This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft File: G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json) Hash identifier: IE+qcgE5PFmgdeVaMa5cAZFZYDrI18p9qiFg5+uVO9Q= Subject key identifier: F1:CD:AA:30:51:AC:5B:6E:0B:64:BB:88:E2:F2:53:98:80:D4:D8:9C Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61 Certificate issuer: /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61 Certificate serial: 019B20CFC128898DD767F2C6838331551209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft Manifest number: 1776 Signing time: Mon 15 Dec 2025 07:00:44 +0000 Manifest this update: Mon 15 Dec 2025 07:00:44 +0000 Manifest next update: Tue 16 Dec 2025 07:00:44 +0000 Files and hashes: 1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: iJbc14QxP3MID4fU+UvfxBTBQkNgaKA4MHdnArNdrak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:c1:28:89:8d:d7:67:f2:c6:83:83:31:55:12:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61 Validity Not Before: Dec 15 07:00:44 2025 GMT Not After : Dec 16 07:00:44 2025 GMT Subject: CN=f1cdaa3051ac5b6e0b64bb88e2f2539880d4d89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:96:9c:ad:6a:a5:c9:53:8e:3e:6e:f1:e1:c9: 8d:c2:04:20:aa:f4:0c:7c:0b:be:71:39:87:14:0d: c4:be:ee:5d:21:2b:8e:a7:47:fe:a8:fa:16:ce:6e: df:a9:2c:3f:21:6e:c4:5e:82:63:aa:4b:75:4f:d5: b0:99:ca:90:be:72:a5:0b:8b:35:2b:f0:da:85:9d: ae:54:d3:2c:28:d2:3a:5d:cf:dc:48:71:23:4a:3c: 0f:2b:15:5c:26:9b:c6:64:cb:03:48:26:e1:9c:13: d0:b6:d9:db:d3:bb:51:7d:fa:d9:4b:2e:74:5d:24: cc:3a:c0:0d:49:ee:af:47:5a:08:50:b3:b5:93:8e: ab:c2:06:a5:95:fd:57:2d:6a:eb:ba:35:2f:41:54: 4a:c7:be:20:69:0a:39:df:43:f6:13:5d:83:06:e3: f1:28:51:2d:14:63:b4:eb:46:32:f0:4b:f1:20:bd: c1:0c:93:fe:6f:97:33:6d:14:7b:ab:a0:bf:17:e2: 3f:a4:b0:60:f9:92:4a:22:a4:67:64:6f:72:b6:f4: cd:1c:73:0f:37:70:6b:95:e2:2e:be:bd:28:0f:4f: 77:8e:f0:b2:d6:04:34:36:f9:df:76:e7:7e:c7:af: 11:66:14:04:a8:14:67:d9:62:c8:d8:01:31:91:b1: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CD:AA:30:51:AC:5B:6E:0B:64:BB:88:E2:F2:53:98:80:D4:D8:9C X509v3 Authority Key Identifier: keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:eb:61:c4:19:51:35:38:7a:56:c5:47:b6:17:99:8b:83:f9: 55:f4:9e:03:3e:92:68:08:3a:7b:81:7b:f8:bd:20:59:44:7e: 63:9a:63:2e:40:6d:c2:90:46:b7:5b:02:14:77:52:f1:87:4f: 3c:98:69:c9:94:4f:1d:ff:30:cc:f1:f2:89:8c:21:ca:80:0f: 53:bf:10:1e:d1:cf:c5:cc:94:73:78:55:e3:60:d6:b9:95:19: b8:f5:d7:6f:ae:c4:f9:b3:e9:4c:e4:ab:93:85:7c:eb:fe:58: 80:bf:73:c7:41:4d:01:b8:fe:e4:1d:5b:72:f0:ef:1e:fd:65: b5:bc:7d:58:71:57:57:53:41:48:29:8d:47:dd:fe:a2:d7:52: 7d:c8:0d:d9:6b:1b:38:1d:e5:aa:67:65:b4:59:b0:8a:8e:89: 78:4e:5f:c9:02:82:15:4e:46:4c:37:c9:d4:58:b9:40:c6:8a: 65:11:2e:7b:c2:96:ee:1c:f5:06:76:2a:50:b9:ae:b6:38:79: 97:57:f3:28:54:97:16:6d:67:39:6f:4f:3f:4b:fb:13:10:a2: 1d:3f:42:2f:4c:67:48:74:23:f6:60:ae:07:7c:31:3a:03:1e: c9:50:8f:fe:cb:3f:44:f6:6f:26:9e:a6:e8:8a:1a:a3:b8:93: 95:76:46:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz8EoiY3XZ/LGg4MxVRIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjllMzMyMzc4OGFhMTYxYTYyOTcyMDZhZTNlN2IxOWE5 ZmZjNjEwHhcNMjUxMjE1MDcwMDQ0WhcNMjUxMjE2MDcwMDQ0WjAzMTEwLwYDVQQD EyhmMWNkYWEzMDUxYWM1YjZlMGI2NGJiODhlMmYyNTM5ODgwZDRkODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65acrWqlyVOOPm7x4cmNwgQgqvQM fAu+cTmHFA3Evu5dISuOp0f+qPoWzm7fqSw/IW7EXoJjqkt1T9WwmcqQvnKlC4s1 K/DahZ2uVNMsKNI6Xc/cSHEjSjwPKxVcJpvGZMsDSCbhnBPQttnb07tRffrZSy50 XSTMOsANSe6vR1oIULO1k46rwgallf1XLWrrujUvQVRKx74gaQo530P2E12DBuPx KFEtFGO060Yy8EvxIL3BDJP+b5czbRR7q6C/F+I/pLBg+ZJKIqRnZG9ytvTNHHMP N3BrleIuvr0oD093jvCy1gQ0Nvnfdud+x68RZhQEqBRn2WLI2AExkbGlEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHNqjBRrFtuC2S7iOLyU5iA1NicMB8GA1UdIwQY MBaAFBtp4zI3iKoWGmKXIGrj57Gan/xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hODhhNzctMWUyYy00ZjA0LThiOGYt YjBkMjk2NTIwZDMyLzEvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9hODhhNzctMWUyYy00ZjA0LThiOGYtYjBkMjk2NTIwZDMy LzEvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuthxBlR NTh6VsVHtheZi4P5VfSeAz6SaAg6e4F7+L0gWUR+Y5pjLkBtwpBGt1sCFHdS8YdP PJhpyZRPHf8wzPHyiYwhyoAPU78QHtHPxcyUc3hV42DWuZUZuPXXb67E+bPpTOSr k4V86/5YgL9zx0FNAbj+5B1bcvDvHv1ltbx9WHFXV1NBSCmNR93+otdSfcgN2Wsb OB3lqmdltFmwio6JeE5fyQKCFU5GTDfJ1Fi5QMaKZREue8KW7hz1BnYqULmutjh5 l1fzKFSXFm1nOW9PP0v7ExCiHT9CL0xnSHQj9mCuB3wxOgMeyVCP/ss/RPZvJp6m 6Ioao7iTlXZG/w== -----END CERTIFICATE-----Generated at Mon Dec 15 14:39:29 2025 by rpki-client