This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json) Hash identifier: lOVi9RYtcyc/bFfbS2RN9hcRvOXFTFz2ZOlyDpbjTs8= Subject key identifier: 2C:0C:7A:10:32:19:F6:CD:9B:F1:DE:49:C6:65:56:DE:49:86:7C:CB Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42 Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942 Certificate serial: 019AF12E9DFE9F4C60B85C4617EEB8D79B7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:35 +0000 Manifest this update: Sat 06 Dec 2025 01:02:35 +0000 Manifest next update: Sun 07 Dec 2025 01:02:35 +0000 Files and hashes: 1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: itcmUqfapO7H+RaH2lpe2vSEN+rTohkT524espabh4w=) 2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:9d:fe:9f:4c:60:b8:5c:46:17:ee:b8:d7:9b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942 Validity Not Before: Dec 6 01:02:35 2025 GMT Not After : Dec 7 01:02:35 2025 GMT Subject: CN=2c0c7a103219f6cd9bf1de49c66556de49867ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:d7:64:2f:dc:75:56:98:0f:29:9c:24:16: 2a:7f:10:c7:c6:3b:a3:5f:ec:bd:bb:d8:2e:c2:0c: d0:88:1a:b1:69:70:bb:d2:60:6a:af:9b:e6:5d:49: 62:ca:2f:e9:1b:0c:f6:3b:c6:54:d9:47:9f:09:e1: 06:f0:cd:77:a7:2b:5d:fc:76:19:33:7d:99:c8:e0: ab:1a:bd:70:95:22:f6:72:39:40:22:34:0b:f9:17: 11:07:ae:ef:f3:f6:24:94:02:15:e7:f6:43:0d:64: 73:cb:a6:e7:8f:64:6f:28:0f:fe:c0:3d:1f:1c:df: d4:04:d2:ba:86:70:78:03:dd:d8:0d:60:35:cb:00: a1:e7:32:07:6f:4a:cf:49:0c:9e:60:05:36:8f:0b: 96:a6:07:cd:6a:11:1d:5b:6f:c9:9f:0d:f6:ac:3d: d8:5a:3f:79:de:7d:ab:b7:cb:4f:a3:f8:a7:70:96: c2:32:77:85:82:a3:76:a6:04:38:88:5c:52:0b:af: c5:86:c6:34:8c:94:76:93:31:dd:8a:b9:66:60:d5: 30:8b:05:58:ca:a2:7d:c2:3e:7d:74:36:44:27:8c: 1c:d8:1f:8f:f1:3a:8e:e6:93:41:3d:5c:a9:20:6c: df:96:d7:13:b4:32:7a:20:71:4b:94:1f:e6:5e:df: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0C:7A:10:32:19:F6:CD:9B:F1:DE:49:C6:65:56:DE:49:86:7C:CB X509v3 Authority Key Identifier: keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ae:23:66:18:aa:91:b0:e4:0e:34:dd:ca:0b:cb:05:a6:c5: 5a:77:65:f1:84:c7:9e:b3:82:85:6b:45:54:cd:42:63:78:da: 3f:4b:73:a4:1c:9c:3e:44:71:1a:56:1d:b3:d4:9e:44:37:6d: 57:d8:99:58:15:01:10:6a:01:93:2e:84:c1:f6:ba:17:32:27: b8:f7:40:8b:b1:e4:9e:ba:28:75:e2:69:1d:60:c9:ee:64:f9: d8:3e:14:30:fe:5c:a7:d1:da:82:a5:02:cf:a9:c7:d3:83:f3: 15:1f:dc:49:db:2d:76:29:55:d2:1d:db:8f:a0:d7:7f:ac:bf: 0a:75:d7:44:bb:75:5c:b4:87:9a:52:84:45:94:e6:58:bf:ca: 05:94:94:79:e4:8e:55:18:8d:2b:5e:1d:f3:cd:96:8a:de:d7: 6a:2b:69:aa:9a:81:7a:a0:d1:73:91:6e:9f:7e:9d:50:59:74: 78:e0:45:d7:6f:62:d5:b4:ab:9e:55:28:ea:4b:a5:99:0c:49: a3:dd:76:dd:4a:3b:56:87:31:5c:8d:6a:a5:2c:0c:62:7b:a8: c4:f3:c8:a5:da:51:6f:63:b6:91:da:e8:c4:be:bd:89:3a:3d: af:b1:a3:88:c2:2e:62:2e:78:ed:18:22:ce:a1:0d:d5:a6:b4: d2:33:0c:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLp3+n0xguFxGF+6415t8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTA4YjYzNjkxNDhmNGYzYzUwZjE2NzEwM2Y3YTA0Nzhj NTI5NDIwHhcNMjUxMjA2MDEwMjM1WhcNMjUxMjA3MDEwMjM1WjAzMTEwLwYDVQQD EygyYzBjN2ExMDMyMTlmNmNkOWJmMWRlNDljNjY1NTZkZTQ5ODY3Y2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCPXZC/cdVaYDymcJBYqfxDHxjuj X+y9u9guwgzQiBqxaXC70mBqr5vmXUliyi/pGwz2O8ZU2UefCeEG8M13pytd/HYZ M32ZyOCrGr1wlSL2cjlAIjQL+RcRB67v8/YklAIV5/ZDDWRzy6bnj2RvKA/+wD0f HN/UBNK6hnB4A93YDWA1ywCh5zIHb0rPSQyeYAU2jwuWpgfNahEdW2/Jnw32rD3Y Wj953n2rt8tPo/incJbCMneFgqN2pgQ4iFxSC6/FhsY0jJR2kzHdirlmYNUwiwVY yqJ9wj59dDZEJ4wc2B+P8TqO5pNBPVypIGzfltcTtDJ6IHFLlB/mXt8yiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwMehAyGfbNm/HeScZlVt5JhnzLMB8GA1UdIwQY MBaAFBmQi2NpFI9PPFDxZxA/egR4xSlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzkt MTI2MGE2ZjNhMzkzLzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzktMTI2MGE2ZjNhMzkz LzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARq4jZhiq kbDkDjTdygvLBabFWndl8YTHnrOChWtFVM1CY3jaP0tzpBycPkRxGlYds9SeRDdt V9iZWBUBEGoBky6Ewfa6FzInuPdAi7HknroodeJpHWDJ7mT52D4UMP5cp9HagqUC z6nH04PzFR/cSdstdilV0h3bj6DXf6y/CnXXRLt1XLSHmlKERZTmWL/KBZSUeeSO VRiNK14d882Wit7XaitpqpqBeqDRc5Fun36dUFl0eOBF129i1bSrnlUo6kulmQxJ o9123Uo7VocxXI1qpSwMYnuoxPPIpdpRb2O2kdroxL69iTo9r7GjiMIuYi547Rgi zqEN1aa00jMMvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:44 2025 by rpki-client