This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json) Hash identifier: xLC2gdNQ4iRSI0GjQa8TlFi5n1VcLFXrHZSoad+PKAk= Subject key identifier: AD:9C:9E:CC:51:CC:75:0D:CE:41:4F:CA:62:CC:6C:95:41:ED:55:D5 Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 019B1B3C32F9E5EEE60E82FDD599223C7C75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft Manifest number: 1791 Signing time: Sun 14 Dec 2025 05:01:28 +0000 Manifest this update: Sun 14 Dec 2025 05:01:28 +0000 Manifest next update: Mon 15 Dec 2025 05:01:28 +0000 Files and hashes: 1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=) 2: 2R3GYbP40kVDselx86gqI7AglgU.roa (hash: XLRcU1O670injcbZzqHBcbGiFZGa7M1Rl5LjE453GkQ=) 3: FIfoAXaxpYLmDe5rWtbqnwoZyG4.roa (hash: McAx354GUPfDHZvpRDVZ7JLef+rbJmvzLHPw8ZCGP3g=) 4: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=) 5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=) 6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=) 7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: 6o2e+fu+5q/b1LNbTCtAb67q+g1K+Zvg/FtQ41OIU6E=) 8: qWZ64G_gV6r1a1VTWhYwuR9ilIk.roa (hash: SNBGanOggO8FdGYV/GuiVAQ6b34zKk2VTZJhKLFl+04=) 9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=) 10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:32:f9:e5:ee:e6:0e:82:fd:d5:99:22:3c:7c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Dec 14 05:01:28 2025 GMT Not After : Dec 15 05:01:28 2025 GMT Subject: CN=ad9c9ecc51cc750dce414fca62cc6c9541ed55d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:77:d7:bb:b9:71:86:10:55:22:1d:46:7b: ec:80:42:df:da:d1:b8:bf:ab:f9:f1:7d:7e:9b:c6: fd:17:56:14:a9:7b:12:24:8f:0d:e4:36:41:72:2f: cd:0c:54:9c:e1:76:31:d7:ab:db:b0:67:2d:bf:fb: 10:0b:c3:73:fb:c2:05:9d:21:16:6f:6a:ec:53:44: 9a:c5:eb:ee:0c:26:11:71:c4:29:c4:02:d2:5b:5d: bd:53:36:14:45:f1:eb:8b:9f:65:ec:0f:8d:5d:a3: 3b:bb:b3:62:23:fe:07:f3:05:91:ac:68:f8:3d:65: c9:e9:dc:ed:eb:06:24:2b:b6:59:c6:be:b9:29:40: 72:30:61:78:65:ad:95:48:0a:cd:f0:64:ff:d5:ca: 68:db:3d:af:28:ae:d1:9f:58:1f:c1:02:85:2a:6a: 6e:d5:ab:4c:36:a4:88:1e:da:e5:10:77:7d:4f:1c: dd:4f:32:3c:25:b5:49:a2:da:50:63:13:38:20:7d: c6:39:0f:1a:f9:a5:1c:b4:24:52:22:48:9e:7b:ac: b8:57:eb:fc:21:aa:58:15:b0:af:3c:ff:2b:83:6a: 8e:47:c2:28:d9:ae:a0:30:d1:67:c7:78:86:dd:9a: 43:58:5a:d5:83:28:ac:6e:47:b9:9e:f9:4f:1a:54: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9C:9E:CC:51:CC:75:0D:CE:41:4F:CA:62:CC:6C:95:41:ED:55:D5 X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:57:69:c1:c9:2a:9e:be:8e:ee:a6:a2:e4:8f:18:cb:c9:2b: 5e:df:4c:b2:f8:43:0b:f3:f8:2c:84:b2:f4:d7:ab:f4:9b:4f: 76:2e:b6:d0:b7:6a:ea:0c:f2:84:80:58:5d:d9:df:9c:f0:24: 56:96:01:6f:44:2b:cd:b9:ef:40:c4:47:c5:0e:8b:be:2c:da: ed:ee:57:9f:48:0f:cf:56:04:dd:f6:e7:71:7c:a0:50:3d:17: df:7c:29:1b:44:3b:23:44:73:35:d4:e9:93:6c:83:e4:e9:76: 21:4d:ea:79:e0:32:e1:c2:8c:4d:9e:f6:09:31:3e:4a:90:87: 9d:4f:52:cd:0a:c7:96:8e:d4:3d:ba:a7:cc:81:b3:d6:b2:20: 58:ce:70:e0:12:49:f2:0b:d5:1e:ea:69:c4:9a:c6:18:2d:4d: d9:f5:a6:31:e3:75:98:79:db:d4:0d:17:ea:e3:fd:de:6f:e7: dc:df:8d:df:7b:aa:98:9e:49:86:8d:ce:d8:3b:ae:ec:d7:02: 8a:70:a0:65:3f:98:2b:f4:d3:f4:a0:e2:25:6e:66:70:e5:2e: 7c:f1:95:d8:32:f1:bc:93:64:f0:62:92:93:10:94:55:4a:d3: 7f:14:8a:e1:de:8f:39:ed:34:ec:cb:80:66:f2:3c:dd:6f:92: 2b:bd:f9:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPDL55e7mDoL91ZkiPHx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjUxMjE0MDUwMTI4WhcNMjUxMjE1MDUwMTI4WjAzMTEwLwYDVQQD EyhhZDljOWVjYzUxY2M3NTBkY2U0MTRmY2E2MmNjNmM5NTQxZWQ1NWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVR317u5cYYQVSIdRnvsgELf2tG4 v6v58X1+m8b9F1YUqXsSJI8N5DZBci/NDFSc4XYx16vbsGctv/sQC8Nz+8IFnSEW b2rsU0SaxevuDCYRccQpxALSW129UzYURfHri59l7A+NXaM7u7NiI/4H8wWRrGj4 PWXJ6dzt6wYkK7ZZxr65KUByMGF4Za2VSArN8GT/1cpo2z2vKK7Rn1gfwQKFKmpu 1atMNqSIHtrlEHd9TxzdTzI8JbVJotpQYxM4IH3GOQ8a+aUctCRSIkiee6y4V+v8 IapYFbCvPP8rg2qOR8Io2a6gMNFnx3iG3ZpDWFrVgyisbke5nvlPGlQweQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2cnsxRzHUNzkFPymLMbJVB7VXVMB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFdpwckq nr6O7qai5I8Yy8krXt9MsvhDC/P4LISy9Ner9JtPdi620Ldq6gzyhIBYXdnfnPAk VpYBb0QrzbnvQMRHxQ6Lviza7e5Xn0gPz1YE3fbncXygUD0X33wpG0Q7I0RzNdTp k2yD5Ol2IU3qeeAy4cKMTZ72CTE+SpCHnU9SzQrHlo7UPbqnzIGz1rIgWM5w4BJJ 8gvVHuppxJrGGC1N2fWmMeN1mHnb1A0X6uP93m/n3N+N33uqmJ5Jho3O2Duu7NcC inCgZT+YK/TT9KDiJW5mcOUufPGV2DLxvJNk8GKSkxCUVUrTfxSK4d6POe007MuA ZvI83W+SK735vg== -----END CERTIFICATE-----Generated at Sun Dec 14 09:13:10 2025 by rpki-client