This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft File: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft (raw, json) Hash identifier: QPMrAHvK+0Y/ikwyxRMobSDWhXbYsZP9QelCxsPqZkM= Subject key identifier: 78:20:B3:B2:D9:0D:33:1D:40:EE:5E:F1:78:67:B6:CC:D9:43:8A:3F Authority key identifier: 18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97 Certificate issuer: /CN=1841c77f0c799ac9c2719d7f8c6982c43143e497 Certificate serial: 019AF0886407F818925EB392BE93697750B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft Manifest number: 0A28 Signing time: Fri 05 Dec 2025 22:01:01 +0000 Manifest this update: Fri 05 Dec 2025 22:01:01 +0000 Manifest next update: Sat 06 Dec 2025 22:01:01 +0000 Files and hashes: 1: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl (hash: KAedw44ntJ+nXLnP369qcaKogy/jf+BQ+eIOX+MCZeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:64:07:f8:18:92:5e:b3:92:be:93:69:77:50:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1841c77f0c799ac9c2719d7f8c6982c43143e497 Validity Not Before: Dec 5 22:01:01 2025 GMT Not After : Dec 6 22:01:01 2025 GMT Subject: CN=7820b3b2d90d331d40ee5ef17867b6ccd9438a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:8e:fd:54:19:33:4e:80:3a:de:66:07:93: 39:4f:28:9f:f7:b4:05:c1:09:36:d2:8b:30:a3:d7: d8:e0:1c:06:ba:31:31:da:25:58:31:36:86:52:5b: de:78:54:cd:27:d2:0f:e8:f4:9b:ca:14:de:17:92: d1:0d:47:b6:05:cc:29:8e:7f:78:55:e0:50:da:7e: 0f:54:1b:36:4e:13:e9:fe:9a:2e:c5:60:c0:4f:7b: 89:e4:27:5f:29:03:95:35:ae:c1:98:9d:c7:83:89: cd:f7:5a:8f:be:cf:0c:59:dc:48:d2:7d:cf:ec:fc: 0a:e5:88:d8:16:4d:16:be:78:84:db:8d:98:c0:f2: 74:23:ab:b4:3e:ec:db:87:44:98:90:e4:24:28:4a: 6f:eb:ac:42:29:68:71:d7:1c:c6:89:f8:de:96:dd: f0:06:9a:73:d5:20:9a:13:16:c2:70:03:9f:fb:41: 80:1e:44:d7:cc:57:5b:f7:65:09:2f:50:ef:cf:9c: b3:44:3e:60:5b:db:b4:8b:79:d7:f7:c7:26:99:66: 46:76:6d:7d:e5:d7:f6:93:ab:4e:bb:c8:4e:fe:18: 08:04:14:1c:27:7f:d2:14:1b:6b:b2:14:7f:26:65: 2c:b5:18:5c:ef:70:ef:cd:c9:56:80:b2:7a:7f:ce: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:20:B3:B2:D9:0D:33:1D:40:EE:5E:F1:78:67:B6:CC:D9:43:8A:3F X509v3 Authority Key Identifier: keyid:18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:17:a5:91:9f:b1:35:7a:d5:78:d4:f7:3a:7f:e9:9e:b6:91: 23:8a:d4:6d:e8:b3:7c:f1:f5:a9:f7:78:47:a0:98:8e:9b:c3: f7:bf:17:96:62:0a:7f:85:ec:9f:b2:9d:dd:a8:96:ea:fe:8c: 4a:c4:93:96:f7:55:26:f5:d0:02:38:0e:54:fa:0b:6f:8c:e5: 39:c3:7b:9f:22:bb:10:d9:fe:51:8c:fa:3e:79:1d:0a:8c:f3: e7:d9:c0:5b:c0:27:78:a6:15:8e:1f:c2:fe:c1:29:27:31:d4: 72:81:c2:5a:9d:1f:f3:c4:d9:ea:2f:7f:fe:3f:a5:26:2d:5a: f0:ce:af:b9:d1:55:cd:76:68:9f:ec:c3:ca:bb:59:4a:7f:34: 43:b7:4c:3a:96:c1:6d:74:31:a2:41:d5:ea:46:58:b2:3e:e7: ea:eb:0d:c2:e6:73:ca:05:ce:81:92:6a:8e:ab:77:a7:de:f2: 02:c0:32:a5:59:4b:a2:82:e9:3d:59:ab:b7:33:e3:53:3a:69: fa:89:78:2d:ff:8e:15:86:e2:ce:6d:22:31:bc:c5:14:c3:fd: b5:3a:ad:16:5d:8e:3e:ea:aa:2d:19:96:f7:d9:de:9d:2d:f4: 00:5f:53:82:9e:7b:b0:ef:50:a3:4e:ff:39:f0:95:af:af:de: 21:ec:43:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGQH+BiSXrOSvpNpd1C3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NDFjNzdmMGM3OTlhYzljMjcxOWQ3ZjhjNjk4MmM0MzE0 M2U0OTcwHhcNMjUxMjA1MjIwMTAxWhcNMjUxMjA2MjIwMTAxWjAzMTEwLwYDVQQD Eyg3ODIwYjNiMmQ5MGQzMzFkNDBlZTVlZjE3ODY3YjZjY2Q5NDM4YTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZqO/VQZM06AOt5mB5M5Tyif97QF wQk20oswo9fY4BwGujEx2iVYMTaGUlveeFTNJ9IP6PSbyhTeF5LRDUe2Bcwpjn94 VeBQ2n4PVBs2ThPp/pouxWDAT3uJ5CdfKQOVNa7BmJ3Hg4nN91qPvs8MWdxI0n3P 7PwK5YjYFk0WvniE242YwPJ0I6u0Puzbh0SYkOQkKEpv66xCKWhx1xzGifjelt3w Bppz1SCaExbCcAOf+0GAHkTXzFdb92UJL1Dvz5yzRD5gW9u0i3nX98cmmWZGdm19 5df2k6tOu8hO/hgIBBQcJ3/SFBtrshR/JmUstRhc73DvzclWgLJ6f84WAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHggs7LZDTMdQO5e8XhntszZQ4o/MB8GA1UdIwQY MBaAFBhBx38MeZrJwnGdf4xpgsQxQ+SXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0VISGZ3eDVtc25DY1oxX2pHbUN4REZENUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85ZGNiZDAtNTEzYi00YmViLWIwNjUt NGU4ZjU5NjBiMTliLzEvR0VISGZ3eDVtc25DY1oxX2pHbUN4REZENUpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85ZGNiZDAtNTEzYi00YmViLWIwNjUtNGU4ZjU5NjBiMTli LzEvR0VISGZ3eDVtc25DY1oxX2pHbUN4REZENUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRelkZ+x NXrVeNT3On/pnraRI4rUbeizfPH1qfd4R6CYjpvD978XlmIKf4Xsn7Kd3aiW6v6M SsSTlvdVJvXQAjgOVPoLb4zlOcN7nyK7ENn+UYz6PnkdCozz59nAW8AneKYVjh/C /sEpJzHUcoHCWp0f88TZ6i9//j+lJi1a8M6vudFVzXZon+zDyrtZSn80Q7dMOpbB bXQxokHV6kZYsj7n6usNwuZzygXOgZJqjqt3p97yAsAypVlLooLpPVmrtzPjUzpp +ol4Lf+OFYbizm0iMbzFFMP9tTqtFl2OPuqqLRmW99nenS30AF9Tgp57sO9Qo07/ OfCVr6/eIexDog== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:34 2025 by rpki-client