This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json) Hash identifier: QqYJw2+77onRDHzt3mAGY+1yAClvkfShJw8ye2rB8qw= Subject key identifier: C7:29:61:D1:83:37:50:28:1E:32:47:0D:0A:6E:3B:B6:B8:C2:DA:02 Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a Certificate serial: 019B397DBC70E3C52F01A5E6AA7C58732B58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft Manifest number: 0835 Signing time: Sat 20 Dec 2025 02:01:40 +0000 Manifest this update: Sat 20 Dec 2025 02:01:40 +0000 Manifest next update: Sun 21 Dec 2025 02:01:40 +0000 Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: kA/CLGzQoM3eXsTrMMci3hVSHTuUjtd1EufPRAEa2y4=) 2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:bc:70:e3:c5:2f:01:a5:e6:aa:7c:58:73:2b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a Validity Not Before: Dec 20 02:01:40 2025 GMT Not After : Dec 21 02:01:40 2025 GMT Subject: CN=c72961d1833750281e32470d0a6e3bb6b8c2da02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:ea:95:b9:74:81:f5:3f:d2:fc:59:51:b5: 9d:1d:4b:cd:15:59:7d:c6:9f:0a:08:7f:df:3f:df: 9a:9c:55:40:45:70:81:b9:be:a2:6d:f3:98:aa:ae: 6b:16:b3:c0:d3:8b:22:c4:a9:54:75:00:11:0d:7f: 83:cd:5b:cf:87:db:34:9c:53:45:5f:6f:83:bf:3a: d1:a7:ad:8a:c8:34:9a:6a:40:0a:bf:7c:60:3d:ea: 6c:b0:17:df:86:c6:bb:df:dc:b8:26:e1:18:67:97: 04:75:f5:34:39:8a:e5:c6:8d:95:5b:fd:ac:64:0a: 17:db:07:08:9f:bc:d4:08:f5:1a:f0:9b:fc:3c:03: fa:8c:c1:37:b6:4e:98:9a:74:f9:e8:9b:9e:77:8f: 92:b5:9b:13:89:b1:46:69:03:00:55:d4:14:90:ca: ec:fa:47:04:00:a5:63:b6:be:6f:33:6a:f8:55:10: 65:a3:ca:18:28:70:45:73:c9:66:5f:3d:9c:50:48: 77:a9:7b:61:62:22:99:58:92:df:62:9c:ab:8c:5b: d9:b1:73:be:82:12:7d:8d:28:89:ad:c4:7d:82:3e: 02:8a:41:3e:89:b2:97:95:c0:27:6a:e8:ef:46:cd: 15:55:51:90:ff:37:1d:7f:79:2c:07:f8:df:7c:97: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:29:61:D1:83:37:50:28:1E:32:47:0D:0A:6E:3B:B6:B8:C2:DA:02 X509v3 Authority Key Identifier: keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:05:5b:46:47:9f:d6:01:45:13:81:c7:a1:84:0a:80:10:57: f8:28:b0:e4:96:ab:6f:14:c6:d2:14:2c:65:5d:a2:66:5e:6f: 58:b3:f4:6e:c6:73:aa:30:df:b1:9e:78:fd:ad:07:bc:4e:99: 2f:58:41:17:00:3f:31:f9:3d:7a:b0:dd:6e:f8:18:22:d5:f4: 2b:8c:a8:67:a3:2b:24:42:44:1b:0b:90:10:8d:28:16:fb:ef: 5f:da:88:a0:93:16:b9:0c:79:76:c8:8e:a5:63:e6:9d:7d:50: d7:36:07:ea:7e:74:0c:88:1f:d5:01:20:78:94:cb:8c:c0:69: 5d:e1:04:e5:61:17:63:14:ad:df:48:cc:2d:0e:58:db:d9:8a: a4:d0:ea:e6:80:48:67:30:e1:16:ef:de:b2:4e:cd:64:0b:bb: 6b:16:dc:68:3f:de:d5:6f:8b:9f:5e:d1:81:5d:74:a0:d0:7c: 64:b7:18:5f:74:fe:65:c4:5c:a5:23:43:3f:2b:7a:66:bd:6e: 2b:b0:35:0d:f3:bd:be:cd:c1:2b:d3:9c:a2:b2:a3:f0:0a:87: 4c:18:23:9c:3f:c5:7b:89:3c:59:51:ca:32:8a:59:70:06:7c: 25:30:6f:33:4e:77:83:d7:7e:ff:78:0d:f6:c1:e0:33:06:3e: f5:a1:90:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fbxw48UvAaXmqnxYcytYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU2MTllZjk2YTNhZmQwMmZjMmQ1ZDAwM2E5NDdlNGQy ZDU5MGEwHhcNMjUxMjIwMDIwMTQwWhcNMjUxMjIxMDIwMTQwWjAzMTEwLwYDVQQD EyhjNzI5NjFkMTgzMzc1MDI4MWUzMjQ3MGQwYTZlM2JiNmI4YzJkYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxHqlbl0gfU/0vxZUbWdHUvNFVl9 xp8KCH/fP9+anFVARXCBub6ibfOYqq5rFrPA04sixKlUdQARDX+DzVvPh9s0nFNF X2+DvzrRp62KyDSaakAKv3xgPepssBffhsa739y4JuEYZ5cEdfU0OYrlxo2VW/2s ZAoX2wcIn7zUCPUa8Jv8PAP6jME3tk6YmnT56Jued4+StZsTibFGaQMAVdQUkMrs +kcEAKVjtr5vM2r4VRBlo8oYKHBFc8lmXz2cUEh3qXthYiKZWJLfYpyrjFvZsXO+ ghJ9jSiJrcR9gj4CikE+ibKXlcAnaujvRs0VVVGQ/zcdf3ksB/jffJf9VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcpYdGDN1AoHjJHDQpuO7a4wtoCMB8GA1UdIwQY MBaAFBnuYZ75ajr9AvwtXQA6lH5NLVkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEt ZWIyNzdhMjBmMjdmLzEvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEtZWIyNzdhMjBmMjdm LzEvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwVbRkef 1gFFE4HHoYQKgBBX+Ciw5JarbxTG0hQsZV2iZl5vWLP0bsZzqjDfsZ54/a0HvE6Z L1hBFwA/Mfk9erDdbvgYItX0K4yoZ6MrJEJEGwuQEI0oFvvvX9qIoJMWuQx5dsiO pWPmnX1Q1zYH6n50DIgf1QEgeJTLjMBpXeEE5WEXYxSt30jMLQ5Y29mKpNDq5oBI ZzDhFu/esk7NZAu7axbcaD/e1W+Ln17RgV10oNB8ZLcYX3T+ZcRcpSNDPyt6Zr1u K7A1DfO9vs3BK9OcorKj8AqHTBgjnD/Fe4k8WVHKMopZcAZ8JTBvM053g9d+/3gN 9sHgMwY+9aGQIg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:39:52 2025 by rpki-client