This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json) Hash identifier: p7DfIeAVAAnVhOPyXJ1TqxjpnH9jHOCQSsx97qwAQS8= Subject key identifier: 86:FC:DF:F6:40:A2:B8:30:98:7E:27:33:CC:75:60:A6:FE:49:3D:BE Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498 Certificate serial: 019BF6F5CC4E077FFAA7D9A1291F6267C7BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft Manifest number: 0421 Signing time: Sun 25 Jan 2026 21:01:02 +0000 Manifest this update: Sun 25 Jan 2026 21:01:02 +0000 Manifest next update: Mon 26 Jan 2026 21:01:02 +0000 Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: 4B70oLLTn7Dy6jhKFOT29/G7wHlDvtOXjZAWgrqVKaw=) 2: gdwYYL9CsGDFTkAuG8S2liyK-r0.roa (hash: S6etNmQi4pEy1ZdQxxbNiQYv530X1B2bmlUtb5h29UQ=) 3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:cc:4e:07:7f:fa:a7:d9:a1:29:1f:62:67:c7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498 Validity Not Before: Jan 25 21:01:02 2026 GMT Not After : Jan 26 21:01:02 2026 GMT Subject: CN=86fcdff640a2b830987e2733cc7560a6fe493dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:53:81:2a:ba:b2:f2:38:1f:11:93:d7:81: ab:ee:84:23:f9:34:b7:87:0f:9d:37:86:45:8e:2e: cd:e9:fb:49:77:70:83:4f:18:0a:e8:c5:0e:45:0b: b1:51:2a:f6:ab:cf:ee:a8:c5:d4:ff:ea:88:6d:f4: d6:b7:e0:4e:bb:88:36:5b:d3:c6:46:f2:d8:4e:3a: ef:6c:fa:8c:fc:72:b1:6c:0e:70:56:46:5c:ba:ca: b9:b2:7d:c2:1b:a4:c3:d2:68:d6:43:4f:fd:cc:8c: 9e:98:52:4c:78:70:e2:3a:a5:6a:16:ad:22:b7:b2: 8c:b0:58:3d:41:b4:a5:ff:ab:d0:6e:86:1d:f1:2f: ba:f1:e7:3e:da:51:85:fb:81:bd:d4:6b:99:d4:76: 86:f1:aa:35:88:bf:0e:29:31:a7:38:b9:20:f1:e5: 51:cc:09:8b:3f:ee:d2:01:66:f5:a2:7d:fa:4d:55: 7f:ee:69:e4:99:8f:8a:3f:aa:20:5f:7b:1d:3f:c1: 03:d7:b2:3c:73:ba:49:85:80:c3:31:77:dc:39:2e: 4f:7b:56:41:74:f0:5c:89:a9:cb:5c:20:49:64:b2: ec:4d:b3:61:35:6c:1d:78:0b:3b:7a:d3:8c:fd:48: 70:68:02:e3:5b:e0:ae:96:52:66:5f:4f:ac:6f:1f: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FC:DF:F6:40:A2:B8:30:98:7E:27:33:CC:75:60:A6:FE:49:3D:BE X509v3 Authority Key Identifier: keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:73:60:c6:d8:ad:14:88:df:0b:f3:65:ab:e1:97:53:d9:ca: 2d:a0:a2:b7:59:e3:82:89:a5:7f:e6:02:17:6d:23:9d:cc:9f: b0:24:5e:df:b4:71:6b:4e:e7:9c:89:42:d9:f8:0d:fc:48:85: f0:d4:fb:17:c7:41:b7:90:e1:71:50:d2:49:32:ea:9e:0b:33: 75:d9:ea:07:3c:e8:6f:f9:0e:04:28:76:35:62:e4:b2:19:a3: 8f:83:34:bf:5c:ba:8e:c7:e7:e8:39:4e:cb:51:45:6a:e4:ac: c3:d5:10:67:6e:63:ea:f2:29:9a:7c:62:a4:b5:07:bb:e9:14: ea:4b:be:3f:c9:ca:2b:f9:fa:d3:42:ab:fd:bc:94:e9:1b:0a: d2:04:32:ce:86:8e:89:3d:da:ea:be:7c:a7:a7:ae:68:cd:37: 3d:70:b9:0d:b5:e0:02:04:77:a4:1a:77:d3:89:5a:78:d4:3d: e3:99:ac:c2:c7:79:f8:21:ed:4e:91:cd:20:57:a8:2f:7b:b6: 63:91:36:80:b4:22:b9:db:bd:4e:16:28:60:3e:13:79:50:d9: 4f:d0:d6:1d:b0:f6:a7:fa:03:6a:a1:ac:2f:24:3d:8c:3f:cb: 5a:82:be:da:42:02:ea:14:d0:bd:01:ee:7f:60:3c:b0:e4:b4: b8:42:40:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29cxOB3/6p9mhKR9iZ8e8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx MzM0OTgwHhcNMjYwMTI1MjEwMTAyWhcNMjYwMTI2MjEwMTAyWjAzMTEwLwYDVQQD Eyg4NmZjZGZmNjQwYTJiODMwOTg3ZTI3MzNjYzc1NjBhNmZlNDkzZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMpTgSq6svI4HxGT14Gr7oQj+TS3 hw+dN4ZFji7N6ftJd3CDTxgK6MUORQuxUSr2q8/uqMXU/+qIbfTWt+BOu4g2W9PG RvLYTjrvbPqM/HKxbA5wVkZcusq5sn3CG6TD0mjWQ0/9zIyemFJMeHDiOqVqFq0i t7KMsFg9QbSl/6vQboYd8S+68ec+2lGF+4G91GuZ1HaG8ao1iL8OKTGnOLkg8eVR zAmLP+7SAWb1on36TVV/7mnkmY+KP6ogX3sdP8ED17I8c7pJhYDDMXfcOS5Pe1ZB dPBcianLXCBJZLLsTbNhNWwdeAs7etOM/UhwaALjW+CullJmX0+sbx++awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIb83/ZAorgwmH4nM8x1YKb+ST2+MB8GA1UdIwQY MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt NDZhZjNlNTBjMDUyLzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHNgxtit FIjfC/Nlq+GXU9nKLaCit1njgomlf+YCF20jncyfsCRe37Rxa07nnIlC2fgN/EiF 8NT7F8dBt5DhcVDSSTLqngszddnqBzzob/kOBCh2NWLkshmjj4M0v1y6jsfn6DlO y1FFauSsw9UQZ25j6vIpmnxipLUHu+kU6ku+P8nKK/n600Kr/byU6RsK0gQyzoaO iT3a6r58p6euaM03PXC5DbXgAgR3pBp304laeNQ945mswsd5+CHtTpHNIFeoL3u2 Y5E2gLQiudu9ThYoYD4TeVDZT9DWHbD2p/oDaqGsLyQ9jD/LWoK+2kIC6hTQvQHu f2A8sOS0uEJA3A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:07 2026 by rpki-client