This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft File: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json) Hash identifier: 7UMVWkc/9TYFAVyzSN65gufxjq4eXLTBtaNuwsWUCSk= Subject key identifier: 6B:D8:FD:4A:F3:46:12:FD:46:D2:47:78:34:5D:24:D2:21:AA:83:BE Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94 Certificate issuer: /CN=83020637e89655e299d91843769254af07714994 Certificate serial: 019B5975BBD0FF2052F219A2C1367B6792A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft Manifest number: 0BFF Signing time: Fri 26 Dec 2025 07:00:46 +0000 Manifest this update: Fri 26 Dec 2025 07:00:46 +0000 Manifest next update: Sat 27 Dec 2025 07:00:46 +0000 Files and hashes: 1: 1-R9Qf46XIEkfXqrQvwwzD2Tou7g.roa (hash: MQ5+3E8S339NrGygiORsr3A7NuJnR4bP2xWWIaK0oj4=) 2: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: cU8aObAveqDE82Uwt8ZmNk1tNaSKohcXtylN7KBoYg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:bb:d0:ff:20:52:f2:19:a2:c1:36:7b:67:92:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83020637e89655e299d91843769254af07714994 Validity Not Before: Dec 26 07:00:46 2025 GMT Not After : Dec 27 07:00:46 2025 GMT Subject: CN=6bd8fd4af34612fd46d24778345d24d221aa83be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d4:09:bc:75:5a:9f:57:59:99:cd:ca:4c:0f: 24:0c:40:9a:d4:23:55:96:0d:b3:c9:cc:03:7c:01: ab:77:63:b0:27:89:d4:33:20:3b:73:a4:58:43:79: f2:a1:75:83:c6:89:71:99:65:b5:52:05:84:f0:17: 65:96:57:97:8c:1c:ad:43:1d:bd:45:6e:3f:fa:35: a0:d6:0f:85:3a:bb:a8:46:5b:b6:85:3c:36:bb:64: fe:5e:3f:e7:f3:50:92:7e:ed:0e:5e:29:32:c4:d8: 69:39:58:04:b1:5e:dd:c2:a7:36:9f:39:92:29:56: dd:a0:cb:e5:bb:86:e5:ae:79:7a:c2:30:8d:2c:b2: 83:80:83:8b:5e:f6:70:65:9e:34:f4:15:d8:fe:b6: 8f:30:b3:e0:40:98:66:5c:b3:6c:a1:f1:59:e5:c7: ce:d0:63:08:e8:38:3b:3f:28:e2:c9:5f:0b:2a:af: da:7c:e2:11:d6:b0:0a:d5:d7:25:76:97:28:fc:27: e8:b7:39:8d:ad:93:42:17:42:07:de:1d:68:cc:1f: 16:1c:17:eb:a7:66:f7:ea:6f:8f:52:9c:91:d9:ef: 7e:ad:ab:99:f7:46:3c:9d:af:dd:a6:3a:f6:6a:00: 44:2a:37:b2:38:0d:25:fc:a6:44:cd:1a:ff:89:80: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D8:FD:4A:F3:46:12:FD:46:D2:47:78:34:5D:24:D2:21:AA:83:BE X509v3 Authority Key Identifier: keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:85:bd:ba:05:23:12:83:76:01:07:81:9c:eb:d8:da:8a:cf: 30:18:63:f3:2f:b4:e5:5d:ee:87:18:8b:79:26:a5:ce:c5:49: 5a:fc:51:a4:14:8b:fc:94:bf:9c:d2:eb:19:20:a8:29:f5:d5: 7d:8e:6d:4a:8d:58:a6:29:43:dc:13:ad:9e:c5:a7:1e:13:9b: 23:cf:1d:ac:6f:89:56:38:8e:fc:7d:31:ba:3e:04:86:3b:e4: 8c:da:ec:d8:9e:a2:9a:00:18:fe:32:c2:d4:b4:ca:68:91:1f: cf:da:71:ad:16:d5:13:e3:35:f3:c6:c3:ad:76:35:42:48:37: 99:20:60:d5:1a:e1:03:cb:78:8f:63:3f:a9:51:d0:8a:f2:e1: a6:b8:29:ec:dc:ea:96:0f:7e:96:be:ae:93:0a:ac:6b:f1:15: 2f:c6:df:fa:65:54:82:34:a8:ac:a4:6e:13:34:9f:6f:c7:f1: de:ec:92:0a:06:c7:46:6c:6b:d3:74:6b:8c:04:d6:86:5d:a5: 7b:03:a2:27:cc:16:bf:61:3a:e5:cc:8c:64:be:50:6c:3c:db: d1:3f:b3:d1:46:88:00:08:3a:5c:d7:43:29:e8:32:27:9f:2c: 62:b8:8d:77:b0:db:e0:48:ff:dc:ea:7f:7f:bb:11:b2:54:38: 95:5d:51:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbvQ/yBS8hmiwTZ7Z5KpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDIwNjM3ZTg5NjU1ZTI5OWQ5MTg0Mzc2OTI1NGFmMDc3 MTQ5OTQwHhcNMjUxMjI2MDcwMDQ2WhcNMjUxMjI3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg2YmQ4ZmQ0YWYzNDYxMmZkNDZkMjQ3NzgzNDVkMjRkMjIxYWE4M2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dQJvHVan1dZmc3KTA8kDECa1CNV lg2zycwDfAGrd2OwJ4nUMyA7c6RYQ3nyoXWDxolxmWW1UgWE8BdllleXjBytQx29 RW4/+jWg1g+FOruoRlu2hTw2u2T+Xj/n81CSfu0OXikyxNhpOVgEsV7dwqc2nzmS KVbdoMvlu4blrnl6wjCNLLKDgIOLXvZwZZ409BXY/raPMLPgQJhmXLNsofFZ5cfO 0GMI6Dg7PyjiyV8LKq/afOIR1rAK1dcldpco/CfotzmNrZNCF0IH3h1ozB8WHBfr p2b36m+PUpyR2e9+rauZ90Y8na/dpjr2agBEKjeyOA0l/KZEzRr/iYA8/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvY/UrzRhL9RtJHeDRdJNIhqoO+MB8GA1UdIwQY MBaAFIMCBjfollXimdkYQ3aSVK8HcUmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTkt YjJiZmFjM2IzMjA0LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTktYjJiZmFjM2IzMjA0 LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIW9ugUj EoN2AQeBnOvY2orPMBhj8y+05V3uhxiLeSalzsVJWvxRpBSL/JS/nNLrGSCoKfXV fY5tSo1YpilD3BOtnsWnHhObI88drG+JVjiO/H0xuj4EhjvkjNrs2J6imgAY/jLC 1LTKaJEfz9pxrRbVE+M188bDrXY1Qkg3mSBg1RrhA8t4j2M/qVHQivLhprgp7Nzq lg9+lr6ukwqsa/EVL8bf+mVUgjSorKRuEzSfb8fx3uySCgbHRmxr03RrjATWhl2l ewOiJ8wWv2E65cyMZL5QbDzb0T+z0UaIAAg6XNdDKegyJ58sYriNd7Db4Ej/3Op/ f7sRslQ4lV1R+w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:55 2025 by rpki-client