This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json) Hash identifier: lETilptA3UW1DamEJ2MKdAM5Cwv7o7mFoK45WJpTGIU= Subject key identifier: D8:58:1F:EA:F0:88:08:54:13:AD:27:0E:2F:FE:99:0E:7A:24:9E:AE Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e Certificate serial: 019B53E17428794AB4EAF24CC776AFD5554F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft Manifest number: 102B Signing time: Thu 25 Dec 2025 05:00:42 +0000 Manifest this update: Thu 25 Dec 2025 05:00:42 +0000 Manifest next update: Fri 26 Dec 2025 05:00:42 +0000 Files and hashes: 1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=) 2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: fWQNQWibaPDjX3kt4gvEOIwbGP8Mg76jrRpjL9vl79Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:74:28:79:4a:b4:ea:f2:4c:c7:76:af:d5:55:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e Validity Not Before: Dec 25 05:00:42 2025 GMT Not After : Dec 26 05:00:42 2025 GMT Subject: CN=d8581feaf088085413ad270e2ffe990e7a249eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:42:2d:90:2a:87:05:41:88:d6:eb:05:d0: cc:c6:36:0b:60:5c:55:4f:75:fc:50:99:99:8a:cc: 17:72:c3:1b:86:92:20:25:95:62:39:32:9e:7d:9f: dc:52:5e:7d:89:c5:28:f5:a7:55:65:29:72:de:26: 5b:97:d2:41:6a:d2:1b:76:a3:ae:2c:70:25:ad:b5: 9c:cf:da:1b:3d:f7:a5:85:6b:96:83:fd:dc:b4:fc: d5:20:60:51:70:02:e8:fa:2f:0b:a7:97:da:dd:48: c3:82:d8:a6:a5:9d:5e:0f:70:d9:e3:1e:ff:b7:17: 9b:11:48:06:67:59:a7:35:94:89:2c:c7:8a:4c:3c: 32:bf:45:8b:4b:59:34:88:7f:d1:fe:63:11:32:1b: 45:2a:08:c1:8f:31:5b:fb:27:92:5b:6e:9c:74:40: fb:d3:21:15:0e:62:b1:74:e5:b6:e6:7b:bd:ba:e4: 4f:7d:24:d0:f8:d3:ff:5e:39:0b:85:a6:c9:29:0d: 48:83:42:77:46:06:e9:b2:5d:f7:b9:51:00:76:98: 43:90:ee:e1:a1:39:8a:ce:50:cf:2e:fe:76:51:83: fe:eb:eb:b8:8a:22:2a:a8:a2:96:27:c2:0a:a5:e3: 42:f6:bc:95:84:c8:95:aa:65:bb:70:f8:33:00:fc: e1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:58:1F:EA:F0:88:08:54:13:AD:27:0E:2F:FE:99:0E:7A:24:9E:AE X509v3 Authority Key Identifier: keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:33:5e:9f:d9:37:e9:88:45:60:cf:b9:ca:5b:9b:7e:d7:98: 54:b0:63:95:b7:7c:f6:e3:1a:33:36:a2:58:3f:b9:55:df:3c: f9:9b:79:64:64:d2:00:48:5f:ed:9e:75:e2:e8:ed:af:8b:36: 9e:17:29:98:42:b9:51:de:59:5f:ed:7f:c5:44:ca:cd:78:e1: 62:30:ec:42:71:a5:ae:7a:e0:7a:39:96:2e:32:2a:df:1f:a8: 78:64:e9:be:c4:8d:b9:77:13:a8:f3:80:39:46:05:4c:a0:f5: c9:44:64:6f:be:aa:f1:e3:04:3d:d3:33:5e:31:bc:11:cb:a7: 28:5e:07:9d:87:74:8b:56:86:b9:c7:1e:35:3d:32:3a:b1:4b: e5:95:7f:0f:e8:c2:50:f8:cc:b7:15:2c:24:da:7a:68:97:40: fe:fe:32:3d:c2:04:b4:f3:66:5e:bc:be:38:7a:f3:04:08:91: 7e:2d:4e:51:4f:4d:d3:c6:e8:a6:cb:cf:43:76:70:52:31:1a: 57:c0:1a:0b:31:ec:85:66:04:61:cd:fc:6f:e5:7f:61:1f:44: 60:22:f0:d2:d0:14:a8:85:12:fa:fd:24:be:e8:e1:9e:77:e5: 11:1c:a8:1a:62:41:8f:84:fd:92:b6:b4:a6:9d:4e:54:74:e9: b8:df:c3:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4XQoeUq06vJMx3av1VVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDIzYjM5NzA1YjM0NWE4NmVmZjNmMTRlZjZiMWU0ZGI0 NTkzOWUwHhcNMjUxMjI1MDUwMDQyWhcNMjUxMjI2MDUwMDQyWjAzMTEwLwYDVQQD EyhkODU4MWZlYWYwODgwODU0MTNhZDI3MGUyZmZlOTkwZTdhMjQ5ZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSJCLZAqhwVBiNbrBdDMxjYLYFxV T3X8UJmZiswXcsMbhpIgJZViOTKefZ/cUl59icUo9adVZSly3iZbl9JBatIbdqOu LHAlrbWcz9obPfelhWuWg/3ctPzVIGBRcALo+i8Lp5fa3UjDgtimpZ1eD3DZ4x7/ txebEUgGZ1mnNZSJLMeKTDwyv0WLS1k0iH/R/mMRMhtFKgjBjzFb+yeSW26cdED7 0yEVDmKxdOW25nu9uuRPfSTQ+NP/XjkLhabJKQ1Ig0J3Rgbpsl33uVEAdphDkO7h oTmKzlDPLv52UYP+6+u4iiIqqKKWJ8IKpeNC9ryVhMiVqmW7cPgzAPzhBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhYH+rwiAhUE60nDi/+mQ56JJ6uMB8GA1UdIwQY MBaAFIMCOzlwWzRahu/z8U72seTbRZOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYt M2I4ZmJmZmY1MzQyLzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYtM2I4ZmJmZmY1MzQy LzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTNen9k3 6YhFYM+5ylubfteYVLBjlbd89uMaMzaiWD+5Vd88+Zt5ZGTSAEhf7Z514ujtr4s2 nhcpmEK5Ud5ZX+1/xUTKzXjhYjDsQnGlrnrgejmWLjIq3x+oeGTpvsSNuXcTqPOA OUYFTKD1yURkb76q8eMEPdMzXjG8EcunKF4HnYd0i1aGucceNT0yOrFL5ZV/D+jC UPjMtxUsJNp6aJdA/v4yPcIEtPNmXry+OHrzBAiRfi1OUU9N08bopsvPQ3ZwUjEa V8AaCzHshWYEYc38b+V/YR9EYCLw0tAUqIUS+v0kvujhnnflERyoGmJBj4T9kra0 pp1OVHTpuN/DdQ== -----END CERTIFICATE-----Generated at Thu Dec 25 14:20:09 2025 by rpki-client