This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft File: Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json) Hash identifier: qW92eq6F3lglIQPiF1XkhoJgEsC7v4TTUeChWhAeU0I= Subject key identifier: DD:D5:6F:E6:41:87:11:80:3A:DA:C8:54:C7:ED:70:1F:0B:DD:AE:A4 Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E Certificate issuer: /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e Certificate serial: 019AF12E2177DD4A4D21E2A6FAD3CBA79CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft Manifest number: 08A3 Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: /wbwsdmajz5SLoaqQV3U0xgAgnmTm22ha/hF80IRTME=) 2: WB9kjcUG_eK70F_25abwXmjO6D0.roa (hash: jo9Io4lvr31QdGnhzj2S5UeQzPHc2sTqLWFX7n7f+po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:21:77:dd:4a:4d:21:e2:a6:fa:d3:cb:a7:9c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=ddd56fe6418711803adac854c7ed701f0bddaea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:b3:29:c4:30:25:0c:27:30:d0:1f:ab:30: fa:56:17:da:15:18:aa:c0:11:06:5a:41:67:cb:1b: 42:ad:8d:15:d1:19:f6:7d:8f:24:43:35:5a:95:3c: 7f:86:b7:2c:4a:50:61:4a:0e:0a:c1:d2:b1:19:82: 52:4c:c9:c4:f3:18:f6:26:61:c8:6b:47:bb:fe:88: 7d:7c:2c:7a:fa:ba:21:b5:e8:78:c7:dc:3b:be:c4: 7a:c9:da:ae:64:9b:49:3c:0e:26:78:8a:7f:c8:7b: 3c:d4:29:a2:d7:02:40:6b:a5:cc:66:3c:06:d1:d6: 13:9b:50:d8:99:65:1d:63:2e:89:c6:68:6d:18:28: e0:d8:c9:26:74:7d:c9:c7:6a:5c:84:69:01:cb:e7: e4:d6:10:a4:8f:82:3e:e9:f7:13:fc:4e:cb:9a:36: 4f:6e:90:b0:81:56:b7:6c:a3:67:1b:07:22:c9:b9: 50:ad:50:63:76:e6:9b:ea:33:bf:e9:b9:11:d6:79: fc:04:87:4f:43:c9:ef:31:bb:73:c2:04:ad:0d:f3: 61:f8:f1:8d:5c:86:8c:e7:6a:ce:58:44:07:05:50: 30:77:20:f1:b7:75:dd:42:9b:5a:e0:27:b4:07:ce: d3:0d:ab:d2:28:f0:a3:a4:9c:c2:06:63:5b:1b:26: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D5:6F:E6:41:87:11:80:3A:DA:C8:54:C7:ED:70:1F:0B:DD:AE:A4 X509v3 Authority Key Identifier: keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a2:25:c5:64:7a:ad:70:7d:08:d7:b5:66:f8:3b:58:33:37: 86:34:84:6b:4d:3c:d3:2a:a0:f9:b6:b0:36:b0:f1:b2:32:9e: e7:23:50:bf:bc:65:d1:97:28:3a:7d:a0:40:4e:08:3b:9f:e8: 84:9d:6f:8f:eb:73:e0:6d:df:41:0b:13:4e:ad:6b:e1:1d:be: 38:40:01:c5:71:ec:07:81:a6:35:27:81:6b:93:95:ef:b8:df: 55:38:c0:90:82:f2:90:5c:8b:72:3b:58:67:81:1a:24:65:c4: 7f:b3:7f:4f:29:e1:84:5b:c8:aa:f9:43:05:22:5b:59:ac:35: 80:e9:03:b4:1d:7f:44:d5:87:19:05:b0:59:2d:2f:1e:01:11: 63:19:6d:7b:2d:a4:e9:0a:d7:aa:a1:27:00:c3:16:e5:37:19: 2f:80:47:0c:0c:d1:b4:d3:90:16:31:d1:39:a9:8d:a9:2a:8b: 70:7b:c9:56:d0:47:57:49:d5:8a:69:f8:c2:88:fa:c1:57:5d: a7:9d:bb:ff:87:00:e3:72:0c:0a:f7:60:3b:44:14:c5:d5:43: a4:6e:b2:4d:0b:b9:74:5f:aa:fb:8e:37:91:63:bb:88:8a:98: c6:42:5b:d1:31:66:7b:8f:e2:73:90:af:f8:9d:22:fd:57:6b: 75:6f:73:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiF33UpNIeKm+tPLp5ziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMGUxNWMxNWFlNzAzYTg5NzkwNDZhZjVkZWNjNDkzMmVk YzdmNmUwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD EyhkZGQ1NmZlNjQxODcxMTgwM2FkYWM4NTRjN2VkNzAxZjBiZGRhZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLuzKcQwJQwnMNAfqzD6VhfaFRiq wBEGWkFnyxtCrY0V0Rn2fY8kQzValTx/hrcsSlBhSg4KwdKxGYJSTMnE8xj2JmHI a0e7/oh9fCx6+rohteh4x9w7vsR6ydquZJtJPA4meIp/yHs81Cmi1wJAa6XMZjwG 0dYTm1DYmWUdYy6JxmhtGCjg2MkmdH3Jx2pchGkBy+fk1hCkj4I+6fcT/E7LmjZP bpCwgVa3bKNnGwciyblQrVBjduab6jO/6bkR1nn8BIdPQ8nvMbtzwgStDfNh+PGN XIaM52rOWEQHBVAwdyDxt3XdQpta4Ce0B87TDavSKPCjpJzCBmNbGyYAYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3Vb+ZBhxGAOtrIVMftcB8L3a6kMB8GA1UdIwQY MBaAFBsOFcFa5wOol5BGr13sxJMu3H9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEt ZDFkNmMzZjkyZmZiLzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEtZDFkNmMzZjkyZmZi LzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6IlxWR6 rXB9CNe1Zvg7WDM3hjSEa0080yqg+bawNrDxsjKe5yNQv7xl0ZcoOn2gQE4IO5/o hJ1vj+tz4G3fQQsTTq1r4R2+OEABxXHsB4GmNSeBa5OV77jfVTjAkILykFyLcjtY Z4EaJGXEf7N/TynhhFvIqvlDBSJbWaw1gOkDtB1/RNWHGQWwWS0vHgERYxltey2k 6QrXqqEnAMMW5TcZL4BHDAzRtNOQFjHROamNqSqLcHvJVtBHV0nVimn4woj6wVdd p527/4cA43IMCvdgO0QUxdVDpG6yTQu5dF+q+443kWO7iIqYxkJb0TFme4/ic5Cv +J0i/VdrdW9ziw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:14 2025 by rpki-client