This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json) Hash identifier: R/8aV4XKEb5L//FBD1Go6j25Dtc0BJiFEfV4fTNt6+8= Subject key identifier: C6:9C:F1:E4:FB:43:F3:20:66:C8:19:2B:BC:FA:0E:77:00:EB:2B:D7 Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf Certificate serial: 019B4E845FFE536CC3B8B989921AA684CBFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft Manifest number: 0BA8 Signing time: Wed 24 Dec 2025 04:00:56 +0000 Manifest this update: Wed 24 Dec 2025 04:00:56 +0000 Manifest next update: Thu 25 Dec 2025 04:00:56 +0000 Files and hashes: 1: 5QlNV7-3Q34zZfQ5XbNLc8wKA40.roa (hash: T1GmpANOUDoxZLUDnHoNMN2ENMK9C/xESzMwTNL0s2Y=) 2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: nkfAavyTL2orhoaVX3em3sIMxKOuytGSAHhr5DWEt1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:5f:fe:53:6c:c3:b8:b9:89:92:1a:a6:84:cb:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf Validity Not Before: Dec 24 04:00:56 2025 GMT Not After : Dec 25 04:00:56 2025 GMT Subject: CN=c69cf1e4fb43f32066c8192bbcfa0e7700eb2bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:15:97:e8:39:1d:9d:0f:f8:09:c2:56:31:aa: a6:a4:51:13:1b:7b:7a:a1:1c:60:d4:fd:4e:fc:d4: 1d:79:3d:24:5d:4a:52:86:8a:b0:70:32:9e:d2:ad: 2a:0f:d7:35:d0:78:b2:a6:73:1e:0e:f7:3f:7e:26: df:34:f0:90:39:cb:c0:89:da:69:6b:59:dc:42:e7: 6a:9b:02:7a:0f:b6:9a:f6:79:56:c0:d1:92:6c:2c: 8c:51:5f:3d:4b:cd:a8:26:79:a9:5d:82:4d:67:ad: 91:7d:2d:2b:62:09:e0:c4:1f:6c:42:79:db:30:b6: 5a:b7:98:f8:b4:7c:a7:4c:3b:98:12:ac:b9:09:d4: 3e:81:dc:3e:99:d5:30:99:7d:0f:4c:5c:55:cd:40: f0:73:d8:67:74:7a:00:5a:75:ca:65:1d:db:37:c8: 35:d3:c5:48:0f:18:15:1c:2b:a4:85:33:6f:8c:1e: dd:6a:a7:cc:13:12:66:70:48:56:6b:6d:26:59:c2: d9:66:63:00:53:ff:fc:16:1b:f1:d2:5e:b5:4f:05: 62:c5:5e:cd:0c:d1:00:bc:59:45:d7:40:d7:b9:37: 91:ec:74:51:c1:20:31:4d:92:b6:14:a2:75:d9:8b: 0b:36:42:8f:b0:4f:8d:25:f3:85:81:70:49:71:98: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9C:F1:E4:FB:43:F3:20:66:C8:19:2B:BC:FA:0E:77:00:EB:2B:D7 X509v3 Authority Key Identifier: keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7e:d3:95:b7:f6:26:49:83:47:4f:c5:cb:fc:7c:97:4c:6c: df:71:a1:39:1f:aa:a0:60:da:71:1e:81:db:a1:17:cc:67:45: d2:81:bb:22:5d:95:a6:ba:1f:56:23:31:23:d2:db:20:cd:77: 6a:1f:98:57:4c:ce:91:10:a5:06:25:7f:ea:66:ac:ca:19:41: 7c:fe:7f:99:22:0a:8d:b3:3c:8d:c2:df:a4:6a:f1:7f:aa:4b: 8d:a2:e6:42:35:d9:86:33:8d:d0:0c:0f:6e:f3:37:f3:63:49: f3:07:74:aa:61:7f:9e:85:15:fa:ef:b8:66:4d:9e:dc:cc:51: bf:e3:2e:52:23:15:2f:35:5b:d0:72:c4:37:6f:f5:d2:66:70: 98:d2:6e:c6:f8:c1:ef:a7:19:ac:3f:40:cf:be:06:92:92:f6: 10:5a:36:31:8b:0e:39:6a:f8:05:94:b6:e0:85:46:e2:d2:5d: 52:81:c8:d2:13:1c:3b:38:52:63:8b:db:8a:9d:96:4e:dc:ad: 2b:fe:f7:30:f8:d9:80:b0:e9:70:31:af:5c:67:32:79:c5:f1: 1b:0e:5b:4c:e7:e0:0e:8b:fb:dd:72:9a:eb:cb:81:34:be:ea: 9e:1a:6b:ae:0d:dc:d2:9c:1e:14:5c:48:85:cb:7b:e7:ae:94: a5:d3:49:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhF/+U2zDuLmJkhqmhMv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNDFmZWVhMTIzZmNiMDdlODcyYThjYjRiZGQ5YWI3Yjhk YTJmY2YwHhcNMjUxMjI0MDQwMDU2WhcNMjUxMjI1MDQwMDU2WjAzMTEwLwYDVQQD EyhjNjljZjFlNGZiNDNmMzIwNjZjODE5MmJiY2ZhMGU3NzAwZWIyYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshWX6DkdnQ/4CcJWMaqmpFETG3t6 oRxg1P1O/NQdeT0kXUpShoqwcDKe0q0qD9c10HiypnMeDvc/fibfNPCQOcvAidpp a1ncQudqmwJ6D7aa9nlWwNGSbCyMUV89S82oJnmpXYJNZ62RfS0rYgngxB9sQnnb MLZat5j4tHynTDuYEqy5CdQ+gdw+mdUwmX0PTFxVzUDwc9hndHoAWnXKZR3bN8g1 08VIDxgVHCukhTNvjB7daqfMExJmcEhWa20mWcLZZmMAU//8Fhvx0l61TwVixV7N DNEAvFlF10DXuTeR7HRRwSAxTZK2FKJ12YsLNkKPsE+NJfOFgXBJcZghLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMac8eT7Q/MgZsgZK7z6DncA6yvXMB8GA1UdIwQY MBaAFIBB/uoSP8sH6HKoy0vdmre42i/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kMzE3Y2EtMzk2MS00ZmUwLWJkZTgt ZjdjNTAxNDE4ZTU2LzEvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9kMzE3Y2EtMzk2MS00ZmUwLWJkZTgtZjdjNTAxNDE4ZTU2 LzEvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlX7Tlbf2 JkmDR0/Fy/x8l0xs33GhOR+qoGDacR6B26EXzGdF0oG7Il2VprofViMxI9LbIM13 ah+YV0zOkRClBiV/6masyhlBfP5/mSIKjbM8jcLfpGrxf6pLjaLmQjXZhjON0AwP bvM382NJ8wd0qmF/noUV+u+4Zk2e3MxRv+MuUiMVLzVb0HLEN2/10mZwmNJuxvjB 76cZrD9Az74GkpL2EFo2MYsOOWr4BZS24IVG4tJdUoHI0hMcOzhSY4vbip2WTtyt K/73MPjZgLDpcDGvXGcyecXxGw5bTOfgDov73XKa68uBNL7qnhprrg3c0pweFFxI hct7566UpdNJjg== -----END CERTIFICATE-----Generated at Wed Dec 24 12:27:10 2025 by rpki-client