This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json) Hash identifier: ykvshF7abX2dz9nL+0Am77wvfBM1yPm8kloy8lm+N0U= Subject key identifier: F4:DD:F0:E5:91:AB:C6:18:71:FC:B9:DF:57:E3:D3:41:44:7A:DE:D0 Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8 Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8 Certificate serial: 019B2D0C4A1DE5ACDF219139B14C491BC702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft Manifest number: 14B5 Signing time: Wed 17 Dec 2025 16:02:18 +0000 Manifest this update: Wed 17 Dec 2025 16:02:18 +0000 Manifest next update: Thu 18 Dec 2025 16:02:18 +0000 Files and hashes: 1: BLFC-FjMHL4wmy7DW2Qg0ynvAks.roa (hash: mla/ifgwtBL/TTlFYXL1kHRIJy6aKWlH3+ijLwE0y4c=) 2: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: p9cXnKrA/4Tk8AAlcxf1MxX8C4e7OFA1fRs4x/3Cexs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:4a:1d:e5:ac:df:21:91:39:b1:4c:49:1b:c7:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8 Validity Not Before: Dec 17 16:02:18 2025 GMT Not After : Dec 18 16:02:18 2025 GMT Subject: CN=f4ddf0e591abc61871fcb9df57e3d341447aded0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:fb:1a:49:58:12:a0:28:bc:03:2d:9f:48: 76:b4:3a:f3:23:83:85:ef:06:57:79:82:fd:5f:9f: ba:de:09:13:96:7b:be:c5:77:47:8f:00:60:d9:42: f7:11:60:ac:80:59:ee:7a:7b:6c:8a:58:16:eb:ee: 89:31:73:7f:36:ee:d6:80:c2:98:6a:35:94:a4:ef: a7:85:13:87:b3:3a:38:08:4f:b6:d7:35:32:cc:c5: 1f:4e:01:2a:5b:58:32:f4:3a:e4:f7:57:d5:ca:08: d9:45:5a:0c:ae:2a:ff:91:08:8f:e4:9d:14:9b:46: e0:b7:66:68:de:22:b7:02:5d:d7:91:b9:a2:bd:0c: 51:f8:21:d0:95:31:de:34:61:1f:38:68:b0:c8:ff: da:48:fe:d7:6d:22:b9:93:14:e2:f8:8f:f4:2b:84: 6f:5a:8d:78:63:2e:cc:4f:a7:fd:1c:9b:bb:3c:22: f7:d3:cb:a9:e0:d4:89:a5:c5:e8:f5:a5:64:da:ce: e5:c2:5d:10:5a:98:cf:1e:8c:65:30:15:dd:06:eb: 8d:23:ed:42:89:c7:a9:6d:a1:e2:ca:70:7a:62:ec: af:d7:2e:91:c4:25:e6:ed:11:27:ae:1d:d4:08:e7: ba:2b:5a:0a:c4:b8:a9:ab:83:5b:c5:ed:6a:60:95: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DD:F0:E5:91:AB:C6:18:71:FC:B9:DF:57:E3:D3:41:44:7A:DE:D0 X509v3 Authority Key Identifier: keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:46:67:12:48:bd:ce:f9:f3:c3:ce:63:58:38:7d:59:fa:74: 2e:56:71:37:d8:20:0d:64:5e:fd:ad:16:4a:08:5b:ad:74:78: e4:0d:f4:bb:43:a8:52:bf:f3:5b:90:14:7c:52:bd:82:8d:85: 0b:72:b5:57:c0:02:65:99:9b:43:d8:a1:33:d0:f4:01:c8:57: 00:95:09:3b:ab:1f:3b:ae:6f:bb:e8:fb:76:53:02:80:f2:ef: 2f:2b:e8:df:c8:b4:f8:7f:1b:8e:0a:45:92:d3:62:13:bf:f2: eb:fc:6a:5f:15:c1:9a:85:d4:e7:cf:b4:a1:4d:79:5d:18:e5: 3c:27:e5:dd:bc:8e:27:46:dd:59:61:a4:47:18:74:06:48:ec: 1c:31:1c:6c:f8:24:d3:1d:08:6b:d5:82:a1:28:8c:41:36:74: 70:59:51:ec:79:9a:01:86:d3:2f:c6:83:1d:b9:ef:05:b0:63: 0f:bb:5c:25:bc:be:10:05:ed:b2:78:b9:82:42:c8:f1:0d:21: 12:62:25:58:e8:70:2d:3a:1a:0f:63:76:c3:19:5b:fe:4a:33: ea:a8:69:0e:54:55:57:57:b3:b5:d4:c3:4c:3e:14:31:ad:01: 4f:74:7f:ef:5c:74:e8:51:7c:12:96:68:1d:48:36:0b:43:10: 65:cb:6b:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDEod5azfIZE5sUxJG8cCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzAyOTYzNGVhOGVkNTQ2ODFiYTg0ZDE0OTkwYjAwYjg2 NGRkYjgwHhcNMjUxMjE3MTYwMjE4WhcNMjUxMjE4MTYwMjE4WjAzMTEwLwYDVQQD EyhmNGRkZjBlNTkxYWJjNjE4NzFmY2I5ZGY1N2UzZDM0MTQ0N2FkZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztv7GklYEqAovAMtn0h2tDrzI4OF 7wZXeYL9X5+63gkTlnu+xXdHjwBg2UL3EWCsgFnuentsilgW6+6JMXN/Nu7WgMKY ajWUpO+nhROHszo4CE+21zUyzMUfTgEqW1gy9Drk91fVygjZRVoMrir/kQiP5J0U m0bgt2Zo3iK3Al3XkbmivQxR+CHQlTHeNGEfOGiwyP/aSP7XbSK5kxTi+I/0K4Rv Wo14Yy7MT6f9HJu7PCL308up4NSJpcXo9aVk2s7lwl0QWpjPHoxlMBXdBuuNI+1C icepbaHiynB6Yuyv1y6RxCXm7REnrh3UCOe6K1oKxLipq4Nbxe1qYJXsAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTd8OWRq8YYcfy531fj00FEet7QMB8GA1UdIwQY MBaAFBswKWNOqO1UaBuoTRSZCwC4ZN24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3pBcFkwNm83VlJvRzZoTkZKa0xBTGhrM2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9hM2JmZTktZGM1Ni00YzFmLTk3YTct NmIzMWE3MzYwZjBmLzEvR3pBcFkwNm83VlJvRzZoTkZKa0xBTGhrM2JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9hM2JmZTktZGM1Ni00YzFmLTk3YTctNmIzMWE3MzYwZjBm LzEvR3pBcFkwNm83VlJvRzZoTkZKa0xBTGhrM2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkZnEki9 zvnzw85jWDh9Wfp0LlZxN9ggDWRe/a0WSghbrXR45A30u0OoUr/zW5AUfFK9go2F C3K1V8ACZZmbQ9ihM9D0AchXAJUJO6sfO65vu+j7dlMCgPLvLyvo38i0+H8bjgpF ktNiE7/y6/xqXxXBmoXU58+0oU15XRjlPCfl3byOJ0bdWWGkRxh0BkjsHDEcbPgk 0x0Ia9WCoSiMQTZ0cFlR7HmaAYbTL8aDHbnvBbBjD7tcJby+EAXtsni5gkLI8Q0h EmIlWOhwLToaD2N2wxlb/koz6qhpDlRVV1eztdTDTD4UMa0BT3R/71x06FF8EpZo HUg2C0MQZctr2Q== -----END CERTIFICATE-----Generated at Wed Dec 17 18:13:34 2025 by rpki-client