This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft File: gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft (raw, json) Hash identifier: 9BpKbuwBYCwgMxMhz3+0lBU2dxELZ503bUalaK6pkLU= Subject key identifier: F4:F2:EF:E4:A6:B7:02:F3:23:28:25:2A:DA:69:BD:1D:8E:5D:05:7E Authority key identifier: 80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8 Certificate issuer: /CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8 Certificate serial: 019B3A915B50442F08E02CD38267BC3AD8CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft Manifest number: 1783 Signing time: Sat 20 Dec 2025 07:02:43 +0000 Manifest this update: Sat 20 Dec 2025 07:02:43 +0000 Manifest next update: Sun 21 Dec 2025 07:02:43 +0000 Files and hashes: 1: gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl (hash: JPILOlLX0N/Fpd61OOx5JNnRAHWs+ZhHwnizICMKGuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:5b:50:44:2f:08:e0:2c:d3:82:67:bc:3a:d8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8 Validity Not Before: Dec 20 07:02:43 2025 GMT Not After : Dec 21 07:02:43 2025 GMT Subject: CN=f4f2efe4a6b702f32328252ada69bd1d8e5d057e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:cb:f7:4d:70:ad:41:87:aa:8e:9d:e4:cb: d5:26:27:d2:45:c2:de:f8:cb:32:92:d5:23:75:06: 86:6e:e6:49:53:2d:52:5c:00:c8:1e:2c:8c:d8:24: c8:9b:af:ef:a1:40:3a:e0:2f:dd:d9:87:8c:a3:49: a3:9b:39:2a:67:8f:da:32:ad:b2:6f:ac:65:c0:4a: 27:b3:6c:3f:70:34:39:35:7e:04:29:1e:9b:e8:55: 43:dd:a7:59:c0:f4:8b:d3:5f:e3:b9:75:27:72:90: 70:8b:5a:74:89:70:04:2e:05:10:7e:7c:d3:04:cd: b0:e0:d6:38:aa:a6:1e:8e:3e:23:6d:14:9b:69:ee: 26:38:93:c4:f7:7b:b2:04:46:be:ed:02:d7:7a:2f: 57:91:3a:4b:a3:da:d8:2c:d8:9f:e1:ef:b8:c1:58: 2e:70:a3:d8:d3:4f:af:32:4c:89:31:88:26:00:9d: 15:ae:a1:cc:36:da:0f:81:5c:41:94:21:2b:2a:d3: df:63:3e:e1:d2:83:7f:e4:b0:c8:86:9a:c0:ad:fe: 61:d0:a3:b1:cb:32:2b:1e:81:34:d6:04:67:e9:e5: 6b:04:5e:35:a5:dc:17:da:6c:7d:e6:bb:3f:12:ff: e5:1e:79:ee:33:92:35:c9:c5:81:24:31:aa:0c:f3: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F2:EF:E4:A6:B7:02:F3:23:28:25:2A:DA:69:BD:1D:8E:5D:05:7E X509v3 Authority Key Identifier: keyid:80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:5a:53:7b:74:c0:a8:a1:45:9b:3c:bd:e5:32:32:d1:44:6a: af:2a:e9:1d:55:dd:f4:59:73:9a:32:44:f1:33:f5:ac:35:56: 54:ce:3d:80:e5:44:f1:01:c4:31:c1:36:e9:17:db:47:21:1a: be:24:2b:b1:9f:ef:e0:9b:95:eb:45:a5:3e:26:7a:f3:56:cc: 25:78:fa:06:1a:22:e9:69:08:90:ba:fd:82:d7:c0:74:2e:cd: 38:b5:70:3c:56:5f:86:57:29:61:a3:57:25:8a:01:59:77:0a: 65:72:8b:52:8c:72:2d:fd:0d:61:59:a0:c2:21:c0:f3:3d:74: 3b:be:2e:1f:9a:06:dc:a3:8e:61:66:76:b9:a1:12:3f:e1:c6: 2c:50:e7:97:e4:46:1c:17:23:92:18:a8:0b:6d:a5:22:b7:9d: 46:bc:da:df:58:30:d9:b1:de:e2:e2:7b:b3:fb:ab:86:01:aa: c7:6f:93:5a:9b:29:7b:4a:7a:a9:6d:f9:87:fa:5a:9f:43:0f: 24:28:78:07:77:de:e3:39:0d:c0:89:53:c6:23:01:cf:7d:ee: 76:12:38:3a:87:13:44:a4:9f:c3:e5:38:64:06:4f:a4:46:9c: 7e:c8:56:08:c8:3f:06:6e:62:46:f7:2a:a5:80:8c:84:8d:c3: 7c:63:25:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kVtQRC8I4CzTgme8OtjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNmMxODA2YjA2YzVhOGMyYjAzNTBhMGZjNmY3NDZhNjY3 ZTRlYzgwHhcNMjUxMjIwMDcwMjQzWhcNMjUxMjIxMDcwMjQzWjAzMTEwLwYDVQQD EyhmNGYyZWZlNGE2YjcwMmYzMjMyODI1MmFkYTY5YmQxZDhlNWQwNTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtULL901wrUGHqo6d5MvVJifSRcLe +MsyktUjdQaGbuZJUy1SXADIHiyM2CTIm6/voUA64C/d2YeMo0mjmzkqZ4/aMq2y b6xlwEons2w/cDQ5NX4EKR6b6FVD3adZwPSL01/juXUncpBwi1p0iXAELgUQfnzT BM2w4NY4qqYejj4jbRSbae4mOJPE93uyBEa+7QLXei9XkTpLo9rYLNif4e+4wVgu cKPY00+vMkyJMYgmAJ0VrqHMNtoPgVxBlCErKtPfYz7h0oN/5LDIhprArf5h0KOx yzIrHoE01gRn6eVrBF41pdwX2mx95rs/Ev/lHnnuM5I1ycWBJDGqDPMVCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTy7+SmtwLzIyglKtppvR2OXQV+MB8GA1UdIwQY MBaAFIBsGAawbFqMKwNQoPxvdGpmfk7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEt Mjg4NzhlNGZhZmRkLzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEtMjg4NzhlNGZhZmRk LzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVpTe3TA qKFFmzy95TIy0URqryrpHVXd9FlzmjJE8TP1rDVWVM49gOVE8QHEMcE26RfbRyEa viQrsZ/v4JuV60WlPiZ681bMJXj6Bhoi6WkIkLr9gtfAdC7NOLVwPFZfhlcpYaNX JYoBWXcKZXKLUoxyLf0NYVmgwiHA8z10O74uH5oG3KOOYWZ2uaESP+HGLFDnl+RG HBcjkhioC22lIredRrza31gw2bHe4uJ7s/urhgGqx2+TWpspe0p6qW35h/pan0MP JCh4B3fe4zkNwIlTxiMBz33udhI4OocTRKSfw+U4ZAZPpEacfshWCMg/Bm5iRvcq pYCMhI3DfGMlHQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:44 2025 by rpki-client