This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft File: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft (raw, json) Hash identifier: VgdVa5tyS7s/rSF9wm28PFrzfQEa0r9UJEQKhX9bwp4= Subject key identifier: EA:B5:4D:80:A2:A7:A7:9C:DD:CE:C6:54:F7:EA:95:D4:8D:59:21:02 Authority key identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60 Certificate issuer: /CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960 Certificate serial: 019AF209C35FC68131CA89EE968E55C2C030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:57 +0000 Manifest this update: Sat 06 Dec 2025 05:01:57 +0000 Manifest next update: Sun 07 Dec 2025 05:01:57 +0000 Files and hashes: 1: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl (hash: hpCxXmQwCd6DnbxDu32QKRNpmxx8Vw5xEWvRJEeDl80=) 2: kWjhD15-ZoWva0lEp7OiEph-8ds.roa (hash: Wxf7YJjEdXTZXm4jCO3HEdDpnmTwoG36OiWMBmcqP2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:c3:5f:c6:81:31:ca:89:ee:96:8e:55:c2:c0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960 Validity Not Before: Dec 6 05:01:57 2025 GMT Not After : Dec 7 05:01:57 2025 GMT Subject: CN=eab54d80a2a7a79cddcec654f7ea95d48d592102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:16:39:fb:47:bb:8d:49:19:5d:a3:2a:03: b2:b1:23:0c:9a:cd:2e:20:09:89:a3:84:43:49:cc: 8f:a5:e1:2d:0c:4c:71:a1:38:70:69:c4:8d:fc:53: 73:54:c8:28:78:08:00:c9:d6:5a:88:db:bd:03:7a: 5d:f9:c7:0d:4d:91:e1:4c:1b:c4:ba:9e:dc:5f:a7: 43:ff:1d:c9:2d:c4:07:16:d1:27:1d:c2:b0:86:e9: 4a:bf:1a:bd:9f:de:eb:97:6e:b9:34:64:cf:db:85: a3:90:4e:07:50:ce:15:cf:f1:52:c6:d3:aa:df:dd: 0f:dd:b8:39:dc:cb:55:e8:fd:ae:9c:c9:aa:ee:ff: f5:d6:5c:3e:8d:1a:14:f9:30:85:57:fb:31:d3:e2: ea:d5:fc:00:16:1e:b3:a4:ad:95:ac:69:24:50:ed: 71:26:6a:95:5f:29:f3:2f:3e:2f:b2:5f:04:b2:08: 1a:64:65:60:1f:34:f7:77:de:ff:09:b3:1b:58:1e: aa:43:10:c8:a0:bb:f8:2f:e4:78:be:d7:9a:09:57: 04:f7:a6:1a:a0:75:17:23:53:42:e6:a7:fb:f1:4e: a6:1b:51:9b:60:c9:89:a0:a9:4a:02:77:34:25:fe: cc:cb:49:65:c0:b4:6a:9e:e9:6a:19:55:eb:3a:2b: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B5:4D:80:A2:A7:A7:9C:DD:CE:C6:54:F7:EA:95:D4:8D:59:21:02 X509v3 Authority Key Identifier: keyid:1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c4:b3:fc:f2:eb:5a:7b:b0:92:e9:8d:a3:48:7a:51:86:af: 55:e3:48:1d:61:6f:3f:e2:0f:d6:77:08:48:86:ef:79:86:81: 7e:65:64:71:35:f7:f9:5f:c2:44:9d:86:6f:14:50:06:be:86: a5:75:db:9e:93:67:f1:0f:73:82:2f:d2:88:74:d3:0f:96:cb: 03:35:a0:05:86:16:59:98:8d:66:7a:ed:d2:73:10:b4:24:59: df:9b:6a:e4:63:7d:6d:2a:ba:cb:4c:ea:da:0d:43:c7:c4:6e: b2:73:97:56:af:6d:d3:d5:27:12:e1:d9:88:c8:eb:73:66:30: 17:3f:55:bc:0d:0b:81:a6:d9:c0:05:88:91:72:0f:b2:31:48: c9:e8:4b:66:11:eb:ba:e4:5c:6c:a5:52:19:55:4a:b3:e9:ac: 49:fa:cf:bf:82:3a:ad:fe:e4:53:aa:d9:70:d5:53:53:58:d1: a0:fd:35:a4:7a:80:35:18:6f:99:a2:09:a7:ec:36:e3:27:ab: 07:8d:13:7d:ff:a8:fd:09:be:3a:78:1b:4f:06:93:88:fb:4e: 3e:a5:0c:69:59:af:d2:fe:ce:0c:d5:21:af:98:68:91:9d:cf: 8c:f2:c2:c8:f6:28:ee:bf:97:cb:76:3d:46:d1:c4:46:b9:71: f9:d3:6f:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCcNfxoExyonulo5VwsAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYmU1ZWVjYjIzYWY1NjlhYTcwMWE3YWIxNmNmN2FjMWY5 MGY5NjAwHhcNMjUxMjA2MDUwMTU3WhcNMjUxMjA3MDUwMTU3WjAzMTEwLwYDVQQD EyhlYWI1NGQ4MGEyYTdhNzljZGRjZWM2NTRmN2VhOTVkNDhkNTkyMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fcWOftHu41JGV2jKgOysSMMms0u IAmJo4RDScyPpeEtDExxoThwacSN/FNzVMgoeAgAydZaiNu9A3pd+ccNTZHhTBvE up7cX6dD/x3JLcQHFtEnHcKwhulKvxq9n97rl265NGTP24WjkE4HUM4Vz/FSxtOq 390P3bg53MtV6P2unMmq7v/11lw+jRoU+TCFV/sx0+Lq1fwAFh6zpK2VrGkkUO1x JmqVXynzLz4vsl8EsggaZGVgHzT3d97/CbMbWB6qQxDIoLv4L+R4vteaCVcE96Ya oHUXI1NC5qf78U6mG1GbYMmJoKlKAnc0Jf7My0llwLRqnulqGVXrOivmLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq1TYCip6ec3c7GVPfqldSNWSECMB8GA1UdIwQY MBaAFBq+XuyyOvVpqnAaerFs96wfkPlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3I1ZTdMSTY5V21xY0JwNnNXejNyQi1RLVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iZWMzMzUtNWVlMC00YzRkLWJkYTct N2U2ZDEyYzM3MzZmLzEvR3I1ZTdMSTY5V21xY0JwNnNXejNyQi1RLVdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9iZWMzMzUtNWVlMC00YzRkLWJkYTctN2U2ZDEyYzM3MzZm LzEvR3I1ZTdMSTY5V21xY0JwNnNXejNyQi1RLVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMSz/PLr WnuwkumNo0h6UYavVeNIHWFvP+IP1ncISIbveYaBfmVkcTX3+V/CRJ2GbxRQBr6G pXXbnpNn8Q9zgi/SiHTTD5bLAzWgBYYWWZiNZnrt0nMQtCRZ35tq5GN9bSq6y0zq 2g1Dx8RusnOXVq9t09UnEuHZiMjrc2YwFz9VvA0LgabZwAWIkXIPsjFIyehLZhHr uuRcbKVSGVVKs+msSfrPv4I6rf7kU6rZcNVTU1jRoP01pHqANRhvmaIJp+w24yer B40Tff+o/Qm+OngbTwaTiPtOPqUMaVmv0v7ODNUhr5hokZ3PjPLCyPYo7r+Xy3Y9 RtHERrlx+dNvug== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:35 2025 by rpki-client