This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json) Hash identifier: kBpsQtHTLoZrCQMDgGFJ5PjMdrw9ohdzzEkeaaiY0o4= Subject key identifier: AF:2C:A0:69:83:3A:A9:F4:23:84:3B:AD:7D:56:3F:04:8C:47:96:F1 Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b Certificate serial: 019AF1D24385361E208418084C816432D2A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft Manifest number: 045F Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: E6h98msuHIDDEo3EuNbedKUfRUE.roa (hash: LlRZmkIkDMo4tzcCd8AIz4o5Zg0OyytYjPKbff5wXqs=) 2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: GW76NLH/xQz6LjDxM/wYeNjBwPwYCYTL0OwpONl6ZSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:43:85:36:1e:20:84:18:08:4c:81:64:32:d2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=af2ca069833aa9f423843bad7d563f048c4796f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:5a:e8:a2:f8:3c:42:85:8a:b4:84:54:db: ee:5d:d1:65:9c:7a:0e:ac:3c:93:f4:74:12:90:3b: ea:d2:23:29:01:92:0c:00:90:14:40:a7:05:82:e1: d2:33:cd:a2:75:cc:18:4a:6c:35:ef:2c:99:e7:a2: 1a:ac:4d:21:de:86:54:c3:98:82:77:9a:77:6f:2c: 17:82:7d:ed:a4:b6:c0:bd:50:47:b6:44:95:c7:50: 81:ae:ee:45:86:41:7b:cf:27:92:54:ad:55:9d:ce: 33:30:77:ee:f7:7a:1c:fe:f2:a0:dd:cf:55:29:6b: a5:fc:62:75:33:40:6b:34:f6:c1:4a:7a:80:c9:57: cd:e5:47:f5:f0:09:88:79:6e:06:f3:6e:2d:7f:73: ec:90:7c:3a:c4:88:e6:5e:cd:7c:de:31:1c:e7:a8: 06:d1:43:e3:28:f1:0e:87:72:6c:73:47:11:c1:43: ee:18:b1:4b:29:21:73:b2:16:83:d0:ca:0d:e6:30: c8:af:71:08:dd:c9:99:15:36:19:7b:c1:ee:f6:29: 1e:1d:73:90:73:bb:36:cb:df:19:30:46:2d:83:9d: 5c:63:d1:13:3a:39:64:a8:4a:78:62:21:41:75:b5: 86:60:47:d8:ee:70:25:6f:42:34:3a:da:2c:14:63: 7d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2C:A0:69:83:3A:A9:F4:23:84:3B:AD:7D:56:3F:04:8C:47:96:F1 X509v3 Authority Key Identifier: keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ef:0c:6e:fa:d7:d0:a3:e1:cf:6c:be:7a:9a:48:8d:41:bc: 0c:55:a7:06:68:3d:df:c4:6a:d8:9f:ee:4b:68:ce:e7:64:9a: 5a:08:2e:13:f0:7c:52:2d:65:cf:62:4f:14:e5:d8:7f:b6:c9: 60:2c:a1:f4:0c:b0:32:ca:34:b9:aa:70:4f:d8:05:b3:6f:27: 95:d5:44:02:ae:7c:ac:7a:17:9d:80:83:60:3a:66:b4:7e:40: 0e:6b:c9:b9:ba:23:43:9d:bb:f8:db:67:ab:77:76:b6:95:e4: dd:ff:af:07:6a:cd:49:7a:17:68:a0:7e:3d:1c:27:c9:bd:d9: 69:f7:50:44:13:cf:cb:21:73:a1:d3:42:65:74:41:95:90:3b: 37:81:79:35:e8:a4:1a:98:8b:91:ff:cc:28:2b:08:89:c7:6d: 21:8a:7c:ef:c6:e3:26:e0:a3:a1:03:2f:b6:6b:de:08:04:d1: ab:8a:f7:01:d0:2f:a4:0a:5a:81:ec:d9:89:fc:02:f3:02:ba: 22:26:e3:f5:f5:d9:b7:b6:21:47:b1:4e:ad:2d:48:12:55:b1: d9:4e:ef:71:94:dc:19:d9:d0:3b:ca:17:36:66:70:21:42:c0: ba:6a:51:5c:50:7e:41:8d:06:67:c4:74:98:8c:c2:6e:b3:05: fb:22:d0:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kOFNh4ghBgITIFkMtKpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDdhNTIyNGFlNmQ5YTkyZTQ3ZTY1NmRkODAxYjEwZmZi OTA3MmIwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EyhhZjJjYTA2OTgzM2FhOWY0MjM4NDNiYWQ3ZDU2M2YwNDhjNDc5NmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGBa6KL4PEKFirSEVNvuXdFlnHoO rDyT9HQSkDvq0iMpAZIMAJAUQKcFguHSM82idcwYSmw17yyZ56IarE0h3oZUw5iC d5p3bywXgn3tpLbAvVBHtkSVx1CBru5FhkF7zyeSVK1Vnc4zMHfu93oc/vKg3c9V KWul/GJ1M0BrNPbBSnqAyVfN5Uf18AmIeW4G824tf3PskHw6xIjmXs183jEc56gG 0UPjKPEOh3Jsc0cRwUPuGLFLKSFzshaD0MoN5jDIr3EI3cmZFTYZe8Hu9ikeHXOQ c7s2y98ZMEYtg51cY9ETOjlkqEp4YiFBdbWGYEfY7nAlb0I0OtosFGN9NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8soGmDOqn0I4Q7rX1WPwSMR5bxMB8GA1UdIwQY MBaAFIMHpSJK5tmpLkfmVt2AGxD/uQcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUt OGJmYWNhZTQ2NGY5LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUtOGJmYWNhZTQ2NGY5 LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHe8MbvrX 0KPhz2y+eppIjUG8DFWnBmg938Rq2J/uS2jO52SaWgguE/B8Ui1lz2JPFOXYf7bJ YCyh9AywMso0uapwT9gFs28nldVEAq58rHoXnYCDYDpmtH5ADmvJubojQ527+Ntn q3d2tpXk3f+vB2rNSXoXaKB+PRwnyb3ZafdQRBPPyyFzodNCZXRBlZA7N4F5Neik GpiLkf/MKCsIicdtIYp878bjJuCjoQMvtmveCATRq4r3AdAvpApagezZifwC8wK6 Iibj9fXZt7YhR7FOrS1IElWx2U7vcZTcGdnQO8oXNmZwIULAumpRXFB+QY0GZ8R0 mIzCbrMF+yLQPw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:09 2025 by rpki-client