This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json) Hash identifier: v367rO4XdfWGFCfuRfrovMWJSnSnsz8/5tYyCjLjjoM= Subject key identifier: 9D:D0:55:AF:C4:1A:4B:80:F3:92:0F:BE:1A:41:9A:08:A4:77:DD:34 Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc Certificate serial: 019B326830C628851457E2E2E2964028FCE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 17:00:47 +0000 Manifest this update: Thu 18 Dec 2025 17:00:47 +0000 Manifest next update: Fri 19 Dec 2025 17:00:47 +0000 Files and hashes: 1: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: QlR0Dk+vRmo9ilEth6NvODh0vVA3BWoVGM5s7dll6bU=) 2: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=) 3: qhrn4XED21rcdTWtZqv2cxNR9pc.roa (hash: VjyxWUWPzC0itKJGCfRlXwbzUVrhfNTBkQCDP20QLmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:30:c6:28:85:14:57:e2:e2:e2:96:40:28:fc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc Validity Not Before: Dec 18 17:00:47 2025 GMT Not After : Dec 19 17:00:47 2025 GMT Subject: CN=9dd055afc41a4b80f3920fbe1a419a08a477dd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e2:35:c8:b4:98:28:98:3c:10:de:af:f8:5c: 91:59:03:b0:a8:48:9b:e5:86:94:37:ec:8a:84:44: 8a:fc:9a:62:e3:49:e4:ef:a4:6a:ba:6f:b4:88:7a: ba:a2:5d:ee:12:ac:b0:65:1d:ab:0b:86:44:db:4c: 05:7c:0f:0f:23:ba:0c:76:70:ee:0f:7b:15:92:11: 66:56:2b:bb:3c:ff:52:79:82:41:d0:2d:7d:98:49: 27:a9:d3:33:3b:66:90:f8:2d:0c:4b:a1:7d:1b:fa: 10:23:e3:8a:1b:a7:bb:d6:f4:12:4f:47:6c:18:5f: 2e:45:c7:f0:44:1c:06:13:aa:a7:1b:05:d2:ae:a6: ad:e3:8b:f4:60:a6:15:bc:c8:6d:d9:71:74:65:ac: 11:3d:61:c6:ce:03:7f:46:03:13:1b:f8:19:02:fe: 95:3d:7b:86:6c:4b:44:b6:c1:4f:48:81:4f:c5:7f: 88:b3:ce:5f:45:d6:db:06:19:81:b2:8a:92:05:72: ef:f9:7a:a7:d8:d2:06:66:9e:74:c5:54:1f:40:8b: 36:3f:ea:c8:21:e3:96:a1:f0:1c:3e:e0:5d:c6:18: 23:93:f9:ca:75:df:9b:18:ad:c5:4e:49:b4:9b:6c: e4:52:fb:11:ca:23:62:c9:42:d6:a6:b6:91:b4:9d: 12:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D0:55:AF:C4:1A:4B:80:F3:92:0F:BE:1A:41:9A:08:A4:77:DD:34 X509v3 Authority Key Identifier: keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6c:f4:e6:68:7d:0d:6c:7e:26:07:c5:ee:aa:2a:2d:03:75: 59:13:f5:ad:db:5e:83:bf:54:65:42:f3:2e:5c:ed:fe:c1:c0: fa:45:23:e2:b7:4d:49:72:39:4a:4f:e0:83:d9:fe:32:2e:1c: fe:e1:b4:6f:90:d5:07:6a:7d:e7:2f:aa:f5:35:26:02:61:e0: 11:cf:f8:a4:b4:7a:c5:c4:06:99:23:30:b0:42:8c:59:69:8c: dc:87:fb:2b:ec:50:ad:a2:4c:0e:f4:6a:7d:e6:7d:37:ea:e3: 58:b6:d1:d5:c4:d0:07:c8:39:92:90:59:44:5e:52:ca:97:30: e8:67:1b:6d:6f:a9:e4:d2:6c:0a:36:ba:a3:b4:2b:ee:ef:d6: b4:4b:57:68:40:13:52:d0:2a:03:7b:48:58:2d:43:1f:6d:dd: 56:fc:76:5b:3d:aa:57:a2:9d:52:63:c6:ca:5c:f0:a5:21:fa: b2:f1:ec:d5:a8:ec:34:38:f9:74:c2:e3:8c:ac:6d:0c:9d:11: 62:84:02:15:29:d6:41:cc:16:4d:ad:d9:f2:54:11:d3:b3:5b: 25:eb:13:7d:62:e8:61:01:3e:80:60:4f:c6:e6:f0:2a:c5:e6: 5f:b9:a8:48:46:1d:68:d5:a8:91:c4:b6:ad:11:d3:58:ca:e3: e1:52:20:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaDDGKIUUV+Li4pZAKPzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzY4ZTcwMjY5ZGU2NjBjYmMxNGRmOWM3NjNiMDE4Nzg4 YTFmZmMwHhcNMjUxMjE4MTcwMDQ3WhcNMjUxMjE5MTcwMDQ3WjAzMTEwLwYDVQQD Eyg5ZGQwNTVhZmM0MWE0YjgwZjM5MjBmYmUxYTQxOWEwOGE0NzdkZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eI1yLSYKJg8EN6v+FyRWQOwqEib 5YaUN+yKhESK/Jpi40nk76Rqum+0iHq6ol3uEqywZR2rC4ZE20wFfA8PI7oMdnDu D3sVkhFmViu7PP9SeYJB0C19mEknqdMzO2aQ+C0MS6F9G/oQI+OKG6e71vQST0ds GF8uRcfwRBwGE6qnGwXSrqat44v0YKYVvMht2XF0ZawRPWHGzgN/RgMTG/gZAv6V PXuGbEtEtsFPSIFPxX+Is85fRdbbBhmBsoqSBXLv+Xqn2NIGZp50xVQfQIs2P+rI IeOWofAcPuBdxhgjk/nKdd+bGK3FTkm0m2zkUvsRyiNiyULWpraRtJ0S0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3QVa/EGkuA85IPvhpBmgikd900MB8GA1UdIwQY MBaAFBs2jnAmneZgy8FN+cdjsBh4ih/8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUt NjA5NTFlOTc1ODhjLzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUtNjA5NTFlOTc1ODhj LzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2z05mh9 DWx+JgfF7qoqLQN1WRP1rdteg79UZULzLlzt/sHA+kUj4rdNSXI5Sk/gg9n+Mi4c /uG0b5DVB2p95y+q9TUmAmHgEc/4pLR6xcQGmSMwsEKMWWmM3If7K+xQraJMDvRq feZ9N+rjWLbR1cTQB8g5kpBZRF5Sypcw6GcbbW+p5NJsCja6o7Qr7u/WtEtXaEAT UtAqA3tIWC1DH23dVvx2Wz2qV6KdUmPGylzwpSH6svHs1ajsNDj5dMLjjKxtDJ0R YoQCFSnWQcwWTa3Z8lQR07NbJesTfWLoYQE+gGBPxubwKsXmX7moSEYdaNWokcS2 rRHTWMrj4VIgKg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:05:31 2025 by rpki-client