This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json) Hash identifier: abNEdGJGZB3/2cIYPGfrhjdUjP20IOMHB4M+HZep474= Subject key identifier: 6E:3B:07:2C:16:4C:25:A7:40:D9:9B:F4:9C:15:3A:67:0C:AE:CC:FF Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50 Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550 Certificate serial: 019AF1D1BF538CD2EC9CC0E78C485F368B76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft Manifest number: 056A Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: XLNXJmkOcNuiV8xgwJVZHuhxnRZagB85at3+1q3zPSc=) 2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bf:53:8c:d2:ec:9c:c0:e7:8c:48:5f:36:8b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=6e3b072c164c25a740d99bf49c153a670caeccff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:53:ab:45:34:42:54:85:d7:fe:b8:a0:ca:be: ca:bd:c6:24:1b:87:97:c3:e1:a1:54:11:2a:80:32: 75:20:46:d5:f6:2f:b7:e7:bd:5d:68:64:27:55:ff: 2f:2c:83:e4:20:a2:4f:9d:0b:1b:ac:d4:23:8a:41: de:0c:8d:c1:b9:3c:49:bb:c0:64:25:cc:1c:4f:a5: 27:4b:78:94:3d:2e:1e:b1:f7:fd:23:5f:c6:e8:7b: fb:2c:1c:07:a1:de:e4:7c:07:6a:3f:58:da:91:49: 71:29:b6:be:0a:c4:47:50:6c:a0:f9:fd:75:3a:09: 2c:0c:17:b6:ab:0f:23:26:d3:16:c9:5d:0f:9b:50: c3:dd:8d:a6:1d:90:fc:43:29:27:41:37:df:e5:24: a6:68:1c:d3:ba:0e:e3:17:5b:a1:b2:3e:f4:4c:9b: e7:89:18:53:1f:dc:28:63:84:bd:32:35:df:be:85: ea:62:59:ea:6c:9d:8d:65:13:57:26:cd:fe:43:65: 39:7b:08:d2:dc:aa:a9:5c:27:17:dc:4e:ab:d9:a9: cc:4b:70:7b:d2:e8:ed:e0:a7:b8:5f:ef:46:5d:28: d9:fb:7b:37:37:50:c5:3c:3e:93:d1:b1:c0:15:a0: fa:64:86:bd:57:64:1f:50:e9:55:32:79:e1:5b:31: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3B:07:2C:16:4C:25:A7:40:D9:9B:F4:9C:15:3A:67:0C:AE:CC:FF X509v3 Authority Key Identifier: keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:94:b0:03:1a:01:c8:b5:4f:1b:75:f6:42:d5:76:9b:39:b1: 3e:9e:c2:df:04:a2:3e:61:16:17:f0:37:d0:7f:8f:39:2f:10: b1:18:7a:8b:2e:ba:39:f3:68:53:fa:fa:54:a4:95:0f:ce:0d: 00:52:89:5a:f7:0a:a3:17:11:38:32:24:46:90:5c:ec:4a:46: 70:48:01:af:47:40:8e:b2:ad:70:ea:3c:20:24:c5:c9:4d:ca: 2c:43:31:70:9d:a7:9f:23:31:d9:5b:55:53:31:6a:ac:09:a6: 07:d0:84:8c:96:51:b1:b2:15:30:d3:51:01:82:f3:b9:d9:b2: 95:17:36:54:7f:e3:26:44:3f:e0:36:b2:00:13:44:b4:d1:16: 90:7e:ec:dd:ce:e8:89:94:09:51:36:e7:c7:d1:16:b7:dc:85: 9a:6c:13:7e:cf:da:2f:fa:ce:92:61:86:cb:e1:41:f6:bc:99: e5:88:4f:3d:a4:f4:1e:9d:30:35:07:55:40:ad:a5:50:44:7d: 07:96:c0:e5:42:b0:12:7f:02:2f:54:da:e4:1c:29:33:29:9a: 84:14:40:72:c7:e6:f2:14:0a:97:bd:f4:f4:2a:e8:67:fd:c6: e9:73:15:16:c7:39:ca:c1:1f:a5:2b:f5:c3:55:aa:fc:d2:7d: f7:1e:40:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b9TjNLsnMDnjEhfNot2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzY4ZmJmNWJiZDZkMzJmM2RkZGMyNGVjMjA0MDM4YzQ5 YjA1NTAwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD Eyg2ZTNiMDcyYzE2NGMyNWE3NDBkOTliZjQ5YzE1M2E2NzBjYWVjY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VOrRTRCVIXX/rigyr7KvcYkG4eX w+GhVBEqgDJ1IEbV9i+3571daGQnVf8vLIPkIKJPnQsbrNQjikHeDI3BuTxJu8Bk JcwcT6UnS3iUPS4esff9I1/G6Hv7LBwHod7kfAdqP1jakUlxKba+CsRHUGyg+f11 OgksDBe2qw8jJtMWyV0Pm1DD3Y2mHZD8QyknQTff5SSmaBzTug7jF1uhsj70TJvn iRhTH9woY4S9MjXfvoXqYlnqbJ2NZRNXJs3+Q2U5ewjS3KqpXCcX3E6r2anMS3B7 0ujt4Ke4X+9GXSjZ+3s3N1DFPD6T0bHAFaD6ZIa9V2QfUOlVMnnhWzG8CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG47BywWTCWnQNmb9JwVOmcMrsz/MB8GA1UdIwQY MBaAFBs2j79bvW0y893cJOwgQDjEmwVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYt ZmQ0NjA0ZDdlN2FmLzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYtZmQ0NjA0ZDdlN2Fm LzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpSwAxoB yLVPG3X2QtV2mzmxPp7C3wSiPmEWF/A30H+POS8QsRh6iy66OfNoU/r6VKSVD84N AFKJWvcKoxcRODIkRpBc7EpGcEgBr0dAjrKtcOo8ICTFyU3KLEMxcJ2nnyMx2VtV UzFqrAmmB9CEjJZRsbIVMNNRAYLzudmylRc2VH/jJkQ/4DayABNEtNEWkH7s3c7o iZQJUTbnx9EWt9yFmmwTfs/aL/rOkmGGy+FB9ryZ5YhPPaT0Hp0wNQdVQK2lUER9 B5bA5UKwEn8CL1Ta5BwpMymahBRAcsfm8hQKl7309CroZ/3G6XMVFsc5ysEfpSv1 w1Wq/NJ99x5AYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:01 2025 by rpki-client