This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json) Hash identifier: 8OydA+h2T1IlKx30vdkhi8gMv7uzY+GNdiBYLTs61NI= Subject key identifier: 0A:BE:58:8A:89:9F:63:BD:FF:69:D6:8A:45:AC:38:B8:79:9B:C0:50 Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2 Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2 Certificate serial: 019AF27697B60B199F9B1050872BCD142362 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft Manifest number: 095F Signing time: Sat 06 Dec 2025 07:00:49 +0000 Manifest this update: Sat 06 Dec 2025 07:00:49 +0000 Manifest next update: Sun 07 Dec 2025 07:00:49 +0000 Files and hashes: 1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=) 2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: I2/LGnffXw/n0XYksuCozqW94JzDx81zkBOjSIlagvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:97:b6:0b:19:9f:9b:10:50:87:2b:cd:14:23:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2 Validity Not Before: Dec 6 07:00:49 2025 GMT Not After : Dec 7 07:00:49 2025 GMT Subject: CN=0abe588a899f63bdff69d68a45ac38b8799bc050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8e:0a:99:a5:20:4c:11:e7:0c:97:42:ec:14: 8a:a8:29:ea:5d:96:a8:2d:e8:41:d4:f5:d1:b5:16: 3b:43:71:10:8f:d4:73:25:e5:5a:8c:0e:6f:1b:61: 03:81:6a:fc:05:59:0e:72:ac:56:26:90:76:d1:ff: cf:57:cf:c1:7d:11:8d:da:54:5d:d6:59:88:b3:b4: a6:30:17:66:5d:72:14:6e:cf:08:2c:e0:81:5b:50: 60:43:23:62:95:57:e4:b4:c3:b8:98:e6:5a:f1:bc: 3c:4b:09:c1:c5:d9:b6:a1:e9:aa:d6:7e:fb:46:c2: 32:b6:46:3a:24:91:76:fb:c1:93:10:dd:5a:f5:1c: 8f:00:43:62:27:80:b1:b6:6a:ff:b5:1b:b9:f8:c8: 04:24:53:64:3d:b7:56:ad:e0:ef:1f:a8:d6:ec:f8: f0:c9:36:a3:ad:40:af:47:f5:fb:69:42:c0:eb:29: 7b:37:cf:ea:0c:ea:60:35:02:b8:c7:ab:40:9d:9f: 44:5a:2b:1d:4e:e3:b7:34:a1:2d:91:a0:bd:54:fc: 27:ac:c3:5f:ed:30:ff:68:b1:03:d3:88:f1:fd:6a: c2:b0:a3:9e:eb:cd:2a:6f:22:f0:b1:e1:64:b1:0a: fe:0d:54:98:9e:05:15:9f:08:4f:2a:d4:c9:92:44: db:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BE:58:8A:89:9F:63:BD:FF:69:D6:8A:45:AC:38:B8:79:9B:C0:50 X509v3 Authority Key Identifier: keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9b:49:63:be:78:f5:95:9a:b6:bc:d5:ca:9e:b5:2a:f0:72: 96:e2:8d:ba:c6:32:33:8f:c3:60:70:3b:8a:25:ab:c8:c4:21: 34:6b:5b:59:92:0f:09:31:2a:98:8e:e3:ad:24:0e:4d:dc:55: 53:b2:64:2a:fd:04:65:72:f7:89:b4:95:0c:5d:b6:c3:45:05: d9:56:8b:72:56:7d:ac:4f:53:0d:6f:48:1b:c0:02:a1:65:a1: 01:35:1f:52:b0:59:70:0c:57:5b:6c:e5:48:74:c3:20:56:f8: de:1c:ae:f0:51:e1:f8:a7:ed:19:5f:e6:b4:ab:93:26:5c:ff: 31:86:99:35:31:fa:82:4b:6c:fc:95:87:49:60:4f:d6:04:7f: b3:36:ed:ee:d9:60:b1:d0:b1:5e:27:cb:5d:ec:d0:d6:a8:4d: a4:64:95:ce:15:55:23:f0:da:04:7a:4d:7a:db:59:78:37:c0: 11:6e:c0:58:7f:09:6f:be:f6:fc:ef:3d:69:7a:93:fa:4d:ae: 63:de:e5:0a:58:56:9d:01:70:a5:ea:9c:fc:cd:9c:ef:5a:e1: 20:38:9b:73:fb:cf:4e:54:aa:85:d2:31:0a:5d:fa:2d:03:6a: cc:44:7d:a1:45:64:51:da:86:b2:2d:3d:0a:5f:2d:c0:92:8e: 8e:68:6c:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpe2CxmfmxBQhyvNFCNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDk4NDEyYzk4NGI4OWJlMzgwMTFhNzJhM2M0NzE5NzVm YzQ3YTIwHhcNMjUxMjA2MDcwMDQ5WhcNMjUxMjA3MDcwMDQ5WjAzMTEwLwYDVQQD EygwYWJlNTg4YTg5OWY2M2JkZmY2OWQ2OGE0NWFjMzhiODc5OWJjMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI4KmaUgTBHnDJdC7BSKqCnqXZao LehB1PXRtRY7Q3EQj9RzJeVajA5vG2EDgWr8BVkOcqxWJpB20f/PV8/BfRGN2lRd 1lmIs7SmMBdmXXIUbs8ILOCBW1BgQyNilVfktMO4mOZa8bw8SwnBxdm2oemq1n77 RsIytkY6JJF2+8GTEN1a9RyPAENiJ4Cxtmr/tRu5+MgEJFNkPbdWreDvH6jW7Pjw yTajrUCvR/X7aULA6yl7N8/qDOpgNQK4x6tAnZ9EWisdTuO3NKEtkaC9VPwnrMNf 7TD/aLED04jx/WrCsKOe680qbyLwseFksQr+DVSYngUVnwhPKtTJkkTbPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAq+WIqJn2O9/2nWikWsOLh5m8BQMB8GA1UdIwQY MBaAFBsJhBLJhLib44ARpyo8Rxl1/EeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYt NzBkMTMzMDZjZDFjLzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYtNzBkMTMzMDZjZDFj LzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQptJY754 9ZWatrzVyp61KvByluKNusYyM4/DYHA7iiWryMQhNGtbWZIPCTEqmI7jrSQOTdxV U7JkKv0EZXL3ibSVDF22w0UF2VaLclZ9rE9TDW9IG8ACoWWhATUfUrBZcAxXW2zl SHTDIFb43hyu8FHh+KftGV/mtKuTJlz/MYaZNTH6gkts/JWHSWBP1gR/szbt7tlg sdCxXifLXezQ1qhNpGSVzhVVI/DaBHpNettZeDfAEW7AWH8Jb772/O89aXqT+k2u Y97lClhWnQFwpeqc/M2c71rhIDibc/vPTlSqhdIxCl36LQNqzER9oUVkUdqGsi09 Cl8twJKOjmhscA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:17 2025 by rpki-client