This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json) Hash identifier: hPhIYhT08LGfxAnPlkXPkoIpjqMPJfKVIEPjcEfFq4o= Subject key identifier: 17:0A:76:57:77:95:11:14:FD:F9:D2:C8:E3:E0:F9:5F:0A:63:45:3A Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4 Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4 Certificate serial: 019AF3C077BC5B88D14D23A30F24AEF7C457 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 13:01:08 +0000 Manifest this update: Sat 06 Dec 2025 13:01:08 +0000 Manifest next update: Sun 07 Dec 2025 13:01:08 +0000 Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: Qo32pNNlyQDxfcaDcWSxV4YwdHk2hP24s2hZ0patn+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:77:bc:5b:88:d1:4d:23:a3:0f:24:ae:f7:c4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4 Validity Not Before: Dec 6 13:01:08 2025 GMT Not After : Dec 7 13:01:08 2025 GMT Subject: CN=170a765777951114fdf9d2c8e3e0f95f0a63453a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:8e:1f:f6:5d:74:63:67:41:73:82:fd:ed: bb:89:9b:c8:cb:68:83:f5:14:f0:08:67:e9:c9:97: 82:53:7a:9c:8b:5c:a4:2e:c9:91:c8:e5:3e:dc:2c: b2:d1:fe:ad:85:57:68:f1:93:e5:46:58:f8:06:cf: a2:a2:0b:43:2a:47:dc:4b:34:26:5e:01:dd:eb:f1: df:5b:f4:b4:35:cd:87:65:78:cd:22:56:38:45:cb: b6:62:a8:6c:1b:33:52:91:a4:fa:1f:e7:6b:bb:2f: e3:86:ee:73:d4:15:7d:83:c1:b1:6f:39:25:55:c7: 33:67:c7:e5:58:44:f4:20:5d:78:9c:d9:0d:23:10: 5d:3b:ff:ac:43:8c:63:25:0f:8d:5c:f9:f0:80:36: a1:b6:a8:ad:ab:9f:d2:9f:68:2f:7e:82:fd:6b:e0: c3:55:3d:70:60:93:4c:47:6a:50:15:31:9e:ba:f2: 61:c3:5c:e1:fe:49:41:f6:42:a6:4d:97:81:ce:ce: 55:20:4d:9c:11:f4:2d:1f:3b:36:0f:1a:8e:9b:12: 6a:8d:c2:62:22:90:22:2a:5b:4f:f0:f4:23:ff:11: 5a:90:47:84:df:22:a7:04:77:e9:f2:a3:ca:d2:a0: 19:95:c2:24:0e:37:b8:fd:a2:9d:47:4c:1b:84:de: c6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0A:76:57:77:95:11:14:FD:F9:D2:C8:E3:E0:F9:5F:0A:63:45:3A X509v3 Authority Key Identifier: keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:14:08:19:72:b7:6e:37:c0:21:23:9c:78:60:4d:7c:a0:c4: 22:7d:7e:cb:66:3d:91:7b:04:7a:39:ea:e8:0d:4e:df:3a:6e: 42:36:2d:87:a5:aa:76:69:f8:25:b8:67:0c:0c:db:78:d0:7a: ba:8d:4b:cc:6f:52:63:65:f4:cc:03:86:b7:e5:87:06:d7:43: 69:99:fe:5d:06:c4:f6:c8:2f:1f:55:1f:4c:55:d6:67:2c:de: 69:b7:22:1d:8d:a5:cc:61:dd:c2:ec:92:f1:71:5e:70:e4:5b: a5:ee:91:23:f4:2c:d5:38:74:37:9c:0d:e1:47:6d:79:2f:96: 85:f5:e5:5c:34:76:95:ab:88:a0:eb:d3:e6:ac:d1:73:0f:11: 97:54:1e:8b:71:e5:7a:d2:3f:81:7f:92:72:a7:0a:f1:0e:87: 7c:aa:c0:3f:56:2d:e9:7c:92:d7:6c:82:d8:fb:86:c2:19:a5: 71:a3:8b:24:0e:a2:ec:70:57:f9:60:f5:8b:76:b1:80:13:30: 0b:80:a4:aa:cf:69:9f:fc:15:ba:39:d1:a7:c5:d4:d7:0b:9f: 7f:36:03:b6:f3:fe:d8:05:ae:e9:eb:99:10:8f:20:51:8a:8c: 84:b9:a0:43:e6:cc:ce:b4:42:ca:de:fe:e2:5b:64:e0:03:89: 6c:73:9e:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHe8W4jRTSOjDySu98RXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTlhNDI2MDBmYjY0MGJlYjVlMzNkMGVhYjhmZTRlOTUz MTFjZTQwHhcNMjUxMjA2MTMwMTA4WhcNMjUxMjA3MTMwMTA4WjAzMTEwLwYDVQQD EygxNzBhNzY1Nzc3OTUxMTE0ZmRmOWQyYzhlM2UwZjk1ZjBhNjM0NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuqOH/ZddGNnQXOC/e27iZvIy2iD 9RTwCGfpyZeCU3qci1ykLsmRyOU+3Cyy0f6thVdo8ZPlRlj4Bs+iogtDKkfcSzQm XgHd6/HfW/S0Nc2HZXjNIlY4Rcu2YqhsGzNSkaT6H+druy/jhu5z1BV9g8Gxbzkl VcczZ8flWET0IF14nNkNIxBdO/+sQ4xjJQ+NXPnwgDahtqitq5/Sn2gvfoL9a+DD VT1wYJNMR2pQFTGeuvJhw1zh/klB9kKmTZeBzs5VIE2cEfQtHzs2DxqOmxJqjcJi IpAiKltP8PQj/xFakEeE3yKnBHfp8qPK0qAZlcIkDje4/aKdR0wbhN7GJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcKdld3lREU/fnSyOPg+V8KY0U6MB8GA1UdIwQY MBaAFBmZpCYA+2QL614z0Oq4/k6VMRzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pta0pnRDdaQXZyWGpQUTZyai1UcFV4SE9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hOTE2MDgtYzMyMi00MWZiLTliMDAt YzU0MDE0ZTFjMjlhLzEvR1pta0pnRDdaQXZyWGpQUTZyai1UcFV4SE9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hOTE2MDgtYzMyMi00MWZiLTliMDAtYzU0MDE0ZTFjMjlh LzEvR1pta0pnRDdaQXZyWGpQUTZyai1UcFV4SE9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThQIGXK3 bjfAISOceGBNfKDEIn1+y2Y9kXsEejnq6A1O3zpuQjYth6Wqdmn4JbhnDAzbeNB6 uo1LzG9SY2X0zAOGt+WHBtdDaZn+XQbE9sgvH1UfTFXWZyzeabciHY2lzGHdwuyS 8XFecORbpe6RI/Qs1Th0N5wN4UdteS+WhfXlXDR2lauIoOvT5qzRcw8Rl1Qei3Hl etI/gX+ScqcK8Q6HfKrAP1Yt6XyS12yC2PuGwhmlcaOLJA6i7HBX+WD1i3axgBMw C4Ckqs9pn/wVujnRp8XU1wuffzYDtvP+2AWu6euZEI8gUYqMhLmgQ+bMzrRCyt7+ 4ltk4AOJbHOeSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:53:19 2025 by rpki-client