This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft File: gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft (raw, json) Hash identifier: 3s8yS9/chdRvAMpgjFm2/vHg8eRPo+NNos09CvDZGtM= Subject key identifier: A0:2A:AE:58:DE:F5:EC:CB:B7:C6:86:7C:3E:71:46:D9:3D:15:E1:D0 Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f Certificate serial: 019AF12D59D3D8CB26BDCBDF8CAC199D933E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft Manifest number: 10C3 Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: bNgvelwVPVFr3h5RMUdr0LrSObg.roa (hash: 8+lwoJWYw+/prpcpMbrRUmfEGjzLktOqFPr4MMdHS+M=) 2: gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl (hash: uDKxrz4/hxJKDYTcIAF/b+wdzGU+Z4A9b3sBZ4dcSXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:59:d3:d8:cb:26:bd:cb:df:8c:ac:19:9d:93:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=a02aae58def5eccbb7c6867c3e7146d93d15e1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:18:54:92:33:83:7f:2d:4b:c3:72:42:72: 8d:18:8f:48:30:2a:a5:31:75:74:75:98:67:40:38: c2:cb:0e:32:1d:69:62:71:04:59:36:a0:08:81:fa: a7:66:7b:86:0e:7e:fd:b9:c5:6e:b6:84:37:33:b0: 5c:21:a8:0f:96:5b:6c:a3:90:8e:39:13:d5:8c:6b: a7:6f:35:16:95:26:2a:6c:32:1d:b3:e1:98:9c:a7: 6b:8f:c1:16:a7:e1:4e:d8:e2:05:b4:e7:c0:10:9c: c8:bd:c3:1e:a9:83:09:af:df:12:db:bd:22:0a:b5: e2:93:da:fe:0b:24:06:f3:6a:15:16:d0:fa:a0:87: e5:02:a5:74:e7:a7:33:62:79:4f:c7:c3:c5:28:2e: a8:17:10:3d:66:d7:1c:6d:da:68:4e:e0:03:f2:b0: e9:3f:cf:9a:31:c4:8b:fe:ec:27:cd:ce:c4:11:0b: d7:4c:97:03:0a:77:c1:70:a1:09:b9:c6:e5:c0:4d: 1d:5a:60:0c:d5:79:e1:bf:cd:38:47:32:e4:39:1b: 10:23:78:d7:3c:1f:06:71:9e:8e:64:bd:66:53:25: 9c:93:6c:5e:95:5a:d9:67:c9:43:f5:14:36:0b:40: 78:20:7e:25:df:3e:0f:e8:ad:22:23:0a:44:6e:3f: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2A:AE:58:DE:F5:EC:CB:B7:C6:86:7C:3E:71:46:D9:3D:15:E1:D0 X509v3 Authority Key Identifier: keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:47:8a:0d:9c:ff:75:e3:bc:58:b0:02:eb:f2:c8:a2:50:18: ff:b6:dc:aa:56:f8:27:c8:38:8d:0d:65:14:8d:95:50:1f:de: ee:94:fd:f1:3c:38:e3:47:58:d4:6f:21:59:a5:4f:75:39:71: 9f:06:71:28:c0:c9:96:e4:b5:15:ea:f5:b9:99:cc:bf:3e:7f: 5d:bd:df:01:b6:0c:e5:91:b5:f2:f8:2d:12:da:3f:15:f3:82: 74:e8:f9:e2:73:fd:3d:ff:16:df:fd:84:ca:b6:da:f2:d4:68: b2:eb:ad:14:ab:21:cd:0a:38:db:3d:80:84:d0:4a:b9:3d:bd: 33:97:cd:81:a5:2a:a5:38:48:50:45:f7:59:c7:05:b6:ca:3c: 14:6c:7a:a4:cd:3f:ab:6b:95:e9:11:d4:58:84:a6:1d:7f:06: b5:5b:dc:d9:ac:c3:5d:fa:db:93:b9:c7:88:1b:c2:85:e1:56: 9e:61:0c:db:7a:4a:b2:ac:13:ff:36:b7:55:bc:ec:25:b9:48: 28:d0:33:e5:7f:2f:d8:bd:fc:1a:0e:92:7c:8d:8a:0f:9b:4d: 0e:7b:0d:2c:38:5d:54:51:bd:e2:ba:92:f3:15:d3:27:d6:3d: dc:a5:20:e1:e6:7d:81:0e:2f:99:cb:3e:9b:d8:c4:c3:26:88: 7b:de:46:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVnT2MsmvcvfjKwZnZM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzZjYTE1MWVkNGMzMjNkNDk4ZjA2ZGQ3YzVhZTM5NGNl YWM1OWYwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EyhhMDJhYWU1OGRlZjVlY2NiYjdjNjg2N2MzZTcxNDZkOTNkMTVlMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurYYVJIzg38tS8NyQnKNGI9IMCql MXV0dZhnQDjCyw4yHWlicQRZNqAIgfqnZnuGDn79ucVutoQ3M7BcIagPlltso5CO ORPVjGunbzUWlSYqbDIds+GYnKdrj8EWp+FO2OIFtOfAEJzIvcMeqYMJr98S270i CrXik9r+CyQG82oVFtD6oIflAqV056czYnlPx8PFKC6oFxA9ZtccbdpoTuAD8rDp P8+aMcSL/uwnzc7EEQvXTJcDCnfBcKEJucblwE0dWmAM1Xnhv804RzLkORsQI3jX PB8GcZ6OZL1mUyWck2xelVrZZ8lD9RQ2C0B4IH4l3z4P6K0iIwpEbj+QBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAqrlje9ezLt8aGfD5xRtk9FeHQMB8GA1UdIwQY MBaAFIM2yhUe1MMj1JjwbdfFrjlM6sWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3piS0ZSN1V3eVBVbVBCdDE4V3VPVXpxeFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xZmFjZTEtOWUyOC00ZDg5LWJmNTIt OTE3OTUzMTk4NDVjLzEvZ3piS0ZSN1V3eVBVbVBCdDE4V3VPVXpxeFo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xZmFjZTEtOWUyOC00ZDg5LWJmNTItOTE3OTUzMTk4NDVj LzEvZ3piS0ZSN1V3eVBVbVBCdDE4V3VPVXpxeFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0eKDZz/ deO8WLAC6/LIolAY/7bcqlb4J8g4jQ1lFI2VUB/e7pT98Tw440dY1G8hWaVPdTlx nwZxKMDJluS1Fer1uZnMvz5/Xb3fAbYM5ZG18vgtEto/FfOCdOj54nP9Pf8W3/2E yrba8tRosuutFKshzQo42z2AhNBKuT29M5fNgaUqpThIUEX3WccFtso8FGx6pM0/ q2uV6RHUWISmHX8GtVvc2azDXfrbk7nHiBvCheFWnmEM23pKsqwT/za3VbzsJblI KNAz5X8v2L38Gg6SfI2KD5tNDnsNLDhdVFG94rqS8xXTJ9Y93KUg4eZ9gQ4vmcs+ m9jEwyaIe95GFA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:31 2025 by rpki-client