This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft File: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft (raw, json) Hash identifier: 5TCSNUyaFltj3e0xuGV1sFi8A2vorJXvs0SlTMLLZjQ= Subject key identifier: B9:52:C7:D8:14:7C:82:5E:7B:7F:DD:9A:A1:73:28:64:E8:E2:1B:4D Authority key identifier: 18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97 Certificate issuer: /CN=1841c77f0c799ac9c2719d7f8c6982c43143e497 Certificate serial: 019B5ABF745ECBC83EF91800EC5C5887534B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft Manifest number: 0A5F Signing time: Fri 26 Dec 2025 13:00:55 +0000 Manifest this update: Fri 26 Dec 2025 13:00:55 +0000 Manifest next update: Sat 27 Dec 2025 13:00:55 +0000 Files and hashes: 1: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl (hash: 5A682YbsTLSQAFoL7b2DXh4x7FdhXRWdi8pwM7LG5rY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:74:5e:cb:c8:3e:f9:18:00:ec:5c:58:87:53:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1841c77f0c799ac9c2719d7f8c6982c43143e497 Validity Not Before: Dec 26 13:00:55 2025 GMT Not After : Dec 27 13:00:55 2025 GMT Subject: CN=b952c7d8147c825e7b7fdd9aa1732864e8e21b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:04:cf:e2:83:86:e1:a2:2b:12:d0:f1:96:c7: e5:8e:9a:a5:63:45:4f:41:d0:57:b4:8d:c3:bd:ab: 77:33:d9:fc:33:f6:84:73:32:9b:c1:f0:1d:69:7c: 52:94:f2:95:d6:ba:cd:25:cc:1a:fd:20:9b:2c:71: dd:42:14:c4:5e:89:ff:f8:82:c6:5e:b1:ad:24:72: f2:ac:04:ea:90:42:b8:19:88:c8:7a:fd:92:43:1f: db:2b:e5:73:73:41:97:5b:f3:10:8f:7b:79:fe:01: 82:66:e2:69:03:c4:3c:28:b7:9d:86:47:de:02:01: e2:42:db:c1:65:2d:ce:94:f2:ad:49:fb:52:e5:2e: f4:48:f6:8a:90:91:31:10:cb:9d:55:c9:3d:02:41: 76:89:af:6f:6b:1d:0e:03:58:6c:84:33:31:2e:7a: 35:57:9e:74:3e:7d:0c:51:44:e6:4c:06:04:95:b0: 6f:9b:d8:fc:ae:ef:1f:87:8c:07:b3:fc:6d:b7:ba: 73:0b:f6:a1:ce:d3:0b:44:4e:92:97:6a:3a:35:2b: fb:28:57:7a:10:df:5b:ba:29:fd:d3:3c:94:27:6a: 38:b0:27:3f:ab:06:a0:3b:b7:68:12:a3:78:8a:03: 73:24:e9:31:f2:d6:5e:62:00:f3:1b:e2:c3:8c:9c: 68:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:52:C7:D8:14:7C:82:5E:7B:7F:DD:9A:A1:73:28:64:E8:E2:1B:4D X509v3 Authority Key Identifier: keyid:18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ac:9b:0d:2f:e5:dd:8a:fc:c8:cb:32:bc:3b:da:a1:7f:1e: 3e:39:d4:0e:d1:c4:b5:17:9c:5b:fc:2c:85:06:96:88:8c:78: 8d:fc:26:5b:c5:ed:29:91:d6:2d:51:d8:89:c5:de:39:51:68: 32:67:5b:97:17:7f:68:e9:b2:97:de:f8:e9:b5:1c:16:fb:79: a0:35:58:50:4b:b9:ba:fe:e8:8f:b0:a0:64:a0:7d:27:a4:f0: db:bb:93:25:5b:9d:76:d6:13:f6:b1:1c:9c:4d:f9:fd:ff:6b: a1:fd:b4:a0:96:46:f0:bf:ea:3e:3d:6a:72:54:2c:21:7d:c8: cb:01:58:e6:1f:c1:40:f9:32:fa:f7:c2:42:b9:3f:f0:38:a8: 28:2b:b3:10:58:2d:4e:4f:db:98:32:c0:70:02:e1:52:af:d5: 27:5b:8e:4c:71:c2:0f:0c:4e:86:e0:52:7e:b2:d9:4c:a9:7b: 42:12:99:a5:a6:22:01:22:1d:4b:ab:eb:84:71:c4:83:9e:b4: 7c:ad:a4:57:d0:34:78:35:01:d8:a7:60:d0:30:c6:3d:dd:d5: 70:73:a0:98:a0:13:75:3d:c8:51:bc:ba:3e:90:12:69:b4:0c: 1d:71:3d:94:cc:24:8a:9b:20:51:72:9e:41:53:c6:c3:e9:b0: 8f:52:7a:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav3Rey8g++RgA7FxYh1NLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NDFjNzdmMGM3OTlhYzljMjcxOWQ3ZjhjNjk4MmM0MzE0 M2U0OTcwHhcNMjUxMjI2MTMwMDU1WhcNMjUxMjI3MTMwMDU1WjAzMTEwLwYDVQQD EyhiOTUyYzdkODE0N2M4MjVlN2I3ZmRkOWFhMTczMjg2NGU4ZTIxYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQTP4oOG4aIrEtDxlsfljpqlY0VP QdBXtI3Dvat3M9n8M/aEczKbwfAdaXxSlPKV1rrNJcwa/SCbLHHdQhTEXon/+ILG XrGtJHLyrATqkEK4GYjIev2SQx/bK+Vzc0GXW/MQj3t5/gGCZuJpA8Q8KLedhkfe AgHiQtvBZS3OlPKtSftS5S70SPaKkJExEMudVck9AkF2ia9vax0OA1hshDMxLno1 V550Pn0MUUTmTAYElbBvm9j8ru8fh4wHs/xtt7pzC/ahztMLRE6Sl2o6NSv7KFd6 EN9buin90zyUJ2o4sCc/qwagO7doEqN4igNzJOkx8tZeYgDzG+LDjJxoNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlSx9gUfIJee3/dmqFzKGTo4htNMB8GA1UdIwQY MBaAFBhBx38MeZrJwnGdf4xpgsQxQ+SXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0VISGZ3eDVtc25DY1oxX2pHbUN4REZENUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85ZGNiZDAtNTEzYi00YmViLWIwNjUt NGU4ZjU5NjBiMTliLzEvR0VISGZ3eDVtc25DY1oxX2pHbUN4REZENUpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85ZGNiZDAtNTEzYi00YmViLWIwNjUtNGU4ZjU5NjBiMTli LzEvR0VISGZ3eDVtc25DY1oxX2pHbUN4REZENUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqybDS/l 3Yr8yMsyvDvaoX8ePjnUDtHEtRecW/wshQaWiIx4jfwmW8XtKZHWLVHYicXeOVFo Mmdblxd/aOmyl9746bUcFvt5oDVYUEu5uv7oj7CgZKB9J6Tw27uTJVuddtYT9rEc nE35/f9rof20oJZG8L/qPj1qclQsIX3IywFY5h/BQPky+vfCQrk/8DioKCuzEFgt Tk/bmDLAcALhUq/VJ1uOTHHCDwxOhuBSfrLZTKl7QhKZpaYiASIdS6vrhHHEg560 fK2kV9A0eDUB2Kdg0DDGPd3VcHOgmKATdT3IUby6PpASabQMHXE9lMwkipsgUXKe QVPGw+mwj1J6DQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:28 2025 by rpki-client