This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json) Hash identifier: 6VkzLERoZot9h1ssttSP/VW3MnfPuISJDOjEHqy1dq8= Subject key identifier: 93:5D:D8:22:D0:79:56:98:DD:B5:51:35:EA:A3:29:DE:E8:D8:E9:49 Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2 Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2 Certificate serial: 019B56E2C808B300A81146F08F97AF68E448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft Manifest number: 0993 Signing time: Thu 25 Dec 2025 19:01:01 +0000 Manifest this update: Thu 25 Dec 2025 19:01:01 +0000 Manifest next update: Fri 26 Dec 2025 19:01:01 +0000 Files and hashes: 1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=) 2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: 8NOKdi7dE6zjO6Y1iQmGTzziiPnKBFrWYRQ7JdP1RNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:e2:c8:08:b3:00:a8:11:46:f0:8f:97:af:68:e4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2 Validity Not Before: Dec 25 19:01:01 2025 GMT Not After : Dec 26 19:01:01 2025 GMT Subject: CN=935dd822d0795698ddb55135eaa329dee8d8e949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:d9:95:e6:87:14:7c:05:04:72:59:b7:f2: f7:48:bb:97:38:3f:d2:6e:01:ec:19:9b:a6:f6:a1: 8c:09:43:e4:af:30:2d:56:6e:e0:56:25:a3:9f:ec: 72:c3:0e:28:3f:2f:d5:50:cc:aa:02:88:37:f0:68: 89:c7:22:65:29:9e:08:0f:6e:d1:01:f1:5b:c2:d4: 33:a6:6b:ef:1f:60:e2:a0:d4:7c:e2:c0:cd:d7:b2: 8c:b7:23:4e:d3:96:45:7a:c5:6d:73:b7:3e:e0:44: f0:0b:a6:2c:aa:0a:22:fe:52:f2:cc:f3:5d:41:dd: 16:f0:2c:e7:66:88:de:23:a5:f1:9a:19:19:af:dc: b9:4a:d7:19:93:97:75:0a:48:67:1a:31:08:2c:ff: bb:87:78:ad:34:66:ba:e0:fc:87:ce:71:d4:c0:69: f6:63:c1:a7:b5:43:29:0b:61:61:a0:46:36:cd:be: d2:4a:dd:9c:19:29:2a:12:01:29:f3:a0:23:13:4b: 3a:1b:dc:c9:4e:64:50:2c:85:3d:cd:c7:53:fa:cc: 8f:9d:8c:72:19:81:d2:23:cd:23:06:d6:4c:29:4b: 32:e2:50:94:ca:a5:c1:1d:0b:aa:5f:08:3d:dc:8a: 6e:de:e3:6e:88:9c:de:ff:3a:ce:ea:ad:0f:fa:31: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5D:D8:22:D0:79:56:98:DD:B5:51:35:EA:A3:29:DE:E8:D8:E9:49 X509v3 Authority Key Identifier: keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:05:4b:05:a0:fc:84:f8:03:6d:c9:5e:5a:0b:dd:5b:35:7e: b4:1a:54:a2:e7:f6:12:e2:fa:56:4a:d6:02:28:d3:2e:27:cf: b8:f4:96:95:5b:03:b2:c9:3d:25:30:62:f3:ba:f7:32:19:23: 71:ab:6e:69:8e:89:37:89:aa:cb:3b:3d:b6:1d:f0:06:ec:ac: 99:4b:53:3c:33:18:e9:55:45:a3:56:22:12:32:f3:fa:31:a8: 07:97:16:8f:0a:ee:5f:d2:70:d1:01:99:74:16:92:a2:7f:41: cc:42:ac:f4:df:44:e1:c8:75:1c:fd:12:b1:30:bd:5d:f6:4b: 21:1c:88:0e:f0:90:47:58:a4:de:21:57:aa:54:9c:50:d9:04: 83:42:b7:b6:06:79:33:af:4e:a1:6a:7e:e8:a5:79:8e:88:8e: 0a:1b:11:71:6f:b4:2f:0e:0f:97:96:d5:d8:6b:3b:6a:16:60: 64:03:e4:d9:81:97:ec:4c:c4:8a:e0:2c:40:70:a4:86:65:f8: a3:a6:b7:06:31:2d:9c:97:d7:01:4d:82:72:a4:f1:17:9f:d9: 60:cf:46:19:3f:91:a0:a9:b6:4c:11:68:27:0a:30:a1:ed:f3: 6a:d3:a7:4a:d7:e2:7f:b9:d9:51:40:7f:73:e8:50:5b:0f:96: 80:a2:ea:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtW4sgIswCoEUbwj5evaORIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDk4NDEyYzk4NGI4OWJlMzgwMTFhNzJhM2M0NzE5NzVm YzQ3YTIwHhcNMjUxMjI1MTkwMTAxWhcNMjUxMjI2MTkwMTAxWjAzMTEwLwYDVQQD Eyg5MzVkZDgyMmQwNzk1Njk4ZGRiNTUxMzVlYWEzMjlkZWU4ZDhlOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0nZleaHFHwFBHJZt/L3SLuXOD/S bgHsGZum9qGMCUPkrzAtVm7gViWjn+xyww4oPy/VUMyqAog38GiJxyJlKZ4ID27R AfFbwtQzpmvvH2DioNR84sDN17KMtyNO05ZFesVtc7c+4ETwC6Ysqgoi/lLyzPNd Qd0W8CznZojeI6XxmhkZr9y5StcZk5d1CkhnGjEILP+7h3itNGa64PyHznHUwGn2 Y8GntUMpC2FhoEY2zb7SSt2cGSkqEgEp86AjE0s6G9zJTmRQLIU9zcdT+syPnYxy GYHSI80jBtZMKUsy4lCUyqXBHQuqXwg93Ipu3uNuiJze/zrO6q0P+jENdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNd2CLQeVaY3bVRNeqjKd7o2OlJMB8GA1UdIwQY MBaAFBsJhBLJhLib44ARpyo8Rxl1/EeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYt NzBkMTMzMDZjZDFjLzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYtNzBkMTMzMDZjZDFj LzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgVLBaD8 hPgDbcleWgvdWzV+tBpUouf2EuL6VkrWAijTLifPuPSWlVsDssk9JTBi87r3Mhkj catuaY6JN4mqyzs9th3wBuysmUtTPDMY6VVFo1YiEjLz+jGoB5cWjwruX9Jw0QGZ dBaSon9BzEKs9N9E4ch1HP0SsTC9XfZLIRyIDvCQR1ik3iFXqlScUNkEg0K3tgZ5 M69OoWp+6KV5joiOChsRcW+0Lw4Pl5bV2Gs7ahZgZAPk2YGX7EzEiuAsQHCkhmX4 o6a3BjEtnJfXAU2CcqTxF5/ZYM9GGT+RoKm2TBFoJwowoe3zatOnStfif7nZUUB/ c+hQWw+WgKLqNQ== -----END CERTIFICATE-----Generated at Fri Dec 26 00:32:24 2025 by rpki-client