This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft File: Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json) Hash identifier: E5INw5xyqQLCVvPoJtDqdpceBUEj3QAhb8TEx8hEyXA= Subject key identifier: 6B:4A:D6:7D:3A:4A:4D:D1:CE:0E:43:1E:D0:F2:B5:CE:F0:0C:0F:C2 Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4 Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4 Certificate serial: 019AF389F86CC617295A23B089D3C0140BF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft Manifest number: 173B Signing time: Sat 06 Dec 2025 12:01:36 +0000 Manifest this update: Sat 06 Dec 2025 12:01:36 +0000 Manifest next update: Sun 07 Dec 2025 12:01:36 +0000 Files and hashes: 1: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: EkXxzj4sjyEn3E1nwVZE3cagL2oB53KZD9BCX8aOu9c=) 2: aF_43DT8_FuRSeutyPS1ou0Qd_Y.roa (hash: RrbF82KQXt3VwJUd+EvcBbcTN6Aiglh/wvfzSoG8RZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f8:6c:c6:17:29:5a:23:b0:89:d3:c0:14:0b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4 Validity Not Before: Dec 6 12:01:36 2025 GMT Not After : Dec 7 12:01:36 2025 GMT Subject: CN=6b4ad67d3a4a4dd1ce0e431ed0f2b5cef00c0fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:13:c2:eb:23:83:16:9e:ab:2a:5d:27:93: 79:c9:77:fa:b7:e7:1a:78:e9:2a:a2:91:bb:5f:dc: f4:e8:7b:ef:89:68:07:76:6f:6b:de:eb:96:bf:42: 42:8d:1c:90:0c:db:65:69:5e:47:d9:18:aa:05:0f: 5b:5e:71:a9:34:e6:f1:65:3c:3e:a7:86:e7:e5:a5: 59:e0:6b:fb:3a:63:0e:83:f9:db:79:a6:53:14:ec: 80:c5:0b:cf:9c:9d:b8:08:63:43:2d:4a:8f:c2:79: 3f:5b:22:8c:a2:5b:ce:ad:32:2c:c1:35:c4:f3:83: e5:41:c5:b6:73:10:b0:ed:fd:78:dc:4c:e3:04:96: da:d3:b4:19:a5:cd:8d:1b:c7:89:73:06:89:d3:2f: 7a:10:13:1b:14:c8:01:7f:97:fe:d0:66:0f:00:a6: cc:eb:8c:42:2f:ab:90:8f:22:c3:40:d0:50:21:b3: 50:70:43:09:6a:c2:d4:47:d8:58:c5:b6:33:15:ef: ea:46:00:38:b8:8a:76:19:36:92:eb:46:da:a4:5b: 9a:62:9d:e2:fb:ce:b2:bb:76:eb:fa:f1:aa:62:c7: bf:dc:ae:c4:c5:34:06:65:9f:b0:70:6c:42:48:e9: 7c:e1:d6:ff:fd:38:0c:6e:04:2d:bf:75:f9:46:fc: 75:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4A:D6:7D:3A:4A:4D:D1:CE:0E:43:1E:D0:F2:B5:CE:F0:0C:0F:C2 X509v3 Authority Key Identifier: keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3b:b7:7c:00:02:99:20:a6:24:31:d7:66:9e:3b:be:cb:34: ad:6c:11:5e:00:74:a9:2f:59:7c:60:b6:8f:d7:4d:44:1d:52: df:01:2f:19:09:d8:3c:0b:aa:9c:18:7e:c8:4b:9b:d0:4d:9d: e1:6a:4c:ae:6d:9b:98:4a:03:ff:70:99:eb:c8:0d:ad:94:41: f2:34:64:5f:2d:be:5b:76:9f:11:ec:8c:5a:d0:f8:71:78:93: e9:ae:52:bb:93:19:f4:f1:32:9a:75:4a:0a:e2:9a:fd:19:ac: 9c:66:fe:e1:5e:d5:7d:ad:f9:28:6c:08:6a:d2:8d:e8:bc:75: f5:e4:48:42:e8:0a:e4:3c:5a:34:4c:90:52:b4:8f:bd:33:bd: 90:15:f0:b0:1b:c1:85:a9:2d:d3:c3:36:85:89:f9:d8:a1:37: 8b:b9:35:3d:d3:ad:a1:3b:aa:ab:76:a4:be:37:f8:d3:34:ec: f7:24:f9:1b:e0:ac:19:e1:37:b6:7a:4f:23:e8:c1:0f:41:d5: ca:6f:ac:09:d6:e4:9d:5c:06:68:f6:1f:eb:b5:0e:73:45:61: 88:4d:97:c8:ea:f1:9d:aa:78:7a:c3:33:c8:7d:d7:7f:dd:d6: e0:01:fd:4c:5c:da:15:c3:44:28:cd:c3:71:fd:f0:c6:91:47: 7c:b3:d0:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifhsxhcpWiOwidPAFAvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMGJiNTFhN2I1MzJiZTRkNDRiYTYwNGFlNmUwNjNmMDYz ZjM3ZDQwHhcNMjUxMjA2MTIwMTM2WhcNMjUxMjA3MTIwMTM2WjAzMTEwLwYDVQQD Eyg2YjRhZDY3ZDNhNGE0ZGQxY2UwZTQzMWVkMGYyYjVjZWYwMGMwZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ETwusjgxaeqypdJ5N5yXf6t+ca eOkqopG7X9z06HvviWgHdm9r3uuWv0JCjRyQDNtlaV5H2RiqBQ9bXnGpNObxZTw+ p4bn5aVZ4Gv7OmMOg/nbeaZTFOyAxQvPnJ24CGNDLUqPwnk/WyKMolvOrTIswTXE 84PlQcW2cxCw7f143EzjBJba07QZpc2NG8eJcwaJ0y96EBMbFMgBf5f+0GYPAKbM 64xCL6uQjyLDQNBQIbNQcEMJasLUR9hYxbYzFe/qRgA4uIp2GTaS60bapFuaYp3i +86yu3br+vGqYse/3K7ExTQGZZ+wcGxCSOl84db//TgMbgQtv3X5Rvx1ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtK1n06Sk3Rzg5DHtDytc7wDA/CMB8GA1UdIwQY MBaAFBsLtRp7Uyvk1EumBK5uBj8GPzfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMt ZWVjZWU4OTNjNTI3LzEvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMtZWVjZWU4OTNjNTI3 LzEvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzu3fAAC mSCmJDHXZp47vss0rWwRXgB0qS9ZfGC2j9dNRB1S3wEvGQnYPAuqnBh+yEub0E2d 4WpMrm2bmEoD/3CZ68gNrZRB8jRkXy2+W3afEeyMWtD4cXiT6a5Su5MZ9PEymnVK CuKa/RmsnGb+4V7Vfa35KGwIatKN6Lx19eRIQugK5DxaNEyQUrSPvTO9kBXwsBvB hakt08M2hYn52KE3i7k1PdOtoTuqq3akvjf40zTs9yT5G+CsGeE3tnpPI+jBD0HV ym+sCdbknVwGaPYf67UOc0VhiE2XyOrxnap4esMzyH3Xf93W4AH9TFzaFcNEKM3D cf3wxpFHfLPQfw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:14 2025 by rpki-client