This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json) Hash identifier: XCvAsBAk2HN47oiw4X2YU3Z7g6Rbnwgk+2wa+gFJXTQ= Subject key identifier: 04:C9:8A:ED:35:B7:D9:A6:F7:EC:30:BB:EF:96:46:50:D7:DB:E0:98 Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a Certificate serial: 019B5A883FE5206D8B1AA1E51FA9C4BF5E2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft Manifest number: 118F Signing time: Fri 26 Dec 2025 12:00:37 +0000 Manifest this update: Fri 26 Dec 2025 12:00:37 +0000 Manifest next update: Sat 27 Dec 2025 12:00:37 +0000 Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: fOngloS3mL+GS8XTQbawWpGmSbiNYa5bOmiYwHzXBCE=) 2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:3f:e5:20:6d:8b:1a:a1:e5:1f:a9:c4:bf:5e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a Validity Not Before: Dec 26 12:00:37 2025 GMT Not After : Dec 27 12:00:37 2025 GMT Subject: CN=04c98aed35b7d9a6f7ec30bbef964650d7dbe098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:88:37:64:af:6c:a7:79:e8:1e:a8:06:33: 56:f2:31:f4:da:0f:b3:ae:82:38:25:36:e3:f2:1d: 91:34:5d:8c:42:1f:1e:bb:40:a6:de:dd:24:89:78: 95:6a:67:02:99:ed:2d:af:8c:38:ee:6f:5f:23:57: eb:e2:c2:9a:41:75:a8:84:e8:d9:1c:5c:c6:0e:08: f5:c8:cb:e9:0f:ca:e4:f0:6b:87:a3:b7:94:f1:a0: 8c:3e:bc:64:db:6b:1a:6d:6a:b4:c1:8f:f9:fe:06: a1:ac:00:7c:7c:08:fb:e6:75:94:84:a5:22:fe:84: 92:90:56:11:96:f7:87:0f:ab:ab:31:14:27:ce:98: 34:59:27:3c:3c:7e:36:c6:98:83:25:ba:ae:2a:eb: 0f:e9:27:7f:f7:e6:17:5e:ca:79:86:f8:a7:51:c7: ab:f6:7e:2c:ac:9b:e9:ba:78:9a:ea:7e:40:91:17: 1b:06:4f:ef:42:63:d0:05:93:1a:87:2d:6e:74:3d: 3a:79:36:21:f3:4c:4a:32:fb:46:e8:9f:90:9e:9a: d9:8a:7d:98:ec:b5:a8:07:03:3d:c3:14:d4:93:e8: 49:9a:64:7c:5a:70:05:1b:66:3a:12:6c:70:2d:89: 53:f3:b2:12:b7:75:37:af:cd:45:db:a4:78:0a:55: 14:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C9:8A:ED:35:B7:D9:A6:F7:EC:30:BB:EF:96:46:50:D7:DB:E0:98 X509v3 Authority Key Identifier: keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a3:4a:bd:2b:4e:cd:46:9b:79:c7:9b:8e:e1:cb:42:90:4b: 6d:6d:f0:aa:f9:9b:41:10:3b:54:9c:32:81:c5:71:f6:4c:76: c9:dc:a6:19:dd:72:fd:42:14:d9:be:f7:51:05:f5:4d:04:9c: 3b:f6:44:63:47:c5:2d:f0:fa:40:89:bc:a4:f0:41:a4:d6:c0: 66:00:b5:fd:5c:ed:75:8d:60:24:c4:9e:06:4c:14:8e:d3:d1: 29:a5:13:ee:4c:28:7a:84:ff:1c:92:8f:e1:8a:e7:20:b8:ba: ee:c6:73:b6:55:5b:07:bc:e3:64:31:97:fd:cd:cc:6f:7c:16: b1:09:2c:f3:8b:a4:85:9b:d4:03:0e:9a:30:b9:d1:09:08:0e: 8b:3c:82:54:c8:77:ba:0e:34:ac:63:78:ba:0b:ba:b0:78:d0: 05:00:f5:4e:a2:3d:d1:a0:56:55:ad:83:21:80:0a:13:dd:67: da:15:5e:e0:e0:d1:e4:34:8d:8c:fa:c3:fd:e1:56:aa:ad:01: 82:d0:fe:07:49:38:1e:5a:e1:1e:49:5e:a7:8d:46:1e:75:53: 78:3b:2b:b2:75:63:c4:7b:5b:01:4c:3d:56:c9:c8:0a:44:14: a2:fb:3d:1f:6c:8e:3f:9e:4a:13:eb:bd:c7:c7:f1:44:b1:cd: 28:c4:db:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiD/lIG2LGqHlH6nEv14uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NGM3YzAzNjRmMTA5M2NmYzU4NGM5MzAzNzAyNDEwNGZi NDg1NGEwHhcNMjUxMjI2MTIwMDM3WhcNMjUxMjI3MTIwMDM3WjAzMTEwLwYDVQQD EygwNGM5OGFlZDM1YjdkOWE2ZjdlYzMwYmJlZjk2NDY1MGQ3ZGJlMDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDeIN2SvbKd56B6oBjNW8jH02g+z roI4JTbj8h2RNF2MQh8eu0Cm3t0kiXiVamcCme0tr4w47m9fI1fr4sKaQXWohOjZ HFzGDgj1yMvpD8rk8GuHo7eU8aCMPrxk22sabWq0wY/5/gahrAB8fAj75nWUhKUi /oSSkFYRlveHD6urMRQnzpg0WSc8PH42xpiDJbquKusP6Sd/9+YXXsp5hvinUcer 9n4srJvpunia6n5AkRcbBk/vQmPQBZMahy1udD06eTYh80xKMvtG6J+QnprZin2Y 7LWoBwM9wxTUk+hJmmR8WnAFG2Y6EmxwLYlT87ISt3U3r81F26R4ClUU5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATJiu01t9mm9+wwu++WRlDX2+CYMB8GA1UdIwQY MBaAFBhMfANk8Qk8/FhMkwNwJBBPtIVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAt OThmOTQwZTRkN2MxLzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAtOThmOTQwZTRkN2Mx LzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKNKvStO zUabecebjuHLQpBLbW3wqvmbQRA7VJwygcVx9kx2ydymGd1y/UIU2b73UQX1TQSc O/ZEY0fFLfD6QIm8pPBBpNbAZgC1/VztdY1gJMSeBkwUjtPRKaUT7kwoeoT/HJKP 4YrnILi67sZztlVbB7zjZDGX/c3Mb3wWsQks84ukhZvUAw6aMLnRCQgOizyCVMh3 ug40rGN4ugu6sHjQBQD1TqI90aBWVa2DIYAKE91n2hVe4ODR5DSNjPrD/eFWqq0B gtD+B0k4HlrhHklep41GHnVTeDsrsnVjxHtbAUw9VsnICkQUovs9H2yOP55KE+u9 x8fxRLHNKMTbhw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:59 2025 by rpki-client