This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft File: gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft (raw, json) Hash identifier: Ve9EG0TFAezEu54atarcfUmHuzFmrHqYiZCpaWVqWxA= Subject key identifier: 56:71:3B:D0:0E:36:44:A6:7F:DE:3D:6E:A0:71:53:6B:11:CA:1F:C5 Authority key identifier: 83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77 Certificate issuer: /CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777 Certificate serial: 019B1E3C99AE05E447AB380CF25C311C50C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 19:00:46 +0000 Manifest this update: Sun 14 Dec 2025 19:00:46 +0000 Manifest next update: Mon 15 Dec 2025 19:00:46 +0000 Files and hashes: 1: C5Qw-UH6XV_4ro5rbdk-3jWZdWA.roa (hash: aPq4TUMBz8klCiNKwnIuLbD4QdlJvKpZ22r6ylx0Jvs=) 2: gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl (hash: mvUHZZZbD6Cvmmm4hE/ZyZ/2xs5+ZDoaqdSn9rXqmOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:99:ae:05:e4:47:ab:38:0c:f2:5c:31:1c:50:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777 Validity Not Before: Dec 14 19:00:46 2025 GMT Not After : Dec 15 19:00:46 2025 GMT Subject: CN=56713bd00e3644a67fde3d6ea071536b11ca1fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:38:2a:81:f8:f9:24:5d:f9:06:cb:54:74: aa:78:e0:55:cb:3d:f9:30:bf:c4:85:3c:ba:fe:98: c2:83:16:14:05:ac:6e:66:d4:f4:72:e1:22:2e:7d: 23:23:9b:57:50:57:9c:5c:31:01:8c:1f:73:07:a6: 83:24:2e:60:70:84:84:bc:63:3b:dd:64:d5:c6:90: ff:6f:04:18:ea:21:3e:cd:fc:9a:a8:66:c2:62:bb: f9:a1:e1:66:65:63:9a:b8:9d:61:3f:79:1d:2a:eb: f0:df:cb:7f:5b:9c:b7:e5:b3:b2:70:14:02:a5:5b: 54:d7:2d:f8:16:06:bc:65:a5:e2:ad:2c:d9:6e:cd: 70:a2:9e:e8:f0:32:fb:19:7f:0f:07:22:30:42:75: bb:f4:dd:d4:f1:e0:71:37:82:9a:c7:4f:2c:06:4d: 4a:0e:5f:02:bb:60:19:ed:c7:ec:1c:8c:a9:fb:3d: da:c9:64:03:f0:2c:d4:44:27:71:61:fa:c4:a5:12: f4:45:68:4c:1c:fa:6c:89:0d:69:64:57:8f:66:83: 38:d9:3c:99:61:a9:65:9d:14:ff:6f:67:ac:a3:28: 86:af:d9:b1:da:18:8b:ff:0f:b0:67:8b:d9:c1:54: 87:1f:03:39:8e:ce:cc:ae:9b:ed:58:3a:9c:7d:58: f8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:71:3B:D0:0E:36:44:A6:7F:DE:3D:6E:A0:71:53:6B:11:CA:1F:C5 X509v3 Authority Key Identifier: keyid:83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ac:f6:51:5e:4c:f3:38:f2:fe:91:3b:d6:e5:69:c7:a4:af: 51:d1:64:ab:98:43:46:61:11:fc:bc:7a:57:a9:c4:65:bd:f5: 5e:b4:77:82:02:2a:83:82:7a:e2:09:53:60:1c:ee:7f:eb:65: f1:b4:88:cf:49:19:00:91:3e:90:d5:09:8d:3a:59:a1:77:48: c0:b8:5b:48:9f:e1:ff:c5:a9:e7:c3:9f:3d:af:de:88:93:33: 02:44:29:4d:77:0a:92:0e:43:95:3f:3f:ab:69:fc:66:9b:0c: 58:af:69:45:3c:c1:85:e4:73:f2:e9:fc:d3:d1:26:c9:39:2d: 1b:e3:fc:8c:e6:83:ff:30:39:38:15:54:fc:9c:9c:18:14:45: 84:d1:a2:f9:e3:5b:42:97:37:58:37:c4:f9:65:8e:52:7b:1a: 38:4a:cc:0e:6a:ab:49:c8:e0:61:93:31:89:d0:29:56:c4:02: 61:5c:9a:cc:ef:75:cd:39:4a:7a:d7:7f:0c:c3:5e:ec:4d:54: a0:5a:fb:c7:e6:b1:e1:c0:4e:51:83:d4:7f:14:64:e4:4c:06: a3:53:5c:42:a3:39:d4:d4:fb:ea:ed:63:54:1b:24:05:f2:ff: e4:8b:7e:2d:2d:13:de:40:6f:a5:ab:fb:05:70:85:d9:c3:b5: df:66:82:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePJmuBeRHqzgM8lwxHFDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDc2ZjNhYjNlZmFhNjMyOGYwYTM4ZmNmNGE3Zjk2MzAw NGI3NzcwHhcNMjUxMjE0MTkwMDQ2WhcNMjUxMjE1MTkwMDQ2WjAzMTEwLwYDVQQD Eyg1NjcxM2JkMDBlMzY0NGE2N2ZkZTNkNmVhMDcxNTM2YjExY2ExZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0c4KoH4+SRd+QbLVHSqeOBVyz35 ML/EhTy6/pjCgxYUBaxuZtT0cuEiLn0jI5tXUFecXDEBjB9zB6aDJC5gcISEvGM7 3WTVxpD/bwQY6iE+zfyaqGbCYrv5oeFmZWOauJ1hP3kdKuvw38t/W5y35bOycBQC pVtU1y34Fga8ZaXirSzZbs1wop7o8DL7GX8PByIwQnW79N3U8eBxN4Kax08sBk1K Dl8Cu2AZ7cfsHIyp+z3ayWQD8CzURCdxYfrEpRL0RWhMHPpsiQ1pZFePZoM42TyZ YallnRT/b2esoyiGr9mx2hiL/w+wZ4vZwVSHHwM5js7MrpvtWDqcfVj4UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZxO9AONkSmf949bqBxU2sRyh/FMB8GA1UdIwQY MBaAFIMHbzqz76pjKPCjj89Kf5YwBLd3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iODhlMGMtMjRjZi00ZmVjLWIxMTgt OWE2ZGYzOTU5MmM3LzEvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iODhlMGMtMjRjZi00ZmVjLWIxMTgtOWE2ZGYzOTU5MmM3 LzEvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaz2UV5M 8zjy/pE71uVpx6SvUdFkq5hDRmER/Lx6V6nEZb31XrR3ggIqg4J64glTYBzuf+tl 8bSIz0kZAJE+kNUJjTpZoXdIwLhbSJ/h/8Wp58OfPa/eiJMzAkQpTXcKkg5DlT8/ q2n8ZpsMWK9pRTzBheRz8un809EmyTktG+P8jOaD/zA5OBVU/JycGBRFhNGi+eNb Qpc3WDfE+WWOUnsaOErMDmqrScjgYZMxidApVsQCYVyazO91zTlKetd/DMNe7E1U oFr7x+ax4cBOUYPUfxRk5EwGo1NcQqM51NT76u1jVBskBfL/5It+LS0T3kBvpav7 BXCF2cO132aCwA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:07 2025 by rpki-client