This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json) Hash identifier: gFs0g7/Ze3/1Ie7t5AEWVD52YRUcJWX05l+SNMOkV4g= Subject key identifier: E2:C1:59:4D:0B:B3:EB:C4:B0:06:26:FB:AF:1A:C0:9F:C8:6D:B3:C4 Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17 Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017 Certificate serial: 019B33443CD1D4BA1352D83A5B1C0639DE41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 21:01:08 +0000 Manifest this update: Thu 18 Dec 2025 21:01:08 +0000 Manifest next update: Fri 19 Dec 2025 21:01:08 +0000 Files and hashes: 1: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: 4Zd9CGQcDWMS5S/psHjIApZYcE8KKD2h3nhKRRoDn9Q=) 2: GujVnYJoAkzfCvxrFRrdm3vJm2A.roa (hash: M0aXCNhnx8CphMMO7CXVpEcNI+LOkAqIy/QV9QRD+Yc=) 3: cPOk9XaYMPnXv3i4A_ZWhKLa-c0.roa (hash: DgpoUG8V1y8nR1k4pl9K8GHgZay1hvO5tnK0jFOLUl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:3c:d1:d4:ba:13:52:d8:3a:5b:1c:06:39:de:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017 Validity Not Before: Dec 18 21:01:08 2025 GMT Not After : Dec 19 21:01:08 2025 GMT Subject: CN=e2c1594d0bb3ebc4b00626fbaf1ac09fc86db3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:01:38:ff:ae:bb:b2:32:05:0e:04:95:7a: a0:1b:1b:0f:fa:0d:11:be:d5:11:2a:2e:eb:89:53: 9c:bf:5c:6a:fb:5d:21:88:3b:70:b1:4e:c1:f0:69: c5:73:68:d2:d0:9c:78:d9:73:5a:dc:3f:11:0e:d1: 46:76:cc:f3:97:da:42:a7:eb:ac:fc:cf:fd:3f:c5: 7a:b2:9c:7b:0e:e3:a4:84:dd:7e:27:50:78:b2:c6: e9:c9:0f:9c:47:a2:b7:81:f3:70:f3:29:0c:aa:b7: 07:ba:c7:39:58:d6:5a:e7:62:7e:88:8b:91:54:ab: d4:0b:2d:e8:71:a8:93:fd:1b:f6:f4:a5:f0:f5:3f: ea:c4:0a:97:33:30:dd:7d:9d:71:a7:23:04:6c:a6: 3f:31:d5:e3:27:d6:fb:dc:4e:18:ba:50:34:fa:21: 2e:65:bb:24:bc:9f:ab:17:2a:e4:0e:23:d9:81:af: 78:d7:2d:d8:80:ac:13:e8:bb:71:95:d3:bc:fd:d3: 49:08:5a:61:01:20:38:c9:1e:65:08:19:35:8e:47: b0:3e:7f:f2:71:5a:3a:83:2b:33:3e:c0:42:59:83: 73:d6:7b:cf:e1:de:b3:39:2e:07:ff:7c:2e:b3:39: 45:3f:82:c7:43:15:83:c6:5c:ed:48:d5:ff:69:43: 42:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C1:59:4D:0B:B3:EB:C4:B0:06:26:FB:AF:1A:C0:9F:C8:6D:B3:C4 X509v3 Authority Key Identifier: keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d8:56:de:fb:6e:ef:14:62:eb:c3:1f:a9:f9:2c:82:a5:88: 9d:06:dd:c4:65:b7:15:9b:15:4e:49:22:80:6c:39:42:5f:ad: 86:90:df:74:b6:ff:0e:bd:95:1c:24:47:28:a5:17:94:2c:65: 51:ed:7a:05:af:56:b8:bd:5d:6e:6f:80:2e:f2:b2:bd:60:e6: 9e:7f:73:2c:b3:22:18:b7:bc:47:aa:74:c2:2a:fb:14:39:0d: 3c:6d:99:97:f3:90:01:e4:96:98:ad:74:cd:ed:74:e9:51:09: 32:a9:b5:0b:86:49:cb:01:d3:39:54:d2:91:c7:46:92:00:7f: 93:de:8f:0a:6a:0f:96:ab:6b:d6:c7:6a:9a:76:4c:9c:6c:ad: c0:a0:29:af:d1:5f:02:fa:93:b6:8c:ea:b2:5d:b2:0b:98:87: 76:7c:7c:fc:ad:d2:dc:9b:1d:ee:f9:ba:38:74:eb:40:38:4f: 40:ad:46:1b:02:43:91:ba:47:cf:ad:61:14:09:2b:ec:d4:87: df:e1:d3:56:78:40:28:de:2a:d8:d5:3d:43:fc:43:54:12:24: fe:64:8c:e6:56:0f:80:ba:74:66:26:d3:f8:ee:d6:61:cc:bf: e0:97:e2:41:cb:a5:16:7f:b7:6e:05:f6:ca:29:aa:8e:7f:99: f7:07:4e:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRDzR1LoTUtg6WxwGOd5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YWMxNDk4ODYwZTJiYjA5NTgxNzM4NTRiZDA0Yzg2OWEz NjkwMTcwHhcNMjUxMjE4MjEwMTA4WhcNMjUxMjE5MjEwMTA4WjAzMTEwLwYDVQQD EyhlMmMxNTk0ZDBiYjNlYmM0YjAwNjI2ZmJhZjFhYzA5ZmM4NmRiM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvIBOP+uu7IyBQ4ElXqgGxsP+g0R vtURKi7riVOcv1xq+10hiDtwsU7B8GnFc2jS0Jx42XNa3D8RDtFGdszzl9pCp+us /M/9P8V6spx7DuOkhN1+J1B4ssbpyQ+cR6K3gfNw8ykMqrcHusc5WNZa52J+iIuR VKvUCy3ocaiT/Rv29KXw9T/qxAqXMzDdfZ1xpyMEbKY/MdXjJ9b73E4YulA0+iEu ZbskvJ+rFyrkDiPZga941y3YgKwT6LtxldO8/dNJCFphASA4yR5lCBk1jkewPn/y cVo6gyszPsBCWYNz1nvP4d6zOS4H/3wuszlFP4LHQxWDxlztSNX/aUNCHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLBWU0Ls+vEsAYm+68awJ/IbbPEMB8GA1UdIwQY MBaAFBmsFJiGDiuwlYFzhUvQTIaaNpAXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82OWMzODktMTdjOS00NDYxLWEzOTAt N2FhMjkwZTg1N2U5LzEvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82OWMzODktMTdjOS00NDYxLWEzOTAtN2FhMjkwZTg1N2U5 LzEvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNhW3vtu 7xRi68MfqfksgqWInQbdxGW3FZsVTkkigGw5Ql+thpDfdLb/Dr2VHCRHKKUXlCxl Ue16Ba9WuL1dbm+ALvKyvWDmnn9zLLMiGLe8R6p0wir7FDkNPG2Zl/OQAeSWmK10 ze106VEJMqm1C4ZJywHTOVTSkcdGkgB/k96PCmoPlqtr1sdqmnZMnGytwKApr9Ff AvqTtozqsl2yC5iHdnx8/K3S3Jsd7vm6OHTrQDhPQK1GGwJDkbpHz61hFAkr7NSH 3+HTVnhAKN4q2NU9Q/xDVBIk/mSM5lYPgLp0ZibT+O7WYcy/4JfiQculFn+3bgX2 yimqjn+Z9wdOCg== -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:46 2025 by rpki-client