This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json) Hash identifier: nnvwt4z0SIyfVa88VVNol4X0iD7lnqQhLhjMYZAG6M8= Subject key identifier: D4:22:31:46:1C:95:93:8C:D8:F5:8A:FF:E5:8A:E4:BC:F8:DB:23:86 Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c Certificate serial: 019B3FB5DD9F0A83558FC388A6DE7EEAEBBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft Manifest number: 031D Signing time: Sun 21 Dec 2025 07:00:41 +0000 Manifest this update: Sun 21 Dec 2025 07:00:41 +0000 Manifest next update: Mon 22 Dec 2025 07:00:41 +0000 Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: /d5MLkDg+PW2sTcsuKzGeN99kxkknXIXYc7D2UbR13Y=) 2: HbzqPjxV2gzVXrBA-nWLmjfTDxo.roa (hash: cWFkMXXdUpsLxuuBafoKiMAojPQ1C+2JXUGxa/p9/qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:dd:9f:0a:83:55:8f:c3:88:a6:de:7e:ea:eb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c Validity Not Before: Dec 21 07:00:41 2025 GMT Not After : Dec 22 07:00:41 2025 GMT Subject: CN=d42231461c95938cd8f58affe58ae4bcf8db2386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:5a:33:f6:b3:b1:48:ed:a2:87:5e:a6:70: 25:b2:8a:8f:40:c6:ea:65:2c:24:38:18:4d:11:09: 0d:3b:4d:12:31:c1:eb:1f:80:1d:01:6c:ef:80:b1: f7:44:f5:ca:96:bd:d7:19:3c:d6:95:7e:79:a7:00: 70:14:2e:00:cc:cb:65:55:f5:41:2a:50:75:b4:fe: a0:f8:39:9f:57:1f:a4:4c:8d:16:a8:43:fa:1d:ec: de:b4:eb:81:bd:d7:c4:0b:27:c1:61:82:3b:7a:de: 7a:94:d3:89:0d:bd:5b:2d:8c:cc:d2:03:3f:27:50: ca:15:c2:a8:50:62:d1:3c:a5:61:05:4a:30:9c:b8: 2e:fd:52:0c:a6:ca:fb:d7:ba:91:5d:ba:69:ea:ad: 20:d5:7f:dc:0b:f8:8f:a1:d8:3d:fc:24:dc:78:df: 72:8b:49:bb:95:17:16:58:84:c0:70:15:92:14:4e: 4b:ea:ee:8e:8a:94:44:a6:74:a0:b4:d3:8a:cf:79: b0:d3:f2:54:30:90:e0:79:eb:97:d0:7e:54:ce:9e: f3:64:64:e2:7c:2e:25:d5:6a:5a:3d:c8:c2:c7:b7: 97:c8:78:56:d8:2f:e8:d5:d9:e8:78:57:ea:2a:f7: 17:9b:f0:95:71:c6:ce:c8:7f:da:91:75:a0:e4:31: 19:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:22:31:46:1C:95:93:8C:D8:F5:8A:FF:E5:8A:E4:BC:F8:DB:23:86 X509v3 Authority Key Identifier: keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:03:b8:5e:b0:71:0e:ef:af:03:29:72:f0:ea:f1:7e:cc:d9: ae:67:a8:4a:8d:6c:87:f9:20:d9:52:44:a8:85:63:bc:be:e6: 77:57:2e:aa:18:f3:be:0f:04:cf:7f:e7:6b:31:4a:3b:2b:95: 68:15:e9:c9:bc:4b:72:ba:fe:c4:3a:3d:ea:2f:31:2d:f6:f4: 62:88:05:98:10:81:76:6f:13:25:a9:8d:ba:12:97:c7:c2:d1: 69:33:c6:91:34:cd:09:8d:ff:30:6b:29:ce:51:d2:ab:2f:16: c8:66:5b:67:26:60:59:29:be:70:fc:25:f0:c3:bb:2a:70:02: 50:81:7a:ce:d9:ad:71:8f:92:38:1a:20:45:7a:eb:3b:bd:22: ff:c3:2d:c6:3f:4e:12:fe:19:50:fe:92:63:7b:fc:bc:90:d5: f4:63:c1:ca:f1:99:42:bc:15:4b:7a:56:82:61:b1:c2:88:f7: d4:a7:32:e3:c3:e1:70:63:c9:a1:e3:63:29:a9:3b:c8:9b:3c: 2b:1c:36:6e:d6:27:55:c7:ac:99:1f:da:22:95:36:99:ac:d5: 5f:5a:28:a5:ba:57:c0:d2:8e:d4:d0:f7:07:28:45:62:1f:32: c3:82:e7:ff:3b:10:9f:02:14:93:ad:40:9d:87:4a:61:4d:08: b5:48:cc:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/td2fCoNVj8OIpt5+6uu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjUyM2ZlMGQ2YmQ5YzY3ZTBiY2IwMDk4YTNjMzYzZjJm OTBmN2MwHhcNMjUxMjIxMDcwMDQxWhcNMjUxMjIyMDcwMDQxWjAzMTEwLwYDVQQD EyhkNDIyMzE0NjFjOTU5MzhjZDhmNThhZmZlNThhZTRiY2Y4ZGIyMzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSJaM/azsUjtoodepnAlsoqPQMbq ZSwkOBhNEQkNO00SMcHrH4AdAWzvgLH3RPXKlr3XGTzWlX55pwBwFC4AzMtlVfVB KlB1tP6g+DmfVx+kTI0WqEP6HezetOuBvdfECyfBYYI7et56lNOJDb1bLYzM0gM/ J1DKFcKoUGLRPKVhBUownLgu/VIMpsr717qRXbpp6q0g1X/cC/iPodg9/CTceN9y i0m7lRcWWITAcBWSFE5L6u6OipREpnSgtNOKz3mw0/JUMJDgeeuX0H5Uzp7zZGTi fC4l1WpaPcjCx7eXyHhW2C/o1dnoeFfqKvcXm/CVccbOyH/akXWg5DEZAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQiMUYclZOM2PWK/+WK5Lz42yOGMB8GA1UdIwQY MBaAFBllI/4Na9nGfgvLAJijw2Py+Q98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAt ZGU4MzU0NThkYThkLzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83NDM4ZGQtZTM2Mi00MDM0LWEwNDAtZGU4MzU0NThkYThk LzEvR1dVal9nMXIyY1otQzhzQW1LUERZX0w1RDN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowO4XrBx Du+vAyly8OrxfszZrmeoSo1sh/kg2VJEqIVjvL7md1cuqhjzvg8Ez3/nazFKOyuV aBXpybxLcrr+xDo96i8xLfb0YogFmBCBdm8TJamNuhKXx8LRaTPGkTTNCY3/MGsp zlHSqy8WyGZbZyZgWSm+cPwl8MO7KnACUIF6ztmtcY+SOBogRXrrO70i/8Mtxj9O Ev4ZUP6SY3v8vJDV9GPByvGZQrwVS3pWgmGxwoj31Kcy48PhcGPJoeNjKak7yJs8 Kxw2btYnVcesmR/aIpU2mazVX1oopbpXwNKO1ND3ByhFYh8yw4Ln/zsQnwIUk61A nYdKYU0ItUjMnQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:27:20 2025 by rpki-client