This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json) Hash identifier: TukNRQKKOP7dpXykUHYiQeWPqX9eRebzvmYZF1MHRC0= Subject key identifier: 73:F2:F9:76:A3:EE:5E:39:01:FE:58:B9:A7:EE:1A:8C:8E:4F:E0:F2 Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb Certificate serial: 019B32D7601DF3EA997A0DA8A88043A6CE1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft Manifest number: 0DB0 Signing time: Thu 18 Dec 2025 19:02:14 +0000 Manifest this update: Thu 18 Dec 2025 19:02:14 +0000 Manifest next update: Fri 19 Dec 2025 19:02:14 +0000 Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: oSJ9qHRbp7T3XSYmX2QDlAbxVQnZxeySNqqmdvRpONY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:60:1d:f3:ea:99:7a:0d:a8:a8:80:43:a6:ce:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb Validity Not Before: Dec 18 19:02:14 2025 GMT Not After : Dec 19 19:02:14 2025 GMT Subject: CN=73f2f976a3ee5e3901fe58b9a7ee1a8c8e4fe0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ea:a6:b7:37:25:d5:03:c8:95:40:53:79:f0: 5d:19:8f:67:68:cd:d5:4c:3d:1d:91:3e:05:a4:de: 69:2c:c9:ea:a1:64:ce:25:94:e8:ae:de:91:79:00: 35:2e:e6:5a:bc:d4:dc:ac:a1:ca:b7:1d:d9:97:db: b6:26:6c:73:b7:88:94:5b:98:1e:c5:67:09:c9:9c: bf:a6:80:ed:d6:2f:37:db:82:cc:2f:f6:47:18:b5: ef:ea:f8:6c:4c:d1:bc:f2:0b:ba:b7:a3:d7:28:9b: 30:6c:47:70:8e:a8:bc:e4:50:11:7f:cf:ef:58:69: d5:0c:6d:3a:90:47:16:b3:2b:95:b2:f9:b2:c5:01: 43:1b:42:1e:ac:70:77:d6:fc:58:a8:a7:b3:e3:9a: ee:8e:7b:d0:45:ac:d7:6c:f3:9b:fe:d9:b0:91:c9: 7d:6c:20:08:04:b2:c3:dd:52:19:98:97:06:47:12: dc:1f:6f:ad:b2:82:e5:44:29:8b:21:af:66:c2:1c: b6:7f:87:85:6e:eb:45:5c:be:ef:ff:60:db:c1:34: c9:16:12:15:46:df:e1:b7:94:cb:a6:9f:84:a8:0b: bc:64:d9:ef:00:30:19:cc:db:fc:01:0c:84:ce:32: 60:14:5a:e1:d8:cb:db:93:63:1b:00:22:36:6b:c9: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F2:F9:76:A3:EE:5E:39:01:FE:58:B9:A7:EE:1A:8C:8E:4F:E0:F2 X509v3 Authority Key Identifier: keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:73:dd:71:b4:b6:6b:47:77:51:a8:e9:7f:bf:52:03:47:65: e5:77:9e:c6:cd:96:ad:3f:7e:fc:9b:ec:5d:82:6c:e4:a1:b7: 5f:19:44:8a:76:0c:24:4c:b2:9b:c1:8a:b9:24:8e:59:26:44: 76:23:da:fa:ca:49:0a:25:d3:22:f4:f1:c5:36:cf:07:7a:43: 44:7b:01:a0:ce:91:bd:f0:c0:47:a2:46:c0:72:e5:c9:9a:e9: 8a:87:04:34:b8:31:ba:4e:b7:39:95:b6:bb:57:e6:75:34:04: 76:44:bc:1f:30:40:84:f6:50:9a:5f:ed:9e:6a:b3:ef:b0:3e: 36:ae:3d:fd:9e:15:84:41:64:6e:e8:a4:f5:11:89:5d:02:42: e2:6e:9e:39:eb:72:30:a2:1c:c8:76:da:0b:f8:6e:24:b1:2e: 0b:65:a3:a9:d2:7e:26:5c:32:19:ff:fd:82:97:d7:09:a5:0d: 9a:14:35:b6:81:18:de:fb:49:d5:c3:6f:99:74:da:ab:d8:77: 45:27:ac:75:88:ea:3f:f8:da:75:9b:1e:58:1a:7e:7b:ab:41: 9e:05:c1:c8:9f:3f:6d:d1:91:3e:1b:6d:5f:55:fd:c0:27:71: 57:2c:12:aa:6d:c2:b9:3a:b7:38:0c:08:4e:3f:a4:a7:f9:80: 65:7a:2c:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy12Ad8+qZeg2oqIBDps4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NGQxZjQwODMzODNmNTY4OTVkNmUzZTczYThhMDc3YWRl YjUwY2IwHhcNMjUxMjE4MTkwMjE0WhcNMjUxMjE5MTkwMjE0WjAzMTEwLwYDVQQD Eyg3M2YyZjk3NmEzZWU1ZTM5MDFmZTU4YjlhN2VlMWE4YzhlNGZlMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOqmtzcl1QPIlUBTefBdGY9naM3V TD0dkT4FpN5pLMnqoWTOJZTort6ReQA1LuZavNTcrKHKtx3Zl9u2Jmxzt4iUW5ge xWcJyZy/poDt1i8324LML/ZHGLXv6vhsTNG88gu6t6PXKJswbEdwjqi85FARf8/v WGnVDG06kEcWsyuVsvmyxQFDG0IerHB31vxYqKez45rujnvQRazXbPOb/tmwkcl9 bCAIBLLD3VIZmJcGRxLcH2+tsoLlRCmLIa9mwhy2f4eFbutFXL7v/2DbwTTJFhIV Rt/ht5TLpp+EqAu8ZNnvADAZzNv8AQyEzjJgFFrh2Mvbk2MbACI2a8kqcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPy+Xaj7l45Af5YuafuGoyOT+DyMB8GA1UdIwQY MBaAFBhNH0CDOD9WiV1uPnOooHet61DLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEt NjZjYzA4M2I1NjY5LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEtNjZjYzA4M2I1NjY5 LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXPdcbS2 a0d3Uajpf79SA0dl5Xeexs2WrT9+/JvsXYJs5KG3XxlEinYMJEyym8GKuSSOWSZE diPa+spJCiXTIvTxxTbPB3pDRHsBoM6RvfDAR6JGwHLlyZrpiocENLgxuk63OZW2 u1fmdTQEdkS8HzBAhPZQml/tnmqz77A+Nq49/Z4VhEFkbuik9RGJXQJC4m6eOety MKIcyHbaC/huJLEuC2WjqdJ+JlwyGf/9gpfXCaUNmhQ1toEY3vtJ1cNvmXTaq9h3 RSesdYjqP/jadZseWBp+e6tBngXByJ8/bdGRPhttX1X9wCdxVywSqm3CuTq3OAwI Tj+kp/mAZXosKw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:46 2025 by rpki-client