This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft File: gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft (raw, json) Hash identifier: FlrvNxKQArw9cCSkyQsOkUm4u23PuDZWdkXNgtITbaA= Subject key identifier: 72:5A:8C:44:0B:F7:60:9E:B3:AF:2A:74:33:3A:5B:3C:78:CD:01:BA Authority key identifier: 83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06 Certificate issuer: /CN=8303a4cb2384c207dd3737f0924fa08e93282d06 Certificate serial: 019B50E0A3ACECC97D987CA3E890BF14F835 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft Manifest number: 013D Signing time: Wed 24 Dec 2025 15:00:57 +0000 Manifest this update: Wed 24 Dec 2025 15:00:57 +0000 Manifest next update: Thu 25 Dec 2025 15:00:57 +0000 Files and hashes: 1: 2iWfeMriZFi-G_hS_QOYTqRzYCk.roa (hash: 03ngKG8f9ygpR1m9XSjIdbVbs0jTiLlbaTIDCyi4ZJU=) 2: gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl (hash: TvlQn3SN9GgCPMcUY3GSalPfPOzNmQ3rJZAgXxmi1+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:a3:ac:ec:c9:7d:98:7c:a3:e8:90:bf:14:f8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8303a4cb2384c207dd3737f0924fa08e93282d06 Validity Not Before: Dec 24 15:00:57 2025 GMT Not After : Dec 25 15:00:57 2025 GMT Subject: CN=725a8c440bf7609eb3af2a74333a5b3c78cd01ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:e9:47:c7:77:92:7e:88:63:cb:f7:45:e1: 7b:2e:06:e4:4d:6b:23:4c:41:eb:22:50:83:13:ab: 66:fd:74:27:78:85:fa:c8:f4:ec:43:ce:60:a9:5b: c3:ed:2c:0a:98:6a:2e:c9:66:e3:60:46:b5:12:06: dc:0c:49:5c:35:e6:8f:b1:c7:53:73:e8:33:4d:89: 04:4c:23:57:53:35:86:b6:94:40:13:24:bc:a9:8e: 57:26:6e:8f:92:cf:6a:a1:d9:50:d6:a3:24:0a:63: 79:03:02:2e:16:7f:fb:6e:36:46:b4:36:58:6c:5e: eb:a7:b4:97:0a:d2:a2:49:99:a0:95:0a:b1:2f:0a: e6:a7:ac:eb:be:c7:60:35:58:37:a1:d7:ae:2c:55: 47:9c:ea:da:e3:94:f1:33:65:4a:d2:2b:b3:ed:88: 22:91:41:d2:49:e2:fd:51:56:23:a2:a9:ed:79:11: 11:5a:84:3a:00:99:87:d5:aa:8f:84:6e:6d:31:35: c8:10:b6:a0:75:aa:22:da:13:0c:08:55:eb:07:e6: 0c:b1:10:cd:9d:1e:bb:fc:ef:74:4f:7a:75:c7:1a: bf:0e:4d:b2:d0:6c:e8:ec:42:95:37:9d:89:f9:9e: ea:aa:d8:7d:13:57:2b:88:14:39:ef:d0:24:ab:a1: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5A:8C:44:0B:F7:60:9E:B3:AF:2A:74:33:3A:5B:3C:78:CD:01:BA X509v3 Authority Key Identifier: keyid:83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:00:54:33:40:4c:de:0b:45:ed:ee:2c:83:90:96:ad:86:1e: b6:a5:a8:06:27:42:39:f2:f2:86:94:48:3b:d4:52:ad:bc:97: c3:b6:db:61:5a:56:4d:b5:75:05:03:7b:12:6f:31:1e:22:a2: 4c:f5:d2:a9:b9:51:29:1c:78:01:a9:f9:2d:95:b1:62:6a:73: 29:b1:18:ad:35:30:8f:97:4d:6a:8d:0c:30:fe:42:d8:9a:4a: 01:4b:01:bc:c2:24:53:14:39:c2:04:f4:90:96:e9:b1:86:f7: 59:aa:b6:46:b6:2f:b8:c5:79:0b:7e:3b:8c:85:d0:57:ce:9a: d6:2e:4d:51:09:c4:62:4a:ea:be:72:de:e6:5f:3f:cf:bc:9d: c6:83:11:f3:26:6e:58:e2:6a:56:ad:08:67:46:dd:be:97:57: a8:73:59:e9:e3:5b:48:d2:52:35:bc:9f:bd:da:6f:c5:89:b9: 1e:da:f1:db:79:72:01:b5:90:7f:78:84:86:15:c4:70:5d:80: 83:40:83:e7:1e:7f:16:6f:60:c9:9b:c2:1d:82:3a:f8:e6:40: 38:1d:a2:b6:fa:e4:44:1a:6b:f6:71:d9:71:3b:da:37:84:0d: b0:38:28:52:bf:33:11:14:68:ee:c2:08:14:d5:6f:a2:d4:69: f5:d5:bc:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4KOs7Ml9mHyj6JC/FPg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDNhNGNiMjM4NGMyMDdkZDM3MzdmMDkyNGZhMDhlOTMy ODJkMDYwHhcNMjUxMjI0MTUwMDU3WhcNMjUxMjI1MTUwMDU3WjAzMTEwLwYDVQQD Eyg3MjVhOGM0NDBiZjc2MDllYjNhZjJhNzQzMzNhNWIzYzc4Y2QwMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/XpR8d3kn6IY8v3ReF7LgbkTWsj TEHrIlCDE6tm/XQneIX6yPTsQ85gqVvD7SwKmGouyWbjYEa1EgbcDElcNeaPscdT c+gzTYkETCNXUzWGtpRAEyS8qY5XJm6Pks9qodlQ1qMkCmN5AwIuFn/7bjZGtDZY bF7rp7SXCtKiSZmglQqxLwrmp6zrvsdgNVg3odeuLFVHnOra45TxM2VK0iuz7Ygi kUHSSeL9UVYjoqnteRERWoQ6AJmH1aqPhG5tMTXIELagdaoi2hMMCFXrB+YMsRDN nR67/O90T3p1xxq/Dk2y0Gzo7EKVN52J+Z7qqth9E1criBQ579Akq6GYwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJajEQL92Ces68qdDM6Wzx4zQG6MB8GA1UdIwQY MBaAFIMDpMsjhMIH3Tc38JJPoI6TKC0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dPa3l5T0V3Z2ZkTnpmd2trLWdqcE1vTFFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81NzdlYWUtM2YzZC00ZDNmLTljMDct ZjAxOWRiMmFjY2E4LzEvZ3dPa3l5T0V3Z2ZkTnpmd2trLWdqcE1vTFFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81NzdlYWUtM2YzZC00ZDNmLTljMDctZjAxOWRiMmFjY2E4 LzEvZ3dPa3l5T0V3Z2ZkTnpmd2trLWdqcE1vTFFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADABUM0BM 3gtF7e4sg5CWrYYetqWoBidCOfLyhpRIO9RSrbyXw7bbYVpWTbV1BQN7Em8xHiKi TPXSqblRKRx4Aan5LZWxYmpzKbEYrTUwj5dNao0MMP5C2JpKAUsBvMIkUxQ5wgT0 kJbpsYb3Waq2RrYvuMV5C347jIXQV86a1i5NUQnEYkrqvnLe5l8/z7ydxoMR8yZu WOJqVq0IZ0bdvpdXqHNZ6eNbSNJSNbyfvdpvxYm5Htrx23lyAbWQf3iEhhXEcF2A g0CD5x5/Fm9gyZvCHYI6+OZAOB2itvrkRBpr9nHZcTvaN4QNsDgoUr8zERRo7sII FNVvotRp9dW8pQ== -----END CERTIFICATE-----Generated at Wed Dec 24 22:03:38 2025 by rpki-client