This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json) Hash identifier: +450PZD7v/WpKypDlkH50PdL2h8aG5Gj6lRczF7n4i8= Subject key identifier: 5A:56:4F:C2:9C:F3:B5:5B:C0:4C:DF:01:1B:7A:00:13:4C:4C:6D:BE Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a Certificate serial: 019AF23F76E2AF9D62EE32184E097BE2EE92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft Manifest number: 1159 Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: TbG1yY3T/IxdMa6/wh7/iplD0vPJG1qSrXKIGJgVtrs=) 2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:76:e2:af:9d:62:ee:32:18:4e:09:7b:e2:ee:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=5a564fc29cf3b55bc04cdf011b7a00134c4c6dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:7a:bb:23:56:a2:b3:6f:09:09:3a:64:65: 7d:b9:27:84:7c:76:d7:f4:e7:e1:7b:82:d6:c0:22: d2:64:06:5a:69:0a:30:5b:b3:e5:cb:24:d5:09:63: 1b:1e:b1:0f:9a:8c:8e:e2:6f:51:7b:2e:d4:39:bc: f7:af:98:26:88:11:d7:d8:f0:29:59:94:62:3f:74: 8a:23:ac:7a:fd:f0:50:71:b2:05:e2:91:83:d6:6e: 33:e4:88:b8:17:cc:96:ab:d5:0e:20:2b:ee:33:90: 4c:c1:08:ea:f8:01:7a:38:91:37:af:e9:27:1d:c9: f8:67:c1:cf:c4:a7:d3:1a:c8:63:e8:a1:8c:57:c2: ad:46:4a:b0:bd:68:2c:b1:72:18:fa:05:84:98:c9: f8:09:c2:da:ec:5b:e5:53:f8:4a:9f:e5:bf:ae:82: a9:1f:2a:9c:1e:be:55:93:6c:be:bc:6a:e8:ad:4d: a8:59:7a:54:b4:8a:57:27:4a:32:b7:a1:cc:77:56: 68:b0:6a:8d:84:7f:44:e4:68:35:dd:a7:d0:2d:94: 23:e8:11:e5:fb:b6:d7:a2:8b:de:0f:b3:f2:fc:e5: 44:ee:47:82:39:d8:be:d9:14:d8:30:a2:6f:ab:20: ac:e8:ae:0a:c9:92:f9:b0:ed:20:cb:5b:9b:ef:2d: 32:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:56:4F:C2:9C:F3:B5:5B:C0:4C:DF:01:1B:7A:00:13:4C:4C:6D:BE X509v3 Authority Key Identifier: keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:cc:e0:d1:bb:51:42:65:38:57:c6:4e:8f:4b:75:0d:d8:45: 00:38:f7:19:67:21:39:1e:69:73:16:24:42:65:ee:41:15:77: 84:cb:db:36:01:5e:40:91:9d:2d:f2:14:4e:1c:57:46:e0:1d: 76:e6:c3:e3:36:08:54:78:87:41:24:5c:70:f3:99:27:f3:39: 1c:5c:89:50:3e:a8:59:01:51:2a:1a:5a:2b:db:84:df:55:ec: 85:fb:53:a3:94:d0:fa:fe:bd:36:8b:08:83:6e:3c:46:b2:bb: ea:43:cb:70:72:d5:5d:68:8b:72:51:9d:61:73:bd:57:b2:13: 52:7d:a3:34:d4:06:6c:ae:04:56:d2:10:97:5d:53:f5:dd:94: e2:f1:81:0f:44:6e:65:8c:6c:57:c3:20:f5:a4:ea:88:b3:df: 16:86:46:af:ce:99:8e:87:bd:91:66:d3:e0:e5:28:7f:9a:5d: d6:40:8a:ae:ff:77:09:50:b0:ac:ae:38:5c:7d:78:8b:48:7f: 0b:ab:dd:be:e0:0e:48:ea:76:f4:4e:32:6d:6e:20:5d:61:dd: 79:33:ac:6a:7f:bf:ac:77:20:d8:f4:2f:11:ab:01:a2:0f:23: a4:4c:fe:65:03:f8:6d:b7:4c:ab:0a:a6:f4:30:2b:b3:8a:2a: 0a:39:8b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3bir51i7jIYTgl74u6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NGM3YzAzNjRmMTA5M2NmYzU4NGM5MzAzNzAyNDEwNGZi NDg1NGEwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD Eyg1YTU2NGZjMjljZjNiNTViYzA0Y2RmMDExYjdhMDAxMzRjNGM2ZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLR6uyNWorNvCQk6ZGV9uSeEfHbX 9Ofhe4LWwCLSZAZaaQowW7PlyyTVCWMbHrEPmoyO4m9Rey7UObz3r5gmiBHX2PAp WZRiP3SKI6x6/fBQcbIF4pGD1m4z5Ii4F8yWq9UOICvuM5BMwQjq+AF6OJE3r+kn Hcn4Z8HPxKfTGshj6KGMV8KtRkqwvWgssXIY+gWEmMn4CcLa7FvlU/hKn+W/roKp HyqcHr5Vk2y+vGrorU2oWXpUtIpXJ0oyt6HMd1ZosGqNhH9E5Gg13afQLZQj6BHl +7bXooveD7Py/OVE7keCOdi+2RTYMKJvqyCs6K4KyZL5sO0gy1ub7y0ytwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpWT8Kc87VbwEzfARt6ABNMTG2+MB8GA1UdIwQY MBaAFBhMfANk8Qk8/FhMkwNwJBBPtIVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAt OThmOTQwZTRkN2MxLzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAtOThmOTQwZTRkN2Mx LzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABszg0btR QmU4V8ZOj0t1DdhFADj3GWchOR5pcxYkQmXuQRV3hMvbNgFeQJGdLfIUThxXRuAd dubD4zYIVHiHQSRccPOZJ/M5HFyJUD6oWQFRKhpaK9uE31XshftTo5TQ+v69NosI g248RrK76kPLcHLVXWiLclGdYXO9V7ITUn2jNNQGbK4EVtIQl11T9d2U4vGBD0Ru ZYxsV8Mg9aTqiLPfFoZGr86Zjoe9kWbT4OUof5pd1kCKrv93CVCwrK44XH14i0h/ C6vdvuAOSOp29E4ybW4gXWHdeTOsan+/rHcg2PQvEasBog8jpEz+ZQP4bbdMqwqm 9DArs4oqCjmL0w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:29 2025 by rpki-client