This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft File: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json) Hash identifier: Y+MFnq9mjH5mvYfL6mQVL2nEvHq9I0Igs3sF00Kfscs= Subject key identifier: 41:21:7F:0C:60:9C:62:E5:BA:A7:17:28:52:E9:C9:EE:11:26:58:9E Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94 Certificate issuer: /CN=83020637e89655e299d91843769254af07714994 Certificate serial: 019B32D5E69628806B228E42E01B0807C86F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft Manifest number: 0BEB Signing time: Thu 18 Dec 2025 19:00:37 +0000 Manifest this update: Thu 18 Dec 2025 19:00:37 +0000 Manifest next update: Fri 19 Dec 2025 19:00:37 +0000 Files and hashes: 1: 1-R9Qf46XIEkfXqrQvwwzD2Tou7g.roa (hash: MQ5+3E8S339NrGygiORsr3A7NuJnR4bP2xWWIaK0oj4=) 2: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: bAnawxbsiG0nOqxQtVMQA1RVDFW2H6MoJsm3nrro4A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:e6:96:28:80:6b:22:8e:42:e0:1b:08:07:c8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83020637e89655e299d91843769254af07714994 Validity Not Before: Dec 18 19:00:37 2025 GMT Not After : Dec 19 19:00:37 2025 GMT Subject: CN=41217f0c609c62e5baa7172852e9c9ee1126589e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c1:b6:3f:87:e6:29:a7:05:e5:6e:6d:c4:91: c5:ba:bb:f2:22:8c:af:10:e2:2c:36:ff:f4:05:a7: 94:41:1a:bd:31:85:1f:2c:8a:eb:a8:0b:43:ea:4e: 40:6f:bc:27:cd:f8:13:5f:a4:e3:63:38:77:39:99: 83:b5:cf:8f:13:8a:e9:5b:b1:f9:f4:e5:9a:f3:8d: ab:c4:87:08:e8:3b:86:21:6c:ef:0c:f2:51:1d:2c: b4:ad:f8:15:98:cd:cd:e6:54:94:32:49:0e:28:53: a8:b2:19:76:55:40:f7:6a:04:17:05:c1:ef:55:2b: d8:d1:4c:00:bc:0d:de:e0:45:1a:e1:30:09:19:1a: 2f:17:66:19:8e:c9:37:77:2b:1d:5f:dd:43:d8:d9: 25:87:b0:d7:79:8c:ac:8f:6c:44:1c:f5:83:10:ea: 34:32:0d:1d:f3:fb:95:b7:53:07:e1:7e:70:d9:62: 50:0c:39:72:b9:f5:88:70:87:6f:93:63:88:26:ad: 64:f9:5e:43:f2:19:43:6e:35:10:07:b3:ce:a9:70: 0e:f2:f6:0f:51:17:37:c9:dc:56:16:8d:e1:13:f2: f2:75:53:d1:a8:a6:8d:95:ad:08:43:6b:a1:16:65: 82:62:ca:cf:e7:9b:4f:88:36:c6:b0:d8:67:00:ef: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:21:7F:0C:60:9C:62:E5:BA:A7:17:28:52:E9:C9:EE:11:26:58:9E X509v3 Authority Key Identifier: keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a2:8c:05:1b:63:ba:3d:dd:79:85:50:86:36:c1:bf:1a:8b: 6e:72:ad:1e:97:22:08:00:9b:67:61:2d:7c:12:e6:24:27:d3: 07:bf:4c:61:29:7c:1a:8a:80:ef:94:e4:14:75:35:fb:16:9d: 53:f6:49:28:7f:8d:3e:70:0b:e3:8c:7c:75:89:28:6e:0f:01: 1c:eb:26:3b:f4:c8:89:ac:57:a0:cd:83:c1:7b:9d:5c:db:ee: 82:8b:0a:34:e5:71:09:af:29:8f:f7:32:da:d1:11:5d:d4:25: 6c:9b:a1:a1:45:86:1b:83:f7:8e:6d:1c:69:02:6f:36:ef:64: 4e:dd:61:70:86:87:47:0c:9d:d2:d7:c0:dd:0b:af:d3:ba:b2: 20:46:2a:de:07:f4:34:a0:08:1c:35:b4:75:7f:fe:96:eb:7b: 5b:61:66:11:9a:6e:f1:34:bb:c7:20:d2:54:2a:77:a0:b5:27: 55:58:b5:6b:eb:62:12:90:be:81:4e:30:8e:99:b9:ca:52:d7: a8:0f:c6:25:ea:8d:68:5e:88:a9:88:8f:ad:1b:1a:4f:ad:4f: 48:e3:f6:21:4e:c8:e2:b1:7f:3c:79:50:15:75:de:12:82:ef: 07:53:b9:0c:26:9c:76:0c:4c:13:a7:43:c0:3e:10:f8:57:eb: 76:dd:ec:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1eaWKIBrIo5C4BsIB8hvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDIwNjM3ZTg5NjU1ZTI5OWQ5MTg0Mzc2OTI1NGFmMDc3 MTQ5OTQwHhcNMjUxMjE4MTkwMDM3WhcNMjUxMjE5MTkwMDM3WjAzMTEwLwYDVQQD Eyg0MTIxN2YwYzYwOWM2MmU1YmFhNzE3Mjg1MmU5YzllZTExMjY1ODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cG2P4fmKacF5W5txJHFurvyIoyv EOIsNv/0BaeUQRq9MYUfLIrrqAtD6k5Ab7wnzfgTX6TjYzh3OZmDtc+PE4rpW7H5 9OWa842rxIcI6DuGIWzvDPJRHSy0rfgVmM3N5lSUMkkOKFOoshl2VUD3agQXBcHv VSvY0UwAvA3e4EUa4TAJGRovF2YZjsk3dysdX91D2Nklh7DXeYysj2xEHPWDEOo0 Mg0d8/uVt1MH4X5w2WJQDDlyufWIcIdvk2OIJq1k+V5D8hlDbjUQB7POqXAO8vYP URc3ydxWFo3hE/LydVPRqKaNla0IQ2uhFmWCYsrP55tPiDbGsNhnAO/v3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEhfwxgnGLluqcXKFLpye4RJlieMB8GA1UdIwQY MBaAFIMCBjfollXimdkYQ3aSVK8HcUmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTkt YjJiZmFjM2IzMjA0LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTktYjJiZmFjM2IzMjA0 LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqKMBRtj uj3deYVQhjbBvxqLbnKtHpciCACbZ2EtfBLmJCfTB79MYSl8GoqA75TkFHU1+xad U/ZJKH+NPnAL44x8dYkobg8BHOsmO/TIiaxXoM2DwXudXNvugosKNOVxCa8pj/cy 2tERXdQlbJuhoUWGG4P3jm0caQJvNu9kTt1hcIaHRwyd0tfA3Quv07qyIEYq3gf0 NKAIHDW0dX/+lut7W2FmEZpu8TS7xyDSVCp3oLUnVVi1a+tiEpC+gU4wjpm5ylLX qA/GJeqNaF6IqYiPrRsaT61PSOP2IU7I4rF/PHlQFXXeEoLvB1O5DCacdgxME6dD wD4Q+Ffrdt3sgQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:29:43 2025 by rpki-client