This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft File: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft (raw, json) Hash identifier: dhYVCebqNrsefSMjf+fWN3Xis+24oZATvXaApc+D53A= Subject key identifier: 7D:78:50:59:88:30:91:8B:F5:47:6F:43:58:A7:78:CB:81:96:AD:01 Authority key identifier: FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01 Certificate issuer: /CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01 Certificate serial: 019AF0BF9131CE27F6210C24FCE82CF42416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft Manifest number: 084B Signing time: Fri 05 Dec 2025 23:01:17 +0000 Manifest this update: Fri 05 Dec 2025 23:01:17 +0000 Manifest next update: Sat 06 Dec 2025 23:01:17 +0000 Files and hashes: 1: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl (hash: DuO4Op6Y84FmTdBq9MVRYY57gjDt1yOKEQ7Xj0g7JqQ=) 2: oYPmCSWvS8EzeEC8QLUq6x_eYrI.roa (hash: 1A9wNN6kYL22cNZ71fS4DQFjU5QHCoE6jNJ2g/Xtw44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:91:31:ce:27:f6:21:0c:24:fc:e8:2c:f4:24:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01 Validity Not Before: Dec 5 23:01:17 2025 GMT Not After : Dec 6 23:01:17 2025 GMT Subject: CN=7d7850598830918bf5476f4358a778cb8196ad01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:43:ad:dd:a5:36:da:61:f1:bd:72:08:40: 1c:8d:67:94:b6:79:93:95:2d:10:2c:75:96:be:a5: d9:ef:8a:0d:0f:59:ec:4f:fd:39:e5:28:70:f1:d3: ce:1f:1e:3f:86:4e:4b:70:b8:43:6f:ba:db:f0:02: 30:0a:43:aa:8c:b5:73:3b:9c:9d:52:d9:f0:8b:4e: 08:f4:7e:ed:fa:02:b7:a0:74:ed:a2:94:93:29:f1: 4a:e0:1f:26:4d:07:7e:51:1c:0f:4c:1b:b9:92:54: 7f:c3:ce:43:a9:15:b1:86:2f:43:fd:5f:cd:ba:07: a7:1a:3f:28:a9:14:69:bd:06:51:9b:be:27:3b:5c: 94:a5:a4:ca:33:77:47:8b:4c:c0:1e:47:1c:2b:74: c2:04:89:18:0f:7d:fb:51:67:8e:08:94:64:62:20: 35:60:30:88:18:6e:35:28:b6:96:75:32:03:d9:45: 67:ca:7d:20:cc:2f:c0:0d:00:35:f8:f8:86:3f:ce: 5e:a4:e2:f6:37:92:95:bb:6e:58:0e:28:08:45:c9: ac:f0:b8:bc:76:b6:f4:14:63:f2:d1:24:d0:be:46: f7:93:f3:cf:f0:64:e2:11:b2:06:72:16:85:67:f6: f4:0b:b7:f1:cb:b5:83:5d:ea:db:73:ea:9f:fa:43: 6a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:78:50:59:88:30:91:8B:F5:47:6F:43:58:A7:78:CB:81:96:AD:01 X509v3 Authority Key Identifier: keyid:FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:98:0f:2b:b1:27:72:48:55:35:86:db:bc:fd:32:f6:e2:86: 52:34:3f:d2:8c:0b:4b:1d:4a:eb:7f:44:6e:dd:0e:a3:9d:84: 9f:32:e6:77:78:a4:77:93:a3:c9:54:51:8d:43:a7:34:85:a1: 0c:5a:32:99:e9:96:ef:f5:a0:b5:e0:ec:ee:d7:2b:9d:04:94: c5:ec:79:e6:a3:4b:5e:c8:f5:51:8f:71:1d:97:93:8d:a0:26: 11:c6:49:dd:ca:74:ff:c8:26:e0:7e:fd:eb:a5:21:c3:43:5e: 29:1f:0a:b0:ff:29:99:63:90:6e:cf:54:d1:da:6a:74:c5:d0: 38:34:e6:a7:27:c4:8d:0b:7f:98:11:95:13:9f:ed:0e:50:aa: 0e:a8:28:08:1c:ff:79:b6:87:f1:f7:d8:1d:ab:e7:f5:74:8c: 3a:8a:7c:90:c0:d3:96:85:10:11:68:a4:2a:82:48:8a:34:2b: a3:4c:b9:22:5e:ed:1e:35:17:85:99:f3:e3:74:a9:a6:4a:ff: ab:68:06:33:eb:47:7f:47:54:fb:9b:86:a2:7c:a3:98:a9:e1: 77:dc:5f:60:df:eb:cf:26:3b:ba:2a:8f:ba:25:e6:c5:18:ec: f8:21:07:7f:b2:38:5c:b1:4a:ef:44:20:d2:c8:c3:c0:b2:e8: 3d:cf:43:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5Exzif2IQwk/Ogs9CQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMGMxNGEwYmRjMTE5ZjFlZDQ5NjIwMmQ4OWJlNGZkMjY1 OWZmMDEwHhcNMjUxMjA1MjMwMTE3WhcNMjUxMjA2MjMwMTE3WjAzMTEwLwYDVQQD Eyg3ZDc4NTA1OTg4MzA5MThiZjU0NzZmNDM1OGE3NzhjYjgxOTZhZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2BDrd2lNtph8b1yCEAcjWeUtnmT lS0QLHWWvqXZ74oND1nsT/055Shw8dPOHx4/hk5LcLhDb7rb8AIwCkOqjLVzO5yd Utnwi04I9H7t+gK3oHTtopSTKfFK4B8mTQd+URwPTBu5klR/w85DqRWxhi9D/V/N ugenGj8oqRRpvQZRm74nO1yUpaTKM3dHi0zAHkccK3TCBIkYD337UWeOCJRkYiA1 YDCIGG41KLaWdTID2UVnyn0gzC/ADQA1+PiGP85epOL2N5KVu25YDigIRcms8Li8 drb0FGPy0STQvkb3k/PP8GTiEbIGchaFZ/b0C7fxy7WDXerbc+qf+kNqzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH14UFmIMJGL9UdvQ1ineMuBlq0BMB8GA1UdIwQY MBaAFP4MFKC9wRnx7UliAtib5P0mWf8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2d3VW9MM0JHZkh0U1dJQzJKdmtfU1paX3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83MTFkMGItYzYzMS00YjZiLTg3MDAt Y2VhNjViY2U3MzI0LzEvX2d3VW9MM0JHZkh0U1dJQzJKdmtfU1paX3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83MTFkMGItYzYzMS00YjZiLTg3MDAtY2VhNjViY2U3MzI0 LzEvX2d3VW9MM0JHZkh0U1dJQzJKdmtfU1paX3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZgPK7En ckhVNYbbvP0y9uKGUjQ/0owLSx1K639Ebt0Oo52EnzLmd3ikd5OjyVRRjUOnNIWh DFoymemW7/WgteDs7tcrnQSUxex55qNLXsj1UY9xHZeTjaAmEcZJ3cp0/8gm4H79 66Uhw0NeKR8KsP8pmWOQbs9U0dpqdMXQODTmpyfEjQt/mBGVE5/tDlCqDqgoCBz/ ebaH8ffYHavn9XSMOop8kMDTloUQEWikKoJIijQro0y5Il7tHjUXhZnz43Sppkr/ q2gGM+tHf0dU+5uGonyjmKnhd9xfYN/rzyY7uiqPuiXmxRjs+CEHf7I4XLFK70Qg 0sjDwLLoPc9DPg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:37 2025 by rpki-client