This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json) Hash identifier: fMH+rXLb1uqqhd66btOa8m/74lCNBPEhMjfUEbSy94k= Subject key identifier: 71:D8:96:FE:E1:A3:2E:7A:DC:29:A6:4F:66:06:CB:9E:51:4F:E1:7B Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55 Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655 Certificate serial: 019B2E1DCF37CEFAD1DA6D3FE1CF0D98A414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft Manifest number: 0B53 Signing time: Wed 17 Dec 2025 21:01:03 +0000 Manifest this update: Wed 17 Dec 2025 21:01:03 +0000 Manifest next update: Thu 18 Dec 2025 21:01:03 +0000 Files and hashes: 1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: ep9WTsKAwmmRaKlfxWEw0A+c9zN+bqUo8SPavoV2p/0=) 2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:cf:37:ce:fa:d1:da:6d:3f:e1:cf:0d:98:a4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655 Validity Not Before: Dec 17 21:01:03 2025 GMT Not After : Dec 18 21:01:03 2025 GMT Subject: CN=71d896fee1a32e7adc29a64f6606cb9e514fe17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:17:cc:16:f7:e5:1c:47:73:f6:e9:f2:12: 77:68:a3:5a:86:79:f0:88:4f:b0:67:f0:f7:c4:5b: 1f:d9:b8:f1:b5:95:f8:3b:4e:60:38:22:4a:6d:c7: 30:ac:95:0f:49:a4:79:ce:0f:ee:fb:0f:66:52:d8: 7a:1f:3a:c4:44:96:b4:a9:a4:2e:c8:01:66:35:6f: b4:43:6e:56:c4:89:54:41:b8:35:b1:4e:02:8c:4d: 97:35:7c:d4:dd:ef:6c:b2:0b:74:ad:e1:4f:60:56: 20:cb:1f:e0:e2:94:e7:97:da:45:64:fd:47:e4:b2: 71:51:c8:b8:2f:c0:09:58:aa:1b:a4:e9:d3:ce:08: 1e:91:28:92:ab:b0:36:a2:9c:5c:08:e5:9c:02:95: d6:84:58:9a:3a:f9:ef:b1:92:52:e0:95:07:ff:af: 2d:cf:3b:04:1d:f1:d5:61:6b:8a:00:28:32:ce:cd: 85:49:37:fb:43:23:c8:0d:7a:6f:5a:19:86:2a:14: 34:87:48:c2:d3:b7:e5:34:56:a6:e5:05:9c:dc:2f: 74:47:47:fb:21:50:f1:a5:99:7b:55:12:05:25:bc: 3d:05:b7:77:9c:33:06:13:9d:bd:d8:d7:3e:00:a9: 93:22:16:af:78:f6:4a:43:74:62:40:e1:c4:34:c2: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D8:96:FE:E1:A3:2E:7A:DC:29:A6:4F:66:06:CB:9E:51:4F:E1:7B X509v3 Authority Key Identifier: keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:99:fd:2e:d9:26:7d:69:af:6e:42:ef:09:2b:c7:11:09:40: 2b:6d:3b:10:1f:b2:b6:8a:41:1f:e2:6e:23:0a:7b:04:13:2b: b6:45:53:ac:ec:02:30:cd:e5:c2:e9:2c:e6:8d:48:87:63:73: 79:51:62:91:52:35:91:09:74:94:6c:69:cd:b4:6e:16:01:79: 02:d2:df:e0:d5:89:dc:69:5d:34:d6:5c:e7:a9:45:4c:37:11: 6d:ac:bd:55:d5:a0:34:2d:f7:97:18:98:3c:d4:a9:2d:f2:81: 59:13:6c:2f:84:6a:0e:12:4b:83:f8:47:61:9d:26:0a:4a:86: 11:11:3c:a9:4b:b9:69:84:c3:f7:a2:44:20:4c:5f:20:27:9d: 8b:59:c4:75:1e:39:38:31:4a:a4:b8:79:0b:f2:5c:f0:a0:15: 76:a3:6e:8c:50:1a:cf:9d:a7:c1:6b:46:75:79:2c:ee:7f:3f: 38:a0:ec:b4:93:a7:f4:7d:c1:da:26:d5:6f:18:93:2f:8a:83: 29:13:4c:74:2d:05:4f:70:dc:87:08:98:d3:16:56:83:58:c0: 82:69:38:5e:8a:26:1d:b8:ed:c9:7e:09:14:e5:89:42:8b:3c: 56:54:41:d6:b4:ce:bf:ec:c5:11:b3:25:88:24:ea:26:80:f9: ca:39:2d:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHc83zvrR2m0/4c8NmKQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZTNlNjk3Y2RkNmUyMjVhYzViMTE2MWNkZjcwNGRlOWNm YzI2NTUwHhcNMjUxMjE3MjEwMTAzWhcNMjUxMjE4MjEwMTAzWjAzMTEwLwYDVQQD Eyg3MWQ4OTZmZWUxYTMyZTdhZGMyOWE2NGY2NjA2Y2I5ZTUxNGZlMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOoXzBb35RxHc/bp8hJ3aKNahnnw iE+wZ/D3xFsf2bjxtZX4O05gOCJKbccwrJUPSaR5zg/u+w9mUth6HzrERJa0qaQu yAFmNW+0Q25WxIlUQbg1sU4CjE2XNXzU3e9ssgt0reFPYFYgyx/g4pTnl9pFZP1H 5LJxUci4L8AJWKobpOnTzggekSiSq7A2opxcCOWcApXWhFiaOvnvsZJS4JUH/68t zzsEHfHVYWuKACgyzs2FSTf7QyPIDXpvWhmGKhQ0h0jC07flNFam5QWc3C90R0f7 IVDxpZl7VRIFJbw9Bbd3nDMGE5292Nc+AKmTIhavePZKQ3RiQOHENMLH+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHYlv7hoy563CmmT2YGy55RT+F7MB8GA1UdIwQY MBaAFIHj5pfN1uIlrFsRYc33BN6c/CZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODIt ZGM4NTg2NGFlYTg5LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODItZGM4NTg2NGFlYTg5 LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5n9Ltkm fWmvbkLvCSvHEQlAK207EB+ytopBH+JuIwp7BBMrtkVTrOwCMM3lwuks5o1Ih2Nz eVFikVI1kQl0lGxpzbRuFgF5AtLf4NWJ3GldNNZc56lFTDcRbay9VdWgNC33lxiY PNSpLfKBWRNsL4RqDhJLg/hHYZ0mCkqGERE8qUu5aYTD96JEIExfICedi1nEdR45 ODFKpLh5C/Jc8KAVdqNujFAaz52nwWtGdXks7n8/OKDstJOn9H3B2ibVbxiTL4qD KRNMdC0FT3DchwiY0xZWg1jAgmk4XoomHbjtyX4JFOWJQos8VlRB1rTOv+zFEbMl iCTqJoD5yjktoA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:44:45 2025 by rpki-client