This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json) Hash identifier: wZfpl1elXbv01VBHT4hQKhFHakWLv/iZsb1axlXDVT0= Subject key identifier: C6:90:EA:1E:41:72:D6:9C:04:C4:14:03:97:86:CA:8F:42:4F:56:36 Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56 Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756 Certificate serial: 019AF12DFA9D1D23958D460AE8999F7A5CCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft Manifest number: 0655 Signing time: Sat 06 Dec 2025 01:01:53 +0000 Manifest this update: Sat 06 Dec 2025 01:01:53 +0000 Manifest next update: Sun 07 Dec 2025 01:01:53 +0000 Files and hashes: 1: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: UPvNeCeur+68KX4iuGGgO40u+hXtIDKrukqgf7ev/9g=) 2: h_pQhnrE430cVPVrVeHdwNqGdWQ.roa (hash: jiL4T5HKXcvptd8nzfsvbD/UWOoD6EiqjHWGsrec+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fa:9d:1d:23:95:8d:46:0a:e8:99:9f:7a:5c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756 Validity Not Before: Dec 6 01:01:53 2025 GMT Not After : Dec 7 01:01:53 2025 GMT Subject: CN=c690ea1e4172d69c04c414039786ca8f424f5636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:6f:2e:49:bb:ba:74:49:61:73:0d:3e:72:fe: 0f:07:0f:5c:f1:8b:91:04:8e:84:8e:99:1d:b5:af: ce:af:b7:d6:ee:dc:35:cc:ec:5f:2d:72:a0:0e:a4: 66:b4:c3:de:ee:d0:70:cf:a7:d8:a9:df:6c:0d:cc: 91:7c:2f:d5:86:f0:95:5e:b6:d9:a8:f7:2b:46:6d: 60:67:9f:13:59:b5:46:31:4e:1a:da:53:ff:f4:1a: 8b:ab:e6:9f:48:2d:1f:bd:51:7c:5c:48:e3:9e:78: 9d:7b:f4:c5:da:a9:f1:69:10:61:2d:a5:fe:a3:e0: 5d:2b:f0:22:92:19:58:5d:03:82:51:7d:f4:3b:58: d3:4f:6c:96:8d:10:ab:2e:4f:8c:d4:e8:15:33:29: 41:41:ec:72:19:d7:7c:c1:2d:11:2e:cd:0b:3b:ef: 02:8e:8c:4f:5b:51:69:f3:de:2d:44:60:5a:58:06: 92:38:d9:99:21:7e:cb:c9:a1:46:45:2c:52:99:c9: 3a:de:5d:8b:bb:44:2f:6b:65:36:df:ea:89:60:a7: 10:1b:a3:df:bc:a1:65:ed:5f:99:5c:4e:a8:8d:5a: c0:e9:48:08:9b:06:9f:55:53:10:d6:02:09:89:54: 9b:37:be:c8:99:51:dc:11:3e:11:78:fe:2d:27:f7: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:90:EA:1E:41:72:D6:9C:04:C4:14:03:97:86:CA:8F:42:4F:56:36 X509v3 Authority Key Identifier: keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:11:41:3b:9d:e2:69:49:44:4f:a9:b0:41:61:1a:ee:9f:95: e0:1d:f3:b3:ed:89:73:a3:f5:57:90:ba:1a:d4:06:16:61:f6: 99:24:8d:dc:a5:d4:16:3f:a1:90:c2:62:a3:75:9f:d7:9b:cc: ba:03:9d:db:4c:27:c7:60:a9:0f:b5:ae:75:41:48:bb:2c:ef: 48:d3:ce:f7:b8:5f:ff:e6:0f:ef:dd:4c:dd:80:7c:20:30:76: cc:69:28:33:df:f7:cc:b6:0c:fe:0b:e9:45:9f:6e:0c:f0:6b: 4a:c0:fc:42:36:25:06:76:c7:1b:09:7f:63:4d:04:aa:e3:7d: 50:a5:02:e3:62:49:0d:51:9d:71:5b:4a:f6:c9:db:d3:53:04: 78:1a:0b:1f:39:f1:f7:9a:73:c5:a6:20:e2:10:4d:21:dc:f1: 76:d2:72:b1:b9:fd:6a:7f:5d:7f:38:be:57:35:2f:01:19:9c: f1:75:41:75:80:6f:6c:b6:19:41:21:59:fe:c9:f8:96:21:a9: 77:80:bc:60:4a:26:f0:c8:9b:02:f0:b0:f0:12:4d:31:a4:eb: b8:e4:6a:f2:04:8e:f0:06:fb:fa:96:d5:e9:db:3f:e6:5b:ee: 71:cc:8b:7a:98:18:99:a7:21:d8:09:32:63:77:8a:e6:cb:38: 73:b1:0d:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfqdHSOVjUYK6JmfelzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZTNkMTFmNzJkZGJlZDgzNjEyODViNDk5YjkzMjE5MTIw M2I3NTYwHhcNMjUxMjA2MDEwMTUzWhcNMjUxMjA3MDEwMTUzWjAzMTEwLwYDVQQD EyhjNjkwZWExZTQxNzJkNjljMDRjNDE0MDM5Nzg2Y2E4ZjQyNGY1NjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9m8uSbu6dElhcw0+cv4PBw9c8YuR BI6Ejpkdta/Or7fW7tw1zOxfLXKgDqRmtMPe7tBwz6fYqd9sDcyRfC/VhvCVXrbZ qPcrRm1gZ58TWbVGMU4a2lP/9BqLq+afSC0fvVF8XEjjnnide/TF2qnxaRBhLaX+ o+BdK/AikhlYXQOCUX30O1jTT2yWjRCrLk+M1OgVMylBQexyGdd8wS0RLs0LO+8C joxPW1Fp894tRGBaWAaSONmZIX7LyaFGRSxSmck63l2Lu0Qva2U23+qJYKcQG6Pf vKFl7V+ZXE6ojVrA6UgImwafVVMQ1gIJiVSbN77ImVHcET4ReP4tJ/eWqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaQ6h5BctacBMQUA5eGyo9CT1Y2MB8GA1UdIwQY MBaAFBnj0R9y3b7YNhKFtJm5MhkSA7dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQt MDY5YmZhZjJiY2U0LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQtMDY5YmZhZjJiY2U0 LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxFBO53i aUlET6mwQWEa7p+V4B3zs+2Jc6P1V5C6GtQGFmH2mSSN3KXUFj+hkMJio3Wf15vM ugOd20wnx2CpD7WudUFIuyzvSNPO97hf/+YP791M3YB8IDB2zGkoM9/3zLYM/gvp RZ9uDPBrSsD8QjYlBnbHGwl/Y00EquN9UKUC42JJDVGdcVtK9snb01MEeBoLHznx 95pzxaYg4hBNIdzxdtJysbn9an9dfzi+VzUvARmc8XVBdYBvbLYZQSFZ/sn4liGp d4C8YEom8MibAvCw8BJNMaTruORq8gSO8Ab7+pbV6ds/5lvuccyLepgYmach2Aky Y3eK5ss4c7ENBg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:52 2025 by rpki-client