This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json) Hash identifier: 8TRug4aiH02OCPBcIjetWIBsy6KmqvH9IKJbJHNKh+c= Subject key identifier: 9B:CB:A4:EB:DA:7F:9E:C9:BF:FA:2B:3B:5E:00:B3:2B:E7:EA:49:E7 Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55 Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655 Certificate serial: 019B3D90D797303DF4D1E5E41CB063366F95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft Manifest number: 0B5B Signing time: Sat 20 Dec 2025 21:01:01 +0000 Manifest this update: Sat 20 Dec 2025 21:01:01 +0000 Manifest next update: Sun 21 Dec 2025 21:01:01 +0000 Files and hashes: 1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: tEJeEEx5ieBKh6jxYkXzXWlPp9BHtXm+i6bwRoDXFTQ=) 2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:d7:97:30:3d:f4:d1:e5:e4:1c:b0:63:36:6f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655 Validity Not Before: Dec 20 21:01:01 2025 GMT Not After : Dec 21 21:01:01 2025 GMT Subject: CN=9bcba4ebda7f9ec9bffa2b3b5e00b32be7ea49e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cd:b2:1b:9a:47:1e:f5:59:92:23:5c:91:e9: 38:2e:b8:13:7e:9e:cb:d4:42:28:39:6b:04:7b:32: 3a:fe:f5:cb:16:3d:8a:76:89:96:be:91:12:b2:f4: dc:ea:f6:ef:ab:64:05:62:8e:d4:c0:dd:c8:8f:3b: 44:7b:db:84:bc:b5:2f:3c:c4:67:51:7d:18:93:26: 04:91:26:73:6c:9d:6e:b9:36:85:5a:c9:e3:b1:9a: ec:54:a2:79:ec:0a:59:8e:be:9d:78:65:ec:d3:0f: d6:11:cd:af:c0:88:c2:6f:70:be:f0:78:a2:76:04: 3b:84:aa:65:ce:e2:eb:af:3c:a8:e8:f3:0c:94:6d: 62:74:38:52:14:bc:f8:4c:24:59:c9:b3:d0:a6:38: d1:88:eb:5e:0e:9b:97:16:57:ab:84:d5:db:fb:82: 00:fb:e9:fb:f8:25:17:e5:ca:15:ce:35:41:c4:ef: 16:b1:19:5a:2a:34:96:d6:63:bc:70:0d:38:33:6c: fb:81:81:bc:0d:41:c9:2d:6b:b2:27:a9:ad:27:4f: 6e:36:16:84:9b:6a:34:cc:21:2a:1b:b1:c4:f5:be: fe:0e:4a:a4:28:af:68:39:68:f8:00:a5:49:63:0f: 36:60:13:f8:57:85:40:14:9f:7b:30:85:53:a3:48: f1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CB:A4:EB:DA:7F:9E:C9:BF:FA:2B:3B:5E:00:B3:2B:E7:EA:49:E7 X509v3 Authority Key Identifier: keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:70:b8:7b:b8:ca:c4:3b:fd:ec:4e:1f:d7:5d:ce:39:72:6b: 7b:5b:fe:f2:b1:d3:35:f3:73:e3:7b:43:e7:46:df:36:02:29: 4c:62:9b:9f:fb:36:23:a9:2a:a2:5e:f5:04:61:e6:26:01:ba: 78:37:d6:af:18:b0:d4:56:ce:d1:93:e2:ae:27:e8:fb:9f:63: 1f:e5:c6:52:e1:9e:20:50:19:86:3f:d9:0e:f1:a8:b3:da:88: d2:79:a8:22:2b:5f:09:d0:3e:f3:54:bf:32:5a:b1:09:5f:77: 91:5c:06:b3:a5:96:58:a0:68:92:3d:e7:34:fb:2b:c4:7e:b7: 0d:98:13:82:fb:53:39:07:b2:64:80:a1:8e:db:10:30:0f:30: d1:e7:72:25:85:d1:ec:47:b7:19:3b:bc:2c:83:60:46:cd:a1: f4:4d:fb:68:78:d3:28:db:8e:76:5a:68:53:a4:6e:98:e4:63: a6:1d:72:be:0a:0a:33:cd:f6:94:7c:47:27:b9:10:e2:6b:a6: 86:b7:92:78:97:47:15:73:71:99:17:d5:29:8c:c2:8b:83:0a: 17:65:f9:26:1a:19:85:38:cf:46:a6:16:ac:67:b9:42:62:55: 4a:2f:4e:01:65:b2:e0:a8:c6:67:9a:d3:5c:8a:3a:07:94:37: 36:9c:2d:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNeXMD300eXkHLBjNm+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZTNlNjk3Y2RkNmUyMjVhYzViMTE2MWNkZjcwNGRlOWNm YzI2NTUwHhcNMjUxMjIwMjEwMTAxWhcNMjUxMjIxMjEwMTAxWjAzMTEwLwYDVQQD Eyg5YmNiYTRlYmRhN2Y5ZWM5YmZmYTJiM2I1ZTAwYjMyYmU3ZWE0OWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc2yG5pHHvVZkiNckek4LrgTfp7L 1EIoOWsEezI6/vXLFj2KdomWvpESsvTc6vbvq2QFYo7UwN3IjztEe9uEvLUvPMRn UX0YkyYEkSZzbJ1uuTaFWsnjsZrsVKJ57ApZjr6deGXs0w/WEc2vwIjCb3C+8Hii dgQ7hKplzuLrrzyo6PMMlG1idDhSFLz4TCRZybPQpjjRiOteDpuXFlerhNXb+4IA ++n7+CUX5coVzjVBxO8WsRlaKjSW1mO8cA04M2z7gYG8DUHJLWuyJ6mtJ09uNhaE m2o0zCEqG7HE9b7+DkqkKK9oOWj4AKVJYw82YBP4V4VAFJ97MIVTo0jxhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvLpOvaf57Jv/orO14Asyvn6knnMB8GA1UdIwQY MBaAFIHj5pfN1uIlrFsRYc33BN6c/CZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODIt ZGM4NTg2NGFlYTg5LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODItZGM4NTg2NGFlYTg5 LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3C4e7jK xDv97E4f113OOXJre1v+8rHTNfNz43tD50bfNgIpTGKbn/s2I6kqol71BGHmJgG6 eDfWrxiw1FbO0ZPirifo+59jH+XGUuGeIFAZhj/ZDvGos9qI0nmoIitfCdA+81S/ MlqxCV93kVwGs6WWWKBokj3nNPsrxH63DZgTgvtTOQeyZIChjtsQMA8w0edyJYXR 7Ee3GTu8LINgRs2h9E37aHjTKNuOdlpoU6RumORjph1yvgoKM832lHxHJ7kQ4mum hreSeJdHFXNxmRfVKYzCi4MKF2X5JhoZhTjPRqYWrGe5QmJVSi9OAWWy4KjGZ5rT XIo6B5Q3Npwtxw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:36:00 2025 by rpki-client