This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json) Hash identifier: LRjnNk6WnFmtU3Eno7ftiLHRkjgvwAKsvaDDxylogIM= Subject key identifier: CA:6C:63:22:ED:04:F3:CE:0A:27:37:67:16:4C:47:C9:34:47:BE:76 Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42 Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942 Certificate serial: 019B21753E846A0497F697C616F528D2D0E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 10:01:30 +0000 Manifest this update: Mon 15 Dec 2025 10:01:30 +0000 Manifest next update: Tue 16 Dec 2025 10:01:30 +0000 Files and hashes: 1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: l4HlvZ2SOO9skH2naNyxKnYdRZs9fTmoG5lelqFl958=) 2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:3e:84:6a:04:97:f6:97:c6:16:f5:28:d2:d0:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942 Validity Not Before: Dec 15 10:01:30 2025 GMT Not After : Dec 16 10:01:30 2025 GMT Subject: CN=ca6c6322ed04f3ce0a273767164c47c93447be76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:94:64:c3:4c:84:78:ab:cc:4b:20:0e:e4: 28:6d:2d:cd:cb:da:08:b1:4a:f6:3a:39:75:b0:a2: fb:02:d2:af:c6:5c:9c:89:87:54:c7:1e:7d:b8:93: f2:69:35:a8:06:bc:62:17:42:39:b0:0b:0d:2f:ce: b4:fd:d2:12:53:e9:58:8a:67:7a:2c:62:bb:c8:ea: fb:c6:0f:28:91:8e:56:df:db:51:53:ea:9c:2a:a0: f8:09:e6:46:68:e0:2a:fc:4f:08:91:fa:23:75:80: 9c:a4:b7:ef:03:4b:aa:05:49:1b:0b:51:5a:4e:92: b7:bc:fb:90:91:7a:f5:66:60:df:50:40:28:91:e0: 4c:2f:f2:1b:ff:f8:4d:c2:57:88:f6:d3:f3:2f:d3: 1b:54:7b:d2:3e:20:f3:6d:08:4d:18:42:c4:d1:49: d8:03:23:8c:df:7e:c9:74:8a:9d:c8:a8:5c:1c:e6: b9:ce:68:f1:9b:eb:c8:19:36:a2:d5:36:3d:12:76: 54:62:79:6c:58:b1:31:1e:ef:c9:4d:9a:c6:7a:b5: 0f:5c:94:ec:cd:7e:15:8b:40:f4:3a:6f:cf:c6:50: d3:76:91:88:5b:74:e0:19:dc:44:b0:eb:97:15:18: f4:89:28:5b:1f:1c:60:47:64:8a:cd:ee:d9:66:88: 34:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6C:63:22:ED:04:F3:CE:0A:27:37:67:16:4C:47:C9:34:47:BE:76 X509v3 Authority Key Identifier: keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:fc:c2:ce:4b:8c:de:eb:10:cc:3d:1b:ab:33:eb:2d:a8:67: a6:e9:84:e7:a5:5a:c7:4c:46:9a:ea:c6:17:b4:89:f6:27:80: 8e:32:62:b3:12:9e:3a:f7:b4:42:e4:94:1d:fc:c2:97:68:84: e0:75:98:d2:4f:39:7c:22:35:2c:2a:ca:3d:ea:64:52:d4:46: 54:d7:87:f1:ec:bc:54:e1:5b:03:88:0c:2c:6b:d7:f4:5e:39: 42:72:11:90:27:95:77:a9:62:ab:1b:df:49:61:6e:b7:3c:f1: 98:1b:a9:ba:a1:bb:23:5d:b3:bd:88:99:ac:4f:84:66:62:4d: 46:1d:a1:36:e0:97:6d:1b:75:b4:91:cf:40:e4:f2:14:6e:84: 6f:ff:8c:cc:0d:e3:01:f8:b6:cd:aa:56:0b:9c:93:60:14:ed: 11:fc:83:0f:be:5d:00:07:b8:84:bc:69:51:b0:95:d2:b8:e0: 6e:28:06:ba:2d:28:40:31:93:1b:20:b5:ee:d9:3c:f6:63:4a: 76:4a:78:17:da:32:19:48:42:5f:05:b3:25:b5:47:3a:93:68: b5:ac:21:7e:4e:e7:52:06:2d:8b:b9:de:2b:e8:ce:44:74:de: be:79:ba:13:f4:30:15:ac:85:53:2c:bd:59:2d:79:d9:74:1b: f5:19:4c:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdT6EagSX9pfGFvUo0tDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTA4YjYzNjkxNDhmNGYzYzUwZjE2NzEwM2Y3YTA0Nzhj NTI5NDIwHhcNMjUxMjE1MTAwMTMwWhcNMjUxMjE2MTAwMTMwWjAzMTEwLwYDVQQD EyhjYTZjNjMyMmVkMDRmM2NlMGEyNzM3NjcxNjRjNDdjOTM0NDdiZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPiUZMNMhHirzEsgDuQobS3Ny9oI sUr2Ojl1sKL7AtKvxlyciYdUxx59uJPyaTWoBrxiF0I5sAsNL860/dISU+lYimd6 LGK7yOr7xg8okY5W39tRU+qcKqD4CeZGaOAq/E8IkfojdYCcpLfvA0uqBUkbC1Fa TpK3vPuQkXr1ZmDfUEAokeBML/Ib//hNwleI9tPzL9MbVHvSPiDzbQhNGELE0UnY AyOM337JdIqdyKhcHOa5zmjxm+vIGTai1TY9EnZUYnlsWLExHu/JTZrGerUPXJTs zX4Vi0D0Om/PxlDTdpGIW3TgGdxEsOuXFRj0iShbHxxgR2SKze7ZZog00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpsYyLtBPPOCic3ZxZMR8k0R752MB8GA1UdIwQY MBaAFBmQi2NpFI9PPFDxZxA/egR4xSlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzkt MTI2MGE2ZjNhMzkzLzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzktMTI2MGE2ZjNhMzkz LzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/zCzkuM 3usQzD0bqzPrLahnpumE56Vax0xGmurGF7SJ9ieAjjJisxKeOve0QuSUHfzCl2iE 4HWY0k85fCI1LCrKPepkUtRGVNeH8ey8VOFbA4gMLGvX9F45QnIRkCeVd6liqxvf SWFutzzxmBupuqG7I12zvYiZrE+EZmJNRh2hNuCXbRt1tJHPQOTyFG6Eb/+MzA3j Afi2zapWC5yTYBTtEfyDD75dAAe4hLxpUbCV0rjgbigGui0oQDGTGyC17tk89mNK dkp4F9oyGUhCXwWzJbVHOpNotawhfk7nUgYti7neK+jORHTevnm6E/QwFayFUyy9 WS152XQb9RlMwQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:00:18 2025 by rpki-client