This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft File: GEF3t2iRATugJ7Nebt_B6fgpXOw.mft (raw, json) Hash identifier: kBN0NujkM3B6dc7ZOxMLWvAJuJW+Ug7XeIyb3EzxAic= Subject key identifier: C9:E8:E7:17:8F:42:9E:AD:07:7F:99:0D:FA:43:D4:6D:8A:76:05:DE Authority key identifier: 18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC Certificate issuer: /CN=184177b76891013ba027b35e6edfc1e9f8295cec Certificate serial: 019B37FCC6CE86D106712265FB9D2111D4AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft Manifest number: 0CF9 Signing time: Fri 19 Dec 2025 19:01:11 +0000 Manifest this update: Fri 19 Dec 2025 19:01:11 +0000 Manifest next update: Sat 20 Dec 2025 19:01:11 +0000 Files and hashes: 1: GEF3t2iRATugJ7Nebt_B6fgpXOw.crl (hash: dVsOTImcS9cweAOKWvOAAUjEOdV5aPtTJDZxnuZAM9k=) 2: tut7oaWJNrhx8vDfjnadysvruEE.roa (hash: oXhco3AY4UNPZerjwlU5WNQYyYnT8TDpF5tOGRePMaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:c6:ce:86:d1:06:71:22:65:fb:9d:21:11:d4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184177b76891013ba027b35e6edfc1e9f8295cec Validity Not Before: Dec 19 19:01:11 2025 GMT Not After : Dec 20 19:01:11 2025 GMT Subject: CN=c9e8e7178f429ead077f990dfa43d46d8a7605de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:07:4c:ac:91:0f:94:a2:c8:e9:23:4a:47:bd: 18:ce:57:28:75:47:e0:ff:41:b0:92:47:ac:18:3e: 63:94:89:4b:33:3b:a9:ed:da:9c:d9:a9:c0:ea:ea: c2:05:3f:91:0f:d8:1a:62:38:9c:f1:5c:f6:a8:5b: 68:09:63:be:f9:1d:c0:82:60:6d:44:cc:ba:1b:ec: 12:70:e7:34:1c:91:51:b5:73:b9:03:f4:14:f5:58: 49:0c:95:37:33:15:4d:9e:67:06:49:bc:33:b0:3f: 70:9a:53:36:aa:66:cb:14:b1:4f:44:dc:12:f7:0f: 85:16:76:8a:9c:3f:bc:77:6c:3c:fe:79:2d:13:b6: 5d:19:59:69:59:8d:5e:26:99:32:81:a1:da:b7:21: ea:af:1c:3c:50:4a:26:f9:1d:1e:ff:0a:88:59:b9: e1:c7:89:c7:0c:5d:e2:6a:db:63:70:26:a1:10:94: 04:36:5c:4f:76:3b:4e:cf:be:3d:ad:5a:94:9d:78: 3c:02:99:d1:09:74:68:22:da:bc:a8:a9:e8:42:2e: b3:bf:72:9f:50:a8:9a:3c:40:1a:0f:3b:ba:3f:ec: 40:df:b0:b3:40:56:b7:9e:53:7b:25:03:cb:75:c4: ba:f9:5f:42:86:b3:07:b4:fe:51:56:92:3b:b6:e9: 65:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E8:E7:17:8F:42:9E:AD:07:7F:99:0D:FA:43:D4:6D:8A:76:05:DE X509v3 Authority Key Identifier: keyid:18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c5:41:9b:27:9e:bf:2f:24:65:df:7c:19:48:08:44:d1:28: fd:8d:cb:fd:8a:e5:c6:5b:0c:b4:8d:bf:6f:cf:62:f4:6e:32: 6d:ef:ab:0c:bd:43:2a:67:85:05:dd:87:92:d8:59:64:68:b0: b5:14:a4:b9:02:33:0d:17:8a:c3:9b:51:43:b3:d6:53:14:52: 4f:f5:f9:e4:de:ef:02:71:f2:a0:14:50:5e:76:27:18:77:56: ca:ae:52:5f:36:62:16:ee:2f:b5:0e:44:ea:34:52:d6:02:45: 89:bb:13:a8:c3:9e:1b:82:92:34:58:d0:c0:af:2b:5b:dc:2b: 71:bc:20:69:85:21:0f:17:05:81:ba:de:79:24:a4:c8:c1:ce: 3d:cb:34:d3:be:f5:26:c0:76:85:4c:ff:e8:0c:9e:21:dc:4a: 2a:7a:43:6c:5d:ac:c9:c8:81:e6:07:88:5b:f7:51:36:29:81: a9:77:2e:fd:7e:2d:4d:f3:6b:9d:be:d5:e1:8b:6f:d0:8a:5c: 29:ac:0a:de:fc:d0:d1:7a:2e:43:6d:73:dd:df:26:42:70:95: e1:58:b4:50:c9:50:8e:ef:dd:96:e0:8c:e6:68:d6:35:f0:26: 85:5a:29:c7:83:50:e8:43:9e:ef:ec:c2:f3:b6:ab:84:f4:4c: 1a:8a:fe:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/MbOhtEGcSJl+50hEdSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NDE3N2I3Njg5MTAxM2JhMDI3YjM1ZTZlZGZjMWU5Zjgy OTVjZWMwHhcNMjUxMjE5MTkwMTExWhcNMjUxMjIwMTkwMTExWjAzMTEwLwYDVQQD EyhjOWU4ZTcxNzhmNDI5ZWFkMDc3Zjk5MGRmYTQzZDQ2ZDhhNzYwNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gdMrJEPlKLI6SNKR70YzlcodUfg /0GwkkesGD5jlIlLMzup7dqc2anA6urCBT+RD9gaYjic8Vz2qFtoCWO++R3AgmBt RMy6G+wScOc0HJFRtXO5A/QU9VhJDJU3MxVNnmcGSbwzsD9wmlM2qmbLFLFPRNwS 9w+FFnaKnD+8d2w8/nktE7ZdGVlpWY1eJpkygaHatyHqrxw8UEom+R0e/wqIWbnh x4nHDF3iattjcCahEJQENlxPdjtOz749rVqUnXg8ApnRCXRoItq8qKnoQi6zv3Kf UKiaPEAaDzu6P+xA37CzQFa3nlN7JQPLdcS6+V9ChrMHtP5RVpI7tullbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMno5xePQp6tB3+ZDfpD1G2KdgXeMB8GA1UdIwQY MBaAFBhBd7dokQE7oCezXm7fwen4KVzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0VGM3QyaVJBVHVnSjdOZWJ0X0I2ZmdwWE93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84N2Y4ZGMtOWZjZS00MWFiLThlNzUt MjI4ZTNmZmE1YmE5LzEvR0VGM3QyaVJBVHVnSjdOZWJ0X0I2ZmdwWE93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84N2Y4ZGMtOWZjZS00MWFiLThlNzUtMjI4ZTNmZmE1YmE5 LzEvR0VGM3QyaVJBVHVnSjdOZWJ0X0I2ZmdwWE93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8VBmyee vy8kZd98GUgIRNEo/Y3L/YrlxlsMtI2/b89i9G4ybe+rDL1DKmeFBd2HkthZZGiw tRSkuQIzDReKw5tRQ7PWUxRST/X55N7vAnHyoBRQXnYnGHdWyq5SXzZiFu4vtQ5E 6jRS1gJFibsTqMOeG4KSNFjQwK8rW9wrcbwgaYUhDxcFgbreeSSkyMHOPcs00771 JsB2hUz/6AyeIdxKKnpDbF2syciB5geIW/dRNimBqXcu/X4tTfNrnb7V4Ytv0Ipc KawK3vzQ0XouQ21z3d8mQnCV4Vi0UMlQju/dluCM5mjWNfAmhVopx4NQ6EOe7+zC 87arhPRMGor+og== -----END CERTIFICATE-----Generated at Sat Dec 20 01:17:26 2025 by rpki-client