This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft File: Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json) Hash identifier: S+Lh261R1dQsU9mkMuqc2JAxgv0Bm6Eox4NpVoOGmWM= Subject key identifier: 68:0C:90:DD:45:AC:09:BC:EA:79:D4:C0:9D:E5:CD:00:1F:70:5D:37 Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4 Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4 Certificate serial: 019B44A61721F81C4AB628116144558E01D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft Manifest number: 1765 Signing time: Mon 22 Dec 2025 06:01:34 +0000 Manifest this update: Mon 22 Dec 2025 06:01:34 +0000 Manifest next update: Tue 23 Dec 2025 06:01:34 +0000 Files and hashes: 1: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: kl8CdM97zFa2IEz9A+LJGgw+D+d1ZinGgXyQaxTF4L0=) 2: aF_43DT8_FuRSeutyPS1ou0Qd_Y.roa (hash: RrbF82KQXt3VwJUd+EvcBbcTN6Aiglh/wvfzSoG8RZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:17:21:f8:1c:4a:b6:28:11:61:44:55:8e:01:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4 Validity Not Before: Dec 22 06:01:34 2025 GMT Not After : Dec 23 06:01:34 2025 GMT Subject: CN=680c90dd45ac09bcea79d4c09de5cd001f705d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:5c:cf:6a:99:16:b9:99:c4:9d:6d:ab:8f: 50:2c:c6:77:5d:3a:8c:c1:49:eb:76:8f:27:ad:49: 5f:e0:e7:1d:5e:2f:be:40:04:d4:30:3d:e2:fb:9c: 9d:60:58:d3:e6:ff:d6:90:da:ea:63:36:c6:92:0f: 0a:c5:f4:3d:47:b4:7c:f2:d1:f2:88:27:54:ad:2d: 2a:0f:40:fe:e1:42:18:f3:3c:60:7f:0b:f1:b9:e7: 4d:9f:39:81:3d:8e:9b:8e:7a:f0:1e:46:c9:98:01: c2:d7:ca:c4:39:9b:da:34:61:b4:ab:c0:2d:ec:d4: 61:54:2c:0f:43:d6:a3:3c:c8:9b:57:9e:00:00:85: 8e:f9:28:f5:0c:c4:36:9d:93:50:58:9f:8b:d8:98: 37:c3:50:65:8a:a4:70:36:da:aa:72:76:08:3b:59: 22:61:dc:ef:14:87:bf:af:cc:21:02:18:f5:d6:72: 86:04:dd:5f:46:43:31:a2:44:ca:ea:eb:04:1c:35: 1f:c7:90:d7:ab:89:29:65:13:c8:13:5a:f3:a5:1f: f8:47:6a:be:97:a0:7f:61:a2:b5:1e:46:b4:c7:b7: 92:d3:a3:08:ba:51:59:94:18:c0:4b:95:b1:15:aa: 4c:c8:dc:0d:6f:a7:b4:b8:19:7d:be:7f:b8:74:3a: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:90:DD:45:AC:09:BC:EA:79:D4:C0:9D:E5:CD:00:1F:70:5D:37 X509v3 Authority Key Identifier: keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c6:33:a4:36:9b:03:c7:24:ee:74:99:4e:1e:d6:f7:7b:0c: ab:17:42:d2:fb:8a:41:b1:70:05:a9:04:c9:37:9d:00:fb:77: 05:bf:4b:25:f5:d0:0a:01:fd:b5:55:74:d3:c6:54:c0:b4:ae: 3f:4f:80:08:f5:b4:c2:89:c8:87:5e:e2:2a:de:23:eb:85:d9: 85:96:7d:1d:c1:89:7a:67:b9:84:ca:3f:44:02:69:b8:65:77: 03:57:a7:7a:9f:9c:49:80:57:c3:fb:d1:38:13:57:54:d5:27: 2f:43:c5:a1:54:49:8e:17:1f:08:99:26:67:16:af:7e:34:9b: 5a:61:25:10:88:d4:fc:1a:de:f3:08:ff:45:fd:a1:88:f6:c8: a5:fc:46:4d:ce:7e:9e:93:dd:aa:6f:e3:b1:f5:b0:c6:ab:64: c0:a1:13:e0:e7:13:79:10:06:49:7a:c7:5d:17:4d:34:ab:1e: 08:7f:1f:42:81:c2:3e:ac:8f:0d:b1:9a:a7:12:1c:61:04:c5: 53:cf:21:06:9b:59:d5:07:f9:f0:14:96:94:f1:c4:5c:ec:77: 39:2c:c8:cf:10:03:6c:29:5e:ff:a2:2f:73:26:6f:2e:93:42: 8e:16:d3:d2:2e:2c:a0:ab:c6:b6:85:3b:4c:76:5d:ad:cb:71: de:cd:5c:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEphch+BxKtigRYURVjgHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMGJiNTFhN2I1MzJiZTRkNDRiYTYwNGFlNmUwNjNmMDYz ZjM3ZDQwHhcNMjUxMjIyMDYwMTM0WhcNMjUxMjIzMDYwMTM0WjAzMTEwLwYDVQQD Eyg2ODBjOTBkZDQ1YWMwOWJjZWE3OWQ0YzA5ZGU1Y2QwMDFmNzA1ZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsFcz2qZFrmZxJ1tq49QLMZ3XTqM wUnrdo8nrUlf4OcdXi++QATUMD3i+5ydYFjT5v/WkNrqYzbGkg8KxfQ9R7R88tHy iCdUrS0qD0D+4UIY8zxgfwvxuedNnzmBPY6bjnrwHkbJmAHC18rEOZvaNGG0q8At 7NRhVCwPQ9ajPMibV54AAIWO+Sj1DMQ2nZNQWJ+L2Jg3w1BliqRwNtqqcnYIO1ki YdzvFIe/r8whAhj11nKGBN1fRkMxokTK6usEHDUfx5DXq4kpZRPIE1rzpR/4R2q+ l6B/YaK1Hka0x7eS06MIulFZlBjAS5WxFapMyNwNb6e0uBl9vn+4dDro5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgMkN1FrAm86nnUwJ3lzQAfcF03MB8GA1UdIwQY MBaAFBsLtRp7Uyvk1EumBK5uBj8GPzfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMt ZWVjZWU4OTNjNTI3LzEvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi81ZTZhOGYtMGI3OS00ODk0LWI5MWMtZWVjZWU4OTNjNTI3 LzEvR3d1MUdudFRLLVRVUzZZRXJtNEdQd1lfTjlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcYzpDab A8ck7nSZTh7W93sMqxdC0vuKQbFwBakEyTedAPt3Bb9LJfXQCgH9tVV008ZUwLSu P0+ACPW0wonIh17iKt4j64XZhZZ9HcGJeme5hMo/RAJpuGV3A1enep+cSYBXw/vR OBNXVNUnL0PFoVRJjhcfCJkmZxavfjSbWmElEIjU/Bre8wj/Rf2hiPbIpfxGTc5+ npPdqm/jsfWwxqtkwKET4OcTeRAGSXrHXRdNNKseCH8fQoHCPqyPDbGapxIcYQTF U88hBptZ1Qf58BSWlPHEXOx3OSzIzxADbCle/6IvcyZvLpNCjhbT0i4soKvGtoU7 THZdrctx3s1c2w== -----END CERTIFICATE-----Generated at Mon Dec 22 15:41:45 2025 by rpki-client