This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json) Hash identifier: +4vmMzcN51Z5jcw/ePIRQwOdRrqkU4SnENk9MeHRmhg= Subject key identifier: 8E:47:5E:08:16:6C:FB:E8:20:C8:90:EB:42:C0:14:99:E2:75:3F:E7 Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf Certificate serial: 019AF1D1D428569578BC4E09CBC02017C6B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft Manifest number: 0B78 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: 5QlNV7-3Q34zZfQ5XbNLc8wKA40.roa (hash: T1GmpANOUDoxZLUDnHoNMN2ENMK9C/xESzMwTNL0s2Y=) 2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: fMde3hQlrwi092Le+Uyf5YEBrCk/1KePwGhoqiYxcX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d4:28:56:95:78:bc:4e:09:cb:c0:20:17:c6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=8e475e08166cfbe820c890eb42c01499e2753fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6b:16:35:c4:b8:4c:75:6f:6f:fa:36:cf:02: 95:a6:eb:ff:39:72:d1:39:e3:09:77:45:a1:4c:6d: 7f:7a:0b:2a:a6:9a:35:bd:60:2a:6e:11:97:05:3c: 75:73:bc:36:0d:d8:69:93:e7:3a:7e:1e:21:2b:ce: 5f:71:66:41:f1:e4:49:4e:29:e6:40:7e:ac:e0:70: e4:b2:bb:2f:c2:81:8e:0c:4e:87:cf:ab:ca:bc:27: dd:db:d9:16:70:70:bc:4b:b0:e5:96:a1:04:ea:ec: 57:b0:1c:c4:60:5a:da:09:6b:d0:71:80:f8:db:46: 21:33:03:5d:9a:f5:ab:db:c8:b7:28:69:97:b7:15: 1b:17:a4:e8:82:4e:22:02:71:17:65:0b:36:9b:95: e8:66:31:b1:5e:24:e4:c4:2a:f2:f5:ab:d6:87:89: 03:66:f4:a1:f7:77:5c:ac:83:af:db:cb:f5:95:53: d5:fb:be:22:59:fa:d2:47:8b:01:6c:d9:7e:0a:5b: 99:7a:e4:a6:9e:79:6e:14:ff:e2:9d:9a:81:80:f5: 5b:4c:7e:5d:8f:c8:d9:1e:5b:98:4b:76:25:59:b9: 92:bc:7c:df:67:41:ba:51:8a:09:e6:85:e7:1b:ed: 50:bd:4e:a5:4f:da:51:32:10:5e:5e:63:d7:da:14: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:47:5E:08:16:6C:FB:E8:20:C8:90:EB:42:C0:14:99:E2:75:3F:E7 X509v3 Authority Key Identifier: keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ea:d6:22:30:ac:80:9b:f4:ec:2e:5c:0b:a1:2f:eb:c6:c8: 3e:27:09:87:0a:ff:66:e9:61:de:6c:63:d4:bd:58:ac:18:b7: 4a:90:f0:9d:e0:3d:09:1a:f6:08:a6:63:34:f9:40:bd:53:4e: c6:05:69:94:ce:36:72:ec:96:14:9d:70:6c:18:0f:78:12:df: 76:6d:eb:0f:d3:dd:83:27:03:a1:fb:4c:6f:81:c5:00:9e:28: 61:b5:23:e7:c5:66:36:c5:e8:b0:71:94:05:25:41:a0:1e:38: d8:61:37:0d:9a:a7:d6:b3:01:41:27:b6:6c:e3:b8:08:3c:e2: 1f:5d:67:dd:e0:38:f7:68:3b:b6:f0:b5:79:af:fe:4e:f4:e8: c3:1c:93:d9:46:44:35:d4:ca:27:16:c2:ee:b9:a7:1c:3a:0e: fa:f4:e8:2e:d7:03:2a:85:2b:67:06:42:0b:d9:66:1c:0b:25: 40:52:da:ce:b2:54:cf:33:b9:bb:76:f1:e1:bd:4e:d7:db:9b: b5:f0:67:58:c6:d6:78:c2:1b:e5:96:94:81:42:77:cc:a6:ec: 75:f6:6d:bf:ec:37:28:a1:70:9d:e9:ea:c8:66:d7:58:de:e6: 42:b2:fe:48:01:a9:d1:b7:a2:57:84:33:ce:9a:52:4c:f0:72: 18:32:d5:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dQoVpV4vE4Jy8AgF8a3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNDFmZWVhMTIzZmNiMDdlODcyYThjYjRiZGQ5YWI3Yjhk YTJmY2YwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD Eyg4ZTQ3NWUwODE2NmNmYmU4MjBjODkwZWI0MmMwMTQ5OWUyNzUzZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WsWNcS4THVvb/o2zwKVpuv/OXLR OeMJd0WhTG1/egsqppo1vWAqbhGXBTx1c7w2Ddhpk+c6fh4hK85fcWZB8eRJTinm QH6s4HDksrsvwoGODE6Hz6vKvCfd29kWcHC8S7DllqEE6uxXsBzEYFraCWvQcYD4 20YhMwNdmvWr28i3KGmXtxUbF6Togk4iAnEXZQs2m5XoZjGxXiTkxCry9avWh4kD ZvSh93dcrIOv28v1lVPV+74iWfrSR4sBbNl+CluZeuSmnnluFP/inZqBgPVbTH5d j8jZHluYS3YlWbmSvHzfZ0G6UYoJ5oXnG+1QvU6lT9pRMhBeXmPX2hRU0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5HXggWbPvoIMiQ60LAFJnidT/nMB8GA1UdIwQY MBaAFIBB/uoSP8sH6HKoy0vdmre42i/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kMzE3Y2EtMzk2MS00ZmUwLWJkZTgt ZjdjNTAxNDE4ZTU2LzEvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9kMzE3Y2EtMzk2MS00ZmUwLWJkZTgtZjdjNTAxNDE4ZTU2 LzEvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARurWIjCs gJv07C5cC6Ev68bIPicJhwr/Zulh3mxj1L1YrBi3SpDwneA9CRr2CKZjNPlAvVNO xgVplM42cuyWFJ1wbBgPeBLfdm3rD9PdgycDoftMb4HFAJ4oYbUj58VmNsXosHGU BSVBoB442GE3DZqn1rMBQSe2bOO4CDziH11n3eA492g7tvC1ea/+TvTowxyT2UZE NdTKJxbC7rmnHDoO+vToLtcDKoUrZwZCC9lmHAslQFLazrJUzzO5u3bx4b1O19ub tfBnWMbWeMIb5ZaUgUJ3zKbsdfZtv+w3KKFwnenqyGbXWN7mQrL+SAGp0beiV4Qz zppSTPByGDLVdw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:02 2025 by rpki-client