This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json) Hash identifier: WrbR+RfKf5+36vcI1eYQaExadvjJq3W184c5AJJ3Moc= Subject key identifier: BA:CD:05:B4:8C:EB:9E:4F:DE:4E:F7:39:7C:F3:CA:4A:7B:D5:9B:A7 Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c Certificate serial: 019B24ACDC1AFA16893FBB128A96A4EC7E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft Manifest number: 030F Signing time: Tue 16 Dec 2025 01:01:06 +0000 Manifest this update: Tue 16 Dec 2025 01:01:06 +0000 Manifest next update: Wed 17 Dec 2025 01:01:06 +0000 Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: kMMFa1/wVRTvCM6pcBlg5wxhOv0GcJxmHINiPrmw2Ik=) 2: HbzqPjxV2gzVXrBA-nWLmjfTDxo.roa (hash: cWFkMXXdUpsLxuuBafoKiMAojPQ1C+2JXUGxa/p9/qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:dc:1a:fa:16:89:3f:bb:12:8a:96:a4:ec:7e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c Validity Not Before: Dec 16 01:01:06 2025 GMT Not After : Dec 17 01:01:06 2025 GMT Subject: CN=bacd05b48ceb9e4fde4ef7397cf3ca4a7bd59ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:56:62:5a:27:2d:99:bb:42:0a:aa:69:46:86: 78:1a:a8:40:28:87:87:75:45:dc:4b:8c:f2:51:f6: 9a:2e:5c:d7:4c:a0:e9:26:c8:29:7d:a1:16:a2:cf: e6:4e:93:c0:ef:5a:f3:72:6a:db:c7:d5:0c:25:e2: 68:b0:b9:da:ad:90:46:93:e7:a2:5a:09:16:f9:c6: be:9b:5c:44:05:d9:d4:d9:60:07:48:f5:eb:8d:77: a9:15:93:22:df:46:78:e5:b8:55:88:01:85:96:91: 25:71:df:36:9d:03:10:4e:af:b6:0c:32:00:5c:86: 91:ab:69:bb:42:e0:7f:96:27:5d:4d:fe:05:53:ab: 2a:4f:c9:f0:c5:cb:54:c8:6a:09:2a:c7:46:d3:5c: 94:97:bf:7f:81:5b:df:6c:19:0e:b7:39:1b:b3:69: 9a:df:70:dc:b4:52:02:34:64:10:66:1e:ff:e1:59: d5:e4:8e:97:67:9e:9e:1b:1f:78:e1:d5:5c:8f:bf: 27:64:f0:38:86:50:b1:19:7f:96:4a:d5:8a:60:c4: c4:1c:6b:6d:45:89:49:a2:95:ae:90:ab:39:82:af: 9f:fb:bd:b9:e9:6f:63:d6:f4:23:90:7c:d7:ac:c8: bd:3c:36:26:98:c6:ea:8a:52:1d:bf:10:d1:d6:aa: 4e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CD:05:B4:8C:EB:9E:4F:DE:4E:F7:39:7C:F3:CA:4A:7B:D5:9B:A7 X509v3 Authority Key Identifier: keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d2:86:ff:5e:02:8f:6d:ba:e9:00:62:84:71:df:08:c7:73: d8:c4:73:e4:c1:a5:e1:2f:0d:e2:3d:ad:0e:69:1f:d9:96:6e: dd:0e:6a:09:6a:69:2b:03:29:65:e5:48:18:e1:0c:58:af:29: b8:73:d1:50:cd:51:80:d2:e9:a5:40:81:e4:f6:b1:40:21:b4: 71:0f:aa:f4:00:cc:3a:0c:8e:e9:7b:a5:52:97:f0:0f:16:7f: c5:d9:28:54:e0:3f:12:e2:c7:ec:9e:bd:14:b7:57:57:88:92: 4b:a9:8f:fc:fe:dd:20:36:59:0a:74:5d:ea:e8:3a:c1:a2:6d: 84:5f:ee:b3:6c:0a:07:7f:8c:40:f6:7b:5e:47:23:ab:87:81: 71:7e:f4:b2:cd:ad:49:96:da:be:d1:ff:96:3c:7e:89:f5:4e: e0:16:cc:92:f1:78:be:95:f0:6e:0f:28:ab:72:31:58:b0:28: b3:62:b6:be:19:dc:bf:7a:2e:b8:5f:05:eb:dd:95:d4:8e:59: b3:e1:bd:b5:ab:5f:06:31:b9:81:70:aa:af:2d:6e:aa:70:0c: 31:50:6a:c3:cf:97:52:7b:81:7c:e7:91:d3:cc:bc:97:ad:e5: 51:6b:ec:c0:09:c0:f9:38:0a:4f:d1:f1:ed:d2:69:4c:f6:3b: 7a:02:28:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrNwa+haJP7sSipak7H4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjUyM2ZlMGQ2YmQ5YzY3ZTBiY2IwMDk4YTNjMzYzZjJm OTBmN2MwHhcNMjUxMjE2MDEwMTA2WhcNMjUxMjE3MDEwMTA2WjAzMTEwLwYDVQQD EyhiYWNkMDViNDhjZWI5ZTRmZGU0ZWY3Mzk3Y2YzY2E0YTdiZDU5YmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lZiWictmbtCCqppRoZ4GqhAKIeH dUXcS4zyUfaaLlzXTKDpJsgpfaEWos/mTpPA71rzcmrbx9UMJeJosLnarZBGk+ei WgkW+ca+m1xEBdnU2WAHSPXrjXepFZMi30Z45bhViAGFlpElcd82nQMQTq+2DDIA XIaRq2m7QuB/liddTf4FU6sqT8nwxctUyGoJKsdG01yUl79/gVvfbBkOtzkbs2ma 33DctFICNGQQZh7/4VnV5I6XZ56eGx944dVcj78nZPA4hlCxGX+WStWKYMTEHGtt RYlJopWukKs5gq+f+7256W9j1vQjkHzXrMi9PDYmmMbqilIdvxDR1qpO6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrNBbSM655P3k73OXzzykp71ZunMB8GA1UdIwQY MBaAFBllI/4Na9nGfgvLAJijw2Py+Q98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAt ZGU4MzU0NThkYThkLzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAtZGU4MzU0NThkYThk LzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9KG/14C j2266QBihHHfCMdz2MRz5MGl4S8N4j2tDmkf2ZZu3Q5qCWppKwMpZeVIGOEMWK8p uHPRUM1RgNLppUCB5PaxQCG0cQ+q9ADMOgyO6XulUpfwDxZ/xdkoVOA/EuLH7J69 FLdXV4iSS6mP/P7dIDZZCnRd6ug6waJthF/us2wKB3+MQPZ7Xkcjq4eBcX70ss2t SZbavtH/ljx+ifVO4BbMkvF4vpXwbg8oq3IxWLAos2K2vhncv3ouuF8F692V1I5Z s+G9tatfBjG5gXCqry1uqnAMMVBqw8+XUnuBfOeR08y8l63lUWvswAnA+TgKT9Hx 7dJpTPY7egIoAw== -----END CERTIFICATE-----Generated at Tue Dec 16 04:19:07 2025 by rpki-client