This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft File: Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json) Hash identifier: l6KYweYZCLWafaQ9I3snEmW5OwPFOlv8HKZmfLDY1Js= Subject key identifier: AE:8A:AD:32:09:CE:6D:62:3C:7C:D1:D2:EB:67:FE:B7:27:EA:22:EA Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E Certificate issuer: /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e Certificate serial: 019B5976CE1C10E88327FE4A663FDC1FF7EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft Manifest number: 08D9 Signing time: Fri 26 Dec 2025 07:01:56 +0000 Manifest this update: Fri 26 Dec 2025 07:01:56 +0000 Manifest next update: Sat 27 Dec 2025 07:01:56 +0000 Files and hashes: 1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: 97bL3/Je8rpVFZWc6Mv/5UABNRqjx3GSlK4vgQD0ud0=) 2: WB9kjcUG_eK70F_25abwXmjO6D0.roa (hash: jo9Io4lvr31QdGnhzj2S5UeQzPHc2sTqLWFX7n7f+po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:ce:1c:10:e8:83:27:fe:4a:66:3f:dc:1f:f7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e Validity Not Before: Dec 26 07:01:56 2025 GMT Not After : Dec 27 07:01:56 2025 GMT Subject: CN=ae8aad3209ce6d623c7cd1d2eb67feb727ea22ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:dc:fb:0a:95:85:ea:01:b1:78:a6:35:36: c8:3e:95:98:95:78:2e:57:92:fe:12:a2:e5:b6:c8: ae:5f:1e:a3:64:82:bc:4e:25:5d:15:eb:ee:cc:f9: d1:90:68:0e:89:67:3d:4d:d1:a2:cd:1a:f6:66:d8: e9:43:2a:a2:4c:ee:8f:62:18:8e:be:69:d6:a1:0a: 76:d4:51:f0:01:51:85:94:e2:a2:45:f1:94:04:66: 48:16:d7:71:08:99:f6:2e:33:b7:c9:e5:4b:c2:3e: 50:9b:5c:41:f0:df:8c:b2:5b:f3:e9:46:88:81:2b: be:98:1d:cd:ef:49:69:2d:9f:47:aa:5f:c8:58:85: 8f:0a:c0:c5:87:7c:bf:fa:d6:94:db:11:20:6a:4a: 98:49:b9:05:66:da:47:08:37:af:dd:13:ca:dc:09: d8:48:57:b8:95:84:08:06:05:d3:26:5a:5c:d3:1c: f8:82:22:6b:4d:70:1f:be:a0:56:07:8c:04:05:6b: f4:49:8e:dd:ba:30:85:69:d4:80:8b:31:e6:f2:ca: 4f:28:47:ab:ca:b4:49:59:8a:5a:34:6b:59:a4:29: 1f:4c:57:76:61:b6:47:9d:1d:3d:ee:07:2d:63:c8: fd:b0:1f:fc:51:77:c1:44:2f:22:13:0b:37:1e:58: 86:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8A:AD:32:09:CE:6D:62:3C:7C:D1:D2:EB:67:FE:B7:27:EA:22:EA X509v3 Authority Key Identifier: keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4c:b2:40:12:b9:28:f8:b1:1c:ee:36:a9:5e:d4:8d:fa:9d: c9:ec:4d:fc:4f:69:a1:f8:38:fe:f5:fd:1d:98:96:3d:f7:3b: 98:aa:65:d6:30:77:b0:62:9b:81:f9:0d:a2:4a:ab:27:bf:99: e0:01:b0:5e:4f:4c:d9:31:34:fd:7f:9c:1b:2a:b4:22:30:fc: 84:10:11:45:eb:e3:e3:e8:ee:dc:e4:47:ce:14:4b:1c:91:30: 24:c9:8e:de:b4:09:0c:56:a3:cd:48:ce:23:fd:c5:bf:e2:17: 7d:c1:ff:dc:f9:2a:7e:ec:ad:78:dd:e2:90:05:19:6c:82:1b: 26:13:68:7e:ef:f8:30:31:df:f4:1a:01:5f:84:95:c1:b2:e7: 9b:88:e7:21:ce:20:dc:65:68:ef:ce:37:bf:ba:d0:1f:e1:e0: e4:6c:a7:95:9c:48:18:e6:a8:36:a1:d0:b8:13:60:7a:7c:52: 2c:f6:e8:1e:f5:0b:13:f4:67:e4:7d:52:72:52:9f:29:44:7b: 3f:b1:67:71:b5:c7:1e:dd:58:89:22:26:5d:24:86:dd:4b:d7: 6b:10:04:68:3c:22:4f:da:48:eb:32:d3:cf:cd:a3:3c:bd:4d: 1e:8b:f7:19:96:b5:59:07:15:75:ec:89:4a:0d:e6:89:36:da: 19:81:27:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZds4cEOiDJ/5KZj/cH/frMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMGUxNWMxNWFlNzAzYTg5NzkwNDZhZjVkZWNjNDkzMmVk YzdmNmUwHhcNMjUxMjI2MDcwMTU2WhcNMjUxMjI3MDcwMTU2WjAzMTEwLwYDVQQD EyhhZThhYWQzMjA5Y2U2ZDYyM2M3Y2QxZDJlYjY3ZmViNzI3ZWEyMmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGjc+wqVheoBsXimNTbIPpWYlXgu V5L+EqLltsiuXx6jZIK8TiVdFevuzPnRkGgOiWc9TdGizRr2ZtjpQyqiTO6PYhiO vmnWoQp21FHwAVGFlOKiRfGUBGZIFtdxCJn2LjO3yeVLwj5Qm1xB8N+Mslvz6UaI gSu+mB3N70lpLZ9Hql/IWIWPCsDFh3y/+taU2xEgakqYSbkFZtpHCDev3RPK3AnY SFe4lYQIBgXTJlpc0xz4giJrTXAfvqBWB4wEBWv0SY7dujCFadSAizHm8spPKEer yrRJWYpaNGtZpCkfTFd2YbZHnR097gctY8j9sB/8UXfBRC8iEws3HliGGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6KrTIJzm1iPHzR0utn/rcn6iLqMB8GA1UdIwQY MBaAFBsOFcFa5wOol5BGr13sxJMu3H9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEt ZDFkNmMzZjkyZmZiLzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEtZDFkNmMzZjkyZmZi LzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkyyQBK5 KPixHO42qV7UjfqdyexN/E9pofg4/vX9HZiWPfc7mKpl1jB3sGKbgfkNokqrJ7+Z 4AGwXk9M2TE0/X+cGyq0IjD8hBARRevj4+ju3ORHzhRLHJEwJMmO3rQJDFajzUjO I/3Fv+IXfcH/3PkqfuyteN3ikAUZbIIbJhNofu/4MDHf9BoBX4SVwbLnm4jnIc4g 3GVo7843v7rQH+Hg5GynlZxIGOaoNqHQuBNgenxSLPboHvULE/Rn5H1SclKfKUR7 P7FncbXHHt1YiSImXSSG3UvXaxAEaDwiT9pI6zLTz82jPL1NHov3GZa1WQcVdeyJ Sg3miTbaGYEnzQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:16 2025 by rpki-client