This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft File: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json) Hash identifier: O0BIo4O98M/Yj6eXLqXj1XZTT/Zk0eQ7DEWy5qn6jVc= Subject key identifier: 04:1F:E3:57:7F:D8:E9:4C:52:A8:35:BA:45:AB:CB:F1:BE:41:60:8F Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94 Certificate issuer: /CN=83020637e89655e299d91843769254af07714994 Certificate serial: 019AF12CC5FCBEA8C0B04A10F0BA1CF53583 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft Manifest number: 0BC9 Signing time: Sat 06 Dec 2025 01:00:34 +0000 Manifest this update: Sat 06 Dec 2025 01:00:34 +0000 Manifest next update: Sun 07 Dec 2025 01:00:34 +0000 Files and hashes: 1: 1-R9Qf46XIEkfXqrQvwwzD2Tou7g.roa (hash: MQ5+3E8S339NrGygiORsr3A7NuJnR4bP2xWWIaK0oj4=) 2: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: JkAUBwfDPkrwQDwNdJWjWdGdb5PdTJyzC3UqUu01vPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c5:fc:be:a8:c0:b0:4a:10:f0:ba:1c:f5:35:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83020637e89655e299d91843769254af07714994 Validity Not Before: Dec 6 01:00:34 2025 GMT Not After : Dec 7 01:00:34 2025 GMT Subject: CN=041fe3577fd8e94c52a835ba45abcbf1be41608f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8d:9d:8c:de:a3:b5:bb:1e:3e:c9:c3:88:b4: e1:02:99:23:5e:4b:d0:47:be:2d:8a:d2:a4:c2:c7: c9:39:f6:36:1f:cd:99:4b:22:d9:64:61:5b:a8:81: f0:61:63:d0:a1:d0:d7:27:16:74:26:68:6b:61:13: ac:6a:44:d5:f3:66:0e:23:a7:6d:03:dd:5e:ab:05: 08:ef:5b:f0:c2:db:69:b4:3e:f0:29:b3:85:59:8e: 1b:77:bd:6f:f7:3f:a7:35:a9:c0:d7:fa:d2:36:a5: fa:fa:b2:8d:bf:ca:49:76:77:53:6e:74:84:c9:89: 44:dc:cb:13:3c:b8:e4:a2:e7:34:82:34:3a:e7:fb: b4:33:09:9f:3b:84:15:ae:c3:fc:2a:47:d8:d4:da: c7:d2:63:50:84:1c:67:16:a0:fb:c4:34:0e:4c:b0: 59:a3:e8:0a:3e:53:4e:ec:69:79:fb:44:41:54:30: 51:33:35:3c:79:1a:e1:6c:70:32:3f:98:fa:07:8a: 2b:83:61:04:ee:e8:88:94:71:d0:83:46:d9:ee:04: 08:f1:46:21:3b:bb:b8:db:34:62:2e:71:fd:cd:e3: 7c:4c:6c:c6:d9:a1:13:93:54:f6:63:7e:ea:0c:67: 39:10:53:e1:ae:85:d3:14:cb:6a:fa:c7:ef:49:df: a8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1F:E3:57:7F:D8:E9:4C:52:A8:35:BA:45:AB:CB:F1:BE:41:60:8F X509v3 Authority Key Identifier: keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:82:26:23:3d:07:2a:f4:c4:54:0b:18:42:e7:8b:25:39:df: c8:20:b4:e5:44:6f:aa:52:26:54:68:a7:0b:1e:d1:31:19:50: bd:1f:16:59:b0:09:0c:00:de:29:44:ec:d5:33:05:2f:62:96: 8a:da:02:77:5a:11:65:02:97:33:92:e9:ff:fd:1c:7c:05:c4: 8c:2f:51:da:9b:e2:35:97:e2:a2:34:2d:df:29:82:b2:e0:59: 11:d0:23:20:51:04:66:2a:f1:31:7f:50:0b:35:b0:59:c3:3e: e5:98:f0:1d:31:7d:4c:4a:97:f9:07:65:32:dd:42:53:96:d2: 92:d5:be:8f:c5:9d:88:9b:29:ee:4c:f5:e5:16:69:7d:1a:bd: 61:87:0e:d1:82:72:b4:de:6d:eb:08:8a:ac:91:a3:46:c9:17: d3:19:b9:df:a2:0c:fd:89:32:27:70:dc:71:5c:37:7c:1c:d9: 59:a9:ad:f8:6c:1b:07:8d:55:82:03:ed:52:d1:8c:59:94:92: 52:43:b4:52:f2:f0:d0:95:45:3f:3b:00:8c:4d:e4:20:2e:73: eb:5c:66:26:8f:80:98:17:c1:ec:0f:a3:a9:a9:1c:29:2c:66: 99:95:b3:64:ac:69:f4:81:5f:fe:4e:f9:5e:62:ab:c9:09:1f: 97:96:29:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMX8vqjAsEoQ8Loc9TWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDIwNjM3ZTg5NjU1ZTI5OWQ5MTg0Mzc2OTI1NGFmMDc3 MTQ5OTQwHhcNMjUxMjA2MDEwMDM0WhcNMjUxMjA3MDEwMDM0WjAzMTEwLwYDVQQD EygwNDFmZTM1NzdmZDhlOTRjNTJhODM1YmE0NWFiY2JmMWJlNDE2MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo2djN6jtbsePsnDiLThApkjXkvQ R74titKkwsfJOfY2H82ZSyLZZGFbqIHwYWPQodDXJxZ0JmhrYROsakTV82YOI6dt A91eqwUI71vwwttptD7wKbOFWY4bd71v9z+nNanA1/rSNqX6+rKNv8pJdndTbnSE yYlE3MsTPLjkouc0gjQ65/u0MwmfO4QVrsP8KkfY1NrH0mNQhBxnFqD7xDQOTLBZ o+gKPlNO7Gl5+0RBVDBRMzU8eRrhbHAyP5j6B4org2EE7uiIlHHQg0bZ7gQI8UYh O7u42zRiLnH9zeN8TGzG2aETk1T2Y37qDGc5EFPhroXTFMtq+sfvSd+oiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQf41d/2OlMUqg1ukWry/G+QWCPMB8GA1UdIwQY MBaAFIMCBjfollXimdkYQ3aSVK8HcUmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTkt YjJiZmFjM2IzMjA0LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTktYjJiZmFjM2IzMjA0 LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYImIz0H KvTEVAsYQueLJTnfyCC05URvqlImVGinCx7RMRlQvR8WWbAJDADeKUTs1TMFL2KW itoCd1oRZQKXM5Lp//0cfAXEjC9R2pviNZfiojQt3ymCsuBZEdAjIFEEZirxMX9Q CzWwWcM+5ZjwHTF9TEqX+QdlMt1CU5bSktW+j8WdiJsp7kz15RZpfRq9YYcO0YJy tN5t6wiKrJGjRskX0xm536IM/YkyJ3DccVw3fBzZWamt+GwbB41VggPtUtGMWZSS UkO0UvLw0JVFPzsAjE3kIC5z61xmJo+AmBfB7A+jqakcKSxmmZWzZKxp9IFf/k75 XmKryQkfl5YpgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:51 2025 by rpki-client