This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft File: GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json) Hash identifier: KYxEwIs8gh7NpEr4TNqKtJ/Ye/pKUKa3kz0DeRNl2zU= Subject key identifier: C3:55:51:35:57:58:2E:95:E3:C0:EE:E1:FE:9C:EF:AB:E5:53:86:33 Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93 Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693 Certificate serial: 019AF12E78503A02014B6464D35CE95A1FB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: i7mnGHgcOfgJphMVuH9LPbFz0IUI4k/SeNErSyiD6Mg=) 2: HPCKr00mXSJ3C9phmBvKtJQXCBY.roa (hash: TqSUlnmZHL4GKMxOnemPwak2VaRBnIX0Q7+M72vd6iE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:78:50:3a:02:01:4b:64:64:d3:5c:e9:5a:1f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693 Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=c355513557582e95e3c0eee1fe9cefabe5538633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:46:da:eb:a2:03:3d:73:41:8a:66:3b:0d: d6:38:77:81:7c:36:0e:00:69:eb:5a:d8:7a:21:2d: e3:3c:1d:84:9d:aa:96:d7:27:56:0e:e2:94:9c:bc: 21:01:29:b1:1c:de:1d:84:a0:9f:06:a8:d0:f1:e5: b8:b3:2a:4e:2a:ec:aa:f0:37:ea:6d:dd:ad:88:28: b1:1f:a9:21:cd:eb:b7:09:b5:24:69:aa:bd:87:b8: b3:be:ec:6f:14:f1:d6:fd:7d:37:19:ab:89:a8:ae: f7:9e:31:13:45:d2:04:b4:8e:be:52:86:81:31:9c: 9b:a1:8b:48:19:d6:f9:e4:c4:b0:cb:eb:ee:60:c8: e9:b0:a0:02:92:93:b3:41:8d:a0:fa:d0:8a:35:a0: 2b:89:b3:d2:d7:96:36:95:0d:46:3e:bc:f1:f5:cc: 15:39:be:ce:97:bd:06:2f:1a:48:cc:7e:cf:ae:0e: 5b:4a:5a:7a:81:eb:15:f3:39:93:4c:37:34:21:46: 3e:b1:54:67:cb:a2:b2:99:da:f7:03:3d:71:d5:3c: 18:a1:18:77:6c:ab:81:60:2d:a7:76:92:0a:cf:3a: 33:ad:f7:80:16:82:ab:b7:07:b0:46:b1:eb:62:da: 0c:58:02:de:f6:1d:c0:db:7f:54:2b:86:09:de:cf: 76:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:55:51:35:57:58:2E:95:E3:C0:EE:E1:FE:9C:EF:AB:E5:53:86:33 X509v3 Authority Key Identifier: keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:98:e9:6e:97:15:20:c8:9e:fe:69:50:59:06:fb:f8:43:c7: 97:af:92:40:1d:c0:3d:8e:45:a1:e6:3f:81:2a:1f:c5:ec:58: 4b:94:57:b6:31:95:07:ed:5c:03:3b:ef:a0:3d:a9:a5:e6:a2: b6:37:7d:46:47:8a:a6:e4:9c:4a:9e:2a:c3:7c:06:54:d5:7d: a7:b4:23:7e:41:56:72:5d:bb:ff:21:86:89:d5:06:e8:9f:19: a2:d6:fc:d6:a7:fc:be:b8:3b:dd:50:36:7c:74:d8:32:f2:61: 34:76:d4:de:7b:04:e5:5e:8a:48:e8:45:a7:7a:ea:17:f3:a3: 17:d1:26:9f:7e:2c:09:02:af:e4:d5:7d:59:3b:f5:d9:85:fd: 30:84:e3:9e:ab:d0:12:09:04:49:7a:b3:a8:86:64:1f:21:99: a3:cd:9f:ca:45:c1:41:69:9e:2f:07:fa:34:0a:11:b3:4a:8b: 1d:43:9a:0b:b2:f3:41:74:74:68:cd:71:cd:a8:d4:ce:6a:2d: c9:ed:94:b3:da:f9:31:7b:48:e1:f0:ba:f6:ae:40:9c:83:83: 8b:7f:1b:88:b3:66:1a:af:b6:e0:51:8f:c9:3a:a0:26:35:5b: e3:a7:e0:b0:30:65:af:c0:b9:dd:30:ba:5f:c7:43:4a:44:60: 60:11:f9:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnhQOgIBS2Rk01zpWh+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZDY1ZmEzM2NlNWIzZjdiZGI0OTdlNWZjYTUwOWQ3ZmMw M2M2OTMwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD EyhjMzU1NTEzNTU3NTgyZTk1ZTNjMGVlZTFmZTljZWZhYmU1NTM4NjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcVG2uuiAz1zQYpmOw3WOHeBfDYO AGnrWth6IS3jPB2EnaqW1ydWDuKUnLwhASmxHN4dhKCfBqjQ8eW4sypOKuyq8Dfq bd2tiCixH6khzeu3CbUkaaq9h7izvuxvFPHW/X03GauJqK73njETRdIEtI6+UoaB MZyboYtIGdb55MSwy+vuYMjpsKACkpOzQY2g+tCKNaAribPS15Y2lQ1GPrzx9cwV Ob7Ol70GLxpIzH7Prg5bSlp6gesV8zmTTDc0IUY+sVRny6Kymdr3Az1x1TwYoRh3 bKuBYC2ndpIKzzozrfeAFoKrtwewRrHrYtoMWALe9h3A239UK4YJ3s92DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNVUTVXWC6V48Du4f6c76vlU4YzMB8GA1UdIwQY MBaAFBnWX6M85bP3vbSX5fylCdf8A8aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2RaZm96emxzX2U5dEpmbF9LVUoxX3dEeHBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MjVjMjItN2VlYy00MDMzLWE3NjMt Yzg3Y2U3NjM4M2JjLzEvR2RaZm96emxzX2U5dEpmbF9LVUoxX3dEeHBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83MjVjMjItN2VlYy00MDMzLWE3NjMtYzg3Y2U3NjM4M2Jj LzEvR2RaZm96emxzX2U5dEpmbF9LVUoxX3dEeHBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5jpbpcV IMie/mlQWQb7+EPHl6+SQB3APY5FoeY/gSofxexYS5RXtjGVB+1cAzvvoD2ppeai tjd9RkeKpuScSp4qw3wGVNV9p7QjfkFWcl27/yGGidUG6J8Zotb81qf8vrg73VA2 fHTYMvJhNHbU3nsE5V6KSOhFp3rqF/OjF9Emn34sCQKv5NV9WTv12YX9MITjnqvQ EgkESXqzqIZkHyGZo82fykXBQWmeLwf6NAoRs0qLHUOaC7LzQXR0aM1xzajUzmot ye2Us9r5MXtI4fC69q5AnIODi38biLNmGq+24FGPyTqgJjVb46fgsDBlr8C53TC6 X8dDSkRgYBH5Gw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:04 2025 by rpki-client