This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json) Hash identifier: TI9ux38rTgezBxvf8ZgbJpNKbOagf846jYKgi6Cgh5c= Subject key identifier: E1:91:70:26:C2:7C:C7:89:47:99:E5:FC:50:91:5C:DA:51:E4:54:F5 Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df Certificate serial: 019AF68A60A6799F266D16B9B22757EB649A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 02:00:55 +0000 Manifest this update: Sun 07 Dec 2025 02:00:55 +0000 Manifest next update: Mon 08 Dec 2025 02:00:55 +0000 Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: lUZszjam+K47JpaCl2LuZCIlliV1M1Oa+d1SHl3OMaA=) 2: SOh-9AAaSpzRiCALvSALovJFWu8.roa (hash: Tovu+fswKVdq06B1Pl/w9wlU78BC7j3d4snPXyqHjIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:60:a6:79:9f:26:6d:16:b9:b2:27:57:eb:64:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df Validity Not Before: Dec 7 02:00:55 2025 GMT Not After : Dec 8 02:00:55 2025 GMT Subject: CN=e1917026c27cc7894799e5fc50915cda51e454f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:81:d9:28:b6:c5:47:a5:1d:be:4b:48:19:44: 24:01:3c:fb:1c:c9:26:62:6e:61:a0:26:fc:e9:dd: ec:84:c0:f9:e6:ac:94:7e:7c:77:61:4b:e5:68:05: 53:90:39:c2:36:63:ca:b3:53:77:5d:06:e4:ae:ed: 39:49:00:66:39:9e:de:d7:b2:40:08:52:c0:fe:cf: 9a:d6:cb:1c:7c:f0:2a:2b:0c:77:72:77:27:4b:c1: 0b:aa:95:a6:86:e0:10:1e:d6:3c:7a:be:98:ab:60: 1d:9d:3f:10:c8:bd:77:2c:de:4b:9f:79:5e:2f:7b: 93:8d:1d:02:08:1a:97:99:0e:9c:09:38:f6:63:68: 6c:ac:dc:61:10:90:ef:0a:86:ce:ca:14:cc:e7:bd: 35:b2:90:1f:cc:2a:bd:2b:fc:0d:69:9c:ce:e2:7e: e3:5f:b3:9a:f2:c0:f7:89:9c:c8:1e:d6:6f:e1:fa: 9d:92:c4:9c:83:d2:a3:2b:7f:f3:83:61:68:40:75: 73:49:5b:45:bb:b2:a0:59:b1:5b:b4:8a:18:79:41: 66:f7:a6:9c:83:84:9c:a3:19:31:31:3e:0e:78:72: 6a:17:35:fd:69:80:10:50:24:fc:d1:79:05:bd:63: 14:51:7e:8d:d9:a5:23:ab:5f:41:71:31:77:02:6a: fc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:91:70:26:C2:7C:C7:89:47:99:E5:FC:50:91:5C:DA:51:E4:54:F5 X509v3 Authority Key Identifier: keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c5:f5:f9:f0:06:20:2b:5e:36:45:e8:1d:f4:ca:0b:3d:0a: b7:ec:f8:aa:73:97:81:12:1a:87:a5:7d:33:23:00:d2:ad:94: ea:f8:d2:3f:5b:23:b1:45:9d:db:72:75:1d:10:ab:cc:85:ce: 4d:17:37:50:7e:12:ee:44:b9:5b:76:da:7b:ab:4c:61:38:80: c3:85:f5:7a:f4:00:67:bc:97:08:c9:1c:9d:9f:19:18:e4:bd: 41:58:cc:2c:fa:19:ae:43:96:2d:7e:be:c5:f4:7d:0f:40:4b: 1c:9a:a6:80:a9:ac:3d:e1:0f:a4:cb:3e:20:aa:24:2f:89:af: 8d:67:ee:e6:38:c3:51:cb:22:e3:2b:09:3a:e0:7f:2a:a8:c1: 9b:8f:5e:a9:db:03:82:58:22:ee:a6:c0:cb:d6:ed:de:1f:40: 9b:37:84:16:2a:6f:01:1b:1d:0e:b5:85:1e:2b:96:45:e7:e5: c5:fc:00:a4:5e:f8:98:47:f5:c6:c4:c5:2c:72:e1:49:40:41: 4c:e6:f4:36:c8:a0:d2:a0:99:a7:0f:2d:e6:ff:ff:58:9d:d1: 5e:5d:e5:fb:81:75:62:b3:53:07:8e:d6:60:8c:ec:92:ba:09: f9:ca:03:5f:59:1f:b8:5a:ac:e1:23:74:e7:b1:e1:db:49:f3: cb:d1:7c:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2imCmeZ8mbRa5sidX62SaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YWNmMDdmMTM1MjIyMjY1OGI3ODllNGZlNDBlYTM4YThh YTcxZGYwHhcNMjUxMjA3MDIwMDU1WhcNMjUxMjA4MDIwMDU1WjAzMTEwLwYDVQQD EyhlMTkxNzAyNmMyN2NjNzg5NDc5OWU1ZmM1MDkxNWNkYTUxZTQ1NGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4HZKLbFR6UdvktIGUQkATz7HMkm Ym5hoCb86d3shMD55qyUfnx3YUvlaAVTkDnCNmPKs1N3XQbkru05SQBmOZ7e17JA CFLA/s+a1sscfPAqKwx3cncnS8ELqpWmhuAQHtY8er6Yq2AdnT8QyL13LN5Ln3le L3uTjR0CCBqXmQ6cCTj2Y2hsrNxhEJDvCobOyhTM5701spAfzCq9K/wNaZzO4n7j X7Oa8sD3iZzIHtZv4fqdksScg9KjK3/zg2FoQHVzSVtFu7KgWbFbtIoYeUFm96ac g4ScoxkxMT4OeHJqFzX9aYAQUCT80XkFvWMUUX6N2aUjq19BcTF3Amr8cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGRcCbCfMeJR5nl/FCRXNpR5FT1MB8GA1UdIwQY MBaAFBms8H8TUiImWLeJ5P5A6jioqnHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMt NzE2YzAzNDdhYTc2LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMtNzE2YzAzNDdhYTc2 LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsX1+fAG ICteNkXoHfTKCz0Kt+z4qnOXgRIah6V9MyMA0q2U6vjSP1sjsUWd23J1HRCrzIXO TRc3UH4S7kS5W3bae6tMYTiAw4X1evQAZ7yXCMkcnZ8ZGOS9QVjMLPoZrkOWLX6+ xfR9D0BLHJqmgKmsPeEPpMs+IKokL4mvjWfu5jjDUcsi4ysJOuB/KqjBm49eqdsD glgi7qbAy9bt3h9AmzeEFipvARsdDrWFHiuWReflxfwApF74mEf1xsTFLHLhSUBB TOb0Nsig0qCZpw8t5v//WJ3RXl3l+4F1YrNTB47WYIzskroJ+coDX1kfuFqs4SN0 57Hh20nzy9F8mA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:21:26 2025 by rpki-client