This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft File: gwN5KJCtoro4fjmzFLdwNdX7MVs.mft (raw, json) Hash identifier: nT4PUBqJJPxAedaE6m0xxK50vIe2DJzHUx0EdJAZNPI= Subject key identifier: B6:3D:C8:61:A6:9F:A8:61:7D:3D:75:82:94:C8:D6:25:38:62:1A:74 Authority key identifier: 83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B Certificate issuer: /CN=8303792890ada2ba387e39b314b77035d5fb315b Certificate serial: 019B5976452D239CE09AC7F70A674A1B8C41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft Manifest number: 0200 Signing time: Fri 26 Dec 2025 07:01:21 +0000 Manifest this update: Fri 26 Dec 2025 07:01:21 +0000 Manifest next update: Sat 27 Dec 2025 07:01:21 +0000 Files and hashes: 1: 7o9ALcr1bL4UOBX6YJn0uD-9tF0.roa (hash: wGcA/CUa2AHlBIQ9Ur+ssm2xCQswNtocmJ6VYpXekNw=) 2: gwN5KJCtoro4fjmzFLdwNdX7MVs.crl (hash: AK5SDMNKWociocK2cRQc8+Qnj0Yj76FFfODAy4aRIfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:45:2d:23:9c:e0:9a:c7:f7:0a:67:4a:1b:8c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8303792890ada2ba387e39b314b77035d5fb315b Validity Not Before: Dec 26 07:01:21 2025 GMT Not After : Dec 27 07:01:21 2025 GMT Subject: CN=b63dc861a69fa8617d3d758294c8d62538621a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:83:54:a5:26:0b:39:6f:cb:e0:78:58:f3:84: bc:63:07:89:09:f9:82:11:88:45:43:ec:8f:2a:39: 24:0a:62:33:e9:6a:a9:bf:0b:63:3d:96:61:17:a5: f9:d4:a1:13:b3:40:6d:22:3f:34:22:09:12:cd:f7: a1:4e:27:d3:bf:b1:e2:c4:f6:43:81:41:3e:3b:51: eb:99:e1:2b:d4:cc:03:a5:80:b3:37:7a:e9:3d:3e: b3:c4:9b:80:f2:bc:30:04:c7:c8:78:02:68:19:53: 8e:39:bd:14:95:6c:1b:8c:76:7b:87:e1:28:61:fb: 0f:a3:70:19:c3:34:45:8b:ad:c3:e0:06:69:49:9c: 75:fe:1b:c6:3a:62:6e:b0:fa:0d:96:1b:f9:b1:7a: 01:78:ae:e2:17:b2:8e:10:ab:11:56:f8:01:ff:68: 26:3f:25:c4:98:b3:a5:d0:3e:5d:d5:17:35:3a:bf: b7:68:6c:85:dc:67:01:c5:5f:df:66:50:bf:df:3f: bb:f8:05:c7:02:dc:2d:b9:86:d1:21:8a:7d:46:b6: 1f:60:74:67:24:2b:c8:ab:50:76:b4:50:b5:88:4b: 56:e9:4d:a7:b3:6c:49:0d:6d:60:91:a3:bb:a7:18: f6:2f:69:d6:44:be:1a:cd:ee:eb:68:51:a1:cd:03: e5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3D:C8:61:A6:9F:A8:61:7D:3D:75:82:94:C8:D6:25:38:62:1A:74 X509v3 Authority Key Identifier: keyid:83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e0:a6:50:ed:02:8e:cd:fc:49:07:83:30:ba:37:14:0c:8c: 46:f1:76:9f:c8:d5:f2:65:85:3e:d7:ba:d2:9f:e9:18:4b:ec: 15:06:6b:8f:ec:77:65:ab:5e:a6:26:17:7c:0a:de:3e:f5:67: fd:d8:12:da:36:c5:7b:07:60:e7:b4:4c:9f:6c:49:96:9f:61: c1:9e:71:fd:69:e5:6f:e6:bb:23:f6:f7:a6:25:ae:ea:db:37: 38:6f:6d:f6:5c:fb:6e:49:96:37:89:bb:79:16:ae:f3:99:ff: fa:d2:2d:00:b5:61:db:71:6f:b4:83:c7:b1:69:09:94:1f:11: 59:ee:c3:b1:a4:2c:a0:ff:4f:b1:dc:11:1f:12:f0:d4:d3:73: 68:d5:f5:15:09:33:93:e2:17:fb:a3:02:49:63:80:c0:67:7b: 73:17:8d:41:3f:77:a6:9e:c6:2c:ff:7c:43:d0:8b:58:44:79: a8:e5:a1:51:03:e9:f0:52:a5:6b:71:19:dd:2e:81:0b:ba:2b: b5:69:5a:89:e0:e2:df:66:36:4c:77:50:1b:ca:d9:6f:ea:fc: a5:48:5a:7f:ec:96:d8:4e:ee:54:80:87:1e:0f:81:9a:f4:26: a8:d2:0c:e2:fe:c1:4d:f3:82:46:01:6c:25:2b:0c:66:41:87: e1:83:5e:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdkUtI5zgmsf3CmdKG4xBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDM3OTI4OTBhZGEyYmEzODdlMzliMzE0Yjc3MDM1ZDVm YjMxNWIwHhcNMjUxMjI2MDcwMTIxWhcNMjUxMjI3MDcwMTIxWjAzMTEwLwYDVQQD EyhiNjNkYzg2MWE2OWZhODYxN2QzZDc1ODI5NGM4ZDYyNTM4NjIxYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1INUpSYLOW/L4HhY84S8YweJCfmC EYhFQ+yPKjkkCmIz6WqpvwtjPZZhF6X51KETs0BtIj80IgkSzfehTifTv7HixPZD gUE+O1HrmeEr1MwDpYCzN3rpPT6zxJuA8rwwBMfIeAJoGVOOOb0UlWwbjHZ7h+Eo YfsPo3AZwzRFi63D4AZpSZx1/hvGOmJusPoNlhv5sXoBeK7iF7KOEKsRVvgB/2gm PyXEmLOl0D5d1Rc1Or+3aGyF3GcBxV/fZlC/3z+7+AXHAtwtuYbRIYp9RrYfYHRn JCvIq1B2tFC1iEtW6U2ns2xJDW1gkaO7pxj2L2nWRL4aze7raFGhzQPlwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY9yGGmn6hhfT11gpTI1iU4Yhp0MB8GA1UdIwQY MBaAFIMDeSiQraK6OH45sxS3cDXV+zFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dONUtKQ3Rvcm80ZmptekZMZHdOZFg3TVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMTljZGMtYjViYy00MTNhLWJlZTct N2U4NDdhMzQxNDFhLzEvZ3dONUtKQ3Rvcm80ZmptekZMZHdOZFg3TVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zMTljZGMtYjViYy00MTNhLWJlZTctN2U4NDdhMzQxNDFh LzEvZ3dONUtKQ3Rvcm80ZmptekZMZHdOZFg3TVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOCmUO0C js38SQeDMLo3FAyMRvF2n8jV8mWFPte60p/pGEvsFQZrj+x3ZatepiYXfArePvVn /dgS2jbFewdg57RMn2xJlp9hwZ5x/Wnlb+a7I/b3piWu6ts3OG9t9lz7bkmWN4m7 eRau85n/+tItALVh23FvtIPHsWkJlB8RWe7DsaQsoP9PsdwRHxLw1NNzaNX1FQkz k+IX+6MCSWOAwGd7cxeNQT93pp7GLP98Q9CLWER5qOWhUQPp8FKla3EZ3S6BC7or tWlaieDi32Y2THdQG8rZb+r8pUhaf+yW2E7uVICHHg+BmvQmqNIM4v7BTfOCRgFs JSsMZkGH4YNerw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:45 2025 by rpki-client