This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json) Hash identifier: sANpJvXdSURJy4khH8B1R4sh1incnILvbBnpwuUYiQk= Subject key identifier: B0:9F:CA:30:15:CA:87:92:2B:55:DF:27:19:9C:43:7F:52:AF:99:B4 Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56 Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756 Certificate serial: 019AED51D7A91BF2E705E02478513869A9D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft Manifest number: 0653 Signing time: Fri 05 Dec 2025 07:02:35 +0000 Manifest this update: Fri 05 Dec 2025 07:02:35 +0000 Manifest next update: Sat 06 Dec 2025 07:02:35 +0000 Files and hashes: 1: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: jcsGRvZCgXF5VA5rhpMPO/dbN2725FgLOSKWHE3/xeA=) 2: h_pQhnrE430cVPVrVeHdwNqGdWQ.roa (hash: jiL4T5HKXcvptd8nzfsvbD/UWOoD6EiqjHWGsrec+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:51:d7:a9:1b:f2:e7:05:e0:24:78:51:38:69:a9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756 Validity Not Before: Dec 5 07:02:35 2025 GMT Not After : Dec 6 07:02:35 2025 GMT Subject: CN=b09fca3015ca87922b55df27199c437f52af99b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6b:74:38:3c:8b:17:f3:71:67:f3:d9:b7:7e: 35:71:5a:9a:62:b8:0d:ca:b0:6c:64:8b:0a:05:c8: c5:66:76:6e:7f:6d:98:23:e3:01:b5:44:fb:0e:6a: 15:4a:7e:5d:57:5e:84:87:4e:ff:21:94:75:d0:dd: 4b:b2:46:50:70:3f:fc:5e:9c:df:41:44:58:57:1d: 45:82:20:2b:49:37:ec:50:a1:19:97:2b:dd:4a:ea: d6:0c:ef:3b:37:f7:46:5d:01:7a:13:63:6c:cf:76: 7d:2a:4e:0c:3d:8b:7f:f9:f8:a2:1d:d4:52:9f:b9: d6:6b:13:84:c7:04:e0:2a:ad:ec:f4:dd:36:37:51: fb:e0:cc:73:c5:f3:bf:e6:e6:75:9d:f9:ef:af:8a: 56:04:b1:8a:ef:dd:83:09:ef:dd:ed:2d:12:f5:f2: 54:0f:56:86:1f:1b:5f:25:f5:33:ac:15:6b:66:c4: 7b:ff:d9:c7:7c:d1:f7:ed:f3:42:7c:25:2d:be:53: e4:e8:c2:a2:4a:6e:82:0d:20:c6:84:aa:95:08:96: 44:95:9d:16:e9:a4:2d:64:2e:75:43:bb:92:aa:1e: fc:20:7a:2c:48:45:c4:1f:68:32:dd:dc:6f:0a:20: ba:a6:0d:6e:e6:2f:db:b5:ba:b3:81:69:e5:53:ae: 08:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9F:CA:30:15:CA:87:92:2B:55:DF:27:19:9C:43:7F:52:AF:99:B4 X509v3 Authority Key Identifier: keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f7:56:54:27:bc:c1:9a:46:98:f3:7e:e1:05:88:e9:4a:58: 7e:99:a3:df:f4:92:fd:de:2c:d7:bf:70:a6:33:77:98:c8:b3: 08:c6:af:18:10:25:fb:77:a0:60:8b:00:f2:42:24:81:0c:9f: 94:31:2b:23:22:96:56:dd:56:ea:d2:d1:52:bb:1e:25:3a:29: f9:20:a5:17:95:13:a6:0b:0b:d7:71:44:d1:0a:f8:9b:83:f9: 9c:24:e1:b5:05:59:65:42:1c:10:07:5d:30:e7:3c:56:3b:5f: e9:d0:1d:fb:a8:e8:51:3f:ce:d8:1f:5c:78:5d:3e:6d:35:e2: a0:e0:38:45:c5:aa:c8:56:71:ca:f4:14:87:da:06:09:56:7e: 53:46:c6:e4:bd:ce:1d:08:8a:aa:68:96:78:ee:6c:b1:bc:0d: af:f4:d8:24:ed:a4:a0:22:d7:55:ea:d6:b5:9c:f5:27:27:5c: c0:bc:b1:43:1e:f2:96:8c:d7:1e:a6:e1:9d:56:c4:f3:2f:d1: ca:e0:39:54:bf:db:55:63:1b:3b:45:aa:84:da:eb:f4:6d:f2: 79:7d:e0:a3:21:fa:1c:29:78:85:8f:20:e2:97:e2:ad:3f:7d: fc:11:14:d5:4f:df:fd:4d:f5:ca:f5:28:be:82:1a:52:b9:07: f8:76:ff:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrtUdepG/LnBeAkeFE4aanUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZTNkMTFmNzJkZGJlZDgzNjEyODViNDk5YjkzMjE5MTIw M2I3NTYwHhcNMjUxMjA1MDcwMjM1WhcNMjUxMjA2MDcwMjM1WjAzMTEwLwYDVQQD EyhiMDlmY2EzMDE1Y2E4NzkyMmI1NWRmMjcxOTljNDM3ZjUyYWY5OWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gt0ODyLF/NxZ/PZt341cVqaYrgN yrBsZIsKBcjFZnZuf22YI+MBtUT7DmoVSn5dV16Eh07/IZR10N1LskZQcD/8Xpzf QURYVx1FgiArSTfsUKEZlyvdSurWDO87N/dGXQF6E2Nsz3Z9Kk4MPYt/+fiiHdRS n7nWaxOExwTgKq3s9N02N1H74MxzxfO/5uZ1nfnvr4pWBLGK792DCe/d7S0S9fJU D1aGHxtfJfUzrBVrZsR7/9nHfNH37fNCfCUtvlPk6MKiSm6CDSDGhKqVCJZElZ0W 6aQtZC51Q7uSqh78IHosSEXEH2gy3dxvCiC6pg1u5i/btbqzgWnlU64I3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCfyjAVyoeSK1XfJxmcQ39Sr5m0MB8GA1UdIwQY MBaAFBnj0R9y3b7YNhKFtJm5MhkSA7dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQt MDY5YmZhZjJiY2U0LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQtMDY5YmZhZjJiY2U0 LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfdWVCe8 wZpGmPN+4QWI6UpYfpmj3/SS/d4s179wpjN3mMizCMavGBAl+3egYIsA8kIkgQyf lDErIyKWVt1W6tLRUrseJTop+SClF5UTpgsL13FE0Qr4m4P5nCThtQVZZUIcEAdd MOc8Vjtf6dAd+6joUT/O2B9ceF0+bTXioOA4RcWqyFZxyvQUh9oGCVZ+U0bG5L3O HQiKqmiWeO5ssbwNr/TYJO2koCLXVerWtZz1JydcwLyxQx7ylozXHqbhnVbE8y/R yuA5VL/bVWMbO0WqhNrr9G3yeX3goyH6HCl4hY8g4pfirT99/BEU1U/f/U31yvUo voIaUrkH+Hb/RQ== -----END CERTIFICATE-----Generated at Fri Dec 5 16:48:13 2025 by rpki-client