This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft File: gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json) Hash identifier: +wz4/bocH1YoqzJvpPgbqYCmN7rXAZ9sWuP0sderFEs= Subject key identifier: DF:E0:67:A7:3A:C6:0D:AE:FC:C7:FD:E9:58:05:F7:5A:A0:DF:D2:9D Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91 Certificate issuer: /CN=833799e7c8d92a85ce9508c1be1a3f3809509591 Certificate serial: 019AF31B6B8B3D29B363237820833A21B367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft Manifest number: 1027 Signing time: Sat 06 Dec 2025 10:00:51 +0000 Manifest this update: Sat 06 Dec 2025 10:00:51 +0000 Manifest next update: Sun 07 Dec 2025 10:00:51 +0000 Files and hashes: 1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: M6Vm0u8B7yCUyRWV3jvakqDws4/kxkccXg+BHVwS+eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6b:8b:3d:29:b3:63:23:78:20:83:3a:21:b3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591 Validity Not Before: Dec 6 10:00:51 2025 GMT Not After : Dec 7 10:00:51 2025 GMT Subject: CN=dfe067a73ac60daefcc7fde95805f75aa0dfd29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:7e:15:87:69:d1:b8:1f:90:15:fe:64:0c: 1d:b4:32:d9:a4:0b:c1:aa:82:cf:c0:2a:01:0b:e3: 9e:e8:3a:3a:18:e3:e9:e2:61:b8:fe:59:50:ab:a1: e9:6d:aa:51:b2:9b:8b:7a:b7:5a:34:94:98:05:55: f2:41:85:87:a2:18:9c:52:5a:fb:a2:77:a9:80:5b: 69:0b:f7:d8:44:f0:21:f5:01:1f:28:1d:35:c2:5c: 15:1b:8d:10:f5:ac:67:ca:61:3b:67:3c:22:48:03: 46:11:c0:64:fa:34:14:68:2d:97:88:1f:db:e6:48: 34:66:47:4e:7d:e2:53:7f:1c:c0:fe:40:f3:01:38: 40:ef:90:f2:a7:24:ab:24:69:fc:f2:be:72:61:87: f4:f1:ef:da:be:10:2a:f4:02:8e:cf:86:41:cd:78: 28:ff:08:78:65:e4:da:3a:9a:99:eb:4f:14:08:8d: 6d:c3:86:92:a4:2d:8c:27:1d:3f:57:5a:b1:5b:bf: cc:14:8d:08:57:69:e1:c9:5f:7c:97:c1:a2:b8:76: af:24:4e:c6:f0:1c:d9:83:cc:7e:31:28:e6:f0:4f: 90:b4:cb:41:ff:d1:9f:97:72:a7:2e:69:8a:cf:3b: f7:f6:60:8b:6b:6d:64:bd:9b:98:ac:19:6b:51:7b: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E0:67:A7:3A:C6:0D:AE:FC:C7:FD:E9:58:05:F7:5A:A0:DF:D2:9D X509v3 Authority Key Identifier: keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d3:43:36:70:04:ca:33:4a:5c:82:9a:4a:3d:d7:cb:9b:f5: 56:5e:c3:47:07:8c:7e:b0:87:38:da:28:3a:e4:2e:6a:7b:49: 0f:9d:0d:01:ee:de:df:59:c3:e3:1c:e0:99:cf:3c:f5:fb:06: a9:31:32:d2:13:9a:9f:de:85:51:7c:5a:82:1d:fb:ed:b6:a2: 9d:ba:20:55:8e:46:f9:09:d1:90:e8:37:ce:8d:9d:b8:41:8c: 46:4d:63:8c:6c:c9:27:82:52:6e:2a:ef:c0:61:be:87:e4:fb: a1:f0:07:e1:d1:e2:f4:ab:78:9c:97:0d:93:d0:24:27:c2:d7: 69:5e:79:eb:05:2e:db:ad:5b:ad:33:a0:e7:46:98:88:d8:85: 93:ca:2b:85:54:38:e1:05:48:fd:b8:f7:31:4d:b4:2b:66:d5: 5c:57:64:90:7f:a8:f3:c0:ae:dc:94:69:5d:15:e7:eb:1a:06: 49:a3:b5:ec:3e:1c:1e:8e:76:71:cf:fc:78:1c:8b:7e:5d:8b: 9c:b2:c7:62:20:75:05:7e:3f:bc:2e:eb:80:bf:a2:80:0d:6b: a3:ea:48:eb:31:0d:b6:c2:4f:5e:85:08:0f:d1:8f:b4:4a:93: f7:a5:d7:02:9d:ef:64:df:34:33:06:60:e9:d2:3f:c0:2a:1a: 59:ef:41:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2uLPSmzYyN4IIM6IbNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzc5OWU3YzhkOTJhODVjZTk1MDhjMWJlMWEzZjM4MDk1 MDk1OTEwHhcNMjUxMjA2MTAwMDUxWhcNMjUxMjA3MTAwMDUxWjAzMTEwLwYDVQQD EyhkZmUwNjdhNzNhYzYwZGFlZmNjN2ZkZTk1ODA1Zjc1YWEwZGZkMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol9+FYdp0bgfkBX+ZAwdtDLZpAvB qoLPwCoBC+Oe6Do6GOPp4mG4/llQq6HpbapRspuLerdaNJSYBVXyQYWHohicUlr7 onepgFtpC/fYRPAh9QEfKB01wlwVG40Q9axnymE7ZzwiSANGEcBk+jQUaC2XiB/b 5kg0ZkdOfeJTfxzA/kDzAThA75DypySrJGn88r5yYYf08e/avhAq9AKOz4ZBzXgo /wh4ZeTaOpqZ608UCI1tw4aSpC2MJx0/V1qxW7/MFI0IV2nhyV98l8GiuHavJE7G 8BzZg8x+MSjm8E+QtMtB/9Gfl3KnLmmKzzv39mCLa21kvZuYrBlrUXtsRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/gZ6c6xg2u/Mf96VgF91qg39KdMB8GA1UdIwQY MBaAFIM3mefI2SqFzpUIwb4aPzgJUJWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MTIxZjEtNmM2Mi00NzgwLWIxZTIt M2ZhNDY3NmEwZGNlLzEvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC83MTIxZjEtNmM2Mi00NzgwLWIxZTItM2ZhNDY3NmEwZGNl LzEvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9NDNnAE yjNKXIKaSj3Xy5v1Vl7DRweMfrCHONooOuQuantJD50NAe7e31nD4xzgmc889fsG qTEy0hOan96FUXxagh377bainbogVY5G+QnRkOg3zo2duEGMRk1jjGzJJ4JSbirv wGG+h+T7ofAH4dHi9Kt4nJcNk9AkJ8LXaV556wUu261brTOg50aYiNiFk8orhVQ4 4QVI/bj3MU20K2bVXFdkkH+o88Cu3JRpXRXn6xoGSaO17D4cHo52cc/8eByLfl2L nLLHYiB1BX4/vC7rgL+igA1ro+pI6zENtsJPXoUID9GPtEqT96XXAp3vZN80MwZg 6dI/wCoaWe9Brw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:44 2025 by rpki-client