This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File: GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier: zlO1etREzo/gZmnjQj4C2c0joIyt8O0c2wh7Q00Zbu0=
Subject key identifier: 42:3B:F3:8E:B2:0A:25:B7:8B:48:A3:55:E4:05:15:EE:29:45:4A:64
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer: /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial: 019AF38A07DD96ADB4579F111B0A65FDF229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number: 0B63
Signing time: Sat 06 Dec 2025 12:01:40 +0000
Manifest this update: Sat 06 Dec 2025 12:01:40 +0000
Manifest next update: Sun 07 Dec 2025 12:01:40 +0000
Files and hashes: 1: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: pPLPBVOB3NwKXqhvMmVnK/cWcNBbebwr1R6tXRpDCvA=)
2: huPI6u_LRtdxxCntM6xWi8UILhs.roa (hash: dxaGNUPSqDMCpFu0jmftsWJq4vBwtQVy+FWsjciFptc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:8a:07:dd:96:ad:b4:57:9f:11:1b:0a:65:fd:f2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
Validity
Not Before: Dec 6 12:01:40 2025 GMT
Not After : Dec 7 12:01:40 2025 GMT
Subject: CN=423bf38eb20a25b78b48a355e40515ee29454a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:ed:db:9a:cf:35:3e:ea:55:c0:a7:ac:f4:
4e:8f:7e:09:43:73:85:23:2b:6a:10:89:bf:33:dc:
26:34:75:4c:6c:90:8c:b2:81:d5:6f:06:98:a4:1d:
2e:76:90:b1:25:5c:d4:be:3e:28:f6:da:3a:cf:6c:
c0:e4:e7:26:fe:f8:80:d2:a1:bf:97:f1:a8:f1:ac:
84:8f:b1:43:06:44:6b:18:12:3b:03:2f:c3:f8:64:
02:1d:17:c8:8e:0a:80:b4:b5:6b:17:4b:44:04:cd:
25:39:c7:e9:13:02:6f:52:b1:0f:82:84:af:78:79:
1e:d0:35:65:54:f2:ed:6c:0d:7c:ec:39:e6:89:05:
df:aa:d5:ef:23:e3:d1:1c:33:cb:9f:29:52:52:23:
f3:4a:4e:98:d5:27:59:f4:c9:77:2c:7b:92:4c:9f:
9f:fc:76:7c:3b:8f:54:7c:ad:cd:c3:d7:26:e3:92:
2a:2b:7c:88:1f:d3:e5:36:ba:5c:4c:25:44:ab:5b:
9a:f7:58:a3:27:d8:e2:9a:75:b1:91:dc:7f:90:46:
66:a9:3a:12:1a:1e:4f:5f:92:0d:c7:1a:f0:5f:ea:
13:1f:72:fb:0c:5b:81:a7:38:49:18:4c:b0:19:b5:
c1:54:9c:01:7d:c0:43:b9:ec:88:5b:38:9a:10:46:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3B:F3:8E:B2:0A:25:B7:8B:48:A3:55:E4:05:15:EE:29:45:4A:64
X509v3 Authority Key Identifier:
keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:78:8d:c5:81:cb:d2:36:94:14:0b:82:a0:b8:89:9e:8f:fa:
a9:2e:31:3a:d7:21:0f:e1:fa:c2:c8:17:2d:1e:c6:18:a8:48:
b9:a3:05:9c:91:32:62:a3:d5:20:b8:7d:8b:1e:cb:bd:72:56:
5e:c4:44:1e:d2:89:77:45:00:21:ab:17:24:59:6d:4a:be:2f:
f5:65:b8:19:ea:56:e2:a7:e2:1b:c8:d1:8f:a5:81:7c:24:ff:
be:f7:fc:be:6e:dd:e8:47:ba:d3:37:93:2f:81:32:49:82:37:
3c:15:5d:1e:56:5b:c5:48:26:f9:4c:d1:0d:d1:af:9a:20:c1:
21:f7:1c:e8:1a:7f:62:d1:b9:df:23:a6:2b:76:c4:17:e2:b0:
26:a3:f5:02:6f:9a:fa:ed:36:62:3c:df:c7:9c:5f:72:4c:14:
85:80:c9:7e:0f:39:ed:3f:67:01:fb:52:e1:07:b2:57:5c:c3:
85:75:80:4f:e8:6c:ad:d3:ed:15:28:4b:4e:4c:ce:f7:cc:6b:
c6:a0:2e:df:a6:14:92:68:df:8e:54:0e:31:04:1b:c4:27:24:
63:5d:04:5e:d2:74:f1:92:b6:b7:b7:23:1d:52:a1:ea:b9:1c:
41:8a:c1:9e:74:92:07:dd:88:34:fd:0b:be:7d:c7:f3:07:36:
63:96:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:26:52 2025 by rpki-client