0000 Manifest this update: Fri 19 Dec 2025 04:02:10 +0000 Manifest next update: Sat 20 Dec 2025 04:02:10 +0000 Files and hashes: 1: GCJVGHajpiZZn0Z8eucJuBwU30k.crl (hash: iWkK5z+Eo2jsLAHF4C5LHudL7M3l+q92ZjA9Obg1gA4=) 2: zPNwPn3PfVOL4wGom7HVDS4IKn8.roa (hash: zy7voOzOVbZPTN+jLWETC47nf/PEol3aN9sp5d/kZvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:b5:23:ee:26:b2:b4:0e:e5:e1:2c:fc:e1:95:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49 Validity Not Before: Dec 19 04:02:10 2025 GMT Not After : Dec 20 04:02:10 2025 GMT Subject: CN=10cf62af80bd022f5d452b408e93a6e5539db277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d3:77:14:36:77:c1:0c:d4:c8:85:01:cb:b8: da:e1:49:01:86:b5:f7:c3:a4:10:f2:39:0e:4a:e9: 22:37:78:ae:78:c1:6e:43:d2:6a:9c:36:be:d6:92: b9:84:c2:3a:22:fb:cd:5b:b5:a4:63:03:6b:8b:34: 6d:e8:fe:65:58:d9:89:1d:46:51:a7:f6:67:77:77: d8:7e:17:53:17:76:fd:fd:ef:7e:c2:c8:51:56:c2: 19:98:8b:2a:91:19:44:77:52:38:30:54:71:de:05: 7e:6c:24:43:03:1d:0b:64:bb:68:5d:0f:a3:21:d8: a5:8d:b9:8d:c0:ce:52:7e:ee:c0:b5:4a:1d:e7:01: 1a:17:25:c8:f5:f5:53:5f:72:46:81:c5:50:3e:a0: b6:56:05:2b:49:e9:c3:80:af:58:8a:1d:ec:94:9a: 70:67:d1:90:31:14:e8:33:89:cf:42:d0:d9:18:7f: 40:d6:95:a8:d6:b6:5e:be:f0:a0:88:ca:f7:95:e4: 4c:c4:1e:5d:9c:d1:03:50:78:96:d2:5c:58:4d:ed: f4:a2:d6:06:18:a1:1a:d2:74:f5:2d:d5:6e:a4:94: e3:7f:11:c3:3c:fa:c3:f5:a1:d0:cc:02:d9:45:56: a8:03:e3:18:aa:93:7e:c0:cd:a7:3d:5e:c2:fc:2f: db:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CF:62:AF:80:BD:02:2F:5D:45:2B:40:8E:93:A6:E5:53:9D:B2:77 X509v3 Authority Key Identifier: keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3d:72:9c:47:8b:96:30:b7:71:ea:b0:db:43:5f:e9:29:ba: 3c:f9:e6:95:4a:81:10:45:57:2a:0c:4b:f5:cb:24:b3:51:03: 7b:4d:b7:06:95:00:17:d8:65:ed:c7:66:c7:01:7c:82:5c:be: d4:7c:da:5b:95:5d:a6:75:2e:8c:3d:ed:21:b3:51:79:83:35: fa:87:7c:64:92:4a:88:a5:4d:2f:96:94:28:94:5d:48:fd:99: bd:5d:fc:e9:1f:36:2b:21:57:95:e0:44:74:e2:5a:5f:c6:e2: ae:6e:1e:34:36:e3:6a:71:c4:d3:52:33:6e:77:6a:7b:ca:df: 11:9d:cc:7e:b8:66:66:ba:ad:6e:25:68:fa:94:df:50:a9:29: ff:dc:c7:6b:5c:e5:21:bf:09:a4:49:8d:64:b7:7f:f4:70:d8: b5:9b:4b:4f:3c:67:b1:4c:1e:79:2e:78:c6:10:80:b2:c9:88: ba:5a:26:d7:02:10:d1:dc:c2:68:07:0a:70:33:57:94:4d:8e: 18:38:3b:7a:50:a4:6d:9d:b5:ae:a0:f0:e0:87:03:56:64:78: e6:d7:57:9e:05:1e:19:53:10:57:0e:e8:1e:60:65:e7:80:5d: 8e:f3:04:26:71:39:59:c5:08:e9:9d:50:60:20:00:74:78:0c: 20:06:b4:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xbUj7iaytA7l4Sz84ZWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MjI1NTE4NzZhM2E2MjY1OTlmNDY3YzdhZTcwOWI4MWMx NGRmNDkwHhcNMjUxMjE5MDQwMjEwWhcNMjUxMjIwMDQwMjEwWjAzMTEwLwYDVQQD EygxMGNmNjJhZjgwYmQwMjJmNWQ0NTJiNDA4ZTkzYTZlNTUzOWRiMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtN3FDZ3wQzUyIUBy7ja4UkBhrX3 w6QQ8jkOSukiN3iueMFuQ9JqnDa+1pK5hMI6IvvNW7WkYwNrizRt6P5lWNmJHUZR p/Znd3fYfhdTF3b9/e9+wshRVsIZmIsqkRlEd1I4MFRx3gV+bCRDAx0LZLtoXQ+j IdiljbmNwM5Sfu7AtUod5wEaFyXI9fVTX3JGgcVQPqC2VgUrSenDgK9Yih3slJpw Z9GQMRToM4nPQtDZGH9A1pWo1rZevvCgiMr3leRMxB5dnNEDUHiW0lxYTe30otYG GKEa0nT1LdVupJTjfxHDPPrD9aHQzALZRVaoA+MYqpN+wM2nPV7C/C/bpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDPYq+AvQIvXUUrQI6TpuVTnbJ3MB8GA1UdIwQY MBaAFBgiVRh2o6YmWZ9GfHrnCbgcFN9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0NKVkdIYWpwaVpabjBaOGV1Y0p1QndVMzBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iYzY2OTQtMTQxNy00OWZlLWI0YzUt NDEyYjQ3NjdhYzQ1LzEvR0NKVkdIYWpwaVpabjBaOGV1Y0p1QndVMzBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iYzY2OTQtMTQxNy00OWZlLWI0YzUtNDEyYjQ3NjdhYzQ1 LzEvR0NKVkdIYWpwaVpabjBaOGV1Y0p1QndVMzBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXD1ynEeL ljC3ceqw20Nf6Sm6PPnmlUqBEEVXKgxL9csks1EDe023BpUAF9hl7cdmxwF8gly+ 1HzaW5VdpnUujD3tIbNReYM1+od8ZJJKiKVNL5aUKJRdSP2ZvV386R82KyFXleBE dOJaX8birm4eNDbjanHE01Izbndqe8rfEZ3MfrhmZrqtbiVo+pTfUKkp/9zHa1zl Ib8JpEmNZLd/9HDYtZtLTzxnsUweeS54xhCAssmIulom1wIQ0dzCaAcKcDNXlE2O GDg7elCkbZ21rqDw4IcDVmR45tdXngUeGVMQVw7oHmBl54BdjvMEJnE5WcUI6Z1Q YCAAdHgMIAa0rA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:33:34 2025 by rpki-client