This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft File: gwN5KJCtoro4fjmzFLdwNdX7MVs.mft (raw, json) Hash identifier: gZremdTQRrukndBcdD+lJtK0/hge9NAngJzPD7C+osI= Subject key identifier: D0:1D:CD:B2:22:6A:8A:F3:2C:A0:03:81:4D:0B:A3:D4:00:53:FB:9C Authority key identifier: 83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B Certificate issuer: /CN=8303792890ada2ba387e39b314b77035d5fb315b Certificate serial: 019AF12D443A38BD3A59247809AF69C0ED10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft Manifest number: 01CA Signing time: Sat 06 Dec 2025 01:01:06 +0000 Manifest this update: Sat 06 Dec 2025 01:01:06 +0000 Manifest next update: Sun 07 Dec 2025 01:01:06 +0000 Files and hashes: 1: 7o9ALcr1bL4UOBX6YJn0uD-9tF0.roa (hash: wGcA/CUa2AHlBIQ9Ur+ssm2xCQswNtocmJ6VYpXekNw=) 2: gwN5KJCtoro4fjmzFLdwNdX7MVs.crl (hash: Lbh4i2ehK/YvTyi++uzyTQYccpB6JFmSioPVa5EYr6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:44:3a:38:bd:3a:59:24:78:09:af:69:c0:ed:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8303792890ada2ba387e39b314b77035d5fb315b Validity Not Before: Dec 6 01:01:06 2025 GMT Not After : Dec 7 01:01:06 2025 GMT Subject: CN=d01dcdb2226a8af32ca003814d0ba3d40053fb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:8a:5e:c5:62:13:76:8b:19:72:ce:1b:22: 79:0c:d5:96:24:b5:62:5a:b2:83:f9:51:21:5d:92: fc:bb:5f:15:c0:49:65:a1:53:fd:43:d4:91:c4:7e: 47:fb:8b:b2:ca:87:5a:f8:12:c5:eb:7d:3a:70:6c: a3:39:52:27:0c:3e:2d:ec:d7:6b:f8:ff:13:8a:c8: 60:08:3a:a7:35:b0:c9:9e:76:40:47:b3:2a:90:ac: 77:b9:0f:20:b9:a3:33:8e:3e:ef:5f:98:b3:1b:de: 15:22:07:74:e5:ee:cd:63:45:67:fd:bf:32:76:5e: fe:dd:55:c7:c9:ab:58:80:20:42:c2:c1:6e:a1:e8: a3:f6:c5:a6:96:88:cb:27:10:76:bc:12:e4:cb:87: 07:51:ab:1c:a9:13:ce:ca:ae:51:ab:67:8d:97:d6: 92:82:8e:9b:bb:a9:36:ea:10:78:8c:fb:b7:e2:cb: f8:af:30:b5:71:c0:7c:33:9a:1d:08:2e:0f:a8:8b: 69:03:89:ca:ef:10:c8:c5:02:cf:df:3e:8c:7f:75: b0:41:71:28:23:36:83:a8:98:d2:77:21:dc:86:ca: 56:16:2c:88:73:9d:bb:1e:f8:1c:ae:70:28:3e:0a: 3a:4c:bd:1b:a8:f9:e0:a9:92:63:6f:fd:9e:f1:c1: 5e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1D:CD:B2:22:6A:8A:F3:2C:A0:03:81:4D:0B:A3:D4:00:53:FB:9C X509v3 Authority Key Identifier: keyid:83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ac:b9:3a:18:f8:47:68:c2:77:71:24:ad:8d:ee:60:01:5f: 6f:a0:e8:27:50:26:df:e8:91:a3:2c:5c:0f:c9:5a:aa:5f:49: 31:e9:b2:6f:0e:18:7d:c0:6f:01:02:e7:9f:93:57:9a:ba:15: dd:0e:56:a5:f4:f8:95:78:a4:2f:01:8e:8f:7b:8f:38:8a:31: 92:23:c6:73:61:33:e8:cf:b5:f3:c3:c3:f8:77:9f:00:74:a3: 22:d2:66:a2:7f:97:dc:4b:c3:90:48:77:f7:4c:42:52:0e:90: d0:32:58:02:0e:23:c9:8f:c7:77:16:db:1b:c3:ae:f1:e3:2a: b6:f5:8a:ae:c1:f3:90:29:b3:eb:9d:c8:e3:d5:29:e4:ee:dc: 91:41:25:d7:4f:69:6a:6e:90:6a:cc:aa:f0:70:d7:1f:cf:10: 87:d8:36:8e:1b:8b:94:7e:00:e9:81:00:68:de:73:5c:8d:69: 58:a3:98:70:c4:da:01:a4:3d:63:30:b3:21:ed:b9:94:27:b2: 85:34:12:0c:1f:b8:7d:e7:98:e9:a1:6a:35:21:56:87:63:f6: eb:d2:be:8e:e5:77:40:21:6b:cb:4f:a7:d1:ab:92:6d:59:2a: d4:f4:5d:2b:92:e0:da:1b:8a:a7:04:35:79:cc:71:ca:da:20: 0e:07:c7:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUQ6OL06WSR4Ca9pwO0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDM3OTI4OTBhZGEyYmEzODdlMzliMzE0Yjc3MDM1ZDVm YjMxNWIwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD EyhkMDFkY2RiMjIyNmE4YWYzMmNhMDAzODE0ZDBiYTNkNDAwNTNmYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrOKXsViE3aLGXLOGyJ5DNWWJLVi WrKD+VEhXZL8u18VwElloVP9Q9SRxH5H+4uyyoda+BLF6306cGyjOVInDD4t7Ndr +P8TishgCDqnNbDJnnZAR7MqkKx3uQ8guaMzjj7vX5izG94VIgd05e7NY0Vn/b8y dl7+3VXHyatYgCBCwsFuoeij9sWmlojLJxB2vBLky4cHUascqRPOyq5Rq2eNl9aS go6bu6k26hB4jPu34sv4rzC1ccB8M5odCC4PqItpA4nK7xDIxQLP3z6Mf3WwQXEo IzaDqJjSdyHchspWFiyIc527HvgcrnAoPgo6TL0bqPngqZJjb/2e8cFeYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAdzbIiaorzLKADgU0Lo9QAU/ucMB8GA1UdIwQY MBaAFIMDeSiQraK6OH45sxS3cDXV+zFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dONUtKQ3Rvcm80ZmptekZMZHdOZFg3TVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMTljZGMtYjViYy00MTNhLWJlZTct N2U4NDdhMzQxNDFhLzEvZ3dONUtKQ3Rvcm80ZmptekZMZHdOZFg3TVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zMTljZGMtYjViYy00MTNhLWJlZTctN2U4NDdhMzQxNDFh LzEvZ3dONUtKQ3Rvcm80ZmptekZMZHdOZFg3TVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6y5Ohj4 R2jCd3EkrY3uYAFfb6DoJ1Am3+iRoyxcD8laql9JMemybw4YfcBvAQLnn5NXmroV 3Q5WpfT4lXikLwGOj3uPOIoxkiPGc2Ez6M+188PD+HefAHSjItJmon+X3EvDkEh3 90xCUg6Q0DJYAg4jyY/HdxbbG8Ou8eMqtvWKrsHzkCmz653I49Up5O7ckUEl109p am6Qasyq8HDXH88Qh9g2jhuLlH4A6YEAaN5zXI1pWKOYcMTaAaQ9YzCzIe25lCey hTQSDB+4feeY6aFqNSFWh2P269K+juV3QCFry0+n0auSbVkq1PRdK5Lg2huKpwQ1 ecxxytogDgfHqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:16 2025 by rpki-client