This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json) Hash identifier: eGE/S+CUsaf23p9nPyPU/A6fOxvw4IKTF8+eGrbKb68= Subject key identifier: F1:E8:A5:21:9A:64:8B:44:94:AC:0E:13:0C:10:C1:6A:9D:7A:F1:60 Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b Certificate serial: 019B318CCCF06F2475A786212F5FA3E2169B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft Manifest number: 0480 Signing time: Thu 18 Dec 2025 13:01:09 +0000 Manifest this update: Thu 18 Dec 2025 13:01:09 +0000 Manifest next update: Fri 19 Dec 2025 13:01:09 +0000 Files and hashes: 1: E6h98msuHIDDEo3EuNbedKUfRUE.roa (hash: LlRZmkIkDMo4tzcCd8AIz4o5Zg0OyytYjPKbff5wXqs=) 2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: imvqFL2BtXAczKo0ApeiEhwIckqaVBYvxwsZVM1G/CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:cc:f0:6f:24:75:a7:86:21:2f:5f:a3:e2:16:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b Validity Not Before: Dec 18 13:01:09 2025 GMT Not After : Dec 19 13:01:09 2025 GMT Subject: CN=f1e8a5219a648b4494ac0e130c10c16a9d7af160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:44:09:d1:7a:89:c9:ad:10:38:68:ef:99: be:75:f1:ac:2e:cb:ae:c4:a4:a1:0b:16:3f:3e:c1: 78:9c:13:10:f4:47:f9:3f:6f:22:6f:40:e2:8d:64: 63:da:35:a4:60:42:7c:c2:00:75:ff:1b:73:79:0f: 0a:69:7b:e4:c5:3d:4a:b5:ca:4d:aa:9e:2d:e6:91: f5:c6:eb:f7:01:ab:ae:4e:05:e5:15:05:da:67:ed: 0c:1e:6d:e2:23:4b:9e:83:40:db:75:90:4d:43:1f: 45:58:11:f2:65:d1:25:06:f8:7a:1a:28:3c:84:08: 8e:16:86:28:cd:11:8e:54:52:d7:e0:c0:43:fc:49: 05:94:24:6f:6c:91:0a:56:a4:7c:ca:7d:2b:8a:65: 87:65:4e:b5:02:3f:4f:07:4f:96:18:04:84:c2:42: ca:e0:ae:23:ae:ef:d1:38:10:f9:77:fa:e8:5c:65: 37:55:30:9a:a8:14:44:cd:79:46:ea:80:80:0e:08: 6d:4d:c1:6a:58:05:d3:36:9c:fd:4a:de:ff:fe:be: e4:6c:1a:3e:3b:b2:82:ff:a9:7a:01:63:e6:08:d2: ba:09:cc:04:05:07:f1:f9:b1:b6:7d:0f:c1:65:d9: d9:f7:37:91:a1:f2:e3:70:e8:6c:d3:db:06:ce:24: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E8:A5:21:9A:64:8B:44:94:AC:0E:13:0C:10:C1:6A:9D:7A:F1:60 X509v3 Authority Key Identifier: keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ad:03:cc:45:e5:d7:0b:02:d6:74:39:e7:54:26:19:84:09: 82:91:90:59:5d:64:f7:37:83:d1:80:fc:1f:ac:c9:1f:85:f0: ff:54:99:1d:3b:c1:22:af:cb:b1:5e:0f:d8:87:80:80:3e:14: 6c:38:f5:b3:fd:02:c0:a6:41:9a:2f:c5:3b:8e:84:01:0b:ba: 95:aa:43:19:3d:76:27:5b:ec:a5:3a:85:79:71:52:b0:82:62: da:b8:df:56:57:85:a8:1e:82:11:c0:b1:fa:95:70:09:d9:17: 2c:c5:40:d3:da:71:1e:ea:de:1e:d8:60:05:1a:56:8e:b0:26: b6:71:cf:17:61:c0:28:ac:d5:08:fc:c5:d2:6f:df:38:4b:1e: dd:1d:8d:44:ff:0d:c9:da:67:8f:36:b6:fa:eb:22:49:c3:72: 0b:3f:8e:e0:64:ab:a8:fa:c7:aa:f4:20:fe:38:1d:cd:fb:2e: 70:c8:f5:d0:7e:45:d1:5d:9d:99:9f:3d:55:ab:74:b0:b3:54: 08:1c:f9:e0:72:5a:26:fe:7d:ae:de:b5:76:ba:80:5e:e8:c0: 8d:be:49:8e:ba:76:f5:e6:43:9c:72:2c:da:2d:74:c2:88:3a: f5:e0:bc:9a:63:ff:b4:c3:e2:1b:8d:bb:80:0b:83:6c:52:0d: 6c:f4:44:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjMzwbyR1p4YhL1+j4habMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDdhNTIyNGFlNmQ5YTkyZTQ3ZTY1NmRkODAxYjEwZmZi OTA3MmIwHhcNMjUxMjE4MTMwMTA5WhcNMjUxMjE5MTMwMTA5WjAzMTEwLwYDVQQD EyhmMWU4YTUyMTlhNjQ4YjQ0OTRhYzBlMTMwYzEwYzE2YTlkN2FmMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVZECdF6icmtEDho75m+dfGsLsuu xKShCxY/PsF4nBMQ9Ef5P28ib0DijWRj2jWkYEJ8wgB1/xtzeQ8KaXvkxT1KtcpN qp4t5pH1xuv3AauuTgXlFQXaZ+0MHm3iI0ueg0DbdZBNQx9FWBHyZdElBvh6Gig8 hAiOFoYozRGOVFLX4MBD/EkFlCRvbJEKVqR8yn0rimWHZU61Aj9PB0+WGASEwkLK 4K4jru/ROBD5d/roXGU3VTCaqBREzXlG6oCADghtTcFqWAXTNpz9St7//r7kbBo+ O7KC/6l6AWPmCNK6CcwEBQfx+bG2fQ/BZdnZ9zeRofLjcOhs09sGziTMywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHopSGaZItElKwOEwwQwWqdevFgMB8GA1UdIwQY MBaAFIMHpSJK5tmpLkfmVt2AGxD/uQcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUt OGJmYWNhZTQ2NGY5LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUtOGJmYWNhZTQ2NGY5 LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq0DzEXl 1wsC1nQ551QmGYQJgpGQWV1k9zeD0YD8H6zJH4Xw/1SZHTvBIq/LsV4P2IeAgD4U bDj1s/0CwKZBmi/FO46EAQu6lapDGT12J1vspTqFeXFSsIJi2rjfVleFqB6CEcCx +pVwCdkXLMVA09pxHureHthgBRpWjrAmtnHPF2HAKKzVCPzF0m/fOEse3R2NRP8N ydpnjza2+usiScNyCz+O4GSrqPrHqvQg/jgdzfsucMj10H5F0V2dmZ89Vat0sLNU CBz54HJaJv59rt61drqAXujAjb5Jjrp29eZDnHIs2i10wog69eC8mmP/tMPiG427 gAuDbFINbPRE9w== -----END CERTIFICATE-----Generated at Thu Dec 18 18:34:57 2025 by rpki-client