This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft File: Gwm9TWooxfH75oPPKs1ei_K65MQ.mft (raw, json) Hash identifier: Filz+5VM62LK6cwPvlguq8ydpu24dDcdLvgJ0euAN5g= Subject key identifier: 1E:D0:B5:C8:07:DD:76:82:5B:7E:FE:B7:26:21:11:45:42:86:22:6E Authority key identifier: 1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4 Certificate issuer: /CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4 Certificate serial: 019B5976FE7C3D4BD3F068F200B13113358B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft Manifest number: 0560 Signing time: Fri 26 Dec 2025 07:02:09 +0000 Manifest this update: Fri 26 Dec 2025 07:02:09 +0000 Manifest next update: Sat 27 Dec 2025 07:02:09 +0000 Files and hashes: 1: Gwm9TWooxfH75oPPKs1ei_K65MQ.crl (hash: zkEJBYatcQonqnGbRUm6kOcfYdzL/tT5h8jumDiT6H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:fe:7c:3d:4b:d3:f0:68:f2:00:b1:31:13:35:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4 Validity Not Before: Dec 26 07:02:09 2025 GMT Not After : Dec 27 07:02:09 2025 GMT Subject: CN=1ed0b5c807dd76825b7efeb7262111454286226e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:87:fa:ec:c1:a4:13:ce:ba:fc:3e:52:13:4a: 93:6d:7a:0c:e2:7d:66:d3:b2:08:c2:7e:bc:da:5d: 58:64:93:d1:6f:7c:1e:9f:b6:0f:aa:bf:40:b0:7b: c0:35:69:65:51:f2:26:30:54:9a:5f:83:d3:4c:55: 75:6b:66:5e:32:7c:3b:b6:49:b2:18:93:54:9d:85: be:a4:de:c9:8d:68:dc:b6:cf:12:ef:bc:be:08:96: ef:83:81:c9:b6:a1:8f:10:f5:20:77:68:1c:a4:98: 87:79:94:da:b0:50:0b:6f:46:e6:85:6b:bf:ce:74: 84:6f:59:f4:70:02:b8:24:d2:8c:29:c7:98:13:cf: e4:b2:34:ec:0f:80:26:ae:79:5c:6c:4b:ae:b3:1d: b5:80:ca:8c:17:59:9f:59:4e:ab:f0:89:8a:f5:c6: 72:21:7d:e9:c7:7d:88:33:9f:5d:f2:af:f9:29:d6: 73:cb:9a:f2:88:e2:d5:78:e1:9d:47:06:24:da:32: d6:6c:e9:40:1f:8d:07:01:ce:cd:28:c4:19:ce:be: 89:b5:99:38:c5:ad:6b:13:c8:c2:9d:6d:e3:f6:96: 12:7a:8c:b9:fc:7e:60:3e:32:16:9b:ba:c3:73:89: 2e:ed:4d:05:60:54:d7:40:e1:a5:18:ea:77:1a:f2: c1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D0:B5:C8:07:DD:76:82:5B:7E:FE:B7:26:21:11:45:42:86:22:6E X509v3 Authority Key Identifier: keyid:1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a1:c8:6b:1f:e1:59:bf:3f:5d:65:c5:94:e9:77:59:bc:68: 70:4c:b2:f3:d3:70:6d:68:95:bb:b9:e1:45:c3:32:ba:90:c2: 63:29:8c:6d:d5:3c:9d:21:9f:f4:88:55:31:70:a9:f5:e7:c3: bc:1f:b7:5b:0f:5a:4b:df:1b:46:15:e6:7a:43:89:60:aa:68: 5f:e9:0a:a6:c8:cc:d8:7e:d7:4f:07:2b:92:70:85:2f:b9:77: 8d:b5:07:8a:97:04:66:3f:2c:98:64:dc:a3:a3:2a:0e:18:02: 83:6c:99:00:ad:67:34:42:26:0f:84:52:73:b3:70:2d:ff:7e: ec:01:28:89:1f:61:cc:73:a9:6a:a5:ba:ea:0b:f0:e9:b4:78: b2:84:1f:48:1d:2b:ff:a3:b5:4b:7d:e1:be:da:5f:ad:21:d1: a5:64:87:42:7a:d8:58:09:d5:72:4f:ff:3a:52:88:2a:fa:53: ff:0f:22:53:56:23:06:2b:8c:82:50:67:1b:c1:9d:8a:eb:2d: fb:15:1d:5e:cc:97:c0:bc:78:04:6f:07:3e:fc:57:d4:35:68: ad:8d:20:51:b0:db:ac:5e:f0:e5:1e:01:a0:33:90:04:cd:83: 91:36:20:ea:c8:f7:58:06:09:29:ff:fd:09:e9:48:00:6d:bf: 3c:51:75:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdv58PUvT8GjyALExEzWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDliZDRkNmEyOGM1ZjFmYmU2ODNjZjJhY2Q1ZThiZjJi YWU0YzQwHhcNMjUxMjI2MDcwMjA5WhcNMjUxMjI3MDcwMjA5WjAzMTEwLwYDVQQD EygxZWQwYjVjODA3ZGQ3NjgyNWI3ZWZlYjcyNjIxMTE0NTQyODYyMjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Yf67MGkE866/D5SE0qTbXoM4n1m 07IIwn682l1YZJPRb3wen7YPqr9AsHvANWllUfImMFSaX4PTTFV1a2ZeMnw7tkmy GJNUnYW+pN7JjWjcts8S77y+CJbvg4HJtqGPEPUgd2gcpJiHeZTasFALb0bmhWu/ znSEb1n0cAK4JNKMKceYE8/ksjTsD4AmrnlcbEuusx21gMqMF1mfWU6r8ImK9cZy IX3px32IM59d8q/5KdZzy5ryiOLVeOGdRwYk2jLWbOlAH40HAc7NKMQZzr6JtZk4 xa1rE8jCnW3j9pYSeoy5/H5gPjIWm7rDc4ku7U0FYFTXQOGlGOp3GvLBVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7QtcgH3XaCW37+tyYhEUVChiJuMB8GA1UdIwQY MBaAFBsJvU1qKMXx++aDzyrNXovyuuTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dtOVRXb294Zkg3NW9QUEtzMWVpX0s2NU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS84NmI1NGMtYjk4MC00ODE3LThkZjYt ZGNlNzc4MWEyYzVjLzEvR3dtOVRXb294Zkg3NW9QUEtzMWVpX0s2NU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS84NmI1NGMtYjk4MC00ODE3LThkZjYtZGNlNzc4MWEyYzVj LzEvR3dtOVRXb294Zkg3NW9QUEtzMWVpX0s2NU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKHIax/h Wb8/XWXFlOl3WbxocEyy89NwbWiVu7nhRcMyupDCYymMbdU8nSGf9IhVMXCp9efD vB+3Ww9aS98bRhXmekOJYKpoX+kKpsjM2H7XTwcrknCFL7l3jbUHipcEZj8smGTc o6MqDhgCg2yZAK1nNEImD4RSc7NwLf9+7AEoiR9hzHOpaqW66gvw6bR4soQfSB0r /6O1S33hvtpfrSHRpWSHQnrYWAnVck//OlKIKvpT/w8iU1YjBiuMglBnG8Gdiust +xUdXsyXwLx4BG8HPvxX1DVorY0gUbDbrF7w5R4BoDOQBM2DkTYg6sj3WAYJKf/9 CelIAG2/PFF1/Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:29 2025 by rpki-client