This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: t/7juoaGoxLBo1QkLImIopDL4Rg9VET4o2mbz3mquzA=
Subject key identifier: 1E:7B:D8:31:36:65:F0:23:A6:1F:3B:0C:0D:E7:03:8F:AF:8C:4C:D3
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 019B5B64C97B880D9A07C7EB8AB5108C1626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1799
Signing time: Fri 26 Dec 2025 16:01:30 +0000
Manifest this update: Fri 26 Dec 2025 16:01:30 +0000
Manifest next update: Sat 27 Dec 2025 16:01:30 +0000
Files and hashes: 1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: OERgCZe/UQldK2SbU3bsbHt4//Kl9RU+g7MLjKzZf6o=)
2: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (hash: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=)
3: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (hash: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5b:64:c9:7b:88:0d:9a:07:c7:eb:8a:b5:10:8c:16:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Dec 26 16:01:30 2025 GMT
Not After : Dec 27 16:01:30 2025 GMT
Subject: CN=1e7bd8313665f023a61f3b0c0de7038faf8c4cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:21:55:18:c9:0c:90:15:16:cf:87:6f:8e:
d2:1c:28:8c:e7:97:6a:60:71:9d:df:0f:76:4e:9b:
ba:12:05:c8:03:f4:dd:33:a6:de:ef:59:f2:f7:ea:
12:ec:ba:f3:1e:1f:7a:f6:a5:4a:0a:51:1d:7f:c1:
5d:66:42:00:6c:39:63:12:e2:04:54:7b:45:ff:3f:
bf:d6:44:d1:ba:10:f6:11:f2:c6:9c:ed:12:f6:3c:
41:46:89:a8:47:a2:5c:44:99:15:a7:dd:8c:18:d7:
91:8c:4b:1b:e5:4f:8b:27:33:53:c5:db:20:41:2d:
bf:6b:9e:0a:7f:36:00:bd:ec:56:fe:1e:b3:9e:06:
d0:43:71:f1:ef:fc:77:a7:43:df:cc:9a:1b:c0:62:
a6:02:17:e9:8d:ae:66:90:51:ee:60:19:9b:bf:66:
47:5a:6c:33:cd:b5:9a:ca:64:29:c5:4f:62:6c:1c:
5d:32:3d:bc:33:19:78:ae:4b:d8:61:67:4e:1c:96:
bd:85:6e:aa:a5:eb:e1:9b:f4:0e:77:a5:b6:29:80:
16:54:af:b3:46:0e:e1:72:aa:11:2e:0c:da:5f:75:
bc:25:1d:60:dd:57:1b:fe:a0:8c:17:29:85:04:4b:
07:0f:83:ab:f4:f7:45:40:3a:4c:fe:57:83:4f:e8:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:D8:31:36:65:F0:23:A6:1F:3B:0C:0D:E7:03:8F:AF:8C:4C:D3
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:70:cc:fb:7d:37:d7:d4:7c:e6:2d:ee:f9:58:5e:f0:4e:20:
85:5a:64:84:8f:98:e4:a7:10:58:bc:53:ee:6c:a6:5a:68:db:
30:ee:cb:3b:fb:26:d2:9a:ad:3b:aa:db:b7:cc:4f:a6:46:a5:
67:af:2b:92:b9:6a:07:d4:bb:6f:c7:6a:04:6b:18:2d:f4:e6:
62:10:66:4c:e6:2a:b1:1b:17:c4:c4:13:b4:ce:52:9b:73:e5:
45:50:a4:21:9e:0b:e4:21:a0:16:b7:2d:f3:07:55:1d:91:5f:
37:7a:56:01:3e:7c:5a:a1:9c:d5:c9:39:3a:48:de:19:7c:37:
3c:21:a1:8b:1d:65:e1:b4:6f:a7:94:be:8b:84:95:53:9b:02:
d5:7c:07:f2:3c:3f:78:34:6e:8c:2c:d0:2e:c6:ca:f8:19:39:
d0:23:0c:bb:61:cd:c4:3e:c2:dc:43:be:76:47:47:fa:3f:72:
b7:83:2e:29:bd:c8:88:91:bd:c5:f6:0b:0e:dc:9b:79:90:d8:
6d:f0:29:d0:16:1c:31:00:53:90:74:c1:58:fd:62:f7:49:16:
51:f1:f3:a7:04:b7:9e:e7:0d:14:06:74:79:6d:dd:ee:0d:bb:
8c:6a:d7:b6:ae:af:de:64:ab:9a:a9:c9:e7:bc:54:74:b3:f9:
00:a3:9b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 21:20:31 2025 by rpki-client