This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft File: GEe1nSHqNrMGL8qAznXBYWr1EZo.mft (raw, json) Hash identifier: mC+R5aezY7KDdvKX3LujUiGlISBR9g7WDxy7cthk6cw= Subject key identifier: 07:04:58:F1:07:4F:F2:A5:F8:5C:16:C2:D1:68:86:AD:9E:D8:D7:79 Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a Certificate serial: 019AF208E6EF7302D59C9C0040DFA2DD1E35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft Manifest number: 177F Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: 8cLxwhiwZ15o52IG0lIcBm8BfIQ.roa (hash: PFZiPiXQsPniAQ08Y5K+gzotL1tE/fkVxovwe7IBhnM=) 2: ATdlvsN-8JjBYiFvV0fLXKNBL1w.roa (hash: rGaQHa7VU05B9zcOaNjgX5A81WiKe8oN0pECOQZ/WDk=) 3: GEe1nSHqNrMGL8qAznXBYWr1EZo.crl (hash: znI0V9AH1RpgUoQHsaqg7z7efsNw63cFWSFIvUEwl5I=) 4: IbLrtVu7pWMSQlpOiD1Ev7CaqPs.roa (hash: JYnvQMjjTKbiZ0EmN4/Su8z6wVek7QvE9FV6m+QtvoI=) 5: Jfkb9wIjflJ9g_nlBWaCF6laiWU.roa (hash: /ljWZ+p/6L9vGqqgT4FUCtEB1Y8qOikrC1+ICoRutK4=) 6: Y5jMZ5wiB26-lsdLVbzn_G1HsrI.roa (hash: ocOdzyaJ6ffFKb9Tf8IUGV5W7XVWSq0CC0ZsXZkA3Mk=) 7: shcI5ksCijvvRLID7bxpTU4Ek38.roa (hash: 5j6UIvbPGZk819fhFv2lIK9RILlN83FerZg8FUEwxJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e6:ef:73:02:d5:9c:9c:00:40:df:a2:dd:1e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=070458f1074ff2a5f85c16c2d16886ad9ed8d779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:c1:ec:d0:ac:97:ea:4e:0a:e4:ed:85:2a: 3d:4b:7b:9e:83:e6:35:3a:da:7f:52:32:f7:d0:04: 6e:c1:b5:68:2b:98:a4:f9:da:a8:82:84:65:94:b5: e8:3b:e6:c3:d3:92:14:2e:a3:8c:2a:dc:bd:21:8f: a3:f1:d2:f4:f8:46:f1:fa:0f:6d:fc:d0:d9:65:4b: 58:49:95:00:fd:e9:ef:d2:47:01:28:f5:91:0e:24: f0:cf:15:49:e9:ba:e1:1f:6b:73:49:18:d0:ea:c2: 94:26:77:81:2e:17:fc:ac:34:13:02:46:e2:a5:70: bf:26:f3:da:51:bf:b5:0b:45:74:e1:f8:da:77:b8: 53:4c:44:03:a2:d5:78:79:0b:37:6f:8c:f5:c7:ae: 1d:f3:3c:c3:86:c1:a3:ce:0a:78:69:06:84:eb:31: dd:a1:d1:32:65:39:ce:62:86:02:0a:39:0f:7b:c2: 57:96:b0:92:ef:58:86:fa:31:ce:94:f5:9f:95:35: d8:a1:98:94:ed:2e:cc:10:36:52:08:16:82:42:0f: ec:f5:00:02:9a:1c:2a:18:76:b6:81:97:9a:93:fb: cb:2d:b0:84:fd:f0:1e:41:eb:6c:b8:29:65:a0:08: 87:81:32:73:fe:8f:54:55:33:39:69:e2:43:09:e9: 99:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:04:58:F1:07:4F:F2:A5:F8:5C:16:C2:D1:68:86:AD:9E:D8:D7:79 X509v3 Authority Key Identifier: keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ce:d9:b5:26:8c:70:5e:fb:7b:4d:cb:0b:eb:c2:da:93:65: 33:c7:53:12:23:6b:37:6a:62:47:97:60:5f:f1:f8:b6:17:f7: 71:b9:30:90:68:ed:f7:c4:ce:d5:bd:b3:0c:81:13:68:cf:a1: 8f:d8:1b:51:55:e3:c6:8e:f9:05:b6:8c:c1:7e:f2:fe:dd:d8: d4:b2:f9:4c:3b:76:3b:4a:db:22:0a:87:96:15:59:b2:78:34: 1b:6c:0e:fc:99:48:b3:22:37:48:32:16:88:a8:1f:5c:de:4d: 82:7c:a7:93:63:da:3e:a5:1a:43:4f:36:b2:0e:a6:40:72:6b: cb:fc:f2:d3:69:8f:b0:ae:d2:27:cf:87:64:54:8f:22:22:33: 8c:4d:65:9e:ec:81:b7:70:c3:62:e8:30:81:b6:ef:32:dd:f8: 53:84:bc:18:e0:ea:dd:d9:54:7d:06:ec:4a:05:c7:f7:d3:87: 70:75:82:97:42:96:1a:19:cf:dc:13:71:b2:07:58:77:b2:8f: 64:e1:11:cf:a5:23:61:30:6a:84:c7:86:28:d7:2e:0f:86:82: e1:58:78:0a:ab:00:9b:2d:f4:ca:0c:8d:d5:06:4a:27:cb:0e: 0f:fa:7d:d2:97:c5:b9:08:30:11:9c:dd:3a:c3:31:a6:60:d9: e8:21:f5:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCObvcwLVnJwAQN+i3R41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm NTExOWEwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD EygwNzA0NThmMTA3NGZmMmE1Zjg1YzE2YzJkMTY4ODZhZDllZDhkNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBrB7NCsl+pOCuTthSo9S3ueg+Y1 Otp/UjL30ARuwbVoK5ik+dqogoRllLXoO+bD05IULqOMKty9IY+j8dL0+Ebx+g9t /NDZZUtYSZUA/env0kcBKPWRDiTwzxVJ6brhH2tzSRjQ6sKUJneBLhf8rDQTAkbi pXC/JvPaUb+1C0V04fjad7hTTEQDotV4eQs3b4z1x64d8zzDhsGjzgp4aQaE6zHd odEyZTnOYoYCCjkPe8JXlrCS71iG+jHOlPWflTXYoZiU7S7MEDZSCBaCQg/s9QAC mhwqGHa2gZeak/vLLbCE/fAeQetsuClloAiHgTJz/o9UVTM5aeJDCemZ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcEWPEHT/Kl+FwWwtFohq2e2Nd5MB8GA1UdIwQY MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt ZjkxYmI1MTc5MjE3LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3 LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS87ZtSaM cF77e03LC+vC2pNlM8dTEiNrN2piR5dgX/H4thf3cbkwkGjt98TO1b2zDIETaM+h j9gbUVXjxo75BbaMwX7y/t3Y1LL5TDt2O0rbIgqHlhVZsng0G2wO/JlIsyI3SDIW iKgfXN5Ngnynk2PaPqUaQ082sg6mQHJry/zy02mPsK7SJ8+HZFSPIiIzjE1lnuyB t3DDYugwgbbvMt34U4S8GODq3dlUfQbsSgXH99OHcHWCl0KWGhnP3BNxsgdYd7KP ZOERz6UjYTBqhMeGKNcuD4aC4Vh4CqsAmy30ygyN1QZKJ8sOD/p90pfFuQgwEZzd OsMxpmDZ6CH1UA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:32 2025 by rpki-client