This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft File: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json) Hash identifier: o52ICXVa2gqgV1Q2Qkqcz8nhKrjsHO1f1XsAeb4A+6I= Subject key identifier: 45:BC:51:33:95:60:7F:47:6D:BE:E0:A7:86:E7:6A:88:68:13:C5:E5 Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55 Certificate issuer: /CN=8300996c08890bd5e1e6dd0528217d28f9d09355 Certificate serial: 019B5AF62BBFA9990492BBB9A5E5C882E3D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 14:00:40 +0000 Manifest this update: Fri 26 Dec 2025 14:00:40 +0000 Manifest next update: Sat 27 Dec 2025 14:00:40 +0000 Files and hashes: 1: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: oBlH6xi/9FELRB/Blv5nowgqqcvSwt4IbOGiJpyIYfw=) 2: rqs2jYsXIEmeZSer38OOcJGK7EU.roa (hash: m+TNUwZvlDUtkC5/TwdymkZwjEw131NWG7VhMWfXmRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:2b:bf:a9:99:04:92:bb:b9:a5:e5:c8:82:e3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355 Validity Not Before: Dec 26 14:00:40 2025 GMT Not After : Dec 27 14:00:40 2025 GMT Subject: CN=45bc513395607f476dbee0a786e76a886813c5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:86:b6:63:3c:6c:3b:bc:f0:1a:43:0f:88:88: e0:88:9d:d6:77:fc:58:28:08:af:e2:a2:4e:39:59: f7:ff:ba:66:d8:ec:1a:e4:22:8a:4b:f9:57:0f:45: a7:21:b8:d7:e3:19:01:66:1f:12:25:65:ec:82:5d: 5a:ea:b0:3e:7a:e7:8d:f5:71:ae:1e:2f:a4:84:e5: 58:30:5a:48:1a:3e:23:f8:c9:bd:3e:93:f6:6f:46: 74:56:27:e2:9d:82:b5:f8:8b:7c:99:1a:65:3d:39: 47:06:c2:ea:6b:42:bb:4a:1b:b3:7c:22:8c:44:36: 61:a8:37:5e:83:20:65:3e:c8:d6:66:8c:d3:f7:4c: ac:e4:71:43:ac:fc:eb:2d:8c:1c:d5:0a:5f:b4:e9: c8:ee:b1:bb:04:64:bd:a5:84:90:12:da:4f:ac:c9: b6:78:84:6d:7e:d2:1f:0e:72:ec:bd:97:e7:55:2f: 66:62:82:55:bc:6b:0d:5f:3b:8d:44:fb:d2:5f:5f: d3:05:b5:eb:3b:4c:ff:25:44:be:37:49:36:85:9a: 40:2c:eb:58:51:8f:83:d0:47:f6:49:da:84:67:4e: 31:02:b7:c4:6f:79:64:99:9b:11:c6:bd:a4:41:bd: e6:b7:cd:dc:92:c4:0b:97:84:33:1f:0e:23:85:33: a4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BC:51:33:95:60:7F:47:6D:BE:E0:A7:86:E7:6A:88:68:13:C5:E5 X509v3 Authority Key Identifier: keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:82:a9:b3:1f:38:24:6b:29:2c:b4:c2:59:90:da:e3:8c:fc: c7:14:0c:16:e3:d6:01:a1:2a:9e:27:ee:4c:16:22:39:4d:21: 17:ee:bd:ba:3a:fe:73:1e:3b:2f:7d:b0:9b:ad:fe:5d:ed:15: b5:90:fb:21:a2:af:14:71:a4:91:44:18:f4:7d:0b:7d:02:23: e7:fd:57:e9:90:8d:1e:21:1d:86:56:49:07:fa:31:68:e4:15: 15:3e:45:7d:2f:2a:72:25:29:fa:07:3e:2f:24:bb:ef:c7:39: 87:7d:88:7f:0c:b7:0c:52:01:f1:6e:e2:cf:0a:44:3b:e9:40: e1:07:d1:58:02:f2:8a:c1:e7:64:ff:bd:70:c9:2c:14:80:b6: ba:d8:2f:6b:8e:af:b3:72:99:2e:0d:78:06:a4:d6:e2:32:a3: e4:61:a6:f5:c2:de:dc:77:6a:d9:3a:88:37:da:df:79:df:b7: ae:5d:9d:c3:15:a4:9d:07:3b:d2:07:79:4a:0e:0d:39:e9:6a: 98:5b:49:f9:99:73:8b:97:17:1c:24:77:2e:bc:0d:a5:47:be: 29:14:b9:b0:76:a9:eb:46:f8:59:71:8d:bc:f6:6b:77:27:9d: d4:15:7c:87:f4:c6:96:dd:32:20:77:f6:b0:93:bc:04:1a:99: 94:07:cf:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9iu/qZkEkru5peXIguPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDA5OTZjMDg4OTBiZDVlMWU2ZGQwNTI4MjE3ZDI4Zjlk MDkzNTUwHhcNMjUxMjI2MTQwMDQwWhcNMjUxMjI3MTQwMDQwWjAzMTEwLwYDVQQD Eyg0NWJjNTEzMzk1NjA3ZjQ3NmRiZWUwYTc4NmU3NmE4ODY4MTNjNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ia2YzxsO7zwGkMPiIjgiJ3Wd/xY KAiv4qJOOVn3/7pm2Owa5CKKS/lXD0WnIbjX4xkBZh8SJWXsgl1a6rA+eueN9XGu Hi+khOVYMFpIGj4j+Mm9PpP2b0Z0VifinYK1+It8mRplPTlHBsLqa0K7ShuzfCKM RDZhqDdegyBlPsjWZozT90ys5HFDrPzrLYwc1QpftOnI7rG7BGS9pYSQEtpPrMm2 eIRtftIfDnLsvZfnVS9mYoJVvGsNXzuNRPvSX1/TBbXrO0z/JUS+N0k2hZpALOtY UY+D0Ef2SdqEZ04xArfEb3lkmZsRxr2kQb3mt83cksQLl4QzHw4jhTOkQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEW8UTOVYH9Hbb7gp4bnaohoE8XlMB8GA1UdIwQY MBaAFIMAmWwIiQvV4ebdBSghfSj50JNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgt MmRiNjkxYjFkNGFiLzEvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgtMmRiNjkxYjFkNGFi LzEvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIKpsx84 JGspLLTCWZDa44z8xxQMFuPWAaEqnifuTBYiOU0hF+69ujr+cx47L32wm63+Xe0V tZD7IaKvFHGkkUQY9H0LfQIj5/1X6ZCNHiEdhlZJB/oxaOQVFT5FfS8qciUp+gc+ LyS778c5h32Ifwy3DFIB8W7izwpEO+lA4QfRWALyisHnZP+9cMksFIC2utgva46v s3KZLg14BqTW4jKj5GGm9cLe3Hdq2TqIN9rfed+3rl2dwxWknQc70gd5Sg4NOelq mFtJ+Zlzi5cXHCR3LrwNpUe+KRS5sHap60b4WXGNvPZrdyed1BV8h/TGlt0yIHf2 sJO8BBqZlAfPVQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:56 2025 by rpki-client