This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft File: gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft (raw, json) Hash identifier: URzmwPwnnxp+amDl3EBh3qgTPISTmJots3sFflrZMYg= Subject key identifier: CA:A4:10:B2:1B:F3:E7:F3:04:5C:27:6F:87:F8:93:70:B2:8D:57:D7 Authority key identifier: 83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77 Certificate issuer: /CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777 Certificate serial: 019AF3C048F34D35E6704140DACF70413BFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 13:00:56 +0000 Manifest this update: Sat 06 Dec 2025 13:00:56 +0000 Manifest next update: Sun 07 Dec 2025 13:00:56 +0000 Files and hashes: 1: C5Qw-UH6XV_4ro5rbdk-3jWZdWA.roa (hash: aPq4TUMBz8klCiNKwnIuLbD4QdlJvKpZ22r6ylx0Jvs=) 2: gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl (hash: P8pNBSR2bzm1GwgeecqSQcB+Aw+1S+0txYPJ3WATztg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:48:f3:4d:35:e6:70:41:40:da:cf:70:41:3b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777 Validity Not Before: Dec 6 13:00:56 2025 GMT Not After : Dec 7 13:00:56 2025 GMT Subject: CN=caa410b21bf3e7f3045c276f87f89370b28d57d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:24:50:ab:89:0d:b1:12:6c:11:87:02:45: 78:30:69:d5:39:1c:16:31:bd:5a:3c:5d:db:5d:dd: 49:f3:47:10:a9:78:f6:da:66:00:bb:64:31:5e:74: 85:89:30:28:2d:6b:c5:b3:33:36:8a:a5:a9:c2:84: 86:31:31:77:22:86:c0:81:96:5b:fb:9f:93:9e:49: cd:3f:11:72:b4:21:3d:98:ad:05:c3:5c:f7:5c:54: b3:9d:58:33:69:4e:d6:7a:e2:b3:e8:ad:ff:68:80: 38:57:7e:b8:3d:76:71:ed:ea:c7:82:dc:33:2a:ea: 4d:cd:a4:35:db:a2:ec:96:e4:b9:ee:e7:0f:43:78: be:bb:be:80:dd:ae:01:70:d5:c2:5d:a7:fa:2e:ad: 55:f6:7a:dd:63:3f:27:85:1f:4c:a7:13:84:5f:06: 4b:79:33:dd:10:a2:58:fd:d4:5c:91:97:64:04:2d: 44:d5:3e:e2:6f:f4:5e:75:6a:2b:dc:fc:c7:b4:6b: 2b:c3:1b:ca:44:e2:bf:32:51:be:f1:80:2d:8e:7f: f9:ea:90:e3:38:76:b7:d1:72:e5:22:5b:77:30:fb: 1b:7d:e4:1c:de:69:29:a1:37:ba:18:84:c0:77:11: d9:95:47:59:ab:f6:61:23:85:0b:32:6b:bb:3e:3d: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A4:10:B2:1B:F3:E7:F3:04:5C:27:6F:87:F8:93:70:B2:8D:57:D7 X509v3 Authority Key Identifier: keyid:83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b2:76:ac:3d:52:bb:af:57:f3:3b:86:5a:3d:95:49:ed:fb: d0:e5:f2:ed:9d:c2:1d:d3:6d:5b:25:79:38:30:60:d8:46:72: 99:0d:cb:71:ff:2d:1a:29:43:86:48:30:67:fd:27:e6:8a:34: 3c:eb:8c:72:0f:82:7f:bb:34:25:c9:19:ea:68:3a:ca:6f:67: 94:cd:3b:34:db:de:ad:cf:1a:f4:82:01:c0:64:fc:95:0a:13: 95:c4:21:dc:7f:02:e3:b2:61:41:12:00:96:f8:60:06:0f:ef: da:84:57:fa:ae:e3:bc:57:8e:89:22:99:13:a6:40:ba:1d:a0: 23:9f:bf:a5:59:65:6d:65:b5:e2:40:7b:5b:bd:30:a4:cb:f0: 99:19:c1:02:e9:e6:20:79:96:2b:ab:e2:46:08:c0:49:8f:ed: 15:b7:17:f0:c7:32:96:1e:24:8c:1c:b6:ee:69:07:06:12:4b: 02:97:ce:eb:6e:68:cf:d2:25:cf:0a:9b:44:2b:fa:4f:38:74: 11:a5:fc:4c:00:5c:18:28:6e:67:67:36:ed:10:c5:ba:90:5c: 0b:6d:67:42:5e:18:6f:3f:55:30:2d:0e:1d:2d:7f:8a:44:fd: e6:29:95:28:1e:82:13:67:a2:1f:36:41:6e:35:07:21:9f:f4: 40:5b:2d:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEjzTTXmcEFA2s9wQTv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDc2ZjNhYjNlZmFhNjMyOGYwYTM4ZmNmNGE3Zjk2MzAw NGI3NzcwHhcNMjUxMjA2MTMwMDU2WhcNMjUxMjA3MTMwMDU2WjAzMTEwLwYDVQQD EyhjYWE0MTBiMjFiZjNlN2YzMDQ1YzI3NmY4N2Y4OTM3MGIyOGQ1N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqMkUKuJDbESbBGHAkV4MGnVORwW Mb1aPF3bXd1J80cQqXj22mYAu2QxXnSFiTAoLWvFszM2iqWpwoSGMTF3IobAgZZb +5+TnknNPxFytCE9mK0Fw1z3XFSznVgzaU7WeuKz6K3/aIA4V364PXZx7erHgtwz KupNzaQ126LsluS57ucPQ3i+u76A3a4BcNXCXaf6Lq1V9nrdYz8nhR9MpxOEXwZL eTPdEKJY/dRckZdkBC1E1T7ib/RedWor3PzHtGsrwxvKROK/MlG+8YAtjn/56pDj OHa30XLlIlt3MPsbfeQc3mkpoTe6GITAdxHZlUdZq/ZhI4ULMmu7Pj0eNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqkELIb8+fzBFwnb4f4k3CyjVfXMB8GA1UdIwQY MBaAFIMHbzqz76pjKPCjj89Kf5YwBLd3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iODhlMGMtMjRjZi00ZmVjLWIxMTgt OWE2ZGYzOTU5MmM3LzEvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iODhlMGMtMjRjZi00ZmVjLWIxMTgtOWE2ZGYzOTU5MmM3 LzEvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7J2rD1S u69X8zuGWj2VSe370OXy7Z3CHdNtWyV5ODBg2EZymQ3Lcf8tGilDhkgwZ/0n5oo0 POuMcg+Cf7s0JckZ6mg6ym9nlM07NNverc8a9IIBwGT8lQoTlcQh3H8C47JhQRIA lvhgBg/v2oRX+q7jvFeOiSKZE6ZAuh2gI5+/pVllbWW14kB7W70wpMvwmRnBAunm IHmWK6viRgjASY/tFbcX8Mcylh4kjBy27mkHBhJLApfO625oz9IlzwqbRCv6Tzh0 EaX8TABcGChuZ2c27RDFupBcC21nQl4Ybz9VMC0OHS1/ikT95imVKB6CE2eiHzZB bjUHIZ/0QFstSw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:45:02 2025 by rpki-client