This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft File: gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json) Hash identifier: ayemWpL108QZtinGN8KzNRL2uJyUiwJ8A+uE7Cs89bo= Subject key identifier: 7E:94:3C:EF:D2:50:54:E1:C6:5A:DC:39:B9:3D:5C:E2:3E:2D:A3:40 Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae Certificate serial: 019AF42E4A2F7273BDC62788F1D21926ECD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft Manifest number: 11B2 Signing time: Sat 06 Dec 2025 15:01:05 +0000 Manifest this update: Sat 06 Dec 2025 15:01:05 +0000 Manifest next update: Sun 07 Dec 2025 15:01:05 +0000 Files and hashes: 1: 20-9mytYHMHndruQgUnF8ikroR8.roa (hash: 2lr50ig6vbMmIzHsYNAhFoZOypQ5RbpTRGyrByTCT20=) 2: fI8A3CovPrmNEuNSOd5whasfei4.roa (hash: vdsVJdsI5nRx6IGPnIMOMSeTTdkDkOzyswcHJNq1lig=) 3: g1EKkeORDxQo9Cif76DEx1ayRZo.roa (hash: vbPzjHWrPv/5Wuh7IZWDGYTkmh23maqwjvKxVVDLrlI=) 4: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: oUNHry2s91TOnngv7uwh+cvipCnSBg3BBCfdueo/FSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:4a:2f:72:73:bd:c6:27:88:f1:d2:19:26:ec:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae Validity Not Before: Dec 6 15:01:05 2025 GMT Not After : Dec 7 15:01:05 2025 GMT Subject: CN=7e943cefd25054e1c65adc39b93d5ce23e2da340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:6c:37:9c:1a:10:bb:1d:53:b9:01:01:77: e4:31:bb:16:98:cd:55:15:5b:c0:c9:ee:f1:b4:e0: 9e:76:f6:db:a8:36:45:cb:fa:8f:7d:04:06:7c:9c: 97:45:01:b2:cd:fe:be:63:7e:0d:c2:85:cf:1e:ae: 3a:d3:4e:a3:95:62:a1:ff:f4:6c:4c:92:23:71:ec: da:7d:c5:d9:95:fd:8a:e2:f1:83:c6:41:d9:81:cb: 5b:95:1c:f5:18:9f:e0:c4:cd:81:6b:73:04:a6:05: b9:bf:78:d8:d7:dd:b0:f9:95:c4:83:c6:d4:d2:67: 87:4d:b8:2b:4f:fd:c5:ef:04:fe:59:9a:f3:c6:dc: d7:c4:5d:83:49:2e:de:59:4d:f7:72:ac:eb:b5:46: fc:78:12:38:b8:b9:a0:4d:c1:7f:25:2d:6c:e4:b3: 74:d5:66:52:db:1f:87:3f:3c:69:56:1a:82:ea:84: 42:70:b9:54:16:69:c1:06:f5:07:7f:8b:65:af:9a: d9:15:44:5f:d9:e4:ed:05:da:43:67:f8:ac:10:08: 95:14:b5:c6:22:42:d7:02:e7:b5:f2:fd:ab:51:d4: 58:2b:64:5d:6c:a6:f1:c7:f5:48:b3:13:aa:02:46: 0e:55:54:68:07:bd:cd:ed:dc:2e:89:69:2e:e9:65: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:94:3C:EF:D2:50:54:E1:C6:5A:DC:39:B9:3D:5C:E2:3E:2D:A3:40 X509v3 Authority Key Identifier: keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b2:67:88:3e:2e:61:2f:1d:42:f6:12:4e:10:7c:58:d2:b8: e6:82:9e:99:21:63:5e:26:84:38:6f:69:44:58:61:48:08:35: f3:24:0d:f1:cc:38:67:87:34:98:74:92:dd:22:22:66:1d:93: 39:53:fd:a4:98:e9:3d:75:26:ab:ca:6c:9e:a4:65:36:01:0b: 1a:79:2c:1c:f7:c6:33:18:df:fa:21:ed:21:cf:3c:c2:e2:b7: 7b:9e:30:bf:be:84:72:06:d0:8c:0a:d5:ff:7f:41:2e:24:15: e3:61:55:09:3b:1d:4d:25:4b:43:cf:a4:ef:77:31:2b:f6:b3: 37:2b:b4:35:b4:4f:e6:d2:a6:a1:f3:94:92:ab:9b:17:70:a2: 3c:4c:20:96:2d:d2:32:2f:f2:cc:7b:7d:2b:89:3f:66:74:08: 9a:22:08:2a:a4:78:13:a5:a4:89:be:04:bc:8b:2b:1e:b7:46: 6a:cf:c4:0f:40:6d:69:72:8a:29:24:13:b3:1a:50:b3:a2:55: cb:bc:f5:5d:4d:74:5a:28:60:83:e4:a2:6a:5f:ea:e2:69:5b: 15:66:24:9f:d3:00:7d:85:ed:5f:aa:23:42:5d:df:b0:74:e2: 80:28:a3:c8:88:e3:5f:bf:b5:99:bb:22:01:f3:44:2a:81:6d: 34:98:e4:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LkovcnO9xieI8dIZJuzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOWI5N2IyMGNjYjRmNjk2NTE4ZTQ3YzQzNzI1OWE4OTEz ZTcyYWUwHhcNMjUxMjA2MTUwMTA1WhcNMjUxMjA3MTUwMTA1WjAzMTEwLwYDVQQD Eyg3ZTk0M2NlZmQyNTA1NGUxYzY1YWRjMzliOTNkNWNlMjNlMmRhMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum5sN5waELsdU7kBAXfkMbsWmM1V FVvAye7xtOCedvbbqDZFy/qPfQQGfJyXRQGyzf6+Y34NwoXPHq46006jlWKh//Rs TJIjcezafcXZlf2K4vGDxkHZgctblRz1GJ/gxM2Ba3MEpgW5v3jY192w+ZXEg8bU 0meHTbgrT/3F7wT+WZrzxtzXxF2DSS7eWU33cqzrtUb8eBI4uLmgTcF/JS1s5LN0 1WZS2x+HPzxpVhqC6oRCcLlUFmnBBvUHf4tlr5rZFURf2eTtBdpDZ/isEAiVFLXG IkLXAue18v2rUdRYK2RdbKbxx/VIsxOqAkYOVVRoB73N7dwuiWku6WUpUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6UPO/SUFThxlrcObk9XOI+LaNAMB8GA1UdIwQY MBaAFIGbl7IMy09pZRjkfENyWaiRPnKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1p1WHNnekxUMmxsR09SOFEzSlpxSkUtY3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83NzRmMzctMGU1Ny00OWU2LTg4NjUt YTY0YmE0YjhmYTE5LzEvZ1p1WHNnekxUMmxsR09SOFEzSlpxSkUtY3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83NzRmMzctMGU1Ny00OWU2LTg4NjUtYTY0YmE0YjhmYTE5 LzEvZ1p1WHNnekxUMmxsR09SOFEzSlpxSkUtY3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbJniD4u YS8dQvYSThB8WNK45oKemSFjXiaEOG9pRFhhSAg18yQN8cw4Z4c0mHSS3SIiZh2T OVP9pJjpPXUmq8psnqRlNgELGnksHPfGMxjf+iHtIc88wuK3e54wv76EcgbQjArV /39BLiQV42FVCTsdTSVLQ8+k73cxK/azNyu0NbRP5tKmofOUkqubF3CiPEwgli3S Mi/yzHt9K4k/ZnQImiIIKqR4E6Wkib4EvIsrHrdGas/ED0BtaXKKKSQTsxpQs6JV y7z1XU10Wihgg+Sial/q4mlbFWYkn9MAfYXtX6ojQl3fsHTigCijyIjjX7+1mbsi AfNEKoFtNJjksg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:01 2025 by rpki-client