This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft File: gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft (raw, json) Hash identifier: 4AusqYL8vfj5qUlkZntJabiCJvcETHGD8u3/S5OpEGU= Subject key identifier: 78:2D:39:B5:62:0E:B5:A1:BB:7F:E7:8B:74:EB:67:D0:79:0D:16:7C Authority key identifier: 83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77 Certificate issuer: /CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777 Certificate serial: 019B2F9E60352573C7A30CF47B1B0292F0EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 04:01:06 +0000 Manifest this update: Thu 18 Dec 2025 04:01:06 +0000 Manifest next update: Fri 19 Dec 2025 04:01:06 +0000 Files and hashes: 1: C5Qw-UH6XV_4ro5rbdk-3jWZdWA.roa (hash: aPq4TUMBz8klCiNKwnIuLbD4QdlJvKpZ22r6ylx0Jvs=) 2: gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl (hash: Yna26iqJMM3AOgGWNrIT/QjlAp/dx5BSctWUxmwjNd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:60:35:25:73:c7:a3:0c:f4:7b:1b:02:92:f0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777 Validity Not Before: Dec 18 04:01:06 2025 GMT Not After : Dec 19 04:01:06 2025 GMT Subject: CN=782d39b5620eb5a1bb7fe78b74eb67d0790d167c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:e6:59:68:5c:26:a0:b7:92:fe:ac:79:3e: cc:e6:14:a4:77:2e:43:35:ca:0b:de:5f:67:45:ed: 91:d1:44:10:47:0e:b2:0a:6e:3e:6e:d4:69:8a:96: d3:b5:4e:b5:2c:a9:39:51:c9:c2:76:73:2c:0e:1a: d5:a2:3c:15:0a:8e:e4:44:e4:43:1e:41:ac:7d:f7: 2e:40:81:b7:9c:98:4b:68:ed:d3:56:52:da:f1:fd: a4:81:10:3f:d1:b3:80:2e:b3:a2:71:44:7e:67:3e: 4c:92:de:a9:33:3c:1b:aa:ad:93:49:e3:d0:09:4c: b3:dc:96:be:a1:53:c0:51:0f:d1:83:c3:58:7f:b3: b2:07:07:2f:29:2d:07:a6:d1:78:b0:3a:be:5a:49: 02:9d:33:5c:06:29:c7:b5:67:21:28:34:19:0b:45: 44:a3:09:85:6e:97:98:0d:2f:6e:71:12:89:0c:2f: 51:7f:98:7b:74:07:d7:a6:a3:db:52:d8:63:1b:5e: 2b:31:11:af:38:cd:03:31:35:51:62:af:16:e3:e3: d0:89:5f:cf:6a:48:26:c5:08:13:9f:fb:5f:60:1a: 7f:2d:e2:9e:8e:3b:f7:ed:65:c7:ae:99:8b:33:3e: 2f:78:67:b6:7b:d7:75:f7:8b:fc:18:83:64:c6:a9: 2c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2D:39:B5:62:0E:B5:A1:BB:7F:E7:8B:74:EB:67:D0:79:0D:16:7C X509v3 Authority Key Identifier: keyid:83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:69:bd:57:09:e0:6e:bd:f3:3b:04:a1:ff:ef:c5:e6:84:64: fe:a7:7e:42:49:83:b0:fd:2e:8a:58:3c:37:d4:f0:11:ad:2c: 14:e9:99:e9:7f:f2:21:a2:02:5c:18:fb:4a:4a:f8:33:82:46: 63:08:64:bc:98:05:39:c2:53:f1:9f:8a:2d:44:89:32:8c:6e: 5f:1c:ba:09:89:7d:de:28:c2:35:61:44:b9:77:b5:d7:5b:94: d2:fb:4e:7a:dd:32:23:15:27:f5:6e:8a:e6:d6:6f:11:df:34: 39:8c:cf:5b:bb:fa:34:fe:8d:06:b6:34:f6:bd:22:e0:b6:74: 6b:88:49:ba:bd:68:23:93:30:a0:e6:db:91:67:4d:5a:89:75: 5c:55:ea:a0:36:6f:78:34:cb:b6:8d:2c:5d:5d:f5:ce:0b:49: 8b:2a:14:2a:d5:86:48:eb:b4:44:16:5e:c6:e8:d7:d9:23:7a: 46:73:8c:a3:59:96:8f:1e:e1:d3:ff:54:5d:bf:19:b1:17:5e: 79:b3:4f:6a:4d:8c:de:86:74:49:16:9d:29:83:cc:68:42:c6: 42:79:61:17:7e:91:58:a3:e0:78:09:8d:81:d5:44:85:2e:75: c7:1a:b8:dd:81:84:dd:10:64:1c:66:25:e3:bb:50:ee:05:20: 7d:a9:81:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnmA1JXPHowz0exsCkvDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDc2ZjNhYjNlZmFhNjMyOGYwYTM4ZmNmNGE3Zjk2MzAw NGI3NzcwHhcNMjUxMjE4MDQwMTA2WhcNMjUxMjE5MDQwMTA2WjAzMTEwLwYDVQQD Eyg3ODJkMzliNTYyMGViNWExYmI3ZmU3OGI3NGViNjdkMDc5MGQxNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LTmWWhcJqC3kv6seT7M5hSkdy5D NcoL3l9nRe2R0UQQRw6yCm4+btRpipbTtU61LKk5UcnCdnMsDhrVojwVCo7kRORD HkGsffcuQIG3nJhLaO3TVlLa8f2kgRA/0bOALrOicUR+Zz5Mkt6pMzwbqq2TSePQ CUyz3Ja+oVPAUQ/Rg8NYf7OyBwcvKS0HptF4sDq+WkkCnTNcBinHtWchKDQZC0VE owmFbpeYDS9ucRKJDC9Rf5h7dAfXpqPbUthjG14rMRGvOM0DMTVRYq8W4+PQiV/P akgmxQgTn/tfYBp/LeKejjv37WXHrpmLMz4veGe2e9d194v8GINkxqksCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgtObViDrWhu3/ni3TrZ9B5DRZ8MB8GA1UdIwQY MBaAFIMHbzqz76pjKPCjj89Kf5YwBLd3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iODhlMGMtMjRjZi00ZmVjLWIxMTgt OWE2ZGYzOTU5MmM3LzEvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iODhlMGMtMjRjZi00ZmVjLWIxMTgtOWE2ZGYzOTU5MmM3 LzEvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2m9Vwng br3zOwSh/+/F5oRk/qd+QkmDsP0uilg8N9TwEa0sFOmZ6X/yIaICXBj7Skr4M4JG YwhkvJgFOcJT8Z+KLUSJMoxuXxy6CYl93ijCNWFEuXe111uU0vtOet0yIxUn9W6K 5tZvEd80OYzPW7v6NP6NBrY09r0i4LZ0a4hJur1oI5MwoObbkWdNWol1XFXqoDZv eDTLto0sXV31zgtJiyoUKtWGSOu0RBZexujX2SN6RnOMo1mWjx7h0/9UXb8ZsRde ebNPak2M3oZ0SRadKYPMaELGQnlhF36RWKPgeAmNgdVEhS51xxq43YGE3RBkHGYl 47tQ7gUgfamBCQ== -----END CERTIFICATE-----Generated at Thu Dec 18 10:25:58 2025 by rpki-client