This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json) Hash identifier: hRG9XXrZwow/XPvLlaqWHFNS+YiNfe/8q7nxFIsb0vo= Subject key identifier: 75:6D:F4:A7:39:CF:80:24:67:95:4A:F7:56:8B:DB:3D:16:71:68:5C Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55 Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655 Certificate serial: 019B1CBC536E62BAEA6FA8E0584CC16FF512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft Manifest number: 0B4A Signing time: Sun 14 Dec 2025 12:01:02 +0000 Manifest this update: Sun 14 Dec 2025 12:01:02 +0000 Manifest next update: Mon 15 Dec 2025 12:01:02 +0000 Files and hashes: 1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: 7AC7riTngMRQrJyqVEtl+lPM7ITdWsrDmIc0g944Mk4=) 2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:53:6e:62:ba:ea:6f:a8:e0:58:4c:c1:6f:f5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655 Validity Not Before: Dec 14 12:01:02 2025 GMT Not After : Dec 15 12:01:02 2025 GMT Subject: CN=756df4a739cf802467954af7568bdb3d1671685c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:17:71:65:af:03:9b:67:7c:24:3f:87:f8: ea:cf:99:e4:ac:4b:25:3d:bb:f4:1a:de:f9:fe:15: b5:bc:82:fc:6c:43:9c:b8:6a:41:36:c4:72:b2:d2: bf:c1:34:92:54:c0:50:e2:0b:0c:d4:c7:69:4c:ce: 46:8b:a6:ad:4d:6b:4f:ec:9e:83:b7:6a:dc:29:1f: 11:6c:15:cb:79:e8:1e:34:b7:e4:0b:87:b9:99:16: d0:01:16:9c:ef:ef:7a:98:7c:ac:1a:53:25:b7:ba: d1:ec:25:76:fa:1d:29:5a:88:77:63:ff:77:ab:ee: 22:08:32:b1:bf:7f:e0:33:8c:c5:d5:ce:ed:3b:d5: 1e:5a:c2:11:34:59:38:93:2a:da:52:72:15:3b:bd: a6:e6:61:1d:88:f3:84:37:ca:7c:50:0f:3e:3f:af: b1:73:cc:05:8b:82:b4:82:f3:f2:05:88:c7:b9:3d: f8:32:14:4b:1c:aa:a9:59:fc:88:9d:09:28:3f:16: 45:d5:23:8e:b1:ef:af:4c:89:bd:06:82:94:13:83: 11:ba:11:03:0a:02:6b:d8:c3:2c:d1:68:3a:86:bf: 6d:4c:04:ac:a3:1e:11:dc:5b:18:61:ce:48:21:01: 0a:a4:70:92:38:a3:12:54:83:ef:27:8b:cb:e9:7e: d4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6D:F4:A7:39:CF:80:24:67:95:4A:F7:56:8B:DB:3D:16:71:68:5C X509v3 Authority Key Identifier: keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c8:c1:47:a2:3e:9e:20:ea:3f:a4:9e:35:df:59:57:3a:ba: 6b:f8:9f:d8:bb:33:17:ff:05:2b:d8:06:d0:92:27:8c:a7:2c: e8:fb:d2:f5:b4:1e:8d:0c:bf:f9:cb:34:bc:2a:b1:ec:c0:6d: 02:35:fd:4c:89:cf:d3:88:b1:c6:78:79:e0:4e:33:ae:51:19: f8:15:d7:7e:66:02:0c:b1:63:59:1d:e5:29:cd:74:67:7a:29: 35:2f:9e:2a:2f:38:14:10:0b:28:45:4e:d0:d2:cc:8f:41:f8: c4:9d:82:4d:ad:2b:c4:ba:ef:37:d4:99:7a:6d:02:5a:cb:95: 18:19:e8:60:97:2b:30:63:df:81:26:dc:cf:f4:31:ab:4a:52: 64:bb:61:dc:0e:8a:11:a9:6d:31:10:0e:e5:eb:a8:bb:ad:f8: 2e:44:06:ba:4c:38:2c:f2:15:d1:d3:fa:d3:c8:b1:d5:77:01: 56:c7:3a:6e:85:e1:70:f7:0a:08:b5:22:73:92:7d:3f:18:d7: 62:db:a8:a8:88:88:63:3c:4f:31:7e:4b:cd:8a:b8:45:8e:37: 09:f9:8a:8c:a3:dd:72:58:f3:05:48:3e:9f:d1:d2:58:4a:49: e5:d8:d6:70:ad:d1:39:7c:e3:0b:c5:fc:31:8c:66:0b:a8:7a: 71:a4:da:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvFNuYrrqb6jgWEzBb/USMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZTNlNjk3Y2RkNmUyMjVhYzViMTE2MWNkZjcwNGRlOWNm YzI2NTUwHhcNMjUxMjE0MTIwMTAyWhcNMjUxMjE1MTIwMTAyWjAzMTEwLwYDVQQD Eyg3NTZkZjRhNzM5Y2Y4MDI0Njc5NTRhZjc1NjhiZGIzZDE2NzE2ODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJIXcWWvA5tnfCQ/h/jqz5nkrEsl Pbv0Gt75/hW1vIL8bEOcuGpBNsRystK/wTSSVMBQ4gsM1MdpTM5Gi6atTWtP7J6D t2rcKR8RbBXLeegeNLfkC4e5mRbQARac7+96mHysGlMlt7rR7CV2+h0pWoh3Y/93 q+4iCDKxv3/gM4zF1c7tO9UeWsIRNFk4kyraUnIVO72m5mEdiPOEN8p8UA8+P6+x c8wFi4K0gvPyBYjHuT34MhRLHKqpWfyInQkoPxZF1SOOse+vTIm9BoKUE4MRuhED CgJr2MMs0Wg6hr9tTASsox4R3FsYYc5IIQEKpHCSOKMSVIPvJ4vL6X7URQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVt9Kc5z4AkZ5VK91aL2z0WcWhcMB8GA1UdIwQY MBaAFIHj5pfN1uIlrFsRYc33BN6c/CZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODIt ZGM4NTg2NGFlYTg5LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODItZGM4NTg2NGFlYTg5 LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsjBR6I+ niDqP6SeNd9ZVzq6a/if2LszF/8FK9gG0JInjKcs6PvS9bQejQy/+cs0vCqx7MBt AjX9TInP04ixxnh54E4zrlEZ+BXXfmYCDLFjWR3lKc10Z3opNS+eKi84FBALKEVO 0NLMj0H4xJ2CTa0rxLrvN9SZem0CWsuVGBnoYJcrMGPfgSbcz/Qxq0pSZLth3A6K EaltMRAO5euou634LkQGukw4LPIV0dP608ix1XcBVsc6boXhcPcKCLUic5J9PxjX YtuoqIiIYzxPMX5LzYq4RY43CfmKjKPdcljzBUg+n9HSWEpJ5djWcK3ROXzjC8X8 MYxmC6h6caTa2g== -----END CERTIFICATE-----Generated at Sun Dec 14 15:07:00 2025 by rpki-client