This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json) Hash identifier: n81QFxzVwwmRtO47bWWhJ6Ta494FVY81CTKeJP8lQbI= Subject key identifier: 6B:73:94:13:C7:A1:BC:20:ED:88:E6:7C:66:C6:82:55:13:C4:CB:32 Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c Certificate serial: 019AF31B6925F0B0345A25A7CB702E3E1D16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft Manifest number: 0DD0 Signing time: Sat 06 Dec 2025 10:00:51 +0000 Manifest this update: Sat 06 Dec 2025 10:00:51 +0000 Manifest next update: Sun 07 Dec 2025 10:00:51 +0000 Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=) 2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: vgnyV4Qo0aInwhQfMYEGMXxTFgFiBu0aO9lN3+mKyEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:69:25:f0:b0:34:5a:25:a7:cb:70:2e:3e:1d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c Validity Not Before: Dec 6 10:00:51 2025 GMT Not After : Dec 7 10:00:51 2025 GMT Subject: CN=6b739413c7a1bc20ed88e67c66c6825513c4cb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:87:ed:4e:57:91:26:5c:41:8b:c7:2f:8c: c0:2a:4f:88:fd:99:10:2c:5a:28:f3:c4:a2:40:84: 3b:a5:fb:8e:25:70:e6:c4:de:02:17:c9:5b:8a:ef: c3:d2:bc:23:48:a1:5e:e6:0b:ce:f5:8d:91:65:7c: 55:d0:af:4d:b6:a5:1a:58:db:38:31:7b:a6:df:68: 15:f9:7d:2f:6f:46:ec:29:29:16:c7:36:88:5b:aa: ad:5b:0b:a0:f1:2b:27:1f:04:53:3a:54:26:d5:a3: 33:25:d0:5f:d0:40:07:f5:76:28:f1:80:f4:a7:7a: f7:4d:7d:00:90:76:e8:bc:99:72:63:fa:ee:8b:39: f9:9f:d4:39:63:fd:a1:a4:1f:5b:12:36:a6:72:a5: b6:09:b3:8c:66:c4:0a:f2:b2:f0:18:6c:8e:87:59: 9f:ca:b3:20:48:3d:d5:f6:51:70:98:95:a4:26:c7: d5:d2:73:a4:90:61:55:53:7a:ee:57:b4:79:cc:e3: 7a:83:5d:05:a4:a6:87:69:91:c5:32:8d:13:73:87: 4f:27:a8:4e:f0:fa:35:e0:0f:41:84:94:4a:c0:a7: ec:ca:a1:28:c0:19:de:8a:d4:15:a5:34:ae:77:76: 05:06:3a:d3:79:7f:66:dd:16:2d:8a:6a:d1:5c:69: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:73:94:13:C7:A1:BC:20:ED:88:E6:7C:66:C6:82:55:13:C4:CB:32 X509v3 Authority Key Identifier: keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:69:99:0e:8f:95:df:cc:55:19:9d:14:5e:c6:7d:b2:c7:ec: 93:da:3f:f0:6f:55:cc:5e:89:85:9f:bd:f2:1c:9c:54:02:c0: 10:9d:24:47:09:c7:8c:0d:6f:90:a8:25:46:7b:77:31:26:a2: d2:e7:a4:1e:d7:36:06:4d:60:53:13:6a:31:d4:7a:0a:48:56: 46:f0:44:81:b6:ca:80:65:72:21:5f:68:b8:e1:8d:04:44:50: dd:5d:48:48:cb:bf:63:d2:6d:49:0a:32:b4:a6:46:78:0c:a3: 34:98:46:1d:0b:c7:05:9d:fa:22:8e:84:05:61:84:b4:d8:fe: 51:20:c9:42:cc:45:1b:18:b1:b2:38:cf:ae:9a:f5:22:a9:6b: d8:a5:10:62:c1:03:05:c9:dd:4c:29:6a:a7:cf:5d:ee:4d:fb: fe:a7:30:3f:f0:40:22:bc:96:11:66:0d:36:30:45:4c:5b:8a: 25:f0:f8:ed:28:3e:99:a7:43:a4:de:9c:ca:20:74:b1:43:1e: f5:ac:8a:b5:db:89:c5:a7:4a:bc:e3:62:63:0c:0d:71:fd:4e: 68:b7:e6:a5:c9:43:d6:16:5c:97:7d:bc:a5:a8:b5:3d:ce:00: b9:6b:a8:67:35:97:75:56:3a:d0:01:e0:a7:fc:c6:d6:a0:f2: 02:f3:ee:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2kl8LA0WiWny3AuPh0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NGZmZjNjZjkwMGU3NmFhZTBkMmNkMmU3N2RmZWFlMjRj NWQyNGMwHhcNMjUxMjA2MTAwMDUxWhcNMjUxMjA3MTAwMDUxWjAzMTEwLwYDVQQD Eyg2YjczOTQxM2M3YTFiYzIwZWQ4OGU2N2M2NmM2ODI1NTEzYzRjYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDWH7U5XkSZcQYvHL4zAKk+I/ZkQ LFoo88SiQIQ7pfuOJXDmxN4CF8lbiu/D0rwjSKFe5gvO9Y2RZXxV0K9NtqUaWNs4 MXum32gV+X0vb0bsKSkWxzaIW6qtWwug8SsnHwRTOlQm1aMzJdBf0EAH9XYo8YD0 p3r3TX0AkHbovJlyY/ruizn5n9Q5Y/2hpB9bEjamcqW2CbOMZsQK8rLwGGyOh1mf yrMgSD3V9lFwmJWkJsfV0nOkkGFVU3ruV7R5zON6g10FpKaHaZHFMo0Tc4dPJ6hO 8Po14A9BhJRKwKfsyqEowBneitQVpTSud3YFBjrTeX9m3RYtimrRXGkPnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtzlBPHobwg7YjmfGbGglUTxMsyMB8GA1UdIwQY MBaAFBhP/zz5AOdqrg0s0ud9/q4kxdJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTIt MzhiMzkyYzZlMWJmLzEvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTItMzhiMzkyYzZlMWJm LzEvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGmZDo+V 38xVGZ0UXsZ9ssfsk9o/8G9VzF6JhZ+98hycVALAEJ0kRwnHjA1vkKglRnt3MSai 0uekHtc2Bk1gUxNqMdR6CkhWRvBEgbbKgGVyIV9ouOGNBERQ3V1ISMu/Y9JtSQoy tKZGeAyjNJhGHQvHBZ36Io6EBWGEtNj+USDJQsxFGxixsjjPrpr1Iqlr2KUQYsED BcndTClqp89d7k37/qcwP/BAIryWEWYNNjBFTFuKJfD47Sg+madDpN6cyiB0sUMe 9ayKtduJxadKvONiYwwNcf1OaLfmpclD1hZcl328pai1Pc4AuWuoZzWXdVY60AHg p/zG1qDyAvPuQg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:39 2025 by rpki-client