This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json) Hash identifier: SZ45amdOrvnZH+1FnacecF/MeT2pzLqOt4jfZJVaF14= Subject key identifier: 45:A5:08:FD:C8:1E:13:E9:B5:50:5A:67:85:E3:6F:19:1B:60:D4:A1 Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89 Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789 Certificate serial: 019B3A9031F033016FDD4929478FAE279E41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:01:27 +0000 Manifest this update: Sat 20 Dec 2025 07:01:27 +0000 Manifest next update: Sun 21 Dec 2025 07:01:27 +0000 Files and hashes: 1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: txTpf3U+l3v8okvT9doWEB/jeSSHrsTOYBb/D7LLN9o=) 2: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (hash: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=) 3: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (hash: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:31:f0:33:01:6f:dd:49:29:47:8f:ae:27:9e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789 Validity Not Before: Dec 20 07:01:27 2025 GMT Not After : Dec 21 07:01:27 2025 GMT Subject: CN=45a508fdc81e13e9b5505a6785e36f191b60d4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dc:61:8c:de:2f:39:64:d3:97:b2:b1:e6:d9: f8:4d:89:28:e9:5e:b7:16:c3:6b:35:5b:53:13:cc: 0d:67:f2:c5:42:8b:fc:ed:d7:20:25:12:ca:9c:9f: fe:34:0c:b2:2f:46:48:9b:45:90:a5:09:11:9a:61: ea:3e:c9:66:90:25:c7:d0:0f:9e:1a:bf:23:03:bb: c4:5f:d0:7f:77:3b:2a:d4:4d:c9:0a:28:31:93:2e: a2:de:9d:4c:a7:da:9c:48:cf:03:bd:49:70:f6:d6: 5d:40:c5:31:f6:9d:cd:96:73:f2:c7:7b:4c:e5:bb: b8:62:e5:3c:66:f4:8c:b6:5c:6a:97:58:56:4e:0d: cf:86:48:99:0f:5c:3a:88:bd:40:2c:80:28:25:44: 9d:4f:2b:26:21:34:18:a7:8a:f6:fb:51:f0:01:40: 54:c8:08:68:e1:01:df:c7:b3:0f:cc:7f:ab:e0:d7: 95:98:c7:f0:92:3e:79:4f:93:88:85:6e:07:11:0e: 10:e5:39:5d:cb:ae:0f:a2:6a:86:b4:68:81:7a:5b: 59:4e:b3:1d:14:c8:02:dc:74:d2:9d:d3:62:a3:70: b8:eb:c0:6d:7b:ea:1a:01:0b:ea:f1:35:97:f5:a4: 50:6e:9a:8e:65:18:48:f6:6a:8f:e2:bb:16:51:d4: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A5:08:FD:C8:1E:13:E9:B5:50:5A:67:85:E3:6F:19:1B:60:D4:A1 X509v3 Authority Key Identifier: keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1d:29:cb:71:ca:07:de:2b:59:64:9a:ca:c1:3f:da:df:92: e7:38:05:e8:8d:d6:26:52:bd:b8:bf:1f:12:aa:e1:38:4b:6f: e9:04:ad:69:ab:28:37:f0:da:97:2d:e1:9d:b5:c0:9b:4b:88: 5f:36:6a:ed:0d:42:e2:30:72:3d:bb:a2:87:14:78:6a:46:6b: dc:ca:2b:d8:c3:be:d4:86:a5:ad:c6:3f:9c:24:71:27:f4:ed: b2:33:af:79:90:93:cb:a9:4a:26:56:fd:f4:ac:7d:ef:41:a3: 39:ce:63:7e:ec:24:9b:e8:8e:40:78:40:7f:d3:24:ba:22:24: d2:e4:cc:dd:6d:c3:e0:7b:7d:c8:fb:76:ce:27:bf:69:7e:0e: 96:46:6c:ca:2d:cc:ce:65:1a:f8:1b:e8:2e:c2:74:fa:17:72: fc:97:69:a7:42:55:75:dc:89:a2:15:9c:9e:cd:c1:86:53:86: e9:de:c7:df:83:fc:0a:f2:b4:56:9a:65:d8:03:a1:17:31:a4: fd:57:f3:53:ff:88:77:bf:20:ff:aa:4b:e4:f5:51:aa:a2:f2: b5:6a:be:e4:f5:52:71:28:47:43:aa:08:db:d1:83:33:44:1e: 87:1b:3d:7f:e8:75:53:c4:32:99:71:d3:e6:fa:63:9f:83:e2: 24:72:3c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kDHwMwFv3UkpR4+uJ55BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NjM3OTc2OWM1N2NhNWIyNmEyYzYxZmE1ZDlhY2M1Mjdi ZWE3ODkwHhcNMjUxMjIwMDcwMTI3WhcNMjUxMjIxMDcwMTI3WjAzMTEwLwYDVQQD Eyg0NWE1MDhmZGM4MWUxM2U5YjU1MDVhNjc4NWUzNmYxOTFiNjBkNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNxhjN4vOWTTl7Kx5tn4TYko6V63 FsNrNVtTE8wNZ/LFQov87dcgJRLKnJ/+NAyyL0ZIm0WQpQkRmmHqPslmkCXH0A+e Gr8jA7vEX9B/dzsq1E3JCigxky6i3p1Mp9qcSM8DvUlw9tZdQMUx9p3NlnPyx3tM 5bu4YuU8ZvSMtlxql1hWTg3PhkiZD1w6iL1ALIAoJUSdTysmITQYp4r2+1HwAUBU yAho4QHfx7MPzH+r4NeVmMfwkj55T5OIhW4HEQ4Q5Tldy64PomqGtGiBeltZTrMd FMgC3HTSndNio3C468Bte+oaAQvq8TWX9aRQbpqOZRhI9mqP4rsWUdS07QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWlCP3IHhPptVBaZ4XjbxkbYNShMB8GA1UdIwQY MBaAFBljeXacV8pbJqLGH6XZrMUnvqeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lYTM3NmQtOGVmYy00NDQwLThmNTQt OTQ5YWE1Yjc1YTQ1LzEvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lYTM3NmQtOGVmYy00NDQwLThmNTQtOTQ5YWE1Yjc1YTQ1 LzEvR1dONWRweFh5bHNtb3NZZnBkbXN4U2UtcDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdB0py3HK B94rWWSaysE/2t+S5zgF6I3WJlK9uL8fEqrhOEtv6QStaasoN/Daly3hnbXAm0uI XzZq7Q1C4jByPbuihxR4akZr3Mor2MO+1IalrcY/nCRxJ/TtsjOveZCTy6lKJlb9 9Kx970GjOc5jfuwkm+iOQHhAf9MkuiIk0uTM3W3D4Ht9yPt2zie/aX4OlkZsyi3M zmUa+BvoLsJ0+hdy/Jdpp0JVddyJohWcns3BhlOG6d7H34P8CvK0Vppl2AOhFzGk /VfzU/+Id78g/6pL5PVRqqLytWq+5PVScShHQ6oI29GDM0Qehxs9f+h1U8QymXHT 5vpjn4PiJHI83Q== -----END CERTIFICATE-----Generated at Sat Dec 20 14:09:24 2025 by rpki-client