This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json) Hash identifier: 3avnmxCPZ8dGbZ0uHEiOYwcOGxCj2N2ian/SoMa+LcU= Subject key identifier: F8:1C:AA:8D:77:83:FB:CA:CB:63:75:54:38:8F:27:23:6B:DC:3E:3C Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c Certificate serial: 019AF27704232D282E378BCAD7626321C59C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft Manifest number: 02F5 Signing time: Sat 06 Dec 2025 07:01:17 +0000 Manifest this update: Sat 06 Dec 2025 07:01:17 +0000 Manifest next update: Sun 07 Dec 2025 07:01:17 +0000 Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: //bji0ii5MeBnyJlRzpt576RExdu0+wec1PjXzW5Eok=) 2: HbzqPjxV2gzVXrBA-nWLmjfTDxo.roa (hash: cWFkMXXdUpsLxuuBafoKiMAojPQ1C+2JXUGxa/p9/qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:04:23:2d:28:2e:37:8b:ca:d7:62:63:21:c5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c Validity Not Before: Dec 6 07:01:17 2025 GMT Not After : Dec 7 07:01:17 2025 GMT Subject: CN=f81caa8d7783fbcacb637554388f27236bdc3e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:32:9c:b7:3d:44:ff:d9:0a:88:9e:c1:ca:60: ef:bb:2a:7c:2d:97:54:9f:ad:bb:81:9f:9d:75:3c: fc:21:16:b6:87:45:06:29:7a:94:78:d8:07:bb:73: 14:ee:41:15:e0:be:81:93:77:03:5c:0f:99:58:6b: 28:a2:f0:cb:3f:10:ed:60:8c:39:a1:6f:9e:96:de: 45:82:5b:83:a0:1a:56:d3:4c:7d:f4:90:67:93:08: 5d:f5:79:44:87:dd:8f:38:ea:3a:b9:77:1e:79:3d: fc:4b:f2:97:34:0e:27:fe:42:cf:c8:bc:72:2f:e4: eb:20:51:c8:38:9c:e7:c2:2b:90:d1:1c:e3:3f:81: 8c:8b:51:85:08:23:99:29:84:7d:08:0d:fd:4c:64: 7c:bb:cf:8e:e6:49:32:3f:95:99:47:01:51:1d:1d: 72:9b:5a:57:dd:f9:c0:1f:0b:0e:7b:96:f9:53:e2: 34:5a:be:10:f5:cf:f9:af:3a:92:25:f3:06:d6:cb: 60:4f:95:4a:34:a3:90:64:36:75:2d:82:5f:2d:7c: 63:99:8e:46:ba:fa:91:aa:e6:7b:02:fd:23:00:81: 8a:e3:c5:0d:73:38:93:e2:4e:75:3b:39:67:3a:2e: 4e:05:e2:79:fc:72:82:cb:a2:53:71:a1:fa:f2:1f: e9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1C:AA:8D:77:83:FB:CA:CB:63:75:54:38:8F:27:23:6B:DC:3E:3C X509v3 Authority Key Identifier: keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:32:78:da:53:36:8a:15:49:cc:5f:75:59:19:94:7e:04:94: 3f:cc:02:cd:3b:ff:72:35:f7:65:15:6d:ee:11:6d:63:3f:f6: 81:8f:2c:0f:6e:b3:78:93:7f:27:49:76:00:b9:de:dd:66:8c: 6d:ac:70:b7:fe:01:76:f5:9b:d9:47:25:4a:83:a7:0f:f5:58: 01:f0:67:2a:ba:d6:b5:5b:82:13:5c:16:62:91:b7:58:df:09: b7:35:5e:b0:37:83:aa:1b:f9:72:4f:bd:68:ce:dd:ed:a7:67: 96:ce:8a:3d:7b:10:1a:54:71:6c:2a:ee:7a:92:ae:a8:9b:cf: 93:ba:5a:3d:26:b0:90:87:bb:77:cd:c8:98:e2:2e:b8:3c:77: 64:0f:52:3e:0a:37:68:6b:16:b6:df:32:57:3d:0e:85:f6:1e: dd:01:a4:03:17:6f:76:2a:df:c0:c1:73:2d:93:32:33:96:6a: 47:ea:58:d7:17:b4:2f:75:1b:99:8d:b6:45:64:03:ab:d2:96: 00:5a:19:19:b0:f8:3b:72:a4:ee:19:6e:29:a0:06:23:37:39: 58:93:f2:6c:6a:30:35:75:e6:e6:6f:8c:3d:31:e7:d5:14:3a: 74:21:f3:b9:df:69:e7:02:7a:d3:fa:c2:45:6a:f8:d9:3d:96: 00:22:c2:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwQjLSguN4vK12JjIcWcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjUyM2ZlMGQ2YmQ5YzY3ZTBiY2IwMDk4YTNjMzYzZjJm OTBmN2MwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD EyhmODFjYWE4ZDc3ODNmYmNhY2I2Mzc1NTQzODhmMjcyMzZiZGMzZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTKctz1E/9kKiJ7BymDvuyp8LZdU n627gZ+ddTz8IRa2h0UGKXqUeNgHu3MU7kEV4L6Bk3cDXA+ZWGsoovDLPxDtYIw5 oW+elt5FgluDoBpW00x99JBnkwhd9XlEh92POOo6uXceeT38S/KXNA4n/kLPyLxy L+TrIFHIOJznwiuQ0RzjP4GMi1GFCCOZKYR9CA39TGR8u8+O5kkyP5WZRwFRHR1y m1pX3fnAHwsOe5b5U+I0Wr4Q9c/5rzqSJfMG1stgT5VKNKOQZDZ1LYJfLXxjmY5G uvqRquZ7Av0jAIGK48UNcziT4k51OzlnOi5OBeJ5/HKCy6JTcaH68h/pawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgcqo13g/vKy2N1VDiPJyNr3D48MB8GA1UdIwQY MBaAFBllI/4Na9nGfgvLAJijw2Py+Q98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAt ZGU4MzU0NThkYThkLzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAtZGU4MzU0NThkYThk LzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzJ42lM2 ihVJzF91WRmUfgSUP8wCzTv/cjX3ZRVt7hFtYz/2gY8sD26zeJN/J0l2ALne3WaM baxwt/4BdvWb2UclSoOnD/VYAfBnKrrWtVuCE1wWYpG3WN8JtzVesDeDqhv5ck+9 aM7d7adnls6KPXsQGlRxbCruepKuqJvPk7paPSawkIe7d83ImOIuuDx3ZA9SPgo3 aGsWtt8yVz0OhfYe3QGkAxdvdirfwMFzLZMyM5ZqR+pY1xe0L3UbmY22RWQDq9KW AFoZGbD4O3Kk7hluKaAGIzc5WJPybGowNXXm5m+MPTHn1RQ6dCHzud9p5wJ60/rC RWr42T2WACLC1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:36 2025 by rpki-client