This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft File: GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft (raw, json) Hash identifier: JRLZ6YsTVGgto/+4fn62xXQecSAk8OK8spHc8QinQtE= Subject key identifier: DE:2F:A8:49:16:45:6E:F2:EB:D1:11:59:B3:DB:92:34:DB:D8:C3:BD Authority key identifier: 19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0 Certificate issuer: /CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0 Certificate serial: 019AAC157DFB391E07FA3E0CBD32D2461D48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft Manifest number: 0364 Signing time: Sat 22 Nov 2025 15:01:20 +0000 Manifest this update: Sat 22 Nov 2025 15:01:20 +0000 Manifest next update: Sun 23 Nov 2025 15:01:20 +0000 Files and hashes: 1: GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl (hash: 23Lr39Z65BLf1DNd9HyR0rc/CklvNNlYkebVBmVFo2Y=) 2: SFyTfsWyq2coBx8ydbZroSS50xQ.roa (hash: ZZpymtBw1D9nPwu2cf1P4YkyaGccufHXZlJkybCGFMw=) 3: TNkzBPyNieqNtFJ7OZ5WQ2BFAFM.roa (hash: yD3hqpWrk6f2s5tXbai7Hu4KRhgeNHLLkovFRVk/JKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:15:7d:fb:39:1e:07:fa:3e:0c:bd:32:d2:46:1d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0 Validity Not Before: Nov 22 15:01:20 2025 GMT Not After : Nov 23 15:01:20 2025 GMT Subject: CN=de2fa84916456ef2ebd11159b3db9234dbd8c3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:9b:d3:ec:d0:bc:44:91:80:d5:92:2c:60: b0:67:23:ee:2b:27:a0:93:57:22:c8:2b:a9:17:76: 1c:f1:f8:62:d9:b8:19:3e:47:62:64:94:59:ba:e3: 2a:5e:e9:e3:0b:39:7c:d4:b6:02:cc:05:e5:8e:52: c7:c2:d7:91:3f:d9:12:9c:bf:b0:5c:fa:d9:a6:81: 41:2e:7c:d0:58:88:d6:08:b4:48:b5:b3:f0:63:6d: cb:64:9e:8b:7d:c5:1b:c1:3b:ad:fc:14:55:da:93: 62:0e:82:a7:cc:20:36:08:b1:68:42:9d:5a:dc:d4: 65:8f:a8:df:96:14:70:de:e0:3f:2c:35:a0:8b:af: fb:f9:1a:34:36:00:8e:09:e9:9d:31:ea:24:94:fe: 10:c7:20:b5:2a:15:1e:da:43:1c:0a:c7:b2:21:47: 1d:88:8e:3b:aa:ac:a5:87:5d:54:bd:dd:e8:ba:3a: 5e:66:e6:14:25:b4:6b:96:68:c0:94:2b:0e:db:1d: a4:1b:2c:9c:f8:6a:5a:9b:66:a4:ec:cc:bd:e6:d8: 8a:5c:a4:8c:b1:68:2f:5d:bf:25:07:03:2f:b5:ba: 5c:91:8b:43:0b:1a:9a:27:db:bf:0e:c5:96:12:33: d4:d0:77:11:2a:15:5d:88:e3:82:6a:82:60:27:29: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2F:A8:49:16:45:6E:F2:EB:D1:11:59:B3:DB:92:34:DB:D8:C3:BD X509v3 Authority Key Identifier: keyid:19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:40:01:47:bb:5c:12:41:33:e7:ad:ba:71:b0:c8:62:98:15: c3:27:16:d9:9d:73:8d:f3:0c:af:f0:ce:40:b7:a2:8c:36:32: a0:8b:b1:4f:8d:73:e9:23:ab:db:31:02:22:a7:36:c2:29:3c: 00:33:d0:89:c3:89:35:9b:fa:80:d9:3e:43:e0:1d:1d:bc:9b: b7:2f:bb:b1:6b:22:45:28:6b:ce:f5:d4:83:52:71:0e:ac:39: ec:ee:86:ca:84:16:ea:f0:0f:c7:49:09:2c:ed:f2:3f:d2:36: 65:24:36:7c:7e:22:3b:c3:4b:04:7b:2c:3d:eb:1f:73:f2:cf: 86:ff:d2:68:79:dd:d9:66:e2:c6:d8:15:3d:61:a9:e2:08:db: 9e:b2:a1:af:d6:dd:77:3b:22:6c:30:69:58:90:5f:fd:4e:01: a5:f2:c8:5f:3c:ca:7b:2c:d4:2f:7e:f8:40:0c:76:20:40:f7: e9:6b:6b:5b:16:d0:77:ab:de:c3:13:34:a4:64:d4:c3:6c:90: a0:d6:1e:91:cb:99:3a:48:5a:b8:0a:4a:ad:0d:e7:59:a6:f8: 75:d4:7d:9b:13:13:29:d4:57:64:e2:cd:73:80:19:00:01:4c: f1:a0:c1:61:22:23:da:a3:09:3c:fb:9b:df:05:fe:a6:5d:c9: fa:2e:17:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFX37OR4H+j4MvTLSRh1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjEwZDYzOGUyYTJmOTVhM2Q5MGU0Y2ZmOTk1OWE4NTlm YWM0ZjAwHhcNMjUxMTIyMTUwMTIwWhcNMjUxMTIzMTUwMTIwWjAzMTEwLwYDVQQD EyhkZTJmYTg0OTE2NDU2ZWYyZWJkMTExNTliM2RiOTIzNGRiZDhjM2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiyb0+zQvESRgNWSLGCwZyPuKyeg k1ciyCupF3Yc8fhi2bgZPkdiZJRZuuMqXunjCzl81LYCzAXljlLHwteRP9kSnL+w XPrZpoFBLnzQWIjWCLRItbPwY23LZJ6LfcUbwTut/BRV2pNiDoKnzCA2CLFoQp1a 3NRlj6jflhRw3uA/LDWgi6/7+Ro0NgCOCemdMeoklP4QxyC1KhUe2kMcCseyIUcd iI47qqylh11Uvd3oujpeZuYUJbRrlmjAlCsO2x2kGyyc+Gpam2ak7My95tiKXKSM sWgvXb8lBwMvtbpckYtDCxqaJ9u/DsWWEjPU0HcRKhVdiOOCaoJgJykOuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4vqEkWRW7y69ERWbPbkjTb2MO9MB8GA1UdIwQY MBaAFBlhDWOOKi+Vo9kOTP+ZWahZ+sTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hZTE4YWEtN2MxNS00Nzc1LThmYzUt NzcyZGNkM2FmNWY2LzEvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hZTE4YWEtN2MxNS00Nzc1LThmYzUtNzcyZGNkM2FmNWY2 LzEvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0ABR7tc EkEz5626cbDIYpgVwycW2Z1zjfMMr/DOQLeijDYyoIuxT41z6SOr2zECIqc2wik8 ADPQicOJNZv6gNk+Q+AdHbybty+7sWsiRShrzvXUg1JxDqw57O6GyoQW6vAPx0kJ LO3yP9I2ZSQ2fH4iO8NLBHssPesfc/LPhv/SaHnd2WbixtgVPWGp4gjbnrKhr9bd dzsibDBpWJBf/U4BpfLIXzzKeyzUL374QAx2IED36WtrWxbQd6vewxM0pGTUw2yQ oNYekcuZOkhauApKrQ3nWab4ddR9mxMTKdRXZOLNc4AZAAFM8aDBYSIj2qMJPPub 3wX+pl3J+i4Xyw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:40:10 2025 by rpki-client