This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json) Hash identifier: bN5s1buUM9HV/88B41sk0U4GDqHBiVz48VHNIKVI67c= Subject key identifier: 93:3B:4E:4F:80:63:05:0E:49:69:C7:5C:9B:A5:9E:6F:3C:B6:99:42 Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb Certificate serial: 019B5D5388F65D5BC0469FA6692101F6E310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft Manifest number: 0DC6 Signing time: Sat 27 Dec 2025 01:01:54 +0000 Manifest this update: Sat 27 Dec 2025 01:01:54 +0000 Manifest next update: Sun 28 Dec 2025 01:01:54 +0000 Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: LMxswyNeAeXBm9zkOGYGRdl0AwqIEX4i9xZpeG345mI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:88:f6:5d:5b:c0:46:9f:a6:69:21:01:f6:e3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb Validity Not Before: Dec 27 01:01:54 2025 GMT Not After : Dec 28 01:01:54 2025 GMT Subject: CN=933b4e4f8063050e4969c75c9ba59e6f3cb69942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:72:3c:82:dd:cb:f5:f8:ec:b0:2d:7c:c3: dc:59:12:26:49:d5:c7:45:d4:c1:14:56:a8:ba:9b: 35:2f:e3:58:26:f4:b8:9d:21:b4:92:35:58:b7:aa: e7:1f:94:2e:5a:aa:37:66:29:82:fb:f4:85:19:1c: 0a:65:38:e3:19:d2:70:74:a5:6b:44:dc:27:ce:da: 01:78:91:e1:a4:bc:cb:96:8a:19:f9:8a:d2:0d:77: 21:65:4e:38:57:d9:67:14:86:64:9a:57:7b:eb:1d: 1a:69:f2:88:05:05:41:db:91:34:d3:b0:39:14:56: 86:30:bc:e4:38:95:fd:19:52:7c:98:4a:de:5d:ca: c1:15:92:48:32:5a:f5:7b:89:ad:ae:5a:32:b6:68: e2:09:4a:c8:05:90:35:ed:49:e0:b7:80:4b:39:8e: f1:ef:b0:07:a7:19:6a:cd:d7:1f:ad:2d:d1:9b:bf: 16:4d:6d:9b:df:45:53:e5:b2:bb:61:c3:a0:58:a2: 53:09:bd:59:f8:72:b7:80:57:d4:b0:e3:98:a4:04: e3:4b:e1:62:1e:53:69:a9:2b:9b:a7:0a:1a:d8:ff: e3:9b:ce:1d:90:55:f1:78:aa:46:98:25:41:cb:af: 27:88:bb:13:69:3a:35:31:91:12:c1:63:44:16:8c: 33:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3B:4E:4F:80:63:05:0E:49:69:C7:5C:9B:A5:9E:6F:3C:B6:99:42 X509v3 Authority Key Identifier: keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6f:a8:a4:d2:be:b8:37:b7:be:af:77:80:2f:b7:dd:df:84: 7a:92:04:66:88:5a:2f:f9:4a:e3:ce:41:43:b3:8d:28:d1:a3: 90:be:cd:7d:4d:91:4e:c8:5b:71:9b:98:88:3f:78:c5:85:65: fd:cc:53:f3:70:c7:19:74:c6:33:9d:5e:4d:2e:a5:c6:56:7d: 2e:aa:be:30:a3:55:a6:61:7c:05:10:c8:1c:3a:cc:ff:86:4d: 2a:f4:46:2f:66:b2:1d:b0:83:cc:14:2f:98:97:e6:ba:a0:8b: 61:cf:39:18:4c:ba:5b:86:b8:97:2d:5c:8e:a4:16:50:05:50: df:47:3a:18:2b:ca:a5:82:ef:9f:ec:0a:eb:63:0f:19:1f:3c: 31:c8:e4:e0:22:b3:12:29:b0:d1:b7:d0:84:d6:a1:0d:51:e6: 18:36:90:92:60:10:92:74:aa:d5:f2:63:ec:2d:f8:40:2f:b6: 18:fd:f6:98:2f:f7:3a:a0:6a:e5:2b:37:84:51:e6:92:3c:cc: 88:39:9f:9b:7f:6a:a8:e2:23:3e:7c:c3:d1:f3:f7:09:bd:cd: cb:51:11:f6:29:77:41:3a:2b:a5:cb:18:7b:44:03:f5:99:a8: 4f:fc:34:61:a9:fb:b2:0b:a6:cc:f3:c5:29:2e:86:1b:b1:f3: 63:d1:b5:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU4j2XVvARp+maSEB9uMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NGQxZjQwODMzODNmNTY4OTVkNmUzZTczYThhMDc3YWRl YjUwY2IwHhcNMjUxMjI3MDEwMTU0WhcNMjUxMjI4MDEwMTU0WjAzMTEwLwYDVQQD Eyg5MzNiNGU0ZjgwNjMwNTBlNDk2OWM3NWM5YmE1OWU2ZjNjYjY5OTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMhyPILdy/X47LAtfMPcWRImSdXH RdTBFFaoups1L+NYJvS4nSG0kjVYt6rnH5QuWqo3ZimC+/SFGRwKZTjjGdJwdKVr RNwnztoBeJHhpLzLlooZ+YrSDXchZU44V9lnFIZkmld76x0aafKIBQVB25E007A5 FFaGMLzkOJX9GVJ8mEreXcrBFZJIMlr1e4mtrloytmjiCUrIBZA17Ungt4BLOY7x 77AHpxlqzdcfrS3Rm78WTW2b30VT5bK7YcOgWKJTCb1Z+HK3gFfUsOOYpATjS+Fi HlNpqSubpwoa2P/jm84dkFXxeKpGmCVBy68niLsTaTo1MZESwWNEFowzwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJM7Tk+AYwUOSWnHXJulnm88tplCMB8GA1UdIwQY MBaAFBhNH0CDOD9WiV1uPnOooHet61DLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEt NjZjYzA4M2I1NjY5LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEtNjZjYzA4M2I1NjY5 LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfG+opNK+ uDe3vq93gC+33d+EepIEZohaL/lK485BQ7ONKNGjkL7NfU2RTshbcZuYiD94xYVl /cxT83DHGXTGM51eTS6lxlZ9Lqq+MKNVpmF8BRDIHDrM/4ZNKvRGL2ayHbCDzBQv mJfmuqCLYc85GEy6W4a4ly1cjqQWUAVQ30c6GCvKpYLvn+wK62MPGR88Mcjk4CKz Eimw0bfQhNahDVHmGDaQkmAQknSq1fJj7C34QC+2GP32mC/3OqBq5Ss3hFHmkjzM iDmfm39qqOIjPnzD0fP3Cb3Ny1ER9il3QTorpcsYe0QD9ZmoT/w0Yan7sgumzPPF KS6GG7HzY9G1jA== -----END CERTIFICATE-----Generated at Sat Dec 27 04:10:36 2025 by rpki-client