This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft File: GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json) Hash identifier: LgiKK/hQKuYqrrt1kpsommbxuHxesRQZe2Z2lkKiSCU= Subject key identifier: 8C:84:03:23:65:07:A3:6D:67:97:D2:EB:DC:7F:59:87:E2:CE:E1:FC Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8 Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8 Certificate serial: 019B0F6EEA8111CF90A3CC76A5C78DA0D6A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft Manifest number: 0F36 Signing time: Thu 11 Dec 2025 22:01:25 +0000 Manifest this update: Thu 11 Dec 2025 22:01:25 +0000 Manifest next update: Fri 12 Dec 2025 22:01:25 +0000 Files and hashes: 1: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: iyZ3gIyNi/ZRtRt689LizvEQCZE8w/mx1sww2DKTUSI=) 2: UJ4olMWApP7MwaE2AnHAAWvvURE.roa (hash: j8yhG+CkxtZBOA9heOK1DNmQYHzy/3/vJayn7f/Unnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:ea:81:11:cf:90:a3:cc:76:a5:c7:8d:a0:d6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8 Validity Not Before: Dec 11 22:01:25 2025 GMT Not After : Dec 12 22:01:25 2025 GMT Subject: CN=8c8403236507a36d6797d2ebdc7f5987e2cee1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4d:ef:2d:7d:9d:81:30:b8:bb:47:72:5a:f1: 8e:33:da:19:1d:83:7a:c5:cf:05:1e:f7:47:60:68: b3:53:3e:ce:44:33:49:f2:a7:00:7f:06:61:ab:39: f6:d2:02:32:fd:32:b5:24:61:d3:2f:24:6d:33:84: c6:e7:e3:8c:b6:2a:b9:f6:64:d9:e5:39:4b:0e:b1: 1e:d4:e3:48:1e:c3:89:55:86:91:17:7f:f7:9e:d3: 3e:fe:a8:93:0d:c6:6a:a0:4c:62:04:8e:e3:3a:9a: b9:e2:cd:9a:a2:3b:c9:db:16:cc:bf:00:14:fc:0a: 49:57:16:e7:65:61:40:0b:a8:cc:f3:1a:f8:bd:0b: e9:b3:76:98:bf:72:9c:bc:f7:2d:ba:17:c8:e4:42: 14:29:a2:48:aa:3f:54:d3:fb:cc:a3:73:39:b2:79: 26:2c:67:56:64:50:8c:84:b2:73:6e:d7:a7:f3:14: e3:63:cf:2d:0b:ed:34:ee:42:d8:ab:c8:3e:ee:23: ac:bd:e4:76:02:0d:94:f0:b9:4f:73:23:25:8a:6a: a8:5f:bc:f3:b8:49:c0:9c:e2:28:dd:bc:91:8c:3a: 49:4f:3b:69:a0:d4:c5:2e:b6:bb:7d:c0:af:91:d5: 31:23:7d:fc:08:c8:f0:4d:c8:a5:27:a2:3f:a4:cd: 04:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:84:03:23:65:07:A3:6D:67:97:D2:EB:DC:7F:59:87:E2:CE:E1:FC X509v3 Authority Key Identifier: keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:8b:9b:3a:58:3b:b8:28:45:6d:99:b1:49:fb:2f:15:79:07: 81:5c:c5:a0:a9:f3:9e:99:15:66:21:c1:36:c2:c3:27:7a:39: f3:19:6f:1c:b4:bf:f7:32:9f:15:fa:13:b2:bc:c1:6e:6b:78: d5:fe:0d:73:8f:a1:94:74:de:a9:ca:85:27:57:23:72:70:a3: 7d:18:1e:1e:bd:29:a7:f7:5a:f1:7e:5f:ef:b0:c3:49:74:07: 5c:70:e3:6d:80:27:13:37:39:09:1d:83:ab:2b:3d:6a:4b:1a: f4:7f:c5:8e:c9:27:07:a5:f0:2d:77:01:f6:d6:1e:6e:89:23: 9d:39:f3:60:48:88:46:46:64:ae:10:e9:80:16:c9:eb:ba:2b: 66:e2:4d:76:cd:d3:90:ef:23:c7:8d:e4:d4:84:3e:e9:24:04: 9a:99:ea:1e:87:37:1f:a0:37:f8:f2:83:7c:25:0c:fa:75:1d: bd:ec:d4:f1:aa:8c:d1:da:4b:9e:84:07:1a:aa:3d:4f:ab:94: 52:49:a1:e0:07:56:f9:8f:7e:2d:1b:59:0c:58:78:fa:bf:b5: 2e:7e:e5:83:04:b0:d7:55:79:d0:17:30:90:00:3e:12:23:80: 47:12:95:30:51:69:c8:5c:cd:de:88:6e:78:11:9d:87:45:39: ea:45:3c:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbuqBEc+Qo8x2pceNoNahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZGMwMDkzYzVhZjg5NGNmNTIwYjU5MzZlMzBiMjE1MDkw ZGU5ZjgwHhcNMjUxMjExMjIwMTI1WhcNMjUxMjEyMjIwMTI1WjAzMTEwLwYDVQQD Eyg4Yzg0MDMyMzY1MDdhMzZkNjc5N2QyZWJkYzdmNTk4N2UyY2VlMWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik3vLX2dgTC4u0dyWvGOM9oZHYN6 xc8FHvdHYGizUz7ORDNJ8qcAfwZhqzn20gIy/TK1JGHTLyRtM4TG5+OMtiq59mTZ 5TlLDrEe1ONIHsOJVYaRF3/3ntM+/qiTDcZqoExiBI7jOpq54s2aojvJ2xbMvwAU /ApJVxbnZWFAC6jM8xr4vQvps3aYv3KcvPctuhfI5EIUKaJIqj9U0/vMo3M5snkm LGdWZFCMhLJzbten8xTjY88tC+007kLYq8g+7iOsveR2Ag2U8LlPcyMlimqoX7zz uEnAnOIo3byRjDpJTztpoNTFLra7fcCvkdUxI338CMjwTcilJ6I/pM0EGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyEAyNlB6NtZ5fS69x/WYfizuH8MB8GA1UdIwQY MBaAFBrcAJPFr4lM9SC1k24wshUJDen4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUt ZjU5NDhjNzE2ZTE2LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUtZjU5NDhjNzE2ZTE2 LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYubOlg7 uChFbZmxSfsvFXkHgVzFoKnznpkVZiHBNsLDJ3o58xlvHLS/9zKfFfoTsrzBbmt4 1f4Nc4+hlHTeqcqFJ1cjcnCjfRgeHr0pp/da8X5f77DDSXQHXHDjbYAnEzc5CR2D qys9aksa9H/FjsknB6XwLXcB9tYebokjnTnzYEiIRkZkrhDpgBbJ67orZuJNds3T kO8jx43k1IQ+6SQEmpnqHoc3H6A3+PKDfCUM+nUdvezU8aqM0dpLnoQHGqo9T6uU Ukmh4AdW+Y9+LRtZDFh4+r+1Ln7lgwSw11V50BcwkAA+EiOARxKVMFFpyFzN3ohu eBGdh0U56kU8wg== -----END CERTIFICATE-----Generated at Fri Dec 12 06:46:03 2025 by rpki-client