This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft File: GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft (raw, json) Hash identifier: s85kPAfGQXTa4M3b64IAXf3xL4dIBSMkrmC/ok5cL3c= Subject key identifier: B2:82:8A:F8:23:48:03:94:83:45:D2:A2:71:49:2F:5A:BB:D7:81:08 Authority key identifier: 19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0 Certificate issuer: /CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0 Certificate serial: 019AF3F7AD1F8910EF7E4D95FE7C77DDCFB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft Manifest number: 0528 Signing time: Sat 06 Dec 2025 14:01:26 +0000 Manifest this update: Sat 06 Dec 2025 14:01:26 +0000 Manifest next update: Sun 07 Dec 2025 14:01:26 +0000 Files and hashes: 1: GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl (hash: da5oYo9v5p2HqAAvefY5NyTjTxDJTli9kXRBYW5jSDo=) 2: z6gRZQL9dktzDQCQibZshxDiKi4.roa (hash: 4kSTaNBCK4SMDmYd2plLBmE2hYKvGg7VL6yg3cqclD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ad:1f:89:10:ef:7e:4d:95:fe:7c:77:dd:cf:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0 Validity Not Before: Dec 6 14:01:26 2025 GMT Not After : Dec 7 14:01:26 2025 GMT Subject: CN=b2828af8234803948345d2a271492f5abbd78108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:bd:ab:64:b7:1b:05:8c:4e:91:74:79:02: e4:e8:18:36:5d:6b:00:b7:91:ca:a5:75:39:66:7c: 14:b1:16:bf:5c:c3:14:f4:f2:4c:bf:9d:6e:1d:7a: a6:08:74:fc:e5:63:8a:73:36:1a:b2:5a:e6:ad:51: be:a0:39:09:28:44:66:69:28:86:24:69:a5:a0:33: 12:4f:25:7b:2d:f2:3e:17:e0:f4:92:f8:d3:f8:d7: 25:0e:cf:cb:4d:0f:0e:e5:b3:18:48:ba:02:46:70: 6b:f4:be:71:fa:a3:bb:6d:c1:63:aa:9b:8e:30:35: 8d:71:fc:85:40:04:2b:b3:98:61:48:15:67:e2:6f: 23:23:fa:ac:ea:86:c5:5f:08:e5:99:bf:99:4b:cd: 9a:dc:39:fc:a5:99:01:3e:a7:57:8c:d4:78:90:bf: 3d:5f:15:cb:07:e0:20:ff:45:98:b1:8b:c3:eb:34: b9:b1:17:1a:a2:b2:06:db:03:95:f9:1e:db:45:c3: 6a:83:33:71:af:18:46:dd:62:43:76:e7:88:96:78: 38:e3:c8:2a:ce:c1:93:0d:f2:fa:1d:1e:3a:78:89: 74:55:08:d6:a2:c6:f8:09:aa:7f:75:67:bb:1f:24: ae:5b:e5:51:4b:a0:ae:16:6d:3f:b9:48:1a:5b:37: 91:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:82:8A:F8:23:48:03:94:83:45:D2:A2:71:49:2F:5A:BB:D7:81:08 X509v3 Authority Key Identifier: keyid:19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:7f:28:ac:a8:48:4c:94:0d:6a:9c:ee:f2:d8:a4:5b:28:a7: a6:d6:da:d1:b2:f2:1e:74:b3:38:f5:f7:45:ed:07:e4:49:03: 98:f4:cf:35:21:81:1d:48:99:33:58:00:7b:a2:2f:94:00:bf: b2:c5:87:ad:ad:a3:46:c2:7f:ff:cf:01:1a:78:60:63:5a:17: 90:eb:1d:22:6f:1e:c0:08:3d:3c:06:29:98:64:3e:62:05:4d: 21:e4:26:5f:01:3c:14:e5:27:76:ab:64:d6:26:63:9b:a6:3a: 26:1c:ff:87:de:44:aa:49:50:e0:1e:03:6c:8e:df:f5:9c:8d: 55:f5:ea:0b:3f:75:d1:71:8b:78:f9:61:ce:9e:4e:f2:4a:4b: 5c:ec:bb:31:53:5f:2c:a5:da:e8:1a:e5:b8:c4:82:1e:69:77: d2:73:43:18:e7:20:dc:46:8a:ca:84:71:24:d7:57:15:c5:67: 84:66:66:fb:58:e9:e8:46:6f:af:da:7f:e7:8b:5f:47:de:33: e8:41:c3:66:95:34:b9:6f:9a:b0:5e:c4:dd:96:54:84:70:d8: a8:8c:02:7d:ab:37:94:ab:11:56:5a:a4:6e:cb:f3:7f:18:0e: 03:89:93:eb:65:8f:75:f4:99:d7:86:11:5c:2a:e4:49:f2:02: 08:aa:aa:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz960fiRDvfk2V/nx33c+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZTU3OWZkNzQ2MDlkMjY4Y2NiY2ZiODJmNTNhNWE0ZDA2 MTM1YjAwHhcNMjUxMjA2MTQwMTI2WhcNMjUxMjA3MTQwMTI2WjAzMTEwLwYDVQQD EyhiMjgyOGFmODIzNDgwMzk0ODM0NWQyYTI3MTQ5MmY1YWJiZDc4MTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF+9q2S3GwWMTpF0eQLk6Bg2XWsA t5HKpXU5ZnwUsRa/XMMU9PJMv51uHXqmCHT85WOKczYaslrmrVG+oDkJKERmaSiG JGmloDMSTyV7LfI+F+D0kvjT+NclDs/LTQ8O5bMYSLoCRnBr9L5x+qO7bcFjqpuO MDWNcfyFQAQrs5hhSBVn4m8jI/qs6obFXwjlmb+ZS82a3Dn8pZkBPqdXjNR4kL89 XxXLB+Ag/0WYsYvD6zS5sRcaorIG2wOV+R7bRcNqgzNxrxhG3WJDdueIlng448gq zsGTDfL6HR46eIl0VQjWosb4Cap/dWe7HySuW+VRS6CuFm0/uUgaWzeRjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKCivgjSAOUg0XSonFJL1q714EIMB8GA1UdIwQY MBaAFBnlef10YJ0mjMvPuC9TpaTQYTWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2VWNV9YUmduU2FNeTgtNEwxT2xwTkJoTmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80ZGM0ZGUtOGU4ZC00N2ZiLTlkNWMt NzQ4NDU0MTRlMDcxLzEvR2VWNV9YUmduU2FNeTgtNEwxT2xwTkJoTmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80ZGM0ZGUtOGU4ZC00N2ZiLTlkNWMtNzQ4NDU0MTRlMDcx LzEvR2VWNV9YUmduU2FNeTgtNEwxT2xwTkJoTmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo38orKhI TJQNapzu8tikWyinptba0bLyHnSzOPX3Re0H5EkDmPTPNSGBHUiZM1gAe6IvlAC/ ssWHra2jRsJ//88BGnhgY1oXkOsdIm8ewAg9PAYpmGQ+YgVNIeQmXwE8FOUndqtk 1iZjm6Y6Jhz/h95EqklQ4B4DbI7f9ZyNVfXqCz910XGLePlhzp5O8kpLXOy7MVNf LKXa6BrluMSCHml30nNDGOcg3EaKyoRxJNdXFcVnhGZm+1jp6EZvr9p/54tfR94z 6EHDZpU0uW+asF7E3ZZUhHDYqIwCfas3lKsRVlqkbsvzfxgOA4mT62WPdfSZ14YR XCrkSfICCKqqBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:20:11 2025 by rpki-client