This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json) Hash identifier: A0sNjlVyh42ZLnIoXRCBYNsTcMb5Rt4jV/nD8L2plUs= Subject key identifier: 38:13:F8:12:46:74:84:D9:C0:98:48:DC:FE:22:1F:1D:BC:5B:24:9E Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e Certificate serial: 019B6542B80FCE1D7D76DDED92BF33FB56F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft Manifest number: 1034 Signing time: Sun 28 Dec 2025 14:00:29 +0000 Manifest this update: Sun 28 Dec 2025 14:00:29 +0000 Manifest next update: Mon 29 Dec 2025 14:00:29 +0000 Files and hashes: 1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=) 2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: DO+EHed4jqbZwYoGQ7bZNaEZtfGe3EW9JGyjRQ2K9hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:42:b8:0f:ce:1d:7d:76:dd:ed:92:bf:33:fb:56:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e Validity Not Before: Dec 28 14:00:29 2025 GMT Not After : Dec 29 14:00:29 2025 GMT Subject: CN=3813f812467484d9c09848dcfe221f1dbc5b249e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:fd:95:53:48:80:28:cd:bf:f9:de:e7:74: 8d:91:3e:c2:c1:5e:87:ae:e0:e9:c4:94:d0:b4:b4: 90:ee:84:3c:e9:4a:90:6a:64:e8:d7:4f:c3:cb:aa: c6:b3:5b:07:29:27:c2:73:53:63:e3:70:6e:78:4c: 97:25:75:aa:55:cb:f6:b8:9d:6b:70:ec:a4:8b:5c: 6d:91:97:76:59:92:ad:35:85:d6:49:8d:0d:63:8c: 1f:f8:75:76:66:1c:4e:54:9a:2c:50:45:cf:25:4f: 6f:8e:a8:fe:4e:c6:f4:a4:c3:ed:b3:ae:fb:a9:05: 70:e1:2f:bb:e5:30:3b:8a:61:ba:4f:87:63:25:80: da:a2:5b:a7:fd:77:d0:d0:59:80:0f:46:16:4d:a1: 54:97:cd:e5:34:c1:39:84:2e:7f:6b:55:0d:d1:1b: 5e:79:da:cf:9a:9f:8f:19:78:63:4f:26:80:d0:a5: 8c:a6:8e:60:3e:5a:16:e9:5b:89:91:0d:80:9f:90: 77:86:be:2a:9b:c6:46:37:9b:83:42:ca:ee:ee:33: 6f:1b:25:d8:6d:bc:13:1f:8c:02:69:e5:c6:14:12: 67:a4:0a:7c:99:dd:5a:d6:4f:11:ed:79:9d:64:bb: 27:85:e3:f6:9a:39:77:d0:c3:99:de:e5:27:17:d4: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:13:F8:12:46:74:84:D9:C0:98:48:DC:FE:22:1F:1D:BC:5B:24:9E X509v3 Authority Key Identifier: keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a3:ec:ca:28:bd:91:b1:e1:67:b3:7a:8f:95:9b:b3:dc:d4: 5f:2b:ec:8e:39:31:b7:7f:17:38:31:3b:62:41:dd:f8:86:86: 74:20:61:6d:fa:62:05:8d:17:ed:40:57:fa:80:bb:ec:ff:be: 00:0d:34:cf:8d:0d:71:02:c9:41:02:3e:93:af:49:37:f7:06: ff:5e:bc:85:15:70:1b:fe:fd:1d:d4:7f:65:df:0f:c8:19:96: 17:9e:1f:f1:91:cb:33:a4:1a:0b:1c:6a:cc:20:45:9c:ec:4c: 68:0d:c1:ac:30:0d:8c:2f:cc:6b:e4:2f:ca:97:4b:35:cb:38: 9b:52:8e:02:d4:8f:43:93:8d:de:e4:4c:10:15:ff:43:1d:83: 51:b9:7b:1d:3e:8e:74:94:d9:6d:22:e5:db:31:3f:0a:31:6b: d3:a7:b4:a2:e2:ed:d9:33:a7:bb:4d:9b:27:a6:3e:b1:eb:5f: c3:18:e6:95:45:66:12:57:e1:38:2e:a9:ad:e5:75:e2:f7:27: f5:ec:3f:24:d4:2f:8c:cd:da:c8:27:6c:b7:6c:b2:e6:c7:a8: a5:ad:5d:ce:02:9f:90:81:91:e3:dc:6a:92:e4:b3:35:77:50: d3:0e:ea:54:2e:d9:a3:e5:17:ca:41:3a:b8:6d:55:79:81:21: 37:dc:79:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlQrgPzh19dt3tkr8z+1bzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDIzYjM5NzA1YjM0NWE4NmVmZjNmMTRlZjZiMWU0ZGI0 NTkzOWUwHhcNMjUxMjI4MTQwMDI5WhcNMjUxMjI5MTQwMDI5WjAzMTEwLwYDVQQD EygzODEzZjgxMjQ2NzQ4NGQ5YzA5ODQ4ZGNmZTIyMWYxZGJjNWIyNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAX9lVNIgCjNv/ne53SNkT7CwV6H ruDpxJTQtLSQ7oQ86UqQamTo10/Dy6rGs1sHKSfCc1Nj43BueEyXJXWqVcv2uJ1r cOyki1xtkZd2WZKtNYXWSY0NY4wf+HV2ZhxOVJosUEXPJU9vjqj+Tsb0pMPts677 qQVw4S+75TA7imG6T4djJYDaolun/XfQ0FmAD0YWTaFUl83lNME5hC5/a1UN0Rte edrPmp+PGXhjTyaA0KWMpo5gPloW6VuJkQ2An5B3hr4qm8ZGN5uDQsru7jNvGyXY bbwTH4wCaeXGFBJnpAp8md1a1k8R7XmdZLsnheP2mjl30MOZ3uUnF9TvYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgT+BJGdITZwJhI3P4iHx28WySeMB8GA1UdIwQY MBaAFIMCOzlwWzRahu/z8U72seTbRZOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYt M2I4ZmJmZmY1MzQyLzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYtM2I4ZmJmZmY1MzQy LzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqPsyii9 kbHhZ7N6j5Wbs9zUXyvsjjkxt38XODE7YkHd+IaGdCBhbfpiBY0X7UBX+oC77P++ AA00z40NcQLJQQI+k69JN/cG/168hRVwG/79HdR/Zd8PyBmWF54f8ZHLM6QaCxxq zCBFnOxMaA3BrDANjC/Ma+QvypdLNcs4m1KOAtSPQ5ON3uRMEBX/Qx2DUbl7HT6O dJTZbSLl2zE/CjFr06e0ouLt2TOnu02bJ6Y+setfwxjmlUVmElfhOC6preV14vcn 9ew/JNQvjM3ayCdst2yy5seopa1dzgKfkIGR49xqkuSzNXdQ0w7qVC7Zo+UXykE6 uG1VeYEhN9x55A== -----END CERTIFICATE-----Generated at Sun Dec 28 16:26:59 2025 by rpki-client