This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft File: GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json) Hash identifier: jw142gY0vJJm8TrigrdfUzS7xPcNmwH+elbPcp0cJdQ= Subject key identifier: 84:37:31:78:14:71:16:D6:73:76:83:03:A8:27:16:53:5D:0E:A5:0F Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95 Certificate issuer: /CN=196464549c0791bcb661177f97aedcf39d54c395 Certificate serial: 019AF2772B785789318EAA3985F3A529C0D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 07:01:27 +0000 Manifest this update: Sat 06 Dec 2025 07:01:27 +0000 Manifest next update: Sun 07 Dec 2025 07:01:27 +0000 Files and hashes: 1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: gKLrEFv/o3tuX5aGnTNaM7zBJburRr3B0xK9NDpokW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2b:78:57:89:31:8e:aa:39:85:f3:a5:29:c0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395 Validity Not Before: Dec 6 07:01:27 2025 GMT Not After : Dec 7 07:01:27 2025 GMT Subject: CN=84373178147116d673768303a82716535d0ea50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:12:d3:11:0e:a3:be:89:eb:e7:5c:e4:6f: ee:d0:e9:36:a1:4f:ea:8a:40:d0:3d:e4:2e:87:ff: 8f:73:d3:8e:22:95:5c:ff:91:59:61:30:ee:a3:1a: c0:01:b7:de:5f:40:ae:27:5a:ab:2c:4c:a8:df:24: f3:3d:e3:61:5a:91:d4:30:73:05:dc:36:df:10:a1: ed:38:1b:dd:f0:3b:f1:3d:bc:9b:0a:53:4e:36:89: 94:7b:07:a1:13:fe:c1:49:06:10:62:8b:06:c5:c0: e6:68:32:37:58:6e:cb:99:42:2a:97:34:9a:62:54: 88:5d:87:53:ee:84:50:5f:64:82:e2:1f:6f:bc:3f: 8a:c4:c6:83:c0:dc:3d:7e:a2:48:4a:bd:f1:80:bb: e9:e1:58:4c:9d:57:fe:f0:a0:4b:62:42:aa:08:5d: 2e:1a:f8:cd:50:f1:0d:f3:e0:7e:79:7c:46:81:26: 91:1b:de:27:b5:c4:0c:05:4c:2c:24:8a:2a:ab:66: 05:3a:70:09:ae:62:79:f0:f7:96:a8:ff:1f:36:92: d0:09:7a:bf:36:9b:15:bf:dc:c9:2f:bc:71:fb:66: c4:07:06:f5:e3:f1:89:77:b4:d9:42:4d:ce:ee:9b: b1:aa:29:4b:07:94:81:92:2b:e7:39:13:0d:46:23: 68:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:37:31:78:14:71:16:D6:73:76:83:03:A8:27:16:53:5D:0E:A5:0F X509v3 Authority Key Identifier: keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0a:6f:34:71:1b:54:08:38:8c:25:e2:4f:01:74:b4:79:92: 63:2a:3e:3c:f6:5a:a4:02:12:ac:c2:6a:74:d3:57:d5:51:b5: c0:fa:ae:12:54:ad:61:52:ca:c7:4a:7d:69:37:2a:fd:c3:93: 41:b4:35:70:90:81:d0:1e:c9:8a:0c:99:cb:c7:ee:3e:48:87: a7:1d:41:fc:66:4d:7b:62:0e:82:22:fd:8b:7c:d7:96:7c:c7: 96:68:bd:cc:3b:31:ce:ce:4f:07:f4:02:74:74:4c:dd:c6:78: a6:88:26:75:f8:fc:b1:c9:79:b6:60:dd:06:05:de:12:e8:fc: 91:c9:0a:60:63:c6:74:77:2f:c6:c7:cf:c7:85:aa:3a:06:41: ae:e8:5a:56:1f:92:31:00:fd:45:2f:7c:0f:4f:ac:81:e9:f9: 8e:8b:71:87:58:00:84:c3:55:56:4a:17:72:c0:62:2e:9e:9d: 85:4b:2f:a7:c7:7b:db:67:fa:7e:1f:fd:d2:a1:30:a8:bf:fc: b6:b7:f8:88:97:27:2e:54:69:63:8d:f0:ab:01:e4:eb:eb:f3: 2a:26:f5:c2:44:76:d8:27:40:13:49:43:d1:67:dd:d1:56:5b: 44:cc:16:94:4e:38:59:89:aa:29:36:d8:53:fa:a7:de:52:c6: 91:96:32:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyt4V4kxjqo5hfOlKcDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjQ2NDU0OWMwNzkxYmNiNjYxMTc3Zjk3YWVkY2YzOWQ1 NGMzOTUwHhcNMjUxMjA2MDcwMTI3WhcNMjUxMjA3MDcwMTI3WjAzMTEwLwYDVQQD Eyg4NDM3MzE3ODE0NzExNmQ2NzM3NjgzMDNhODI3MTY1MzVkMGVhNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTQS0xEOo76J6+dc5G/u0Ok2oU/q ikDQPeQuh/+Pc9OOIpVc/5FZYTDuoxrAAbfeX0CuJ1qrLEyo3yTzPeNhWpHUMHMF 3DbfEKHtOBvd8DvxPbybClNONomUewehE/7BSQYQYosGxcDmaDI3WG7LmUIqlzSa YlSIXYdT7oRQX2SC4h9vvD+KxMaDwNw9fqJISr3xgLvp4VhMnVf+8KBLYkKqCF0u GvjNUPEN8+B+eXxGgSaRG94ntcQMBUwsJIoqq2YFOnAJrmJ58PeWqP8fNpLQCXq/ NpsVv9zJL7xx+2bEBwb14/GJd7TZQk3O7puxqilLB5SBkivnORMNRiNoHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQ3MXgUcRbWc3aDA6gnFlNdDqUPMB8GA1UdIwQY MBaAFBlkZFScB5G8tmEXf5eu3POdVMOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dSa1ZKd0hrYnkyWVJkX2w2N2M4NTFVdzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZjllYTYtZmI2Yi00MTEzLTgwMDUt NDc1YjI5ZDEyODZhLzEvR1dSa1ZKd0hrYnkyWVJkX2w2N2M4NTFVdzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZjllYTYtZmI2Yi00MTEzLTgwMDUtNDc1YjI5ZDEyODZh LzEvR1dSa1ZKd0hrYnkyWVJkX2w2N2M4NTFVdzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwpvNHEb VAg4jCXiTwF0tHmSYyo+PPZapAISrMJqdNNX1VG1wPquElStYVLKx0p9aTcq/cOT QbQ1cJCB0B7JigyZy8fuPkiHpx1B/GZNe2IOgiL9i3zXlnzHlmi9zDsxzs5PB/QC dHRM3cZ4pogmdfj8scl5tmDdBgXeEuj8kckKYGPGdHcvxsfPx4WqOgZBruhaVh+S MQD9RS98D0+sgen5jotxh1gAhMNVVkoXcsBiLp6dhUsvp8d722f6fh/90qEwqL/8 trf4iJcnLlRpY43wqwHk6+vzKib1wkR22CdAE0lD0Wfd0VZbRMwWlE44WYmqKTbY U/qn3lLGkZYyNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:45 2025 by rpki-client