This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json) Hash identifier: dqMqu4LqkhLXQN9ppeWnYCO2dgfJ7N9J0fBdVHH7ep4= Subject key identifier: 50:D6:04:CA:3E:FC:97:37:66:83:37:CB:0B:6B:0E:59:03:4D:2D:D8 Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55 Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655 Certificate serial: 019AF42E35E7A03991415FD70CD68EFA9FAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft Manifest number: 0B35 Signing time: Sat 06 Dec 2025 15:01:00 +0000 Manifest this update: Sat 06 Dec 2025 15:01:00 +0000 Manifest next update: Sun 07 Dec 2025 15:01:00 +0000 Files and hashes: 1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: VMJYXSaVmU4lOTHmGRQrJeOXrpOeP6t01QgXqllffy8=) 2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:35:e7:a0:39:91:41:5f:d7:0c:d6:8e:fa:9f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655 Validity Not Before: Dec 6 15:01:00 2025 GMT Not After : Dec 7 15:01:00 2025 GMT Subject: CN=50d604ca3efc9737668337cb0b6b0e59034d2dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:a2:a5:1b:c8:68:9a:d5:b9:fa:5b:28:10: bf:6d:45:17:3b:05:b9:cd:56:69:dc:93:1e:eb:72: 4d:1c:ab:53:32:ff:d7:c3:cc:c9:c6:e2:3e:ff:2a: 01:e5:62:e4:19:5d:47:70:6b:fc:d1:9a:0d:cd:fb: 39:4b:c7:5f:c9:ca:71:1f:50:cf:1b:ca:46:0a:fd: fc:56:26:51:f6:7a:8e:22:fd:2b:06:3e:c8:04:da: bd:d7:ab:78:8f:66:e7:c3:8f:2c:6f:07:52:51:b3: 99:5c:47:58:d7:6a:95:3b:7d:3a:a5:e0:c2:ed:13: 85:ff:54:89:52:23:69:f5:9e:df:c6:e9:d6:eb:45: 98:d2:a5:85:69:1b:7a:56:6a:5b:e9:17:e4:ac:04: 80:4f:f0:56:3b:54:25:80:19:64:e3:b3:1c:5c:02: 83:21:2e:c3:25:90:d3:7c:20:9f:9a:e3:ae:f2:4a: 22:c9:93:df:41:3a:3e:a4:ef:7e:b2:da:38:27:40: 2c:f4:25:72:ff:9c:ac:db:9a:6a:9f:5e:3b:22:ce: b5:43:b1:ee:21:4f:0e:4d:5d:20:c3:7b:ce:bc:3d: d4:51:51:88:30:20:39:3f:34:f9:4d:d5:db:a8:af: b7:0d:3a:0a:27:c2:4f:a2:7c:d1:fc:a8:d3:81:43: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D6:04:CA:3E:FC:97:37:66:83:37:CB:0B:6B:0E:59:03:4D:2D:D8 X509v3 Authority Key Identifier: keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2a:0b:41:2d:71:85:7c:18:89:86:f9:30:9e:4d:26:15:ac: e0:88:08:0d:54:92:aa:16:38:ff:51:4a:26:80:55:c9:4a:d6: 5f:df:76:be:c5:ed:6c:33:c3:5d:20:85:b0:e5:f4:bc:7e:89: 5f:51:b7:78:46:11:0c:84:36:8c:6f:a8:a4:0e:95:da:9c:c4: eb:34:4b:e0:25:9d:50:c6:a8:3e:59:fd:69:fc:6d:25:82:ab: 3c:36:5d:5e:8a:c5:a2:96:7d:a0:e0:b2:10:50:98:95:bb:75: 14:fd:b8:01:95:a6:00:61:82:2b:47:ce:39:ad:a9:62:2d:d3: f0:97:17:6e:24:3f:d3:97:ef:ee:17:69:de:ed:0f:c7:ce:59: 96:52:5b:b0:27:75:97:9e:8f:26:1d:25:03:64:0e:6c:58:20: 1c:a9:23:0a:88:4a:e6:bf:bc:79:ce:1a:c7:10:99:aa:91:e9: dd:6c:3b:53:4b:ee:fa:92:cf:b4:0d:1d:22:dd:e0:78:a0:2b: e0:51:36:83:ec:4e:6c:e8:53:23:b9:43:20:5b:2d:dc:ee:d7: b9:2f:da:73:ca:c1:c6:49:f4:09:0e:f9:c6:fa:df:38:bf:61: 1c:80:8e:ea:af:6a:c2:12:a3:1e:42:48:c4:9c:81:61:79:66: f1:f2:2c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LjXnoDmRQV/XDNaO+p+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZTNlNjk3Y2RkNmUyMjVhYzViMTE2MWNkZjcwNGRlOWNm YzI2NTUwHhcNMjUxMjA2MTUwMTAwWhcNMjUxMjA3MTUwMTAwWjAzMTEwLwYDVQQD Eyg1MGQ2MDRjYTNlZmM5NzM3NjY4MzM3Y2IwYjZiMGU1OTAzNGQyZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVCipRvIaJrVufpbKBC/bUUXOwW5 zVZp3JMe63JNHKtTMv/Xw8zJxuI+/yoB5WLkGV1HcGv80ZoNzfs5S8dfycpxH1DP G8pGCv38ViZR9nqOIv0rBj7IBNq916t4j2bnw48sbwdSUbOZXEdY12qVO306peDC 7ROF/1SJUiNp9Z7fxunW60WY0qWFaRt6Vmpb6RfkrASAT/BWO1QlgBlk47McXAKD IS7DJZDTfCCfmuOu8koiyZPfQTo+pO9+sto4J0As9CVy/5ys25pqn147Is61Q7Hu IU8OTV0gw3vOvD3UUVGIMCA5PzT5TdXbqK+3DToKJ8JPonzR/KjTgUNYNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDWBMo+/Jc3ZoM3ywtrDlkDTS3YMB8GA1UdIwQY MBaAFIHj5pfN1uIlrFsRYc33BN6c/CZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODIt ZGM4NTg2NGFlYTg5LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODItZGM4NTg2NGFlYTg5 LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPioLQS1x hXwYiYb5MJ5NJhWs4IgIDVSSqhY4/1FKJoBVyUrWX992vsXtbDPDXSCFsOX0vH6J X1G3eEYRDIQ2jG+opA6V2pzE6zRL4CWdUMaoPln9afxtJYKrPDZdXorFopZ9oOCy EFCYlbt1FP24AZWmAGGCK0fOOa2pYi3T8JcXbiQ/05fv7hdp3u0Px85ZllJbsCd1 l56PJh0lA2QObFggHKkjCohK5r+8ec4axxCZqpHp3Ww7U0vu+pLPtA0dIt3geKAr 4FE2g+xObOhTI7lDIFst3O7XuS/ac8rBxkn0CQ75xvrfOL9hHICO6q9qwhKjHkJI xJyBYXlm8fIsxw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:29 2025 by rpki-client