This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json) Hash identifier: 3e1cQFtC0oMcb8i40OUe1EcVVmN5dfiwZ4p5j1AkUX0= Subject key identifier: C9:40:34:FF:0A:68:22:14:6F:43:B5:E8:2D:AD:8D:C1:CE:AF:55:78 Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e Certificate serial: 019AF208D3E6B9CADCFFD9D215570654E900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (hash: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=) 2: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (hash: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=) 3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: RHr2rRO8DtOPbxd8uJUGfAwGXdnhpCiP4k0XwacO/9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d3:e6:b9:ca:dc:ff:d9:d2:15:57:06:54:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=c94034ff0a6822146f43b5e82dad8dc1ceaf5578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:ed:e7:5c:6f:96:ba:8a:05:c2:ef:87:7f: aa:fd:0d:1f:41:90:5c:7b:dd:ec:a8:e3:78:cd:6e: c6:fc:28:11:ab:39:54:49:17:8f:57:a0:66:e9:fe: b2:66:a0:44:ed:eb:fd:6d:30:02:f4:56:97:53:b5: 5b:8b:7c:a0:e3:ad:0a:59:95:4f:16:73:70:f0:9d: 0d:b9:9c:f3:e9:c8:e6:62:d6:96:52:a8:1e:a2:5a: db:9e:dc:f3:24:f1:a5:d3:3d:5c:de:de:2d:08:80: f6:3e:b5:30:31:d2:10:1d:39:70:ba:16:1f:bf:46: ff:a6:13:1c:e0:a5:8a:06:0e:5e:46:0e:2d:06:03: fe:19:26:69:c2:e4:57:4f:80:c2:f7:d7:8a:b9:ba: 1e:e9:34:dc:9c:24:30:75:08:4e:5e:6f:e6:11:c6: db:70:cb:32:d9:d9:e9:10:55:9a:59:fc:0f:be:b3: 52:0b:d3:61:47:a0:7d:af:fc:e4:9b:96:80:cc:51: 73:ea:8b:64:8f:5a:88:7a:2b:6c:46:65:5a:39:77: 82:a1:e6:96:25:21:f6:e1:47:8a:e3:c9:f4:51:1e: 7a:a0:78:d8:ec:d9:af:d8:99:70:89:7a:e7:b8:88: 81:92:6f:1a:fb:8d:3f:7d:e6:a9:77:f2:9d:c3:2a: 20:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:34:FF:0A:68:22:14:6F:43:B5:E8:2D:AD:8D:C1:CE:AF:55:78 X509v3 Authority Key Identifier: keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ba:7e:76:7a:73:6a:02:18:d5:0d:f4:6b:fc:64:e0:21:18: 82:55:a0:7e:80:4a:df:b0:40:61:44:b7:60:7d:1f:44:20:ea: 7a:52:83:ab:b7:8a:6f:9a:bf:1f:34:75:c3:ff:01:ef:6c:e2: 17:00:15:d8:66:08:11:bc:1c:95:c7:bb:bc:64:be:67:f4:fe: 7f:88:74:14:dc:a0:29:78:03:d3:37:90:bc:2a:0a:07:4c:96: 51:d2:7e:e2:a5:47:ac:69:c1:8c:a0:35:46:64:3c:82:7a:5a: e9:cd:8a:02:45:8f:7f:88:ee:db:2b:07:6a:ad:08:ad:0d:22: 99:84:c2:d9:40:eb:48:8f:c6:4e:71:3a:f0:a4:4b:e2:ac:b0: e0:88:65:b8:82:11:64:f2:77:b6:7c:05:4f:83:dd:69:ad:3f: 8d:f0:dc:a9:5e:de:68:31:f1:19:62:b5:2d:7e:09:88:0b:4b: 4f:1d:5b:c3:04:2e:7e:16:06:dd:4b:c2:09:33:af:b6:f7:f5: 76:d7:60:52:5d:9c:a8:b1:cc:60:04:8e:8b:e8:88:a2:e5:2d: a3:f3:b9:ad:a7:df:6d:92:14:de:11:16:2d:7a:14:6f:d9:3c: 57:7c:a6:2b:af:f4:4d:5d:ca:52:78:ce:e2:a8:b5:e0:99:9a: 10:d4:d9:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNPmucrc/9nSFVcGVOkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzc1YjQzYWU4YTUzZDQ4Yzg4ODY3MWU2N2ZjMTdiZjI3 ZjJiN2UwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD EyhjOTQwMzRmZjBhNjgyMjE0NmY0M2I1ZTgyZGFkOGRjMWNlYWY1NTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjHt51xvlrqKBcLvh3+q/Q0fQZBc e93sqON4zW7G/CgRqzlUSRePV6Bm6f6yZqBE7ev9bTAC9FaXU7Vbi3yg460KWZVP FnNw8J0NuZzz6cjmYtaWUqgeolrbntzzJPGl0z1c3t4tCID2PrUwMdIQHTlwuhYf v0b/phMc4KWKBg5eRg4tBgP+GSZpwuRXT4DC99eKuboe6TTcnCQwdQhOXm/mEcbb cMsy2dnpEFWaWfwPvrNSC9NhR6B9r/zkm5aAzFFz6otkj1qIeitsRmVaOXeCoeaW JSH24UeK48n0UR56oHjY7Nmv2JlwiXrnuIiBkm8a+40/feapd/Kdwyog+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlANP8KaCIUb0O16C2tjcHOr1V4MB8GA1UdIwQY MBaAFIM3W0OuilPUjIiGceZ/wXvyfyt+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYt NzJjNGM0YjgwNGE3LzEvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYtNzJjNGM0YjgwNGE3 LzEvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbp+dnpz agIY1Q30a/xk4CEYglWgfoBK37BAYUS3YH0fRCDqelKDq7eKb5q/HzR1w/8B72zi FwAV2GYIEbwclce7vGS+Z/T+f4h0FNygKXgD0zeQvCoKB0yWUdJ+4qVHrGnBjKA1 RmQ8gnpa6c2KAkWPf4ju2ysHaq0IrQ0imYTC2UDrSI/GTnE68KRL4qyw4IhluIIR ZPJ3tnwFT4Pdaa0/jfDcqV7eaDHxGWK1LX4JiAtLTx1bwwQufhYG3UvCCTOvtvf1 dtdgUl2cqLHMYASOi+iIouUto/O5raffbZIU3hEWLXoUb9k8V3ymK6/0TV3KUnjO 4qi14JmaENTZvw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:45 2025 by rpki-client