This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json) Hash identifier: datIaVhqdiwNc7DWOQJvDrx6yh+y1mmYfWymqijeE5s= Subject key identifier: 9B:88:8A:C2:37:BF:CB:53:74:79:8A:D9:57:D7:04:0A:D4:5C:CC:95 Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb Certificate serial: 019AF5098DA08458EF37FF0CA16A8273A361 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft Manifest number: 0D90 Signing time: Sat 06 Dec 2025 19:00:35 +0000 Manifest this update: Sat 06 Dec 2025 19:00:35 +0000 Manifest next update: Sun 07 Dec 2025 19:00:35 +0000 Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: hrY6lY9aVTkklk1BLzjqnGhEir5GgTkdXuH+XhF/wa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8d:a0:84:58:ef:37:ff:0c:a1:6a:82:73:a3:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb Validity Not Before: Dec 6 19:00:35 2025 GMT Not After : Dec 7 19:00:35 2025 GMT Subject: CN=9b888ac237bfcb5374798ad957d7040ad45ccc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0d:32:d3:04:f6:8f:ee:8f:14:71:7d:df:e5: 0f:74:eb:de:98:a5:81:cc:33:19:4c:df:c1:ff:72: 1e:5a:d1:46:9c:6d:f7:09:04:c5:19:8b:97:8e:81: 95:eb:87:80:8f:4c:86:42:8f:93:65:eb:62:ad:6c: b7:20:b8:11:10:53:58:a6:cf:56:be:d4:47:06:18: af:0e:f2:6f:1e:ee:f9:2d:e0:44:18:13:54:94:7a: cc:c3:d1:17:b5:49:53:d2:1d:a8:85:5f:27:8d:bb: f3:2a:e8:c6:33:19:89:68:51:69:2e:8b:d4:57:02: bb:c0:33:46:1c:90:b6:10:2d:80:d7:2b:b0:e6:95: f4:b1:72:d2:45:7f:34:01:46:03:a4:e2:80:62:c9: 00:4e:74:62:f9:1d:23:ab:64:df:14:bc:1f:42:df: 8c:24:41:da:e4:4f:46:da:73:96:fe:d1:6b:80:4c: 3d:0d:d1:25:0c:15:b7:0e:d2:35:80:9e:32:cb:75: eb:e4:2b:46:68:7f:33:47:d0:a1:c4:5c:a6:34:3c: f7:d6:bb:9b:72:c0:cc:cf:49:51:94:2a:6f:58:8a: 77:72:31:f2:50:88:4b:ea:c8:67:3c:69:c9:26:51: 5a:cc:56:fd:86:9d:ef:b1:ca:99:3b:f0:1a:8a:6a: 5d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:88:8A:C2:37:BF:CB:53:74:79:8A:D9:57:D7:04:0A:D4:5C:CC:95 X509v3 Authority Key Identifier: keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:50:8b:cd:44:28:4f:a2:32:ee:88:e2:12:9d:0e:a6:5d:9f: 36:d7:e5:b7:e3:e8:de:75:01:c7:c4:db:7a:9c:ed:33:8a:72: 7e:d4:66:5c:76:93:c7:d0:b8:80:f9:bc:f4:0d:20:73:7e:29: e4:aa:e1:21:d3:19:59:38:53:b5:5e:b5:8e:a9:b6:f6:e1:7c: d3:22:97:60:55:aa:93:cf:27:62:f1:ae:98:ac:a5:b4:36:b7: 36:c6:cb:39:5e:25:0a:4a:92:93:1c:e4:95:7e:59:6f:e9:ea: 22:ca:63:86:a8:76:39:a6:e6:c0:d0:88:26:65:4c:9c:45:68: 30:f9:bc:c3:f0:71:f9:de:a3:0d:01:f2:8c:dc:d3:7f:1b:32: 3b:fc:71:12:34:53:b8:70:05:91:08:b6:da:b2:b1:61:db:89: 37:96:72:05:25:14:94:56:72:db:86:45:93:0c:79:fb:42:67: 31:94:e8:2f:86:8e:3c:c3:7f:d8:6a:6c:cf:69:1e:cf:ed:b1: 37:3d:93:ac:a2:3b:4e:d3:f8:5f:0e:a5:9b:71:4a:9e:cd:3e: 6d:b2:18:3d:6a:48:aa:78:5b:d0:82:db:d4:03:4b:f3:1d:4f: 2d:03:6a:94:ee:55:18:36:e8:b5:18:58:72:7d:7a:ab:f9:98: b8:b6:d0:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CY2ghFjvN/8MoWqCc6NhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NGQxZjQwODMzODNmNTY4OTVkNmUzZTczYThhMDc3YWRl YjUwY2IwHhcNMjUxMjA2MTkwMDM1WhcNMjUxMjA3MTkwMDM1WjAzMTEwLwYDVQQD Eyg5Yjg4OGFjMjM3YmZjYjUzNzQ3OThhZDk1N2Q3MDQwYWQ0NWNjYzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w0y0wT2j+6PFHF93+UPdOvemKWB zDMZTN/B/3IeWtFGnG33CQTFGYuXjoGV64eAj0yGQo+TZetirWy3ILgREFNYps9W vtRHBhivDvJvHu75LeBEGBNUlHrMw9EXtUlT0h2ohV8njbvzKujGMxmJaFFpLovU VwK7wDNGHJC2EC2A1yuw5pX0sXLSRX80AUYDpOKAYskATnRi+R0jq2TfFLwfQt+M JEHa5E9G2nOW/tFrgEw9DdElDBW3DtI1gJ4yy3Xr5CtGaH8zR9ChxFymNDz31rub csDMz0lRlCpvWIp3cjHyUIhL6shnPGnJJlFazFb9hp3vscqZO/AaimpdbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuIisI3v8tTdHmK2VfXBArUXMyVMB8GA1UdIwQY MBaAFBhNH0CDOD9WiV1uPnOooHet61DLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEt NjZjYzA4M2I1NjY5LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEtNjZjYzA4M2I1NjY5 LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFCLzUQo T6Iy7ojiEp0Opl2fNtflt+Po3nUBx8TbepztM4pyftRmXHaTx9C4gPm89A0gc34p 5KrhIdMZWThTtV61jqm29uF80yKXYFWqk88nYvGumKyltDa3NsbLOV4lCkqSkxzk lX5Zb+nqIspjhqh2OabmwNCIJmVMnEVoMPm8w/Bx+d6jDQHyjNzTfxsyO/xxEjRT uHAFkQi22rKxYduJN5ZyBSUUlFZy24ZFkwx5+0JnMZToL4aOPMN/2Gpsz2kez+2x Nz2TrKI7TtP4Xw6lm3FKns0+bbIYPWpIqnhb0ILb1ANL8x1PLQNqlO5VGDbotRhY cn16q/mYuLbQ0A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:32 2025 by rpki-client