This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json) Hash identifier: tWjlslQKYhXQ1wkKwtfi0hNQAj2SJb5gv1sdcOtA1yM= Subject key identifier: 85:CE:6C:DD:98:7F:1C:A6:9B:67:AA:AA:B8:30:00:39:4C:36:20:C0 Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0 Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0 Certificate serial: 019AF23FC9687D6F7D4F9D2B548199009446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft Manifest number: 1625 Signing time: Sat 06 Dec 2025 06:00:57 +0000 Manifest this update: Sat 06 Dec 2025 06:00:57 +0000 Manifest next update: Sun 07 Dec 2025 06:00:57 +0000 Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=) 2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: FfE5zIimXHkBBekA98xsqWq6fCjlUCYn71nr59SQ7ME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c9:68:7d:6f:7d:4f:9d:2b:54:81:99:00:94:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0 Validity Not Before: Dec 6 06:00:57 2025 GMT Not After : Dec 7 06:00:57 2025 GMT Subject: CN=85ce6cdd987f1ca69b67aaaab83000394c3620c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:e9:14:64:d8:0d:18:46:52:40:ba:6c:90: a2:00:c7:fb:4b:01:22:0c:87:51:de:96:6d:34:0c: 8e:71:fb:88:37:d5:1c:12:10:de:a0:40:07:75:c9: 72:eb:16:66:07:94:6f:ae:f1:a3:97:ef:e5:63:89: cc:53:7c:56:bb:03:bf:18:92:90:97:d6:bf:e3:c7: de:34:f2:df:5a:78:fb:b3:08:ff:49:53:80:36:0c: c4:64:31:ae:26:c8:d2:3c:1a:6c:fe:d7:ae:7f:d8: 06:35:b0:3b:c9:72:bd:7f:13:93:8e:75:cc:36:0d: 69:d9:8f:67:91:45:3d:f8:d1:2d:58:9c:70:2d:b7: 17:e4:89:94:29:7b:5e:7e:a9:28:09:0f:28:c8:09: d3:eb:e7:26:a0:8f:e3:18:0e:e5:c7:6b:f0:7a:af: 0f:a6:69:21:47:7e:57:da:c8:69:24:08:38:96:57: 9d:f4:c9:e2:df:3f:c5:78:29:6f:65:d0:47:65:03: 43:dc:84:17:2f:ef:d2:a8:e2:08:88:45:3c:54:e5: a0:16:7d:7d:cd:ce:d5:cd:c4:a2:be:10:2b:86:8d: 0b:17:60:05:fb:8a:d9:2c:d9:08:ae:fd:b3:66:9a: 7a:49:cf:b5:61:98:f1:2a:0c:02:94:49:04:b4:42: a8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CE:6C:DD:98:7F:1C:A6:9B:67:AA:AA:B8:30:00:39:4C:36:20:C0 X509v3 Authority Key Identifier: keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:af:e0:a0:6a:59:19:07:fc:6a:4a:89:fd:51:b1:13:dc:97: 65:e0:b9:e0:81:52:67:54:92:f6:bf:db:92:f9:ed:94:ae:e5: 7e:b2:9d:c0:03:f2:97:ba:e8:55:00:f2:a4:98:c6:7a:d9:21: 78:35:f3:12:7a:42:dd:0a:80:5f:8f:b7:8e:fa:e6:65:7b:8e: 39:35:c3:1b:ca:55:19:1c:2b:35:aa:2d:f6:83:51:6a:f2:e7: c6:7e:1b:e7:c1:84:28:89:3b:59:27:c6:f2:31:92:22:b8:c1: 7a:2c:e1:80:80:74:5e:1d:b2:a8:31:69:c0:cc:c9:6b:34:c0: 11:32:f8:18:92:e3:77:02:98:d8:93:2c:64:0e:28:a7:bc:1d: 43:a5:25:d6:4e:98:fe:0a:84:b3:69:2f:38:fb:76:58:0c:1a: b2:27:78:24:35:79:b6:f5:9f:05:f9:99:58:da:41:53:9c:87: 79:ae:a0:d8:aa:bc:3b:3a:c7:d3:3e:1d:66:bd:76:ed:18:f7: 73:01:ea:68:9c:6a:72:11:d1:23:29:2e:79:39:0c:01:5d:2a: 5e:71:96:4e:6e:15:c3:25:f7:b0:d6:12:22:fa:4e:87:7d:78: 6a:2c:52:16:8a:ff:a6:95:06:b8:32:c5:74:6c:30:58:fc:f2: 22:ca:d4:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8lofW99T50rVIGZAJRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1 MmI3ZDAwHhcNMjUxMjA2MDYwMDU3WhcNMjUxMjA3MDYwMDU3WjAzMTEwLwYDVQQD Eyg4NWNlNmNkZDk4N2YxY2E2OWI2N2FhYWFiODMwMDAzOTRjMzYyMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNHpFGTYDRhGUkC6bJCiAMf7SwEi DIdR3pZtNAyOcfuIN9UcEhDeoEAHdcly6xZmB5RvrvGjl+/lY4nMU3xWuwO/GJKQ l9a/48feNPLfWnj7swj/SVOANgzEZDGuJsjSPBps/teuf9gGNbA7yXK9fxOTjnXM Ng1p2Y9nkUU9+NEtWJxwLbcX5ImUKXtefqkoCQ8oyAnT6+cmoI/jGA7lx2vweq8P pmkhR35X2shpJAg4lled9Mni3z/FeClvZdBHZQND3IQXL+/SqOIIiEU8VOWgFn19 zc7VzcSivhArho0LF2AF+4rZLNkIrv2zZpp6Sc+1YZjxKgwClEkEtEKoeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXObN2Yfxymm2eqqrgwADlMNiDAMB8GA1UdIwQY MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFq/goGpZ GQf8akqJ/VGxE9yXZeC54IFSZ1SS9r/bkvntlK7lfrKdwAPyl7roVQDypJjGetkh eDXzEnpC3QqAX4+3jvrmZXuOOTXDG8pVGRwrNaot9oNRavLnxn4b58GEKIk7WSfG 8jGSIrjBeizhgIB0Xh2yqDFpwMzJazTAETL4GJLjdwKY2JMsZA4op7wdQ6Ul1k6Y /gqEs2kvOPt2WAwasid4JDV5tvWfBfmZWNpBU5yHea6g2Kq8OzrH0z4dZr127Rj3 cwHqaJxqchHRIykueTkMAV0qXnGWTm4VwyX3sNYSIvpOh314aixSFor/ppUGuDLF dGwwWPzyIsrUxw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:49 2025 by rpki-client