This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft File: Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json) Hash identifier: 2uFPui4TcYcrbo4Dm5EwcxpWkFSaAB6XCZO2Z8kVqWA= Subject key identifier: 2A:23:1A:D2:05:D2:51:FA:DC:EC:3B:9F:9E:1A:BB:50:97:43:DA:57 Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E Certificate issuer: /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e Certificate serial: 019B7A4A060CB6F3838B67566E856A9A7CD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft Manifest number: 08EA Signing time: Thu 01 Jan 2026 16:00:30 +0000 Manifest this update: Thu 01 Jan 2026 16:00:30 +0000 Manifest next update: Fri 02 Jan 2026 16:00:30 +0000 Files and hashes: 1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: 0+KZG2W4YhcMIPHc+Uo9J/ABeaVDRZDCNycM55ZaYOc=) 2: WB9kjcUG_eK70F_25abwXmjO6D0.roa (hash: jo9Io4lvr31QdGnhzj2S5UeQzPHc2sTqLWFX7n7f+po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4a:06:0c:b6:f3:83:8b:67:56:6e:85:6a:9a:7c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e Validity Not Before: Jan 1 16:00:30 2026 GMT Not After : Jan 2 16:00:30 2026 GMT Subject: CN=2a231ad205d251fadcec3b9f9e1abb509743da57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:42:b6:03:55:7d:e5:d4:c6:b5:09:32:b5:14: 8f:ae:00:f4:3a:88:3b:3a:8e:24:db:46:4f:6b:fc: 9d:8f:5c:f4:a8:7e:7e:f0:39:0a:87:00:32:71:d6: 65:35:61:a7:91:d7:07:dd:ac:1b:d0:fd:53:53:02: 7b:4b:b8:e8:3f:d8:00:18:4e:9d:4b:be:66:97:00: b9:55:87:9a:d0:b3:65:4b:e2:e2:ec:26:9e:46:af: fb:af:aa:2b:96:6a:07:40:0c:37:15:8b:28:49:80: ea:a9:c9:f3:77:8a:aa:ba:cb:eb:25:ab:5e:ce:b4: 74:a5:35:d0:df:f5:f7:fe:8b:03:a2:52:3b:52:22: fa:82:6e:5f:6f:dd:49:7f:4e:59:93:19:98:7a:6a: 4d:54:ae:cf:43:98:c4:81:f1:b9:be:12:19:d3:ab: af:18:20:c3:d7:f2:c5:4f:bc:97:50:70:e7:9f:c9: 87:93:96:a0:43:d5:bd:1a:c5:1a:16:e6:68:6c:54: c6:3c:4d:05:1a:8d:92:4e:9c:b1:e6:93:3b:e1:e3: 1b:dc:2e:35:79:e3:44:d4:54:a3:19:1d:67:95:2a: 91:bb:01:ef:f5:59:fa:85:91:91:c9:65:3c:2a:72: 0e:f6:e9:0b:f1:76:08:34:90:41:6f:b1:22:1a:5f: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:23:1A:D2:05:D2:51:FA:DC:EC:3B:9F:9E:1A:BB:50:97:43:DA:57 X509v3 Authority Key Identifier: keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b5:ff:97:0f:81:c0:2b:42:ce:90:a9:8e:73:6e:d2:cb:3b: fe:3d:71:ed:ca:0a:75:80:1a:21:3b:73:49:cc:62:50:e2:ec: e0:7a:35:4a:e7:11:4e:7f:f0:88:be:58:91:bc:e5:fc:1b:eb: 58:74:10:36:76:32:28:a9:62:2f:5d:da:be:cc:a6:a4:9c:b2: 4e:92:df:1c:fd:04:cc:8d:55:c8:27:98:fa:2b:28:07:25:55: 46:73:60:60:17:bb:67:03:83:39:3b:42:27:e0:92:3d:f3:0b: de:a6:b2:c2:34:9c:4e:5f:ef:70:ff:72:4d:0b:59:f2:ef:4d: 26:06:15:3d:97:39:cc:ed:96:ff:70:44:6a:25:7d:e0:05:94: b4:62:64:42:5f:d1:0a:26:c6:56:9c:f4:9c:85:e7:1b:e2:b2: 7c:d7:a5:d6:44:9d:f9:bf:76:37:2e:75:45:1e:cc:8c:5f:11: b1:81:9e:ba:48:dd:f7:97:e7:69:fc:f5:31:8a:4c:af:98:26: a9:64:c6:ff:dd:ed:8a:10:45:01:6e:47:d3:4c:9f:8d:be:c7: 4c:68:c2:f7:06:e0:18:67:55:ab:3f:c2:21:e7:23:31:bc:7b: d7:b4:3e:fe:ce:1d:54:6c:ee:fa:f3:23:72:ef:8e:df:2c:5f: b1:94:95:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6SgYMtvODi2dWboVqmnzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMGUxNWMxNWFlNzAzYTg5NzkwNDZhZjVkZWNjNDkzMmVk YzdmNmUwHhcNMjYwMTAxMTYwMDMwWhcNMjYwMTAyMTYwMDMwWjAzMTEwLwYDVQQD EygyYTIzMWFkMjA1ZDI1MWZhZGNlYzNiOWY5ZTFhYmI1MDk3NDNkYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEK2A1V95dTGtQkytRSPrgD0Oog7 Oo4k20ZPa/ydj1z0qH5+8DkKhwAycdZlNWGnkdcH3awb0P1TUwJ7S7joP9gAGE6d S75mlwC5VYea0LNlS+Li7CaeRq/7r6orlmoHQAw3FYsoSYDqqcnzd4qqusvrJate zrR0pTXQ3/X3/osDolI7UiL6gm5fb91Jf05ZkxmYempNVK7PQ5jEgfG5vhIZ06uv GCDD1/LFT7yXUHDnn8mHk5agQ9W9GsUaFuZobFTGPE0FGo2STpyx5pM74eMb3C41 eeNE1FSjGR1nlSqRuwHv9Vn6hZGRyWU8KnIO9ukL8XYINJBBb7EiGl8TGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCojGtIF0lH63Ow7n54au1CXQ9pXMB8GA1UdIwQY MBaAFBsOFcFa5wOol5BGr13sxJMu3H9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEt ZDFkNmMzZjkyZmZiLzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEtZDFkNmMzZjkyZmZi LzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLX/lw+B wCtCzpCpjnNu0ss7/j1x7coKdYAaITtzScxiUOLs4Ho1SucRTn/wiL5Ykbzl/Bvr WHQQNnYyKKliL13avsympJyyTpLfHP0EzI1VyCeY+isoByVVRnNgYBe7ZwODOTtC J+CSPfML3qaywjScTl/vcP9yTQtZ8u9NJgYVPZc5zO2W/3BEaiV94AWUtGJkQl/R CibGVpz0nIXnG+KyfNel1kSd+b92Ny51RR7MjF8RsYGeukjd95fnafz1MYpMr5gm qWTG/93tihBFAW5H00yfjb7HTGjC9wbgGGdVqz/CIecjMbx717Q+/s4dVGzu+vMj cu+O3yxfsZSVdA== -----END CERTIFICATE-----Generated at Thu Jan 1 19:46:48 2026 by rpki-client