This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft File: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json) Hash identifier: 4trFUg3+HU3TN8sAt92Wmf6XY2vDN9R2slbT+aSH12Y= Subject key identifier: E9:EA:80:32:18:34:4B:1C:C8:89:6B:70:4A:1C:51:0B:4E:B5:A5:23 Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94 Certificate issuer: /CN=83020637e89655e299d91843769254af07714994 Certificate serial: 019B42490267CB65F1903FFC8BF362B3E1E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft Manifest number: 0BF3 Signing time: Sun 21 Dec 2025 19:00:39 +0000 Manifest this update: Sun 21 Dec 2025 19:00:39 +0000 Manifest next update: Mon 22 Dec 2025 19:00:39 +0000 Files and hashes: 1: 1-R9Qf46XIEkfXqrQvwwzD2Tou7g.roa (hash: MQ5+3E8S339NrGygiORsr3A7NuJnR4bP2xWWIaK0oj4=) 2: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: btQr4ryYMATuFfH1Tg2i9vv9G1YExP1haHHw/hmzkhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:02:67:cb:65:f1:90:3f:fc:8b:f3:62:b3:e1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83020637e89655e299d91843769254af07714994 Validity Not Before: Dec 21 19:00:39 2025 GMT Not After : Dec 22 19:00:39 2025 GMT Subject: CN=e9ea803218344b1cc8896b704a1c510b4eb5a523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1d:46:92:ca:55:bb:31:42:da:ea:6d:06:35: 75:64:28:b4:26:43:40:c3:7f:95:c6:5d:5b:fe:14: b6:2f:8d:47:b2:20:db:84:53:8c:a3:63:fd:78:04: 37:be:bc:6a:20:4f:97:dd:b9:8e:69:8e:8b:90:fb: 65:8c:6f:a0:ce:dc:28:4c:6c:24:09:b1:be:ec:36: 1f:7f:36:5f:2e:7c:6b:59:4f:4b:c7:3d:9c:85:6c: 91:f2:99:57:b0:a0:8d:cf:b9:9a:c6:6d:5c:c4:7d: bd:cb:80:35:be:07:72:93:ed:3a:48:2f:2d:12:b0: f7:2f:08:09:a7:88:37:f1:26:47:e9:4a:0a:26:86: e3:b1:7f:84:dd:2d:7b:66:7b:71:7c:69:8d:79:8c: a1:1d:e2:33:cd:da:fe:d9:29:be:cc:52:1b:5a:13: 6d:5c:b3:33:d2:3f:c5:cc:eb:82:6d:e0:c8:1e:46: 79:cf:cb:fa:cf:eb:a7:b7:e2:78:e5:8f:9f:35:40: a2:e4:ad:c0:52:18:04:b0:1b:21:1d:3e:6b:5f:b2: 6c:78:93:dd:42:54:28:c0:95:08:14:2f:5c:2d:a5: c5:73:15:2c:8c:bb:58:2d:c5:63:11:e1:60:bd:b6: e1:f8:c3:a1:42:a4:21:e3:97:0e:34:ca:e3:6a:ad: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EA:80:32:18:34:4B:1C:C8:89:6B:70:4A:1C:51:0B:4E:B5:A5:23 X509v3 Authority Key Identifier: keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:45:d2:ff:15:7c:21:95:48:e6:20:d2:fc:f4:1a:d3:40:fd: 62:55:e4:2d:76:c5:15:3f:7c:46:1a:f5:54:5f:d6:80:23:be: 71:13:4e:50:38:78:94:86:eb:2c:5b:7f:95:b4:83:f4:05:0e: 20:bf:04:0f:cf:40:72:b9:21:41:2c:19:6f:2a:e6:22:3f:8e: a1:78:bf:43:b3:96:04:44:0e:4c:b1:ce:80:9b:bc:e6:a6:85: b7:09:4a:06:b8:9f:c5:2e:d1:1a:2d:f9:a8:92:c9:06:70:bc: aa:f2:f9:a8:70:8f:1c:da:92:1b:62:08:9a:22:da:53:6d:09: 32:2d:eb:28:04:e2:92:a9:7b:d1:0f:d3:3a:d8:a2:47:6b:cd: 32:a6:38:64:c5:ec:82:40:a0:a3:ed:c4:34:12:0e:1e:bf:04: 47:26:84:3e:71:da:f6:78:b2:e1:04:42:1b:bd:21:3b:c1:36: 34:5b:64:29:6b:33:3b:2b:71:6d:2c:a6:12:51:5f:4d:b3:04: 74:40:e1:2a:61:7c:de:c9:0e:74:5b:4f:d7:c4:d5:27:ca:2d: 36:88:64:d4:28:17:20:29:67:97:20:58:37:b5:bc:36:51:ce: 24:0b:30:cc:8d:02:6b:73:e6:92:d3:7d:52:f0:71:10:a6:66: 10:0d:32:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSQJny2XxkD/8i/Nis+HnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDIwNjM3ZTg5NjU1ZTI5OWQ5MTg0Mzc2OTI1NGFmMDc3 MTQ5OTQwHhcNMjUxMjIxMTkwMDM5WhcNMjUxMjIyMTkwMDM5WjAzMTEwLwYDVQQD EyhlOWVhODAzMjE4MzQ0YjFjYzg4OTZiNzA0YTFjNTEwYjRlYjVhNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR1GkspVuzFC2uptBjV1ZCi0JkNA w3+Vxl1b/hS2L41HsiDbhFOMo2P9eAQ3vrxqIE+X3bmOaY6LkPtljG+gztwoTGwk CbG+7DYffzZfLnxrWU9Lxz2chWyR8plXsKCNz7maxm1cxH29y4A1vgdyk+06SC8t ErD3LwgJp4g38SZH6UoKJobjsX+E3S17ZntxfGmNeYyhHeIzzdr+2Sm+zFIbWhNt XLMz0j/FzOuCbeDIHkZ5z8v6z+unt+J45Y+fNUCi5K3AUhgEsBshHT5rX7JseJPd QlQowJUIFC9cLaXFcxUsjLtYLcVjEeFgvbbh+MOhQqQh45cONMrjaq29KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnqgDIYNEscyIlrcEocUQtOtaUjMB8GA1UdIwQY MBaAFIMCBjfollXimdkYQ3aSVK8HcUmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTkt YjJiZmFjM2IzMjA0LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTktYjJiZmFjM2IzMjA0 LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEXS/xV8 IZVI5iDS/PQa00D9YlXkLXbFFT98Rhr1VF/WgCO+cRNOUDh4lIbrLFt/lbSD9AUO IL8ED89AcrkhQSwZbyrmIj+OoXi/Q7OWBEQOTLHOgJu85qaFtwlKBrifxS7RGi35 qJLJBnC8qvL5qHCPHNqSG2IImiLaU20JMi3rKATikql70Q/TOtiiR2vNMqY4ZMXs gkCgo+3ENBIOHr8ERyaEPnHa9niy4QRCG70hO8E2NFtkKWszOytxbSymElFfTbME dEDhKmF83skOdFtP18TVJ8otNohk1CgXIClnlyBYN7W8NlHOJAswzI0Ca3PmktN9 UvBxEKZmEA0ylQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:05:53 2025 by rpki-client