This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft File: gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft (raw, json) Hash identifier: XSc9goxRkodrKab+BwgEPjtQKKP3mKvpe7EEyvtrPWQ= Subject key identifier: 25:DA:41:56:04:E3:22:E5:28:C1:F1:BA:C2:50:0E:97:D1:C9:EF:A3 Authority key identifier: 83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06 Certificate issuer: /CN=8303a4cb2384c207dd3737f0924fa08e93282d06 Certificate serial: 019AF61C2797B27A6EE925FF221C18714EE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft Manifest number: 010E Signing time: Sun 07 Dec 2025 00:00:31 +0000 Manifest this update: Sun 07 Dec 2025 00:00:31 +0000 Manifest next update: Mon 08 Dec 2025 00:00:31 +0000 Files and hashes: 1: 2iWfeMriZFi-G_hS_QOYTqRzYCk.roa (hash: 03ngKG8f9ygpR1m9XSjIdbVbs0jTiLlbaTIDCyi4ZJU=) 2: gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl (hash: UwIR+L1B8/+KwoJf27gKlP3Y4hJ/Uk1RaYqCCiZRQrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:27:97:b2:7a:6e:e9:25:ff:22:1c:18:71:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8303a4cb2384c207dd3737f0924fa08e93282d06 Validity Not Before: Dec 7 00:00:31 2025 GMT Not After : Dec 8 00:00:31 2025 GMT Subject: CN=25da415604e322e528c1f1bac2500e97d1c9efa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:d9:80:87:cc:5a:d8:99:f1:69:e8:8a:8d: f3:35:77:90:74:11:4b:29:a5:62:25:29:c7:d8:56: c2:e6:8f:5f:5c:4e:da:58:05:23:1b:05:3a:32:82: 2a:65:7c:90:7f:ff:7c:b6:dd:24:cc:7e:7c:7e:1f: 6a:52:eb:bd:b0:17:d9:25:e2:ce:7d:9d:68:ad:c9: 33:99:bf:d6:14:3f:1a:24:0c:2f:98:f0:cb:7a:b9: 83:f9:be:58:c1:9d:3b:b0:5b:7e:a8:43:91:4a:df: 39:2a:e5:d1:94:d2:61:b4:71:b9:af:31:15:aa:37: 72:30:48:67:04:71:83:02:3b:bf:c3:52:78:d8:48: 2f:aa:bd:b2:02:a8:43:43:14:39:b4:38:6f:33:4b: 28:da:33:c0:80:e7:ac:2b:70:bb:1b:2b:d3:31:00: 51:d1:34:7a:2e:2c:43:09:ab:c3:3e:d1:e8:49:8d: 37:a5:12:2d:a4:3d:cf:15:34:26:b8:f3:21:c6:5b: 76:6a:27:4b:c1:e8:92:51:43:bd:80:43:48:35:bb: 95:aa:e9:2c:ad:7c:17:f2:ec:e2:7d:fa:4c:43:1f: 10:c3:56:1e:ba:34:c0:79:d8:b8:82:ab:28:bd:15: dc:f6:5a:c5:b3:71:08:b7:7d:e4:f9:57:0f:0a:6f: 1a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DA:41:56:04:E3:22:E5:28:C1:F1:BA:C2:50:0E:97:D1:C9:EF:A3 X509v3 Authority Key Identifier: keyid:83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:12:50:b4:6e:af:61:64:6d:98:c5:3c:8a:33:0d:f8:76:dc: 4d:63:57:9a:36:62:01:2c:97:5a:7e:b8:3e:39:2f:8c:7b:38: b9:2b:ff:69:40:10:d6:fb:d6:df:0c:29:99:8f:5b:18:96:f9: c1:5d:fc:07:25:74:16:0b:a8:25:72:e9:1f:04:8b:e2:c0:a7: ef:43:51:42:4f:c7:70:ce:90:a0:ad:40:39:91:df:3d:35:22: 65:6f:58:f4:0e:ec:1b:18:49:22:35:22:2e:51:63:c8:06:fd: 6c:41:7e:81:ea:a5:3d:7f:81:f4:dc:89:d3:95:8d:a9:a4:9e: 69:4a:20:8f:2a:36:2a:a4:e9:aa:96:a9:a6:af:64:b2:7f:6f: 79:6b:d9:a8:c6:49:a8:68:62:e7:00:63:5b:b6:3f:57:3d:2a: 07:9c:b1:04:0e:58:0a:d3:2b:f8:ae:99:52:07:3c:1a:c6:b5: e7:de:84:ad:4c:49:1a:11:a2:59:6d:56:07:7a:29:f9:6b:a5: 53:89:82:e7:7a:a6:70:49:72:e2:e9:1b:b9:90:43:73:ee:86: d3:20:c1:e0:93:c6:02:a5:5a:4e:f0:ea:c9:cb:19:7f:7c:0d: ed:80:f8:26:65:23:2d:80:08:de:bb:df:3c:62:44:69:f1:40: ec:9a:16:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HCeXsnpu6SX/IhwYcU7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDNhNGNiMjM4NGMyMDdkZDM3MzdmMDkyNGZhMDhlOTMy ODJkMDYwHhcNMjUxMjA3MDAwMDMxWhcNMjUxMjA4MDAwMDMxWjAzMTEwLwYDVQQD EygyNWRhNDE1NjA0ZTMyMmU1MjhjMWYxYmFjMjUwMGU5N2QxYzllZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOjZgIfMWtiZ8Wnoio3zNXeQdBFL KaViJSnH2FbC5o9fXE7aWAUjGwU6MoIqZXyQf/98tt0kzH58fh9qUuu9sBfZJeLO fZ1orckzmb/WFD8aJAwvmPDLermD+b5YwZ07sFt+qEORSt85KuXRlNJhtHG5rzEV qjdyMEhnBHGDAju/w1J42Egvqr2yAqhDQxQ5tDhvM0so2jPAgOesK3C7GyvTMQBR 0TR6LixDCavDPtHoSY03pRItpD3PFTQmuPMhxlt2aidLweiSUUO9gENINbuVquks rXwX8uziffpMQx8Qw1YeujTAedi4gqsovRXc9lrFs3EIt33k+VcPCm8a0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXaQVYE4yLlKMHxusJQDpfRye+jMB8GA1UdIwQY MBaAFIMDpMsjhMIH3Tc38JJPoI6TKC0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dPa3l5T0V3Z2ZkTnpmd2trLWdqcE1vTFFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81NzdlYWUtM2YzZC00ZDNmLTljMDct ZjAxOWRiMmFjY2E4LzEvZ3dPa3l5T0V3Z2ZkTnpmd2trLWdqcE1vTFFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81NzdlYWUtM2YzZC00ZDNmLTljMDctZjAxOWRiMmFjY2E4 LzEvZ3dPa3l5T0V3Z2ZkTnpmd2trLWdqcE1vTFFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRJQtG6v YWRtmMU8ijMN+HbcTWNXmjZiASyXWn64PjkvjHs4uSv/aUAQ1vvW3wwpmY9bGJb5 wV38ByV0FguoJXLpHwSL4sCn70NRQk/HcM6QoK1AOZHfPTUiZW9Y9A7sGxhJIjUi LlFjyAb9bEF+geqlPX+B9NyJ05WNqaSeaUogjyo2KqTpqpappq9ksn9veWvZqMZJ qGhi5wBjW7Y/Vz0qB5yxBA5YCtMr+K6ZUgc8Gsa1596ErUxJGhGiWW1WB3op+Wul U4mC53qmcEly4ukbuZBDc+6G0yDB4JPGAqVaTvDqycsZf3wN7YD4JmUjLYAI3rvf PGJEafFA7JoWwg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:45:03 2025 by rpki-client