This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft File: GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json) Hash identifier: 7rGMO8uUnSXJahxlnabo6VTD+/RfX5NtH3142pqksLw= Subject key identifier: D8:E8:D7:4F:96:8F:6D:98:1F:F6:A4:2B:A5:85:93:BE:90:55:6A:A6 Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8 Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8 Certificate serial: 019AF088CCABED6442268142D34109AB1057 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft Manifest number: 0F26 Signing time: Fri 05 Dec 2025 22:01:28 +0000 Manifest this update: Fri 05 Dec 2025 22:01:28 +0000 Manifest next update: Sat 06 Dec 2025 22:01:28 +0000 Files and hashes: 1: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: gW2PD9lmAMPxoXi0sVDulRe1jRbKfHLWi+ROAT8dsvk=) 2: UJ4olMWApP7MwaE2AnHAAWvvURE.roa (hash: j8yhG+CkxtZBOA9heOK1DNmQYHzy/3/vJayn7f/Unnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:cc:ab:ed:64:42:26:81:42:d3:41:09:ab:10:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8 Validity Not Before: Dec 5 22:01:28 2025 GMT Not After : Dec 6 22:01:28 2025 GMT Subject: CN=d8e8d74f968f6d981ff6a42ba58593be90556aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:da:cb:83:33:4d:83:e0:58:ef:c4:7c:c8: 6a:da:d0:bc:55:4e:eb:de:ff:fb:64:7a:38:72:c6: 48:62:1d:ab:51:dc:ab:a8:73:e4:45:53:76:d4:a9: a1:23:7d:c9:00:cf:bb:6b:75:6a:f3:cd:f8:9e:9c: 7f:e5:64:54:64:c8:5e:bd:e9:9f:ce:34:95:8d:60: 7f:cc:8f:e6:86:83:3f:eb:7b:01:60:45:8b:e0:2c: 66:11:53:9f:9b:d1:1c:d7:b6:89:70:7a:ca:c8:dd: aa:32:50:23:b9:7b:7a:77:07:4e:20:ad:e1:b7:cc: d6:24:ef:ba:6b:1c:55:ed:0d:20:12:4e:bf:31:3e: 6d:15:1c:c9:e8:8d:5f:21:46:1d:16:7c:f8:f1:19: a3:b2:f0:d8:e1:69:1f:f0:79:65:31:38:64:c1:cf: 59:78:e8:40:89:9b:b8:91:0b:f5:d6:94:05:82:ab: 3a:70:e7:80:69:72:52:da:21:02:85:9c:9d:f7:a7: 07:5d:de:82:bc:07:76:31:06:9b:d9:50:e2:7a:94: 07:8b:1d:8a:e5:c2:13:20:01:70:70:b8:f6:f1:a4: 3e:8b:81:d6:1e:fb:1d:ad:ca:55:c8:b6:66:4b:aa: 5b:44:a8:81:f8:ca:b1:72:bc:5f:ca:ec:3b:0d:74: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E8:D7:4F:96:8F:6D:98:1F:F6:A4:2B:A5:85:93:BE:90:55:6A:A6 X509v3 Authority Key Identifier: keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ef:88:4a:a8:42:5d:56:82:25:f4:36:d6:09:4f:18:e9:50: e8:21:69:c5:a0:f8:4a:f5:a1:df:12:43:2c:b3:7f:01:50:b6: 1c:38:8a:35:28:b5:a8:44:c4:bd:09:9f:f9:d1:b2:76:33:5a: da:27:58:04:92:80:2d:f5:db:99:c4:22:c3:9e:bc:e1:60:2e: 3c:33:31:61:77:a5:8e:67:00:63:c9:65:85:f6:13:8b:ea:b6: 2b:f9:70:24:6f:81:c8:47:31:12:8e:72:f6:f7:fa:05:76:0a: 74:cc:76:82:fe:bb:0c:15:ff:c1:a3:fe:de:80:5f:a0:36:1f: a4:f6:f8:40:4d:9a:a9:00:44:f6:02:51:0b:6f:c9:c1:cd:38: a6:79:92:d3:60:d9:d8:50:d7:32:8c:53:6b:95:31:32:6f:53: b7:f6:09:ef:ce:e0:0e:f7:25:3f:ff:9e:86:c5:2d:08:0f:94: 41:80:72:29:ac:b2:80:ed:0f:86:4c:78:a0:98:07:11:38:51: db:a8:6e:03:ce:c0:77:3b:e3:a6:3c:9a:72:dd:52:81:c7:b9: 00:b9:9c:a4:25:4a:e7:8b:72:37:c7:14:4e:c9:0e:57:a2:6f: 10:ce:4c:da:38:8c:2a:be:a5:46:fb:d2:85:ea:18:90:95:65: d3:45:f5:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMyr7WRCJoFC00EJqxBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZGMwMDkzYzVhZjg5NGNmNTIwYjU5MzZlMzBiMjE1MDkw ZGU5ZjgwHhcNMjUxMjA1MjIwMTI4WhcNMjUxMjA2MjIwMTI4WjAzMTEwLwYDVQQD EyhkOGU4ZDc0Zjk2OGY2ZDk4MWZmNmE0MmJhNTg1OTNiZTkwNTU2YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstXay4MzTYPgWO/EfMhq2tC8VU7r 3v/7ZHo4csZIYh2rUdyrqHPkRVN21KmhI33JAM+7a3Vq8834npx/5WRUZMhevemf zjSVjWB/zI/mhoM/63sBYEWL4CxmEVOfm9Ec17aJcHrKyN2qMlAjuXt6dwdOIK3h t8zWJO+6axxV7Q0gEk6/MT5tFRzJ6I1fIUYdFnz48RmjsvDY4Wkf8HllMThkwc9Z eOhAiZu4kQv11pQFgqs6cOeAaXJS2iEChZyd96cHXd6CvAd2MQab2VDiepQHix2K 5cITIAFwcLj28aQ+i4HWHvsdrcpVyLZmS6pbRKiB+Mqxcrxfyuw7DXSchQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjo10+Wj22YH/akK6WFk76QVWqmMB8GA1UdIwQY MBaAFBrcAJPFr4lM9SC1k24wshUJDen4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUt ZjU5NDhjNzE2ZTE2LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC82YjYwZWQtMGM0Ni00ODczLTkxZmUtZjU5NDhjNzE2ZTE2 LzEvR3R3QWs4V3ZpVXoxSUxXVGJqQ3lGUWtONmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc++ISqhC XVaCJfQ21glPGOlQ6CFpxaD4SvWh3xJDLLN/AVC2HDiKNSi1qETEvQmf+dGydjNa 2idYBJKALfXbmcQiw5684WAuPDMxYXeljmcAY8llhfYTi+q2K/lwJG+ByEcxEo5y 9vf6BXYKdMx2gv67DBX/waP+3oBfoDYfpPb4QE2aqQBE9gJRC2/Jwc04pnmS02DZ 2FDXMoxTa5UxMm9Tt/YJ787gDvclP/+ehsUtCA+UQYByKayygO0Phkx4oJgHEThR 26huA87Adzvjpjyact1Sgce5ALmcpCVK54tyN8cUTskOV6JvEM5M2jiMKr6lRvvS heoYkJVl00X1gw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:16 2025 by rpki-client