This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json) Hash identifier: IDTvwiO/34Zno/+r0jo6LDx67tV/Qv2Zl11t+CCZy5Y= Subject key identifier: 60:16:49:8B:CB:EB:0E:2A:4D:9D:E7:47:16:88:8F:F0:77:13:DB:8C Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b Certificate serial: 019B48B8DE08A28D3345327C60FC1C495996 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft Manifest number: 048C Signing time: Tue 23 Dec 2025 01:00:32 +0000 Manifest this update: Tue 23 Dec 2025 01:00:32 +0000 Manifest next update: Wed 24 Dec 2025 01:00:32 +0000 Files and hashes: 1: E6h98msuHIDDEo3EuNbedKUfRUE.roa (hash: LlRZmkIkDMo4tzcCd8AIz4o5Zg0OyytYjPKbff5wXqs=) 2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: VC880O+kWV8Pz1RAObCHfl8d4Ido6Ai98Zf5J6BeITc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b8:de:08:a2:8d:33:45:32:7c:60:fc:1c:49:59:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b Validity Not Before: Dec 23 01:00:32 2025 GMT Not After : Dec 24 01:00:32 2025 GMT Subject: CN=6016498bcbeb0e2a4d9de74716888ff07713db8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:a6:61:25:b3:73:0b:a4:2f:f6:66:a4:df: 93:85:5a:e5:c3:9d:71:b8:0e:82:a6:b8:d1:00:e8: 47:d8:2f:01:95:44:0e:bd:c7:4e:0b:31:b4:f6:10: 81:7e:b5:c1:f7:8d:ee:b3:20:31:fb:47:97:0e:1a: 5f:9c:2b:41:0f:78:68:03:54:ee:15:cf:c1:fa:54: 49:84:5a:c6:d5:35:51:14:d2:77:b2:4b:9e:d7:cb: 57:ab:84:7c:6a:77:14:ff:0b:b5:fd:e5:b7:30:22: 5c:e7:c6:3e:6b:4d:3d:86:35:6a:1a:af:82:bd:ba: a6:c2:ee:b8:4a:42:54:79:e8:4c:99:64:d4:89:ae: 3a:15:6b:ae:f5:df:1a:94:1d:3c:90:26:1b:d6:bf: 60:94:66:ca:9d:cb:67:60:f8:f3:96:d5:59:9d:ea: 6a:ef:9e:0e:ed:98:ae:23:7d:44:59:77:34:6e:50: bc:05:a7:a4:89:dd:75:c3:a7:65:f9:15:2a:f3:b5: 6a:25:29:75:ba:b2:14:a4:e8:f9:c2:a9:51:fa:d2: d0:71:8f:32:0e:d4:a3:03:9d:f2:f9:32:95:d9:54: f1:9a:45:27:61:82:12:2a:c0:42:73:99:52:09:ae: 59:a8:78:91:9e:a6:0f:11:3e:21:98:8d:15:6b:06: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:16:49:8B:CB:EB:0E:2A:4D:9D:E7:47:16:88:8F:F0:77:13:DB:8C X509v3 Authority Key Identifier: keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:34:6e:26:eb:a1:40:da:d6:6a:b3:a1:43:28:77:8b:9a:da: e7:e2:6d:2a:df:55:04:48:88:2d:44:0d:73:1b:64:75:66:fd: 46:02:94:86:d1:7a:cd:ac:c2:5d:eb:3d:12:2f:4d:73:a5:10: 13:8e:69:37:86:c3:93:cc:c7:71:7a:20:f6:68:be:bb:4b:e3: a0:0d:42:42:94:d2:fc:d5:c9:24:85:86:8d:64:79:64:6d:05: 46:a4:68:10:06:69:4c:08:b9:ad:79:65:7e:b6:fa:a1:14:f5: a8:22:36:9d:6a:02:82:78:11:e8:08:60:1a:38:70:dc:02:47: 10:80:ff:11:7d:e7:1c:dd:ef:12:fc:b6:4e:cb:27:92:42:0b: ee:96:b6:97:7b:c1:cc:b5:03:fa:9b:16:0a:28:7f:0f:a8:e9: b5:ca:5c:0d:2c:28:9b:b4:a8:fe:c9:7e:7e:0f:ef:60:6f:00: bd:17:41:f0:fd:9f:64:6d:af:2d:2c:0b:a4:2f:aa:89:c2:f0: 13:18:96:02:fd:3c:40:84:ac:34:7d:36:15:8b:a3:32:34:b1: 3c:29:64:6d:e6:e6:74:7e:f9:a4:9b:73:23:cd:c0:9a:eb:1e: 46:80:12:74:a9:16:19:f7:88:f2:ed:d1:75:54:a3:11:4b:b8: aa:14:d2:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuN4Ioo0zRTJ8YPwcSVmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDdhNTIyNGFlNmQ5YTkyZTQ3ZTY1NmRkODAxYjEwZmZi OTA3MmIwHhcNMjUxMjIzMDEwMDMyWhcNMjUxMjI0MDEwMDMyWjAzMTEwLwYDVQQD Eyg2MDE2NDk4YmNiZWIwZTJhNGQ5ZGU3NDcxNjg4OGZmMDc3MTNkYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W6mYSWzcwukL/ZmpN+ThVrlw51x uA6CprjRAOhH2C8BlUQOvcdOCzG09hCBfrXB943usyAx+0eXDhpfnCtBD3hoA1Tu Fc/B+lRJhFrG1TVRFNJ3skue18tXq4R8ancU/wu1/eW3MCJc58Y+a009hjVqGq+C vbqmwu64SkJUeehMmWTUia46FWuu9d8alB08kCYb1r9glGbKnctnYPjzltVZnepq 754O7ZiuI31EWXc0blC8Baekid11w6dl+RUq87VqJSl1urIUpOj5wqlR+tLQcY8y DtSjA53y+TKV2VTxmkUnYYISKsBCc5lSCa5ZqHiRnqYPET4hmI0VawYBZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAWSYvL6w4qTZ3nRxaIj/B3E9uMMB8GA1UdIwQY MBaAFIMHpSJK5tmpLkfmVt2AGxD/uQcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUt OGJmYWNhZTQ2NGY5LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUtOGJmYWNhZTQ2NGY5 LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDRuJuuh QNrWarOhQyh3i5ra5+JtKt9VBEiILUQNcxtkdWb9RgKUhtF6zazCXes9Ei9Nc6UQ E45pN4bDk8zHcXog9mi+u0vjoA1CQpTS/NXJJIWGjWR5ZG0FRqRoEAZpTAi5rXll frb6oRT1qCI2nWoCgngR6AhgGjhw3AJHEID/EX3nHN3vEvy2TssnkkIL7pa2l3vB zLUD+psWCih/D6jptcpcDSwom7So/sl+fg/vYG8AvRdB8P2fZG2vLSwLpC+qicLw ExiWAv08QISsNH02FYujMjSxPClkbebmdH75pJtzI83AmuseRoASdKkWGfeI8u3R dVSjEUu4qhTSxw== -----END CERTIFICATE-----Generated at Tue Dec 23 05:32:02 2025 by rpki-client