This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft File: gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json) Hash identifier: n9/ogg4es+3jI/YtNTqyQKgEJygJ65nRSqBsNRnsOEY= Subject key identifier: 89:4B:91:FB:3C:63:B0:6A:E6:F6:CB:93:9B:C8:CC:63:3F:A5:3A:81 Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB Certificate issuer: /CN=81689572b200ba4879381c8574274265592a14ab Certificate serial: 019B5975A699B8AED6A8151397D2F5DD3A14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 07:00:41 +0000 Manifest this update: Fri 26 Dec 2025 07:00:41 +0000 Manifest next update: Sat 27 Dec 2025 07:00:41 +0000 Files and hashes: 1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: m6yf5PLtDK0LQhSk50vqmTiwyvqkRKHj9pfsMUmLWZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:a6:99:b8:ae:d6:a8:15:13:97:d2:f5:dd:3a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81689572b200ba4879381c8574274265592a14ab Validity Not Before: Dec 26 07:00:41 2025 GMT Not After : Dec 27 07:00:41 2025 GMT Subject: CN=894b91fb3c63b06ae6f6cb939bc8cc633fa53a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:99:83:cb:fd:f5:2a:f9:b1:d4:d1:c5:42:f1: 8a:df:c9:d9:c4:2d:fd:af:9a:c2:85:1a:ae:07:73: ce:8e:4e:47:2c:9a:bb:f7:b8:ea:c6:75:16:92:7a: d5:5d:a5:04:e2:4b:8b:e3:a2:6f:53:36:e0:e8:a4: f6:bc:2c:44:53:3c:4a:9b:f7:81:2b:0c:9c:15:fd: dd:61:5b:00:0f:e5:c1:d1:aa:55:4c:7b:f2:a4:40: 53:99:64:ab:ca:55:35:6e:1a:31:51:27:55:34:b9: 62:4e:69:4a:a7:3b:29:d4:47:43:f2:62:bb:10:7b: 2f:0c:64:45:6e:d2:19:78:ac:1a:c4:1a:3c:e4:5a: b6:01:40:d8:0f:11:a2:23:ba:aa:3d:67:9c:26:dd: 4b:82:8e:94:99:ee:cf:b7:1d:17:56:5e:88:c9:bb: 83:17:d3:56:07:a0:80:75:c1:52:30:59:20:cd:df: fc:2e:2b:32:16:90:83:46:35:25:0a:5d:43:15:a2: eb:c4:80:71:15:71:0a:4e:d4:41:85:0f:e0:e2:be: 67:fa:30:ee:16:50:96:77:28:6c:e9:20:c5:d3:83: d6:bd:68:69:94:1a:75:2e:24:f0:53:56:b5:37:fe: fc:52:a2:06:1f:1b:67:d5:5b:70:62:c8:16:be:4b: c4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4B:91:FB:3C:63:B0:6A:E6:F6:CB:93:9B:C8:CC:63:3F:A5:3A:81 X509v3 Authority Key Identifier: keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:05:a2:12:46:f9:49:b9:c9:51:a3:28:a6:b7:7a:09:fb:69: 4e:a6:a9:01:a5:ac:0c:18:62:6a:70:f7:ee:d1:ab:17:25:0f: f7:14:48:0d:41:3b:20:4e:dc:01:f1:95:6b:1e:56:a8:61:22: d8:a4:26:ed:a1:64:1d:55:63:fa:d7:86:94:3d:fe:a2:52:fa: 45:ee:c3:db:77:5a:de:95:bd:15:79:f8:4f:39:3e:dd:89:b5: 14:2a:d1:13:3c:55:00:f0:3a:e6:7a:33:a2:8b:25:1e:d5:a3: eb:96:f6:b9:56:5f:73:0d:cf:aa:52:10:89:8b:0b:e6:b6:86: 1d:09:4f:23:54:ea:5f:cd:26:47:d6:36:3c:e0:9b:fd:eb:18: 75:53:43:ed:19:d6:ab:76:4a:da:4c:75:e3:de:2e:8b:1b:d4: 2d:08:d8:46:c9:a0:35:7b:f0:a8:06:43:b1:d1:65:f4:0b:61: 6f:c1:49:65:fe:bc:ae:74:c9:82:45:2a:be:09:0b:37:46:a3: bc:90:1b:a5:0b:6d:4e:67:be:2f:70:1a:17:28:74:b4:08:47: 17:28:4a:c7:dc:07:ab:e4:a7:14:52:c5:2f:e7:91:af:06:70: 3d:f2:bb:d3:15:31:b7:96:a8:b5:85:d9:da:ca:08:d9:ac:4e: 33:80:f9:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdaaZuK7WqBUTl9L13ToUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjg5NTcyYjIwMGJhNDg3OTM4MWM4NTc0Mjc0MjY1NTky YTE0YWIwHhcNMjUxMjI2MDcwMDQxWhcNMjUxMjI3MDcwMDQxWjAzMTEwLwYDVQQD Eyg4OTRiOTFmYjNjNjNiMDZhZTZmNmNiOTM5YmM4Y2M2MzNmYTUzYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZmDy/31Kvmx1NHFQvGK38nZxC39 r5rChRquB3POjk5HLJq797jqxnUWknrVXaUE4kuL46JvUzbg6KT2vCxEUzxKm/eB KwycFf3dYVsAD+XB0apVTHvypEBTmWSrylU1bhoxUSdVNLliTmlKpzsp1EdD8mK7 EHsvDGRFbtIZeKwaxBo85Fq2AUDYDxGiI7qqPWecJt1Lgo6Ume7Ptx0XVl6IybuD F9NWB6CAdcFSMFkgzd/8LisyFpCDRjUlCl1DFaLrxIBxFXEKTtRBhQ/g4r5n+jDu FlCWdyhs6SDF04PWvWhplBp1LiTwU1a1N/78UqIGHxtn1VtwYsgWvkvE+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlLkfs8Y7Bq5vbLk5vIzGM/pTqBMB8GA1UdIwQY MBaAFIFolXKyALpIeTgchXQnQmVZKhSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGIt NjI0MTU5MmE5NDRiLzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGItNjI0MTU5MmE5NDRi LzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgWiEkb5 SbnJUaMoprd6CftpTqapAaWsDBhianD37tGrFyUP9xRIDUE7IE7cAfGVax5WqGEi 2KQm7aFkHVVj+teGlD3+olL6Re7D23da3pW9FXn4Tzk+3Ym1FCrREzxVAPA65noz ooslHtWj65b2uVZfcw3PqlIQiYsL5raGHQlPI1TqX80mR9Y2POCb/esYdVND7RnW q3ZK2kx1494uixvULQjYRsmgNXvwqAZDsdFl9Athb8FJZf68rnTJgkUqvgkLN0aj vJAbpQttTme+L3AaFyh0tAhHFyhKx9wHq+SnFFLFL+eRrwZwPfK70xUxt5aotYXZ 2soI2axOM4D5nw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:35 2025 by rpki-client