This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json) Hash identifier: x7OrNXadzLQLxJhhlTkp5bf0g9cQaZ5FgXqeoG5fUXY= Subject key identifier: FF:06:AC:9E:54:35:68:1C:F7:FD:34:CF:37:A4:8A:AC:33:0A:39:03 Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a Certificate serial: 019B54BD04833CD1A0F3A4BDB8EAF2D75FC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft Manifest number: 118C Signing time: Thu 25 Dec 2025 09:00:31 +0000 Manifest this update: Thu 25 Dec 2025 09:00:31 +0000 Manifest next update: Fri 26 Dec 2025 09:00:31 +0000 Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: O6YX5G+YIErcn11YHAG+E37N9voxX3LxAosHMiNK3kY=) 2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:04:83:3c:d1:a0:f3:a4:bd:b8:ea:f2:d7:5f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a Validity Not Before: Dec 25 09:00:31 2025 GMT Not After : Dec 26 09:00:31 2025 GMT Subject: CN=ff06ac9e5435681cf7fd34cf37a48aac330a3903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:0c:b7:bc:f9:73:b6:c7:c4:a5:06:88:9b: 75:4a:1d:80:32:01:8e:ea:fb:02:c0:6e:4d:fc:c3: c0:66:24:87:f0:b7:5f:75:89:0e:2d:57:88:f3:16: 93:06:fc:25:28:28:30:32:3a:6a:e6:e5:ae:e8:0c: b2:c3:13:9d:65:9d:c6:2d:68:18:f0:2b:58:24:cb: 8c:0e:d3:37:39:2f:e2:aa:3d:3d:01:85:12:a9:dd: 13:44:d2:e8:4d:e2:aa:b3:ef:a7:c6:10:66:e9:d7: 6f:06:66:dc:1c:65:10:43:8f:05:fe:23:71:d3:c9: 80:07:7d:e3:09:25:24:1e:2d:57:fc:e7:62:52:1d: bd:c4:6e:b0:43:d0:16:ff:61:9b:06:ee:51:81:d0: e9:3c:1f:51:d1:42:de:90:f6:eb:c2:de:bb:14:39: 09:15:73:e2:d8:45:01:92:c7:65:bb:b1:f0:ee:7a: 56:5e:7c:95:16:6c:78:96:3e:7c:21:ad:0c:2d:55: 8a:91:40:ff:61:91:bc:b2:c0:2a:12:d8:f7:f3:65: 5d:d5:83:47:1b:3e:3b:14:75:91:34:4c:d8:61:2c: 7b:60:2e:b6:47:2b:5b:27:cb:af:0e:d8:6f:4a:ac: 7a:09:e1:18:b6:dc:e7:d6:de:5f:e8:f5:d3:d0:5e: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:06:AC:9E:54:35:68:1C:F7:FD:34:CF:37:A4:8A:AC:33:0A:39:03 X509v3 Authority Key Identifier: keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:11:a0:dd:d5:b7:79:7f:43:bc:6b:d2:f5:a7:32:83:20:15: 3c:1b:34:df:cd:25:8a:a8:3a:f5:2d:fa:5a:3d:b6:39:fd:7c: e1:3e:62:2a:bd:ff:7a:34:9b:95:2f:db:45:35:e9:3e:2e:2f: 79:0f:dd:98:15:cf:0e:09:2e:22:d0:b5:18:d1:11:35:82:1c: 12:fc:f6:5e:0b:fb:57:21:ac:a2:be:ac:09:d9:6e:4e:62:7e: 3d:3a:c0:06:2f:b0:9c:9f:83:6c:e4:f1:12:3f:6b:22:b0:ce: 03:8a:22:da:bc:f7:a4:c2:17:0a:77:56:a7:f0:f3:f5:4c:52: c0:81:96:15:41:eb:a5:35:cb:57:56:5d:3f:48:c6:81:69:d0: 8e:a1:4e:1e:45:3d:32:62:f3:e6:a3:f0:46:4e:7f:5a:a8:84: 2c:37:70:0b:39:28:1e:ba:1c:fd:aa:36:fe:ba:3b:f2:6e:95: 22:a2:76:19:21:09:bf:9e:ca:f1:84:2e:58:01:19:e1:35:b3: 8e:5c:b9:4a:0c:a7:ca:e5:be:26:09:c1:bc:e5:f3:87:59:43: 93:52:99:12:1c:2a:f3:52:9e:80:df:4e:23:34:ee:34:d3:68: 0e:7b:ce:81:ab:23:6d:5f:d9:24:d6:40:40:01:e3:53:cb:7c: 13:c4:2c:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvQSDPNGg86S9uOry11/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NGM3YzAzNjRmMTA5M2NmYzU4NGM5MzAzNzAyNDEwNGZi NDg1NGEwHhcNMjUxMjI1MDkwMDMxWhcNMjUxMjI2MDkwMDMxWjAzMTEwLwYDVQQD EyhmZjA2YWM5ZTU0MzU2ODFjZjdmZDM0Y2YzN2E0OGFhYzMzMGEzOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gIMt7z5c7bHxKUGiJt1Sh2AMgGO 6vsCwG5N/MPAZiSH8LdfdYkOLVeI8xaTBvwlKCgwMjpq5uWu6AyywxOdZZ3GLWgY 8CtYJMuMDtM3OS/iqj09AYUSqd0TRNLoTeKqs++nxhBm6ddvBmbcHGUQQ48F/iNx 08mAB33jCSUkHi1X/OdiUh29xG6wQ9AW/2GbBu5RgdDpPB9R0ULekPbrwt67FDkJ FXPi2EUBksdlu7Hw7npWXnyVFmx4lj58Ia0MLVWKkUD/YZG8ssAqEtj382Vd1YNH Gz47FHWRNEzYYSx7YC62RytbJ8uvDthvSqx6CeEYttzn1t5f6PXT0F7Q7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8GrJ5UNWgc9/00zzekiqwzCjkDMB8GA1UdIwQY MBaAFBhMfANk8Qk8/FhMkwNwJBBPtIVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAt OThmOTQwZTRkN2MxLzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAtOThmOTQwZTRkN2Mx LzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRGg3dW3 eX9DvGvS9acygyAVPBs0380liqg69S36Wj22Of184T5iKr3/ejSblS/bRTXpPi4v eQ/dmBXPDgkuItC1GNERNYIcEvz2Xgv7VyGsor6sCdluTmJ+PTrABi+wnJ+DbOTx Ej9rIrDOA4oi2rz3pMIXCndWp/Dz9UxSwIGWFUHrpTXLV1ZdP0jGgWnQjqFOHkU9 MmLz5qPwRk5/WqiELDdwCzkoHroc/ao2/ro78m6VIqJ2GSEJv57K8YQuWAEZ4TWz jly5SgynyuW+JgnBvOXzh1lDk1KZEhwq81KegN9OIzTuNNNoDnvOgasjbV/ZJNZA QAHjU8t8E8QsIQ== -----END CERTIFICATE-----Generated at Thu Dec 25 14:32:24 2025 by rpki-client