This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft File: Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json) Hash identifier: NkfmRUrEBcvnaxef392IXpDMayk31a20Y4+w0Ocrg7E= Subject key identifier: 02:45:53:E6:5A:82:00:88:6D:9D:82:67:75:91:5F:2E:37:B0:C0:78 Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4 Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4 Certificate serial: 019B2F67D104BC2EDCBADD8091BFB94BC747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft Manifest number: 175A Signing time: Thu 18 Dec 2025 03:01:31 +0000 Manifest this update: Thu 18 Dec 2025 03:01:31 +0000 Manifest next update: Fri 19 Dec 2025 03:01:31 +0000 Files and hashes: 1: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: 3rJW6wam/JQLvnAqlwuP5Ly+/WMlTUf88H7ijk3GARM=) 2: aF_43DT8_FuRSeutyPS1ou0Qd_Y.roa (hash: RrbF82KQXt3VwJUd+EvcBbcTN6Aiglh/wvfzSoG8RZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:d1:04:bc:2e:dc:ba:dd:80:91:bf:b9:4b:c7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4 Validity Not Before: Dec 18 03:01:31 2025 GMT Not After : Dec 19 03:01:31 2025 GMT Subject: CN=024553e65a8200886d9d826775915f2e37b0c078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:50:c3:f3:3e:a4:b7:a1:42:a4:a8:91:7b: 56:a0:13:2a:71:86:01:dc:cf:53:0e:57:ed:f2:78: 07:c7:73:c9:8f:25:4c:35:7d:eb:a7:97:6a:54:b2: 0b:35:b9:89:38:f0:80:83:a7:ac:50:77:c8:1d:0d: 23:37:45:c9:e7:ec:be:df:e5:2c:ef:a7:83:d8:46: 6f:00:74:32:9e:14:7e:38:5b:39:c7:80:86:c1:f6: 20:3d:fa:05:7f:9a:fe:99:93:fb:89:33:b4:31:d1: 9c:c0:36:33:c8:e9:55:d1:cc:a7:d5:37:ac:b0:a8: 11:f3:4d:30:02:f9:09:de:2c:59:94:c0:1c:d4:94: d0:3e:b9:ca:43:12:e9:0a:4c:27:ce:ab:d6:38:df: 2b:b0:d6:e1:97:31:39:34:2a:fa:97:17:07:07:91: 20:14:a7:ef:c7:34:32:33:bd:5c:97:cf:d7:4a:e1: d9:33:bb:d8:9b:a4:35:49:ee:8e:7d:fa:9b:02:2f: 4f:75:f6:db:f6:ea:be:ef:b0:94:27:68:bf:53:98: b5:96:59:1d:f2:84:27:54:2b:da:c6:ba:48:ba:1a: 2e:2b:af:2f:58:9a:a8:b5:cc:21:7a:f7:5a:6b:b2: 3e:2e:56:bf:7a:b5:83:d6:b2:d8:b8:0c:3d:0d:84: f5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:45:53:E6:5A:82:00:88:6D:9D:82:67:75:91:5F:2E:37:B0:C0:78 X509v3 Authority Key Identifier: keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:26:a1:fe:d7:42:58:34:b4:ce:f3:bc:16:1c:ba:7f:ac:56: fd:e1:92:dc:c1:99:4b:63:a8:30:a8:d7:6e:e5:c0:31:51:71: 9c:4a:aa:64:57:4c:04:0e:9e:ce:05:d2:79:68:50:92:3b:93: 55:54:ba:a1:e5:0b:21:4e:bb:c2:fb:20:5b:fa:a8:74:5a:36: d5:91:00:d9:ef:d1:a7:21:36:ab:c2:47:00:14:78:40:65:8f: f9:ad:1e:2b:a7:9b:17:17:81:ce:33:2a:23:99:0d:55:7a:b0: 5e:ee:11:50:f9:f7:b7:12:ca:52:9b:ac:9e:f4:4f:2f:c7:65: f5:f6:21:86:7c:cc:74:e9:bb:63:5d:3d:a8:54:d5:88:d9:a1: 18:6b:cc:93:f0:7d:e8:4c:03:c5:43:eb:39:48:ef:60:29:e7: a3:9a:f6:0e:70:3d:22:1c:29:93:1d:e8:67:d2:a1:29:eb:2a: 38:ff:ce:5b:1c:96:8c:f7:39:78:52:1c:60:d2:df:37:e7:22: d2:49:2c:fa:bc:a3:5e:e6:18:5d:0f:47:7c:77:b9:54:5e:3b: c7:b6:c1:76:3b:aa:6d:23:60:95:6b:da:af:fa:cb:99:6a:92: 01:db:a9:16:3c:12:d4:be:62:97:10:85:6e:ef:61:2d:95:54: 88:60:3a:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ9EEvC7cut2Akb+5S8dHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMGJiNTFhN2I1MzJiZTRkNDRiYTYwNGFlNmUwNjNmMDYz ZjM3ZDQwHhcNMjUxMjE4MDMwMTMxWhcNMjUxMjE5MDMwMTMxWjAzMTEwLwYDVQQD EygwMjQ1NTNlNjVhODIwMDg4NmQ5ZDgyNjc3NTkxNWYyZTM3YjBjMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywhQw/M+pLehQqSokXtWoBMqcYYB 3M9TDlft8ngHx3PJjyVMNX3rp5dqVLILNbmJOPCAg6esUHfIHQ0jN0XJ5+y+3+Us 76eD2EZvAHQynhR+OFs5x4CGwfYgPfoFf5r+mZP7iTO0MdGcwDYzyOlV0cyn1Tes sKgR800wAvkJ3ixZlMAc1JTQPrnKQxLpCkwnzqvWON8rsNbhlzE5NCr6lxcHB5Eg FKfvxzQyM71cl8/XSuHZM7vYm6Q1Se6OffqbAi9Pdfbb9uq+77CUJ2i/U5i1llkd 8oQnVCvaxrpIuhouK68vWJqotcwhevdaa7I+Lla/erWD1rLYuAw9DYT1wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJFU+ZaggCIbZ2CZ3WRXy43sMB4MB8GA1UdIwQY MBaAFBsLtRp7Uyvk1EumBK5uBj8GPzfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMt ZWVjZWU4OTNjNTI3LzEvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMtZWVjZWU4OTNjNTI3 LzEvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyah/tdC WDS0zvO8Fhy6f6xW/eGS3MGZS2OoMKjXbuXAMVFxnEqqZFdMBA6ezgXSeWhQkjuT VVS6oeULIU67wvsgW/qodFo21ZEA2e/RpyE2q8JHABR4QGWP+a0eK6ebFxeBzjMq I5kNVXqwXu4RUPn3txLKUpusnvRPL8dl9fYhhnzMdOm7Y109qFTViNmhGGvMk/B9 6EwDxUPrOUjvYCnno5r2DnA9Ihwpkx3oZ9KhKesqOP/OWxyWjPc5eFIcYNLfN+ci 0kks+ryjXuYYXQ9HfHe5VF47x7bBdjuqbSNglWvar/rLmWqSAdupFjwS1L5ilxCF bu9hLZVUiGA6FA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:26:02 2025 by rpki-client