This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft File: GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json) Hash identifier: 6/TZ95+QrKERlRioyhMpdFiB5k2cCygaD4iI+fbXdU8= Subject key identifier: BB:2B:EB:E4:D2:D8:45:E1:35:12:B2:38:DE:82:F7:B8:5B:CF:67:E7 Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10 Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10 Certificate serial: 019AF208D1BE2C75EB255977566444E695C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: TjvxWsgHXxaztLtXHz6MVV6HyjQQ8XpxIRRdA9T7kyI=) 2: kKreilVZ98mCE6qg5IcJvMPMCcM.roa (hash: nnm83jFx2ukSqxJkqYReRSVveVI2MP9/RX2milhxjy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d1:be:2c:75:eb:25:59:77:56:64:44:e6:95:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=bb2bebe4d2d845e13512b238de82f7b85bcf67e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:ed:01:95:e0:34:b1:f9:c6:66:0f:9e:31: 09:e5:23:8d:8b:4c:c5:47:69:d0:9a:48:30:18:d2: e7:db:0e:72:66:93:c7:5f:bd:63:18:c8:91:81:6f: 51:77:ad:e2:7a:6e:c6:ce:1a:1c:a6:96:fc:b8:a8: 0c:2e:d4:93:95:6f:59:5d:7d:fa:13:45:b0:67:ce: 9b:29:11:1d:48:fa:b4:bd:ce:17:d8:3e:cf:16:0a: b6:ac:5b:3a:cb:6f:5b:fc:f0:d3:a9:61:de:96:73: 7f:08:77:98:85:16:24:30:28:4e:03:39:ce:6d:be: 09:85:45:3a:9a:d6:5e:64:62:58:53:6d:4f:40:41: 14:44:5a:a0:46:92:c2:a2:a6:e9:d5:da:15:d4:ac: 6d:f4:87:7c:bc:b4:22:a5:92:ce:97:64:2b:84:58: 87:80:f1:b8:9e:71:bd:60:b0:12:42:13:0d:98:7c: 77:e7:ac:9b:01:d9:a5:79:64:46:09:63:2c:96:25: 14:00:cd:9d:f1:0e:77:df:4c:3b:1f:47:cb:2a:92: fa:ff:13:d6:a5:fc:89:d5:20:ec:9e:82:ad:a2:25: 27:d5:20:61:94:64:0a:49:91:d1:d8:f4:ba:1d:69: 4b:75:e1:f8:1b:d3:2f:19:fe:d0:f4:fa:ab:90:e0: 75:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2B:EB:E4:D2:D8:45:E1:35:12:B2:38:DE:82:F7:B8:5B:CF:67:E7 X509v3 Authority Key Identifier: keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:78:41:81:48:c1:f6:13:08:1c:5c:bd:f8:d3:d5:08:aa:66: 82:20:ff:75:10:7a:7c:05:9c:25:01:5c:7a:93:66:7e:30:d9: e9:81:04:c0:02:5b:ba:af:d2:4c:18:41:cc:da:2f:81:54:42: ca:13:e0:a4:b1:85:0d:39:a6:07:86:ac:63:b0:89:ea:90:75: 26:d0:7a:03:1c:ce:53:83:58:e6:f6:ad:e9:96:d2:14:4d:6b: e4:2f:3a:e8:cf:9c:be:9c:e3:91:28:3d:37:15:d3:86:3b:cc: f9:e5:b6:ec:3c:b4:bc:c1:8d:0d:7a:6f:ef:0f:f6:31:f1:50: b7:2b:68:74:97:69:76:92:d7:50:c6:5d:6a:aa:ae:c4:9b:9d: e7:9b:8c:85:51:fc:3f:88:ea:27:1e:46:54:44:d4:8a:b4:ea: c1:95:60:7a:88:49:35:42:76:cb:bb:59:c7:ae:03:4f:78:63: 1b:1e:e8:58:09:4c:f5:20:02:be:50:11:6c:ac:b0:8d:8f:cf: 00:4f:b1:18:bb:ce:e6:8e:1b:96:31:18:ae:09:55:f9:14:47: 0d:b7:45:05:11:1b:b0:9d:c6:0a:49:21:e7:9e:b9:5e:cd:77: a9:eb:1e:00:4c:35:b4:03:d3:a4:1f:1f:9f:b3:ec:05:ac:1b: ed:88:83:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNG+LHXrJVl3VmRE5pXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODIwNGQxYzI1YTAxMTIzNmJlYTA3NDFlNGM2MDEzOWQz NDliMTAwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD EyhiYjJiZWJlNGQyZDg0NWUxMzUxMmIyMzhkZTgyZjdiODViY2Y2N2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspLtAZXgNLH5xmYPnjEJ5SONi0zF R2nQmkgwGNLn2w5yZpPHX71jGMiRgW9Rd63iem7Gzhocppb8uKgMLtSTlW9ZXX36 E0WwZ86bKREdSPq0vc4X2D7PFgq2rFs6y29b/PDTqWHelnN/CHeYhRYkMChOAznO bb4JhUU6mtZeZGJYU21PQEEURFqgRpLCoqbp1doV1Kxt9Id8vLQipZLOl2QrhFiH gPG4nnG9YLASQhMNmHx356ybAdmleWRGCWMsliUUAM2d8Q5330w7H0fLKpL6/xPW pfyJ1SDsnoKtoiUn1SBhlGQKSZHR2PS6HWlLdeH4G9MvGf7Q9PqrkOB15QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsr6+TS2EXhNRKyON6C97hbz2fnMB8GA1UdIwQY MBaAFBmCBNHCWgESNr6gdB5MYBOdNJsQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYt NDJhZDNiNGM4ZDBjLzEvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYtNDJhZDNiNGM4ZDBj LzEvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHhBgUjB 9hMIHFy9+NPVCKpmgiD/dRB6fAWcJQFcepNmfjDZ6YEEwAJbuq/STBhBzNovgVRC yhPgpLGFDTmmB4asY7CJ6pB1JtB6AxzOU4NY5vat6ZbSFE1r5C866M+cvpzjkSg9 NxXThjvM+eW27Dy0vMGNDXpv7w/2MfFQtytodJdpdpLXUMZdaqquxJud55uMhVH8 P4jqJx5GVETUirTqwZVgeohJNUJ2y7tZx64DT3hjGx7oWAlM9SACvlARbKywjY/P AE+xGLvO5o4bljEYrglV+RRHDbdFBREbsJ3GCkkh5565Xs13qeseAEw1tAPTpB8f n7PsBawb7YiD/A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:17 2025 by rpki-client