This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json) Hash identifier: t4z/5SNVcwi0GQmOnvWYISv8JxIc6lhI0sVYAdhHZvg= Subject key identifier: DE:76:62:41:8A:D8:1E:69:FF:51:E3:9B:FD:22:B6:32:9E:56:A4:4A Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c Certificate serial: 019B4581ED9F3371BC4A0620BB80CAFADCF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft Manifest number: 0320 Signing time: Mon 22 Dec 2025 10:01:41 +0000 Manifest this update: Mon 22 Dec 2025 10:01:41 +0000 Manifest next update: Tue 23 Dec 2025 10:01:41 +0000 Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: IE++WqZop8f2KYZKbF8613n3J6PO3vGKAbob51Nro/8=) 2: HbzqPjxV2gzVXrBA-nWLmjfTDxo.roa (hash: cWFkMXXdUpsLxuuBafoKiMAojPQ1C+2JXUGxa/p9/qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:ed:9f:33:71:bc:4a:06:20:bb:80:ca:fa:dc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c Validity Not Before: Dec 22 10:01:41 2025 GMT Not After : Dec 23 10:01:41 2025 GMT Subject: CN=de7662418ad81e69ff51e39bfd22b6329e56a44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:23:f1:f0:8c:d7:d7:b9:41:af:25:6c:0c:0a: 85:ce:2f:6b:de:e6:46:74:f8:b4:da:87:4b:e8:a4: 5d:4c:16:7a:5d:9a:bc:45:cd:f8:51:93:e2:56:7e: b6:9b:4c:25:d6:fb:f6:1c:bc:bb:bb:c0:7f:ec:51: 37:e7:17:a9:16:aa:78:df:86:3d:77:41:b2:f8:04: ac:17:e8:19:0d:9e:ac:e1:67:69:0a:73:1d:a7:d6: 82:40:f1:9e:a8:fb:1e:37:38:75:f0:da:f3:6c:0d: fe:d0:36:d7:4f:c8:f1:4f:11:ca:4f:12:ba:a1:84: 34:32:5a:ef:18:59:a4:90:b5:6d:ad:4b:32:13:8b: de:2a:ba:ac:a4:f0:d9:86:a7:90:84:74:b0:58:b9: 94:c6:20:c0:a5:aa:b9:71:e4:4d:17:94:03:0b:3d: 8b:01:69:32:70:40:9d:98:b9:df:e6:6f:b9:cb:4d: 27:57:69:63:98:7f:55:c7:24:96:f9:1f:1c:46:9d: f1:3b:2e:3c:9e:62:36:75:3e:b1:e3:73:39:00:0b: 40:78:7d:b7:59:42:71:e0:26:e6:f3:04:93:06:eb: 99:de:8c:2f:dc:fd:4c:3d:81:75:f7:6a:ae:22:f0: 4a:eb:66:7d:0e:da:64:42:1a:a9:4c:42:df:dc:25: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:76:62:41:8A:D8:1E:69:FF:51:E3:9B:FD:22:B6:32:9E:56:A4:4A X509v3 Authority Key Identifier: keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:db:11:b1:4a:fc:0f:fe:da:af:06:b1:f2:56:90:65:6d:8d: 04:c8:8d:0c:02:c8:17:b9:17:b3:28:1f:43:10:ef:48:07:10: d9:09:d9:3f:04:3c:2d:01:7c:8a:39:e4:6e:a0:65:53:d2:80: 3d:66:26:fd:03:99:f4:27:df:20:69:33:a7:1b:98:5b:9b:7d: 28:db:d0:fa:ec:6a:1f:57:ea:a4:c1:bc:e5:66:e5:bc:ba:51: 15:73:50:37:cb:4b:86:f0:8a:fa:68:99:06:f5:8e:be:e8:96: bb:c6:7c:1f:be:5b:b3:07:98:9a:b8:48:dc:41:bb:3e:74:e1: 42:63:fc:ee:85:41:81:b7:69:71:12:2f:ab:ad:10:26:e7:4d: a0:4e:0b:48:a9:3e:3a:85:21:53:2e:70:26:e3:65:06:6a:3f: 83:cb:f4:fb:1c:25:7d:e3:3f:20:84:8b:7f:e2:23:cd:af:e5: 72:b3:cb:fd:15:fd:4b:a0:d7:83:5f:52:70:94:6c:78:fd:0a: d4:e8:2e:36:4a:2c:5f:13:40:12:b6:d3:f4:b0:0b:1d:c6:ca: 51:55:40:9e:cb:c2:77:60:c4:d1:b2:f7:e6:b7:53:6f:46:43: 2d:93:bb:ce:4f:58:a6:b6:e9:5c:6e:f0:4e:8a:5a:1f:87:b7: 26:d4:a8:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFge2fM3G8SgYgu4DK+tz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjUyM2ZlMGQ2YmQ5YzY3ZTBiY2IwMDk4YTNjMzYzZjJm OTBmN2MwHhcNMjUxMjIyMTAwMTQxWhcNMjUxMjIzMTAwMTQxWjAzMTEwLwYDVQQD EyhkZTc2NjI0MThhZDgxZTY5ZmY1MWUzOWJmZDIyYjYzMjllNTZhNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCPx8IzX17lBryVsDAqFzi9r3uZG dPi02odL6KRdTBZ6XZq8Rc34UZPiVn62m0wl1vv2HLy7u8B/7FE35xepFqp434Y9 d0Gy+ASsF+gZDZ6s4WdpCnMdp9aCQPGeqPseNzh18NrzbA3+0DbXT8jxTxHKTxK6 oYQ0MlrvGFmkkLVtrUsyE4veKrqspPDZhqeQhHSwWLmUxiDApaq5ceRNF5QDCz2L AWkycECdmLnf5m+5y00nV2ljmH9VxySW+R8cRp3xOy48nmI2dT6x43M5AAtAeH23 WUJx4Cbm8wSTBuuZ3owv3P1MPYF192quIvBK62Z9DtpkQhqpTELf3CUALQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN52YkGK2B5p/1Hjm/0itjKeVqRKMB8GA1UdIwQY MBaAFBllI/4Na9nGfgvLAJijw2Py+Q98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAt ZGU4MzU0NThkYThkLzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAtZGU4MzU0NThkYThk LzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNsRsUr8 D/7arwax8laQZW2NBMiNDALIF7kXsygfQxDvSAcQ2QnZPwQ8LQF8ijnkbqBlU9KA PWYm/QOZ9CffIGkzpxuYW5t9KNvQ+uxqH1fqpMG85WblvLpRFXNQN8tLhvCK+miZ BvWOvuiWu8Z8H75bsweYmrhI3EG7PnThQmP87oVBgbdpcRIvq60QJudNoE4LSKk+ OoUhUy5wJuNlBmo/g8v0+xwlfeM/IISLf+Ijza/lcrPL/RX9S6DXg19ScJRseP0K 1OguNkosXxNAErbT9LALHcbKUVVAnsvCd2DE0bL35rdTb0ZDLZO7zk9YprbpXG7w TopaH4e3JtSocA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:29:07 2025 by rpki-client