This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier: xZVZVdJRWfUutBM8FWIDj1POh+WTHZAjKxRjbQy75Zs=
Subject key identifier: EC:F0:E0:19:7F:67:F5:19:63:05:5C:F5:77:34:C0:CA:CE:9B:46:FF
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019B2C9D833569AA06557B23666B2FF2BD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number: 179A
Signing time: Wed 17 Dec 2025 14:01:18 +0000
Manifest this update: Wed 17 Dec 2025 14:01:18 +0000
Manifest next update: Thu 18 Dec 2025 14:01:18 +0000
Files and hashes: 1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=)
2: 2R3GYbP40kVDselx86gqI7AglgU.roa (hash: XLRcU1O670injcbZzqHBcbGiFZGa7M1Rl5LjE453GkQ=)
3: FIfoAXaxpYLmDe5rWtbqnwoZyG4.roa (hash: McAx354GUPfDHZvpRDVZ7JLef+rbJmvzLHPw8ZCGP3g=)
4: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=)
5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=)
6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=)
7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: hQUzEOEzCSiFq8DJSXjg01DMlWwejPT1NueBcjUnoWk=)
8: qWZ64G_gV6r1a1VTWhYwuR9ilIk.roa (hash: SNBGanOggO8FdGYV/GuiVAQ6b34zKk2VTZJhKLFl+04=)
9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=)
10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2c:9d:83:35:69:aa:06:55:7b:23:66:6b:2f:f2:bd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Dec 17 14:01:18 2025 GMT
Not After : Dec 18 14:01:18 2025 GMT
Subject: CN=ecf0e0197f67f51963055cf57734c0cace9b46ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:73:cc:bb:5d:f5:e7:a3:e2:be:0e:ec:87:
4a:17:50:f5:10:04:5a:15:eb:d4:94:ca:67:85:e8:
18:37:c7:6b:37:ec:17:e1:5e:2f:20:b9:1b:2c:a3:
c2:3d:66:1c:82:72:8d:43:b3:88:15:18:bb:0e:74:
37:d2:ed:52:b9:33:7d:e9:f8:41:4b:1c:28:f6:d2:
7e:59:58:f2:18:0a:23:0d:27:b0:47:c1:c0:7b:9c:
3f:36:ca:32:14:27:26:6a:7a:ab:a1:ec:45:63:a2:
91:40:0c:d5:c2:30:c5:7c:96:b1:ac:3d:66:23:3b:
96:e0:82:fe:ce:f8:5d:8e:a7:6d:aa:ce:bb:f8:3e:
fb:d8:58:c0:cf:8c:0d:e4:e1:66:f1:db:c8:29:da:
91:78:f9:8d:84:e6:ce:fb:a5:ed:a7:53:b5:f1:22:
d7:b8:5d:5a:06:e4:04:05:2e:1f:0e:26:20:d0:87:
87:01:a2:30:90:78:ad:c0:5b:6f:af:38:71:91:20:
ae:73:e6:08:b7:fe:00:0f:6d:cb:75:1c:a0:0e:18:
4b:33:26:3b:05:66:ce:08:ee:69:2d:b6:e2:23:ea:
40:22:2f:97:0f:05:c4:f6:32:47:55:3e:7b:14:ab:
c2:65:4b:49:b4:4b:f6:dc:fe:19:b4:07:c9:b1:ac:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F0:E0:19:7F:67:F5:19:63:05:5C:F5:77:34:C0:CA:CE:9B:46:FF
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:8c:18:78:cf:eb:24:31:60:51:3a:74:b7:c0:6b:c2:27:
98:db:b9:de:34:37:0d:22:8c:df:7c:4f:a5:1d:0a:33:27:ac:
29:62:fa:dc:b4:9e:2c:70:38:45:fa:df:54:51:71:d0:d6:94:
d7:22:ea:bb:dc:86:05:7c:cb:74:02:df:ae:6a:09:71:fb:0a:
d4:bd:5b:96:63:66:65:30:3c:12:a2:d9:7b:72:52:1d:9c:d2:
82:23:ac:79:90:77:da:59:37:c0:e5:a4:ba:08:1f:e8:0d:2b:
03:39:ad:ea:d8:46:3e:58:d9:18:e4:60:a5:90:e4:c9:96:4b:
ba:e3:d6:29:0e:68:22:72:d2:c7:89:94:2c:0b:02:3c:fc:08:
d8:cd:85:45:62:be:5f:f8:3a:07:10:1c:66:2b:6e:74:18:6f:
e4:ce:74:98:c4:c8:f8:10:3d:e6:bb:fd:3f:e8:cc:8b:55:85:
d9:15:a5:d8:c4:4e:62:a9:78:27:8f:ec:a7:de:02:58:ca:c2:
c2:1f:cc:bc:fa:21:61:ba:af:9f:65:5e:48:61:a9:cc:b4:7f:
82:de:81:31:6e:d2:b4:36:dc:62:75:7b:01:4c:5a:b0:40:56:
1c:c0:21:4d:a5:65:fc:1c:00:cb:cd:ab:54:22:1a:14:33:5f:
00:bf:48:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZssnYM1aaoGVXsjZmsv8r2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk
Y2UyMDUwHhcNMjUxMjE3MTQwMTE4WhcNMjUxMjE4MTQwMTE4WjAzMTEwLwYDVQQD
EyhlY2YwZTAxOTdmNjdmNTE5NjMwNTVjZjU3NzM0YzBjYWNlOWI0NmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3xzzLtd9eej4r4O7IdKF1D1EARa
FevUlMpnhegYN8drN+wX4V4vILkbLKPCPWYcgnKNQ7OIFRi7DnQ30u1SuTN96fhB
Sxwo9tJ+WVjyGAojDSewR8HAe5w/NsoyFCcmanqroexFY6KRQAzVwjDFfJaxrD1m
IzuW4IL+zvhdjqdtqs67+D772FjAz4wN5OFm8dvIKdqRePmNhObO+6Xtp1O18SLX
uF1aBuQEBS4fDiYg0IeHAaIwkHitwFtvrzhxkSCuc+YIt/4AD23LdRygDhhLMyY7
BWbOCO5pLbbiI+pAIi+XDwXE9jJHVT57FKvCZUtJtEv23P4ZtAfJsayivQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzw4Bl/Z/UZYwVc9Xc0wMrOm0b/MB8GA1UdIwQY
MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et
ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx
LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASc6MGHjP
6yQxYFE6dLfAa8InmNu53jQ3DSKM33xPpR0KMyesKWL63LSeLHA4RfrfVFFx0NaU
1yLqu9yGBXzLdALfrmoJcfsK1L1blmNmZTA8EqLZe3JSHZzSgiOseZB32lk3wOWk
uggf6A0rAzmt6thGPljZGORgpZDkyZZLuuPWKQ5oInLSx4mULAsCPPwI2M2FRWK+
X/g6BxAcZitudBhv5M50mMTI+BA95rv9P+jMi1WF2RWl2MROYql4J4/sp94CWMrC
wh/MvPohYbqvn2VeSGGpzLR/gt6BMW7StDbcYnV7AUxasEBWHMAhTaVl/BwAy82r
VCIaFDNfAL9IPA==
-----END CERTIFICATE-----
Generated at Wed Dec 17 20:46:27 2025 by rpki-client