This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json) Hash identifier: tZ5Eeu+lOVq204nx+KnGO6+dFt9A8inn1Tw4K2NL/oY= Subject key identifier: 38:5E:4D:0F:D9:A9:B2:10:C4:22:E4:7B:DF:90:0E:46:8B:DB:30:BE Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc Certificate serial: 019AF0BED8D4CD377B961A038793BB211C15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft Manifest number: 1765 Signing time: Fri 05 Dec 2025 23:00:30 +0000 Manifest this update: Fri 05 Dec 2025 23:00:30 +0000 Manifest next update: Sat 06 Dec 2025 23:00:30 +0000 Files and hashes: 1: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: Oxp1EWWMs1Q6unlJDLqO4Z5acvGw4INvuBO8OgePXJg=) 2: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=) 3: qhrn4XED21rcdTWtZqv2cxNR9pc.roa (hash: VjyxWUWPzC0itKJGCfRlXwbzUVrhfNTBkQCDP20QLmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:d8:d4:cd:37:7b:96:1a:03:87:93:bb:21:1c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc Validity Not Before: Dec 5 23:00:30 2025 GMT Not After : Dec 6 23:00:30 2025 GMT Subject: CN=385e4d0fd9a9b210c422e47bdf900e468bdb30be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:d6:81:77:c4:5f:ae:ed:21:d0:dd:5e:f2: 9f:c6:d7:29:70:19:73:93:82:47:0b:61:b0:2a:4c: 8e:a2:e9:87:b7:5e:60:eb:36:fb:02:b4:83:0e:37: ae:a6:38:d8:b9:18:63:68:3e:92:92:55:9e:0e:f0: 1f:be:10:fb:d2:de:08:77:84:ef:54:f4:05:94:36: 4a:b0:17:19:58:6c:37:cf:4e:c3:ec:18:72:83:34: cb:03:23:56:fe:88:8e:5c:22:92:b1:70:38:7e:cd: 49:e1:7d:fb:92:e5:9f:76:85:f6:44:49:81:f5:6f: 9f:da:07:34:87:df:b3:74:37:80:85:08:14:7b:01: d3:22:6c:2f:ff:5d:71:7b:d9:ba:bf:b4:a6:db:91: 1d:6c:e5:d0:64:6c:30:8e:96:57:e4:0b:b3:7b:59: 82:86:32:5a:b1:a6:09:f8:60:3f:f0:28:32:cb:27: 40:ca:4b:92:46:61:a0:d4:9f:16:38:42:9b:64:5f: 4b:7d:a8:d1:a1:21:56:6b:87:86:a0:51:a9:00:2c: 36:51:9a:f6:dc:e1:44:92:29:c9:c4:a6:0f:c7:d4: 9c:9c:bd:a0:8f:a2:34:65:60:6f:8a:49:c1:a4:de: bd:ed:58:7c:9a:a6:21:09:2f:44:53:d4:ec:7c:6c: 8f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5E:4D:0F:D9:A9:B2:10:C4:22:E4:7B:DF:90:0E:46:8B:DB:30:BE X509v3 Authority Key Identifier: keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:73:f4:8f:cf:3b:85:be:63:f8:bc:9c:8c:20:a5:8d:08:56: 33:ca:bf:63:b9:19:ec:88:83:5e:28:a5:ba:f6:da:68:e4:34: fa:69:89:03:0b:77:28:a6:1d:2b:11:65:f1:16:e3:d4:f9:48: 00:6a:6c:f7:0d:fd:ac:9e:5d:b5:a8:22:f3:f5:8c:25:37:bb: 93:f9:f5:ef:42:1d:e3:5a:0c:51:82:fd:61:fe:5f:dd:e6:33: 64:c2:b5:4d:1d:32:5a:58:99:88:d2:4d:17:95:4a:df:d0:85: 7f:3b:22:46:15:33:db:56:6a:e1:a2:f9:b7:c9:3b:0d:32:19: 86:fa:82:30:40:01:45:db:68:22:fb:db:c7:cd:8c:a2:df:36: 15:00:f7:20:e4:9d:02:3c:20:1d:88:72:b5:23:52:06:18:85: 13:5d:04:8f:83:99:14:8a:a9:72:21:b9:ef:b4:57:25:d0:e9: 92:35:7b:6e:c2:c3:33:bf:ed:33:ec:2f:6b:8e:90:24:f4:7f: 8e:08:77:63:0a:b7:69:d0:11:30:c8:12:b2:8f:eb:7f:d9:b7: fe:2a:63:be:2a:d4:65:0d:91:7e:6a:e1:8a:5e:d7:88:ec:54: 3e:a2:22:f1:5c:3f:b8:fd:06:7e:f2:7e:ec:ff:d0:76:d2:21: 17:33:f0:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtjUzTd7lhoDh5O7IRwVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzY4ZTcwMjY5ZGU2NjBjYmMxNGRmOWM3NjNiMDE4Nzg4 YTFmZmMwHhcNMjUxMjA1MjMwMDMwWhcNMjUxMjA2MjMwMDMwWjAzMTEwLwYDVQQD EygzODVlNGQwZmQ5YTliMjEwYzQyMmU0N2JkZjkwMGU0NjhiZGIzMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy/WgXfEX67tIdDdXvKfxtcpcBlz k4JHC2GwKkyOoumHt15g6zb7ArSDDjeupjjYuRhjaD6SklWeDvAfvhD70t4Id4Tv VPQFlDZKsBcZWGw3z07D7BhygzTLAyNW/oiOXCKSsXA4fs1J4X37kuWfdoX2REmB 9W+f2gc0h9+zdDeAhQgUewHTImwv/11xe9m6v7Sm25EdbOXQZGwwjpZX5Auze1mC hjJasaYJ+GA/8CgyyydAykuSRmGg1J8WOEKbZF9LfajRoSFWa4eGoFGpACw2UZr2 3OFEkinJxKYPx9ScnL2gj6I0ZWBviknBpN697Vh8mqYhCS9EU9TsfGyPpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDheTQ/ZqbIQxCLke9+QDkaL2zC+MB8GA1UdIwQY MBaAFBs2jnAmneZgy8FN+cdjsBh4ih/8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUt NjA5NTFlOTc1ODhjLzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUtNjA5NTFlOTc1ODhj LzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXP0j887 hb5j+LycjCCljQhWM8q/Y7kZ7IiDXiiluvbaaOQ0+mmJAwt3KKYdKxFl8Rbj1PlI AGps9w39rJ5dtagi8/WMJTe7k/n170Id41oMUYL9Yf5f3eYzZMK1TR0yWliZiNJN F5VK39CFfzsiRhUz21Zq4aL5t8k7DTIZhvqCMEABRdtoIvvbx82Mot82FQD3IOSd AjwgHYhytSNSBhiFE10Ej4OZFIqpciG577RXJdDpkjV7bsLDM7/tM+wva46QJPR/ jgh3Ywq3adARMMgSso/rf9m3/ipjvirUZQ2Rfmrhil7XiOxUPqIi8Vw/uP0GfvJ+ 7P/QdtIhFzPwVg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:42:25 2025 by rpki-client