This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft File: gCNZN6302riSXVgEWjNxgWyYBTE.mft (raw, json) Hash identifier: A+ClEpVTGJK5FiY/smbS/Zi0BMDLzDOiRMTmG50ExUQ= Subject key identifier: 1D:35:0A:BF:18:80:FC:40:35:2A:2F:D3:10:F1:4A:67:FC:E2:A2:12 Authority key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31 Certificate issuer: /CN=80235937adf4dab8925d58045a3371816c980531 Certificate serial: 019AF2AD7B69E6C4477707B2689E6789086E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft Manifest number: 0946 Signing time: Sat 06 Dec 2025 08:00:46 +0000 Manifest this update: Sat 06 Dec 2025 08:00:46 +0000 Manifest next update: Sun 07 Dec 2025 08:00:46 +0000 Files and hashes: 1: gCNZN6302riSXVgEWjNxgWyYBTE.crl (hash: fw7t4n4uHGsek4UmgONfUiK9+gMUdg7ViCQGQCviL7s=) 2: xGfGnzNZn4HUZigqa5Ok1nkmfsE.roa (hash: XpFkMfmlY0imCtGtKPRW/lTcymGc5XbfGzDPyUvzl8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7b:69:e6:c4:47:77:07:b2:68:9e:67:89:08:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80235937adf4dab8925d58045a3371816c980531 Validity Not Before: Dec 6 08:00:46 2025 GMT Not After : Dec 7 08:00:46 2025 GMT Subject: CN=1d350abf1880fc40352a2fd310f14a67fce2a212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:de:78:ff:0d:82:29:10:78:5a:7c:e6:da:97: fe:7f:1b:0e:3b:46:af:80:3b:14:f7:f5:36:b2:93: c1:35:1c:98:17:ee:fb:e4:09:f4:5d:66:e7:25:8e: 0d:79:ab:cd:32:33:96:1e:1d:ef:e2:c5:6c:25:3a: e0:a7:21:a2:42:cb:cf:cd:7e:ca:c5:f7:6f:84:34: 58:28:ee:e5:45:17:e5:73:5e:54:bb:3b:2e:5c:ed: 9b:dc:5d:51:83:9e:f3:1d:c3:d3:0c:01:9c:1f:4a: b6:92:e8:a0:51:36:99:c2:95:64:17:c8:c1:3f:ea: 3c:62:fc:bd:ca:9d:1a:d0:d5:5f:4b:3e:0d:0f:50: 13:63:17:1f:61:9d:72:e8:72:c3:5d:d6:30:d7:da: ec:91:84:e4:b6:f3:e8:18:40:a7:36:73:6c:70:c8: ee:97:4d:75:a9:ca:b3:0b:d7:69:dc:95:9a:7f:eb: 55:54:ca:52:31:af:28:a6:cb:c0:e5:bb:40:aa:97: fb:db:4a:8c:6b:39:a2:a5:04:86:33:dc:9d:63:fe: 2c:4c:43:c7:7e:48:08:73:8b:4d:2b:3a:1f:3e:1c: f9:2f:12:7e:ea:96:bf:ee:8f:ca:00:34:02:ce:4c: 10:3a:74:c2:3f:dd:28:da:9a:77:fa:bd:9c:03:b5: 81:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:35:0A:BF:18:80:FC:40:35:2A:2F:D3:10:F1:4A:67:FC:E2:A2:12 X509v3 Authority Key Identifier: keyid:80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:38:d8:92:8b:2d:d1:f9:65:b6:84:34:a1:be:77:db:3f:e3: a1:ae:f1:cc:72:11:3a:5b:c6:23:3b:94:b3:13:8b:ec:a2:4f: 4a:4e:32:a5:3c:e5:7c:a7:91:ad:45:3d:9e:0b:7a:d4:15:5a: 21:e7:3e:58:70:6f:6e:d4:1f:e2:5f:6b:c6:13:7c:98:70:7b: 08:38:5f:23:4a:3a:e8:c8:56:cc:02:0c:ff:30:85:26:b1:84: d4:eb:40:af:03:a3:4e:69:49:23:c7:98:75:27:36:cd:da:e0: 9d:9b:82:ba:fb:1d:4b:9b:fd:0d:e8:b7:d3:af:96:f2:14:5f: 83:1a:c3:61:c1:c8:e9:76:a4:e8:28:07:e4:7b:34:82:01:85: 05:eb:04:44:52:8f:4f:18:8b:41:be:06:7c:be:58:d4:51:50: ab:29:57:3f:80:9b:12:73:73:85:7d:1c:84:a3:f6:ea:59:54: 18:f5:76:a0:f0:6b:88:c5:f2:3d:3a:09:9e:72:9e:2e:3c:f2: 9d:91:1c:83:5f:d4:da:7b:0e:62:6e:bb:11:1a:af:1b:2c:fa: f8:9d:93:6f:60:eb:16:fd:ca:84:72:ea:c6:73:3f:1e:7a:81: f4:b1:2b:a6:a6:da:ac:09:e1:ee:f6:22:3a:80:f9:24:05:95: cd:b3:92:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXtp5sRHdweyaJ5niQhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMjM1OTM3YWRmNGRhYjg5MjVkNTgwNDVhMzM3MTgxNmM5 ODA1MzEwHhcNMjUxMjA2MDgwMDQ2WhcNMjUxMjA3MDgwMDQ2WjAzMTEwLwYDVQQD EygxZDM1MGFiZjE4ODBmYzQwMzUyYTJmZDMxMGYxNGE2N2ZjZTJhMjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn954/w2CKRB4Wnzm2pf+fxsOO0av gDsU9/U2spPBNRyYF+775An0XWbnJY4NeavNMjOWHh3v4sVsJTrgpyGiQsvPzX7K xfdvhDRYKO7lRRflc15UuzsuXO2b3F1Rg57zHcPTDAGcH0q2kuigUTaZwpVkF8jB P+o8Yvy9yp0a0NVfSz4ND1ATYxcfYZ1y6HLDXdYw19rskYTktvPoGECnNnNscMju l011qcqzC9dp3JWaf+tVVMpSMa8opsvA5btAqpf720qMazmipQSGM9ydY/4sTEPH fkgIc4tNKzofPhz5LxJ+6pa/7o/KADQCzkwQOnTCP90o2pp3+r2cA7WBiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB01Cr8YgPxANSov0xDxSmf84qISMB8GA1UdIwQY MBaAFIAjWTet9Nq4kl1YBFozcYFsmAUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0NOWk42MzAycmlTWFZnRVdqTnhnV3lZQlRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNjIzODItOTlkZC00N2Q0LThkZTQt MWZlNjkxMmY4ZTdlLzEvZ0NOWk42MzAycmlTWFZnRVdqTnhnV3lZQlRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9mNjIzODItOTlkZC00N2Q0LThkZTQtMWZlNjkxMmY4ZTdl LzEvZ0NOWk42MzAycmlTWFZnRVdqTnhnV3lZQlRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzjYkost 0flltoQ0ob532z/joa7xzHIROlvGIzuUsxOL7KJPSk4ypTzlfKeRrUU9ngt61BVa Iec+WHBvbtQf4l9rxhN8mHB7CDhfI0o66MhWzAIM/zCFJrGE1OtArwOjTmlJI8eY dSc2zdrgnZuCuvsdS5v9Dei306+W8hRfgxrDYcHI6Xak6CgH5Hs0ggGFBesERFKP TxiLQb4GfL5Y1FFQqylXP4CbEnNzhX0chKP26llUGPV2oPBriMXyPToJnnKeLjzy nZEcg1/U2nsOYm67ERqvGyz6+J2Tb2DrFv3KhHLqxnM/HnqB9LErpqbarAnh7vYi OoD5JAWVzbOSMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:34:52 2025 by rpki-client