This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft File: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json) Hash identifier: y0Okjnmi4BggbssfC7MQvyzo8ugiB4hlG53/qY0jbCU= Subject key identifier: F2:57:06:5B:C2:9E:4D:D2:DD:50:7E:35:2D:B1:69:6D:E2:34:2D:22 Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55 Certificate issuer: /CN=8300996c08890bd5e1e6dd0528217d28f9d09355 Certificate serial: 019AF2AD3B310FC79B21E92A94B9DB03427A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:00:30 +0000 Manifest this update: Sat 06 Dec 2025 08:00:30 +0000 Manifest next update: Sun 07 Dec 2025 08:00:30 +0000 Files and hashes: 1: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: Az1pMRT1FCLZxY6fkcoYMuQ0bNNN3ATkO+Sln7a1+Ek=) 2: rqs2jYsXIEmeZSer38OOcJGK7EU.roa (hash: m+TNUwZvlDUtkC5/TwdymkZwjEw131NWG7VhMWfXmRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:3b:31:0f:c7:9b:21:e9:2a:94:b9:db:03:42:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355 Validity Not Before: Dec 6 08:00:30 2025 GMT Not After : Dec 7 08:00:30 2025 GMT Subject: CN=f257065bc29e4dd2dd507e352db1696de2342d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ee:fd:59:09:66:6d:a8:8e:d5:45:52:a3:57: 09:0c:1f:78:1f:ad:e2:15:94:bf:1e:91:45:1c:c8: 57:eb:7d:bd:07:14:47:32:36:b8:79:4b:50:c6:a1: f3:25:96:cf:77:c6:20:af:35:dc:5a:23:59:b6:97: 19:e8:81:8e:eb:dc:ef:f5:98:f6:5e:59:cf:2b:a3: 4e:b2:6b:15:42:a8:9d:c8:f2:c9:89:5b:dc:bf:0a: 2a:5f:c7:7a:80:19:61:41:a8:de:5a:6a:02:8f:2a: ba:f5:5a:25:29:83:00:20:39:23:61:5a:ca:19:fc: 25:29:56:d2:df:fd:06:da:88:e9:7d:7f:94:3d:1c: b8:b1:d8:b2:58:5a:91:56:04:d5:2b:2e:ad:ff:51: d1:93:fd:8c:82:ec:0c:32:09:b1:3d:41:9a:2d:f5: 53:11:7f:a9:9f:fc:2e:09:f0:20:f4:3b:1a:ac:8e: fb:55:3e:3e:00:af:a3:cd:7d:33:0a:35:a9:77:66: b9:6f:3d:c9:b8:b2:40:e2:a5:1d:22:1d:f8:79:81: 00:e2:f0:90:49:93:e1:25:24:09:63:e4:85:c2:2f: cd:17:6a:03:e6:dd:dd:cf:5c:fa:25:d6:cc:f8:ef: 25:02:5b:0a:02:b3:7d:ed:20:84:a7:f3:ef:f6:9a: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:57:06:5B:C2:9E:4D:D2:DD:50:7E:35:2D:B1:69:6D:E2:34:2D:22 X509v3 Authority Key Identifier: keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7d:0b:22:a5:db:70:5f:d9:69:2f:9a:a0:70:fb:73:e9:9c: 2d:93:b6:94:36:b4:df:41:85:40:d8:45:cd:a9:42:57:09:88: 1a:fb:5e:81:d2:c0:a0:b2:de:e9:3f:58:5c:dc:ee:ce:56:0d: 6c:e0:d9:70:77:a0:cb:b2:77:e2:66:57:69:52:f1:36:25:25: ea:ef:63:2d:34:f9:e7:86:19:40:1e:ea:65:5b:43:bd:5c:6e: 45:e8:2f:09:36:e6:06:b5:71:30:d4:62:ac:f9:65:dd:c1:e9: 6d:33:0d:85:8f:7b:32:23:0c:16:95:fb:09:c3:09:a6:28:06: d4:2c:7c:59:f0:84:b1:dd:d3:b3:f2:b1:25:98:b9:40:70:27: 7a:4b:63:8d:6a:c5:35:7d:87:10:2e:84:b6:ba:cd:5a:a6:4d: e6:f7:7b:49:61:e1:39:fc:ea:d3:10:c2:58:14:7c:61:a8:ac: 21:25:0a:a7:a3:e5:24:50:00:88:cd:77:dc:d3:30:76:c4:7f: 36:8b:f1:1c:4d:e8:4a:d3:2f:dd:e2:40:9a:e6:8f:fc:e4:5b: 6e:00:c3:9e:86:c0:8e:b7:97:12:f9:8b:3e:08:fd:fe:01:7b: 99:23:c3:64:e9:17:a0:27:f8:96:13:9e:61:03:03:0a:41:70: 82:22:36:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrTsxD8ebIekqlLnbA0J6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDA5OTZjMDg4OTBiZDVlMWU2ZGQwNTI4MjE3ZDI4Zjlk MDkzNTUwHhcNMjUxMjA2MDgwMDMwWhcNMjUxMjA3MDgwMDMwWjAzMTEwLwYDVQQD EyhmMjU3MDY1YmMyOWU0ZGQyZGQ1MDdlMzUyZGIxNjk2ZGUyMzQyZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+79WQlmbaiO1UVSo1cJDB94H63i FZS/HpFFHMhX6329BxRHMja4eUtQxqHzJZbPd8YgrzXcWiNZtpcZ6IGO69zv9Zj2 XlnPK6NOsmsVQqidyPLJiVvcvwoqX8d6gBlhQajeWmoCjyq69VolKYMAIDkjYVrK GfwlKVbS3/0G2ojpfX+UPRy4sdiyWFqRVgTVKy6t/1HRk/2MguwMMgmxPUGaLfVT EX+pn/wuCfAg9DsarI77VT4+AK+jzX0zCjWpd2a5bz3JuLJA4qUdIh34eYEA4vCQ SZPhJSQJY+SFwi/NF2oD5t3dz1z6JdbM+O8lAlsKArN97SCEp/Pv9poRcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJXBlvCnk3S3VB+NS2xaW3iNC0iMB8GA1UdIwQY MBaAFIMAmWwIiQvV4ebdBSghfSj50JNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgt MmRiNjkxYjFkNGFiLzEvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgtMmRiNjkxYjFkNGFi LzEvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPX0LIqXb cF/ZaS+aoHD7c+mcLZO2lDa030GFQNhFzalCVwmIGvtegdLAoLLe6T9YXNzuzlYN bODZcHegy7J34mZXaVLxNiUl6u9jLTT554YZQB7qZVtDvVxuRegvCTbmBrVxMNRi rPll3cHpbTMNhY97MiMMFpX7CcMJpigG1Cx8WfCEsd3Ts/KxJZi5QHAnektjjWrF NX2HEC6EtrrNWqZN5vd7SWHhOfzq0xDCWBR8YaisISUKp6PlJFAAiM133NMwdsR/ NovxHE3oStMv3eJAmuaP/ORbbgDDnobAjreXEvmLPgj9/gF7mSPDZOkXoCf4lhOe YQMDCkFwgiI2Og== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:11 2025 by rpki-client