This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json) Hash identifier: 43WXsb6sjOG90P5Y7wymKaPX7DU7MmvhKbu7HL90khc= Subject key identifier: 02:CB:8B:2F:C1:2A:2E:D2:A2:D8:58:E2:AD:9B:F4:71:5C:C7:22:D4 Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2 Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2 Certificate serial: 019B24ACDCC326DC4F7D02BAFAAE058B15DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft Manifest number: 0979 Signing time: Tue 16 Dec 2025 01:01:06 +0000 Manifest this update: Tue 16 Dec 2025 01:01:06 +0000 Manifest next update: Wed 17 Dec 2025 01:01:06 +0000 Files and hashes: 1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=) 2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: PpnjY7SGIqhScWoQLGiHtDXI9CPAddUkGJskuVwZK1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:dc:c3:26:dc:4f:7d:02:ba:fa:ae:05:8b:15:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2 Validity Not Before: Dec 16 01:01:06 2025 GMT Not After : Dec 17 01:01:06 2025 GMT Subject: CN=02cb8b2fc12a2ed2a2d858e2ad9bf4715cc722d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cb:9a:c5:43:b6:2c:f0:be:20:54:de:46:89: c1:88:6b:72:41:39:91:02:83:cd:71:ad:04:1d:8c: b2:84:37:2c:99:08:b4:04:85:3a:0b:8a:bd:d8:8e: b4:71:be:b1:a5:ef:90:88:3c:d6:5a:9d:36:92:a3: 65:db:34:2c:2e:b5:00:83:de:58:59:98:02:4d:cd: ab:03:74:96:7d:f7:98:28:ce:fc:d8:1f:10:54:52: 0d:63:b2:43:f5:64:fc:05:93:f8:af:6a:a1:b0:e1: 67:c0:57:dd:e1:b4:1e:82:09:d7:b4:a0:ed:ea:d6: 6e:d8:22:a3:8c:80:3a:6f:fa:53:68:bf:3f:f7:c1: 2a:ed:e0:cb:ba:57:5c:97:60:99:cc:d8:02:61:8f: c0:f9:08:dd:f1:69:12:cf:d0:8e:b1:67:22:e0:8c: 4b:6e:52:b3:35:cc:6b:58:24:96:02:26:55:43:3c: 81:46:f4:cf:c9:88:6a:0f:e7:f0:8a:24:63:81:54: f1:d9:4f:76:44:7c:74:39:3b:0b:d2:bc:8f:25:a6: ca:bb:16:0a:09:51:cb:4b:37:5f:e1:d5:78:ca:97: 08:96:e6:08:81:f5:68:9f:b3:81:37:11:bc:42:24: a6:67:01:1d:e6:e3:ca:96:0d:63:4d:8d:f4:8b:17: aa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CB:8B:2F:C1:2A:2E:D2:A2:D8:58:E2:AD:9B:F4:71:5C:C7:22:D4 X509v3 Authority Key Identifier: keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:57:07:e0:98:0a:35:f6:89:c4:f6:f9:4d:e5:b1:ca:0a:7b: 52:29:46:c7:5a:89:8b:76:26:ee:7d:d1:a7:7a:6d:31:97:d5: 81:5c:da:b4:9f:45:54:48:06:ff:d5:09:43:07:2b:a0:df:ca: 23:8c:88:53:ca:37:1f:d0:c0:bc:e8:94:e8:8a:a4:4d:07:cf: d5:f4:7e:3e:99:f4:ae:26:32:37:07:4d:1b:8e:e4:f4:c1:c3: d4:89:f7:8a:51:af:f9:b3:27:47:47:9c:03:16:37:82:ce:c7: 89:f7:9a:22:c3:b8:de:41:0c:d5:9f:38:fc:d9:40:b7:c4:a0: 01:5a:b7:a5:4d:28:86:27:08:4f:fc:14:b1:84:65:6a:dc:a8: ef:7f:3e:2a:0a:b4:96:8a:a8:f1:cf:d8:03:af:3d:29:0b:15: 33:67:cc:a2:76:97:5a:d5:1f:59:34:1d:40:ac:a9:2c:87:d4: f5:3e:0c:12:71:de:31:75:c9:a5:cd:77:d0:99:63:0b:8f:80: 4f:57:c9:41:ed:5d:da:b8:90:0f:e5:bd:e4:fa:e9:24:51:57: 28:bc:f6:31:be:23:a3:ab:40:e3:ce:8f:b1:6a:07:d6:95:cc: b9:19:de:1a:95:21:db:48:f4:11:fa:11:1a:5d:a7:50:56:4d: b4:70:95:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrNzDJtxPfQK6+q4FixXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDk4NDEyYzk4NGI4OWJlMzgwMTFhNzJhM2M0NzE5NzVm YzQ3YTIwHhcNMjUxMjE2MDEwMTA2WhcNMjUxMjE3MDEwMTA2WjAzMTEwLwYDVQQD EygwMmNiOGIyZmMxMmEyZWQyYTJkODU4ZTJhZDliZjQ3MTVjYzcyMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2suaxUO2LPC+IFTeRonBiGtyQTmR AoPNca0EHYyyhDcsmQi0BIU6C4q92I60cb6xpe+QiDzWWp02kqNl2zQsLrUAg95Y WZgCTc2rA3SWffeYKM782B8QVFINY7JD9WT8BZP4r2qhsOFnwFfd4bQeggnXtKDt 6tZu2CKjjIA6b/pTaL8/98Eq7eDLuldcl2CZzNgCYY/A+Qjd8WkSz9COsWci4IxL blKzNcxrWCSWAiZVQzyBRvTPyYhqD+fwiiRjgVTx2U92RHx0OTsL0ryPJabKuxYK CVHLSzdf4dV4ypcIluYIgfVon7OBNxG8QiSmZwEd5uPKlg1jTY30ixeqEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALLiy/BKi7SothY4q2b9HFcxyLUMB8GA1UdIwQY MBaAFBsJhBLJhLib44ARpyo8Rxl1/EeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYt NzBkMTMzMDZjZDFjLzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYtNzBkMTMzMDZjZDFj LzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVcH4JgK NfaJxPb5TeWxygp7UilGx1qJi3Ym7n3Rp3ptMZfVgVzatJ9FVEgG/9UJQwcroN/K I4yIU8o3H9DAvOiU6IqkTQfP1fR+Ppn0riYyNwdNG47k9MHD1In3ilGv+bMnR0ec AxY3gs7HifeaIsO43kEM1Z84/NlAt8SgAVq3pU0ohicIT/wUsYRlatyo738+Kgq0 loqo8c/YA689KQsVM2fMonaXWtUfWTQdQKypLIfU9T4MEnHeMXXJpc130JljC4+A T1fJQe1d2riQD+W95PrpJFFXKLz2Mb4jo6tA486PsWoH1pXMuRneGpUh20j0EfoR Gl2nUFZNtHCVHg== -----END CERTIFICATE-----Generated at Tue Dec 16 05:00:27 2025 by rpki-client