This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json) Hash identifier: V6H7WUj1sT8lLRbhdMoAUhaYc+Ke2i15juzBH+lcCds= Subject key identifier: D7:0E:74:DA:EA:22:08:48:C7:C6:82:92:13:C5:12:59:9F:35:2B:0D Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498 Certificate serial: 019AF163ED5C5E7B48505FA766DFEC499D40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft Manifest number: 0399 Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=) 2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: ulfWaW7oZ1o+Y4//1Cnr+tr/TO0PtBmEEbldOpvwlp8=) 3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ed:5c:5e:7b:48:50:5f:a7:66:df:ec:49:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498 Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=d70e74daea220848c7c6829213c512599f352b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ee:1d:9f:07:54:f5:d3:f2:50:95:7e:e9:60: e7:7e:83:72:8b:44:2d:95:41:7c:0d:c3:94:bc:36: 9e:ab:ea:c6:4a:2f:6c:e4:5a:f4:66:2f:e8:17:f3: ce:6c:f5:80:6a:3c:b5:2b:aa:df:d4:dd:f1:2a:24: 78:2d:0b:d6:71:59:dd:2f:0d:93:0b:12:7e:69:99: a0:99:93:0a:17:2c:3a:34:ab:ff:8f:8c:81:22:af: 51:6c:87:c6:ae:6a:eb:7e:48:47:de:db:eb:a0:6c: 85:89:f9:c2:9e:ed:bf:c6:4e:75:ea:82:a4:ce:e1: 47:b1:a2:aa:5b:98:bd:93:b3:fd:0c:5b:7a:6c:d7: 82:69:b1:8c:8f:d5:be:e0:94:eb:28:72:77:b3:34: a4:74:33:df:7a:dc:bf:a4:a2:4f:58:d2:52:01:9e: 75:70:03:47:e1:75:5b:f5:20:68:b9:0d:cf:99:15: e1:1a:32:83:48:e5:01:3a:5b:d1:45:04:5f:25:4d: 21:cf:7c:be:91:3f:10:e9:0a:88:7f:ff:db:98:5b: 4c:e1:06:93:28:ef:a5:cd:f3:1a:01:41:ac:c5:92: 1d:8f:43:16:d5:23:c2:2d:20:c5:70:96:aa:22:88: 91:ab:81:46:95:76:1b:97:4b:07:b3:cd:10:1b:71: c0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0E:74:DA:EA:22:08:48:C7:C6:82:92:13:C5:12:59:9F:35:2B:0D X509v3 Authority Key Identifier: keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:77:5b:3b:5d:60:3f:6b:df:ca:d0:f5:78:b3:03:83:69:ae: 7b:9a:b2:13:3e:21:bc:db:41:52:28:71:6e:be:c3:a7:a1:0f: 5c:98:51:29:1b:52:cc:35:cd:89:36:40:3b:c9:c2:49:94:a7: 01:92:34:67:80:c2:2c:79:b6:39:49:dd:b1:9c:11:ad:87:18: 80:48:19:b8:20:8f:a4:1d:a4:c5:38:b2:70:81:59:1c:66:c4: f1:ea:b4:41:8b:73:d7:57:4c:61:37:6b:76:4b:4f:fd:74:db: e6:5c:62:d2:fb:d3:73:fb:54:79:7e:81:3a:1b:2b:e7:c2:93: ce:a4:33:30:0a:b7:92:31:69:8d:b2:63:1e:ab:f2:3f:75:3d: 81:27:86:00:93:0c:98:e8:74:3b:a5:86:06:f9:f5:e9:0d:f9: f1:f6:dc:3f:8e:df:22:fa:ca:0b:ab:bb:b7:ce:1a:ba:ee:3b: 12:a5:fc:e3:05:69:50:62:cd:f9:5a:9b:c3:85:83:ef:77:14: a8:1b:01:08:45:d8:36:68:93:98:c2:b4:b3:cb:15:88:a7:74: 04:3e:93:3b:d0:d8:10:5b:ed:54:4e:cf:38:bf:01:de:b7:db: 92:bb:fc:4a:22:68:b4:d4:93:3c:ef:ba:42:72:53:d4:96:84: 8a:40:f0:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+1cXntIUF+nZt/sSZ1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx MzM0OTgwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD EyhkNzBlNzRkYWVhMjIwODQ4YzdjNjgyOTIxM2M1MTI1OTlmMzUyYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9u4dnwdU9dPyUJV+6WDnfoNyi0Qt lUF8DcOUvDaeq+rGSi9s5Fr0Zi/oF/PObPWAajy1K6rf1N3xKiR4LQvWcVndLw2T CxJ+aZmgmZMKFyw6NKv/j4yBIq9RbIfGrmrrfkhH3tvroGyFifnCnu2/xk516oKk zuFHsaKqW5i9k7P9DFt6bNeCabGMj9W+4JTrKHJ3szSkdDPfety/pKJPWNJSAZ51 cANH4XVb9SBouQ3PmRXhGjKDSOUBOlvRRQRfJU0hz3y+kT8Q6QqIf//bmFtM4QaT KO+lzfMaAUGsxZIdj0MW1SPCLSDFcJaqIoiRq4FGlXYbl0sHs80QG3HAmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcOdNrqIghIx8aCkhPFElmfNSsNMB8GA1UdIwQY MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt NDZhZjNlNTBjMDUyLzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAandbO11g P2vfytD1eLMDg2mue5qyEz4hvNtBUihxbr7Dp6EPXJhRKRtSzDXNiTZAO8nCSZSn AZI0Z4DCLHm2OUndsZwRrYcYgEgZuCCPpB2kxTiycIFZHGbE8eq0QYtz11dMYTdr dktP/XTb5lxi0vvTc/tUeX6BOhsr58KTzqQzMAq3kjFpjbJjHqvyP3U9gSeGAJMM mOh0O6WGBvn16Q358fbcP47fIvrKC6u7t84auu47EqX84wVpUGLN+Vqbw4WD73cU qBsBCEXYNmiTmMK0s8sViKd0BD6TO9DYEFvtVE7POL8B3rfbkrv8SiJotNSTPO+6 QnJT1JaEikDwVg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:14 2025 by rpki-client