This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json) Hash identifier: i7Vjnt9u4Su1CyBz6JvySIZwDockQGv7UMmxk28D8Gk= Subject key identifier: FE:1F:6B:A0:2D:73:55:B0:52:FA:4D:86:FA:5D:8A:E4:05:F3:34:B5 Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56 Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756 Certificate serial: 019B2EFA20410BDEBACBEE6113407D5EB41F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft Manifest number: 0675 Signing time: Thu 18 Dec 2025 01:01:42 +0000 Manifest this update: Thu 18 Dec 2025 01:01:42 +0000 Manifest next update: Fri 19 Dec 2025 01:01:42 +0000 Files and hashes: 1: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: x02E9ROIubyQL/hEz9XUVnQUz4u6rIhF0vqWCDWiLzk=) 2: h_pQhnrE430cVPVrVeHdwNqGdWQ.roa (hash: jiL4T5HKXcvptd8nzfsvbD/UWOoD6EiqjHWGsrec+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:20:41:0b:de:ba:cb:ee:61:13:40:7d:5e:b4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756 Validity Not Before: Dec 18 01:01:42 2025 GMT Not After : Dec 19 01:01:42 2025 GMT Subject: CN=fe1f6ba02d7355b052fa4d86fa5d8ae405f334b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:6c:cd:99:ad:47:4e:30:ae:fb:ef:a9:bb: a7:8a:0b:78:1d:6c:04:6d:6b:21:56:13:33:39:38: e7:72:d0:47:59:74:0d:bd:b0:ac:e4:b6:4f:96:92: 34:df:cb:66:4e:eb:d9:94:48:c0:a3:09:5e:b1:af: ac:c0:e7:06:02:13:1d:f9:de:d0:19:47:76:3c:b6: b2:b1:6b:cf:9f:16:ef:a5:06:ce:81:a9:f4:81:45: 98:82:9a:1c:30:14:eb:49:d2:8f:8e:d1:96:e8:e3: ec:7a:3a:bc:e8:da:80:3e:cc:d6:7f:72:f4:da:9f: 5f:20:58:80:49:07:ce:e4:60:02:3d:5c:bd:8d:ba: a6:1c:3b:20:6b:67:65:80:c0:3f:4b:b5:d0:c4:87: f5:84:a2:18:1f:0b:83:8d:59:5d:55:3e:19:62:39: 63:d7:cf:ce:95:28:7f:af:cf:68:21:e9:43:1d:b9: 7e:78:bd:0f:d6:03:9c:84:01:cc:d8:ed:5e:2a:16: 9e:7a:50:87:53:c0:09:49:f6:94:af:47:e5:19:de: 4b:c1:a3:57:db:34:a3:da:5f:4e:84:3b:51:d2:b4: e8:5f:0e:9d:ac:dd:60:63:07:d6:3e:56:59:b1:55: ae:93:3a:bd:43:86:b0:69:6f:c7:25:5e:23:be:cd: e6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1F:6B:A0:2D:73:55:B0:52:FA:4D:86:FA:5D:8A:E4:05:F3:34:B5 X509v3 Authority Key Identifier: keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ac:df:5e:2e:f2:b1:d1:ff:ef:a0:64:f7:4b:37:86:4b:9a: 95:63:ff:b6:bb:e9:44:1a:35:15:fd:dd:bd:3c:5e:0e:54:e5: 39:06:43:22:b0:82:06:da:99:82:59:7b:85:1a:99:4d:51:54: 1a:0b:d1:69:42:b4:10:9b:15:e5:34:ed:b5:34:ca:fa:02:f8: db:28:e6:68:41:f5:08:fd:35:c9:1f:cb:c9:ea:f1:5b:90:cc: f0:80:ec:43:37:f3:04:44:19:9c:94:0b:c4:02:2d:cb:83:92: a1:7b:94:fa:d2:08:a7:d2:fa:f0:62:cb:43:cf:5c:71:16:3f: 17:03:4c:a5:a6:b1:78:ca:ed:50:9e:51:0e:f8:7d:2a:bb:cc: c5:d8:23:86:ae:98:36:92:44:e6:90:46:ca:71:fd:0f:47:04: 45:ee:8b:65:c4:fa:27:88:d8:6c:43:d4:be:70:5b:29:9e:d4: 83:93:12:31:c5:b5:44:87:85:90:89:84:c7:2f:e3:0a:76:e2: 97:3b:cd:2f:80:4f:2a:c2:4b:4d:b2:3b:21:6b:fd:79:5f:16: 76:11:f8:45:49:0a:36:46:72:25:ef:47:a8:7c:2c:6c:21:28: 33:fc:b3:1f:93:9c:e7:6c:9a:e7:b2:23:f4:f7:ff:fe:19:47: 09:b1:66:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+iBBC966y+5hE0B9XrQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZTNkMTFmNzJkZGJlZDgzNjEyODViNDk5YjkzMjE5MTIw M2I3NTYwHhcNMjUxMjE4MDEwMTQyWhcNMjUxMjE5MDEwMTQyWjAzMTEwLwYDVQQD EyhmZTFmNmJhMDJkNzM1NWIwNTJmYTRkODZmYTVkOGFlNDA1ZjMzNGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd5szZmtR04wrvvvqbunigt4HWwE bWshVhMzOTjnctBHWXQNvbCs5LZPlpI038tmTuvZlEjAowlesa+swOcGAhMd+d7Q GUd2PLaysWvPnxbvpQbOgan0gUWYgpocMBTrSdKPjtGW6OPsejq86NqAPszWf3L0 2p9fIFiASQfO5GACPVy9jbqmHDsga2dlgMA/S7XQxIf1hKIYHwuDjVldVT4ZYjlj 18/OlSh/r89oIelDHbl+eL0P1gOchAHM2O1eKhaeelCHU8AJSfaUr0flGd5LwaNX 2zSj2l9OhDtR0rToXw6drN1gYwfWPlZZsVWukzq9Q4awaW/HJV4jvs3mwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4fa6Atc1WwUvpNhvpdiuQF8zS1MB8GA1UdIwQY MBaAFBnj0R9y3b7YNhKFtJm5MhkSA7dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQt MDY5YmZhZjJiY2U0LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQtMDY5YmZhZjJiY2U0 LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqzfXi7y sdH/76Bk90s3hkualWP/trvpRBo1Ff3dvTxeDlTlOQZDIrCCBtqZgll7hRqZTVFU GgvRaUK0EJsV5TTttTTK+gL42yjmaEH1CP01yR/LyerxW5DM8IDsQzfzBEQZnJQL xAIty4OSoXuU+tIIp9L68GLLQ89ccRY/FwNMpaaxeMrtUJ5RDvh9KrvMxdgjhq6Y NpJE5pBGynH9D0cERe6LZcT6J4jYbEPUvnBbKZ7Ug5MSMcW1RIeFkImExy/jCnbi lzvNL4BPKsJLTbI7IWv9eV8WdhH4RUkKNkZyJe9HqHwsbCEoM/yzH5Oc52ya57Ij 9Pf//hlHCbFmkA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:44:07 2025 by rpki-client