This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json) Hash identifier: Ud2ilK6TBKGx/Nc7paj0AwtdD1zSwxlQJqjIENHWctA= Subject key identifier: 9B:CC:D5:48:1A:1B:2B:52:67:74:28:64:49:3C:8A:A5:01:A1:15:85 Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e Certificate serial: 019B3CB4A4354B3C94ECCCC3C34143785DB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft Manifest number: 101F Signing time: Sat 20 Dec 2025 17:00:29 +0000 Manifest this update: Sat 20 Dec 2025 17:00:29 +0000 Manifest next update: Sun 21 Dec 2025 17:00:29 +0000 Files and hashes: 1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=) 2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: 602HI+kEikm9Z/HhymmcGI+j2t7S20CYobJXZ1XL0pU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:a4:35:4b:3c:94:ec:cc:c3:c3:41:43:78:5d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e Validity Not Before: Dec 20 17:00:29 2025 GMT Not After : Dec 21 17:00:29 2025 GMT Subject: CN=9bccd5481a1b2b5267742864493c8aa501a11585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:af:c9:51:84:9c:d7:24:15:ad:b2:08:0e: 75:4b:a0:5c:9e:22:04:e6:ee:fe:8f:42:f9:3c:3c: 1d:a9:ed:0d:6e:f3:8a:44:ee:7e:27:d4:d8:b0:cb: 09:37:5f:7d:be:2d:97:c3:90:77:69:52:70:b7:94: 27:8c:77:aa:75:68:8e:ff:01:12:82:5c:b1:01:98: a2:bd:05:c9:6d:dc:c5:a2:5e:88:b2:06:ff:a5:43: 91:0c:10:2f:2f:a9:df:85:4f:f9:79:35:b4:01:dd: 4d:2b:ec:23:22:08:e2:38:ae:02:30:7f:e0:01:b0: 7a:b6:6b:15:b0:84:cb:ae:33:fe:30:8d:bc:b5:0e: 79:ba:c5:88:89:a4:11:8f:76:73:a5:69:70:b1:2f: 30:91:a5:62:e3:57:06:ff:b4:d0:ba:1d:f1:ed:0b: a1:35:3b:a9:2d:22:a1:2f:07:1b:e3:b8:c8:77:c2: 58:f9:14:8e:48:a9:19:67:c1:aa:ba:a0:b1:45:89: 24:58:84:85:a5:f4:ee:a7:ff:59:9a:e1:fb:36:35: 50:34:0a:d5:c5:fd:73:8a:f6:70:54:ef:db:46:bd: 36:75:07:ff:78:77:26:e2:6a:0c:61:f6:62:b5:4c: df:d4:1c:62:fd:37:9e:12:c1:02:68:ca:89:56:56: 49:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CC:D5:48:1A:1B:2B:52:67:74:28:64:49:3C:8A:A5:01:A1:15:85 X509v3 Authority Key Identifier: keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:01:a1:55:27:00:9f:3f:bb:8b:9b:d1:e4:3b:88:cc:c9:bf: 6c:6f:4c:32:03:23:8d:73:69:a1:de:5f:89:83:2f:04:68:80: 37:62:a9:78:0f:de:5a:75:58:93:da:c3:57:ea:28:46:ab:df: 09:87:e4:7f:6a:5b:03:db:48:7f:d8:2f:8c:da:5d:0a:be:a1: c1:9a:9a:03:de:01:1b:8a:c8:b9:94:96:ef:da:de:cc:b7:5b: 82:4b:de:75:55:fa:e2:eb:b4:cb:85:32:95:bf:e9:0c:cb:d6: 29:99:94:1a:bd:f4:eb:be:00:1e:42:20:59:fd:4d:b9:15:ab: 96:ac:c4:97:a8:e5:c3:7b:cd:c3:1b:80:68:a8:a3:bb:44:b0: d3:93:10:91:da:d8:57:d1:22:60:42:8d:4b:1e:2e:6c:e8:93: c6:58:68:8c:af:d1:67:7a:7d:0d:6d:59:5a:f2:1b:76:0c:4f: b6:45:54:10:88:9b:aa:85:c0:d5:11:34:9d:7d:cb:a4:f8:c2: 9e:97:5e:a5:dc:1b:11:65:5b:6e:57:41:6c:f9:4e:1b:00:f5: 3a:f2:4a:4e:b5:48:02:c4:fb:a2:76:cd:ec:03:9a:f2:86:40: 42:15:b1:ef:25:34:1d:1b:c0:7d:45:bf:28:5c:52:94:b9:c4: 7a:d4:d1:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tKQ1SzyU7MzDw0FDeF24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDIzYjM5NzA1YjM0NWE4NmVmZjNmMTRlZjZiMWU0ZGI0 NTkzOWUwHhcNMjUxMjIwMTcwMDI5WhcNMjUxMjIxMTcwMDI5WjAzMTEwLwYDVQQD Eyg5YmNjZDU0ODFhMWIyYjUyNjc3NDI4NjQ0OTNjOGFhNTAxYTExNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuyvyVGEnNckFa2yCA51S6BcniIE 5u7+j0L5PDwdqe0NbvOKRO5+J9TYsMsJN199vi2Xw5B3aVJwt5QnjHeqdWiO/wES glyxAZiivQXJbdzFol6Isgb/pUORDBAvL6nfhU/5eTW0Ad1NK+wjIgjiOK4CMH/g AbB6tmsVsITLrjP+MI28tQ55usWIiaQRj3ZzpWlwsS8wkaVi41cG/7TQuh3x7Quh NTupLSKhLwcb47jId8JY+RSOSKkZZ8GquqCxRYkkWISFpfTup/9ZmuH7NjVQNArV xf1zivZwVO/bRr02dQf/eHcm4moMYfZitUzf1Bxi/TeeEsECaMqJVlZJnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvM1UgaGytSZ3QoZEk8iqUBoRWFMB8GA1UdIwQY MBaAFIMCOzlwWzRahu/z8U72seTbRZOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYt M2I4ZmJmZmY1MzQyLzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hZTMwNDItY2E5OC00ZGRhLTk1YTYtM2I4ZmJmZmY1MzQy LzEvZ3dJN09YQmJORnFHN19QeFR2YXg1TnRGazU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswGhVScA nz+7i5vR5DuIzMm/bG9MMgMjjXNpod5fiYMvBGiAN2KpeA/eWnVYk9rDV+ooRqvf CYfkf2pbA9tIf9gvjNpdCr6hwZqaA94BG4rIuZSW79rezLdbgkvedVX64uu0y4Uy lb/pDMvWKZmUGr30674AHkIgWf1NuRWrlqzEl6jlw3vNwxuAaKiju0Sw05MQkdrY V9EiYEKNSx4ubOiTxlhojK/RZ3p9DW1ZWvIbdgxPtkVUEIibqoXA1RE0nX3LpPjC npdepdwbEWVbbldBbPlOGwD1OvJKTrVIAsT7onbN7AOa8oZAQhWx7yU0HRvAfUW/ KFxSlLnEetTRqg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:55:41 2025 by rpki-client