This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json) Hash identifier: nSgB4QZVzfafWOT8aqhcacDH7vCTJxW4iLSjkqUCTMY= Subject key identifier: D3:0F:2C:56:C6:2C:7F:38:A3:56:CF:3B:62:EF:26:41:31:31:64:E9 Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d Certificate serial: 019B25F6065E45BE8843E474B743987324A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft Manifest number: 1B Signing time: Tue 16 Dec 2025 07:00:38 +0000 Manifest this update: Tue 16 Dec 2025 07:00:38 +0000 Manifest next update: Wed 17 Dec 2025 07:00:38 +0000 Files and hashes: 1: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: wYYDcWFAUBULw43abqfHiG835SC16p+hmKzAVsMYPo0=) 2: xjzYHXm1-iuVRNUf9oR0e8sbGww.roa (hash: iJBDMmXR3U1sUk5QS/ljorbRN9G3Tas2Jm/BVGabM7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:06:5e:45:be:88:43:e4:74:b7:43:98:73:24:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d Validity Not Before: Dec 16 07:00:38 2025 GMT Not After : Dec 17 07:00:38 2025 GMT Subject: CN=d30f2c56c62c7f38a356cf3b62ef2641313164e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:ee:b4:f0:b7:c5:d9:11:9a:f0:e9:08:48: d6:3f:1a:10:2e:9f:37:01:4d:99:06:93:b3:97:87: 7f:bc:12:86:fb:f7:0d:8a:35:26:61:4f:24:0e:04: 43:58:55:ab:1e:da:82:a4:55:13:ff:d7:fe:85:5f: 42:fa:05:e7:f4:c8:c4:8e:43:a6:4b:ea:3e:e8:13: 6f:df:ab:40:87:c4:86:78:be:02:2c:83:d2:73:dd: 6e:e4:6f:ab:a3:d0:1b:23:2d:91:51:9c:b9:95:14: dd:7d:e2:f5:b1:05:82:d8:de:08:e3:96:23:f0:d0: d9:1b:3e:3f:57:50:69:a3:1b:7e:ea:db:3b:bd:53: 96:23:49:12:a4:77:e3:37:84:8f:0d:71:7a:eb:2e: c7:23:f3:af:b5:9c:c2:dc:f3:2c:03:e9:6e:e5:75: eb:7c:2f:f4:0d:38:2e:1a:87:d9:db:c3:3f:3f:e6: 4e:54:93:ad:ec:97:54:0e:d8:20:97:a1:c1:30:e9: c5:cf:1b:21:ba:9a:90:12:86:6a:af:ca:d1:b3:75: 8f:b2:0a:4f:1d:e5:6b:cb:a6:a3:9d:60:a9:98:ea: 23:48:3c:b0:58:29:ef:2f:4e:43:80:cd:9c:45:8d: 2d:1b:1d:e2:85:2e:aa:00:0e:ca:d1:06:fe:43:9e: 93:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0F:2C:56:C6:2C:7F:38:A3:56:CF:3B:62:EF:26:41:31:31:64:E9 X509v3 Authority Key Identifier: keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:18:86:9d:2d:08:a8:00:18:77:1e:be:a0:ff:01:9d:54:3e: 61:5f:8d:64:f3:6c:eb:ec:05:e1:7b:b4:28:57:74:b2:82:c6: ec:e4:a7:d2:5a:df:1b:60:6f:a8:94:2a:b7:ca:a4:37:8f:f0: 0e:35:61:18:ac:6b:0f:77:64:9f:09:bb:75:1f:1c:24:f6:98: c6:40:f0:d1:0f:c1:0e:76:c0:09:7a:ac:31:31:84:a4:8f:37: ee:bb:09:7d:e6:2d:1e:48:07:c4:64:51:c8:09:32:d4:bc:98: 2d:ae:11:f3:af:39:3e:81:3a:1a:e1:fa:96:79:db:ef:40:bf: 80:fc:e5:28:44:83:0e:4d:ba:ab:88:c1:97:fc:47:b4:b0:27: 8c:25:33:b9:de:4c:a9:e3:b6:88:6a:8a:2b:0e:41:49:c6:88: bc:d0:2d:e4:24:4c:47:d7:92:b0:87:2c:bb:37:96:e8:89:35: 22:fa:0f:9d:f1:85:5a:9b:63:2f:db:56:80:6c:2f:e6:85:f6: 0a:eb:78:6e:78:51:68:cf:6c:cd:e8:18:5c:2f:b0:b1:1c:78: 77:f0:0c:fb:e5:e5:c2:e6:4f:15:42:29:d5:28:04:19:83:e5: 20:cd:71:22:65:84:b4:51:21:ca:dd:e3:20:70:bd:fd:d8:89: a7:48:13:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9gZeRb6IQ+R0t0OYcySpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OWIzZjkwOGNlNmUxNzY0NjE3NzMxYjYyNDUzOTQyMWQx M2M5NGQwHhcNMjUxMjE2MDcwMDM4WhcNMjUxMjE3MDcwMDM4WjAzMTEwLwYDVQQD EyhkMzBmMmM1NmM2MmM3ZjM4YTM1NmNmM2I2MmVmMjY0MTMxMzE2NGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxXutPC3xdkRmvDpCEjWPxoQLp83 AU2ZBpOzl4d/vBKG+/cNijUmYU8kDgRDWFWrHtqCpFUT/9f+hV9C+gXn9MjEjkOm S+o+6BNv36tAh8SGeL4CLIPSc91u5G+ro9AbIy2RUZy5lRTdfeL1sQWC2N4I45Yj 8NDZGz4/V1Bpoxt+6ts7vVOWI0kSpHfjN4SPDXF66y7HI/OvtZzC3PMsA+lu5XXr fC/0DTguGofZ28M/P+ZOVJOt7JdUDtggl6HBMOnFzxshupqQEoZqr8rRs3WPsgpP HeVry6ajnWCpmOojSDywWCnvL05DgM2cRY0tGx3ihS6qAA7K0Qb+Q56TXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMPLFbGLH84o1bPO2LvJkExMWTpMB8GA1UdIwQY MBaAFBmbP5CM5uF2RhdzG2JFOUIdE8lNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODIt MmU5N2FiYTBmYjJjLzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODItMmU5N2FiYTBmYjJj LzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBiGnS0I qAAYdx6+oP8BnVQ+YV+NZPNs6+wF4Xu0KFd0soLG7OSn0lrfG2BvqJQqt8qkN4/w DjVhGKxrD3dknwm7dR8cJPaYxkDw0Q/BDnbACXqsMTGEpI837rsJfeYtHkgHxGRR yAky1LyYLa4R8685PoE6GuH6lnnb70C/gPzlKESDDk26q4jBl/xHtLAnjCUzud5M qeO2iGqKKw5BScaIvNAt5CRMR9eSsIcsuzeW6Ik1IvoPnfGFWptjL9tWgGwv5oX2 Cut4bnhRaM9szegYXC+wsRx4d/AM++XlwuZPFUIp1SgEGYPlIM1xImWEtFEhyt3j IHC9/diJp0gTfA== -----END CERTIFICATE-----Generated at Tue Dec 16 16:02:50 2025 by rpki-client