This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft File: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft (raw, json) Hash identifier: rmIj3o6yCwe53QHBQPWiQiUgwBK5ykiWi+uqEM+oEcY= Subject key identifier: 24:C9:E7:64:76:3B:8C:53:C8:73:AE:07:45:92:53:60:81:A0:A6:7A Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38 Certificate issuer: /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38 Certificate serial: 019AF208BF25802E5BA013573D9675D09E7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft Manifest number: 0384 Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: 7h1Vbhmm5gf8J-_5IjJpoeOBap8.roa (hash: BzRVE6RrY3y0kWVGZkbu1XvrtIC4s5eG6qRWe7XRbfY=) 2: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl (hash: kB9AkQYqthw7SxcQ4jtzvqH2ExhG1OQJKy8KvpAmLP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bf:25:80:2e:5b:a0:13:57:3d:96:75:d0:9e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38 Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=24c9e764763b8c53c873ae074592536081a0a67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:b9:b7:c5:a4:a6:c3:e0:e6:e0:e1:20:3e: d6:83:8b:fc:e9:04:8a:c6:3b:79:28:e0:ab:1c:86: f1:36:73:56:b4:fa:bc:38:09:b8:60:7b:80:40:52: 6a:0a:b0:5a:b6:83:06:21:79:42:02:f1:db:5e:5c: a7:9c:d6:7e:7e:5c:4d:1d:9a:7f:41:f9:c7:b1:95: 1b:40:9f:4d:7d:85:03:e0:28:7b:4f:90:96:78:19: 0e:56:c5:b0:82:f6:81:61:af:7b:20:4c:8e:79:f4: c7:b3:70:ae:8b:06:1c:7f:bc:d2:ed:2d:2f:38:aa: 48:eb:95:60:eb:84:c3:c5:54:75:b5:b9:21:2a:45: 73:be:79:5a:21:19:0c:70:1e:19:d3:8d:6a:99:7c: 00:3a:0a:7e:6f:55:8c:54:f5:af:66:fe:a1:b0:32: 19:d7:db:f0:43:3a:79:9d:59:77:6b:4f:80:c3:4e: 61:fb:46:21:d4:d2:be:cb:50:f2:33:75:04:cb:1d: 08:76:ec:fb:5f:71:3f:3c:56:52:b6:72:11:ff:3c: 10:b3:1a:57:00:ab:5d:09:0f:91:aa:d7:c9:89:88: d8:18:cb:47:76:3d:7d:0d:83:0b:d6:25:ba:ad:c4: f6:96:4a:09:d8:85:aa:53:1c:f3:d3:64:02:e1:e1: f4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C9:E7:64:76:3B:8C:53:C8:73:AE:07:45:92:53:60:81:A0:A6:7A X509v3 Authority Key Identifier: keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8d:83:b0:d1:b5:66:6d:0c:c4:b7:52:08:8a:fe:14:e4:bf: 92:f9:55:8b:d2:df:90:1b:be:2d:1d:75:66:8f:3e:5e:ac:5f: fe:c8:fb:c5:88:44:bb:95:ca:76:1a:e4:c8:e2:f8:c4:eb:49: 27:2c:8c:76:e1:d7:6f:cb:a0:2d:de:5f:ae:ea:ed:98:c0:5a: 91:52:6d:0e:30:01:fc:7e:08:95:e6:d7:1e:fd:a8:fa:a5:d5: 65:e3:eb:02:aa:e5:40:ea:1b:3f:8f:a6:75:3c:dd:cf:49:83: d2:c2:7d:d2:29:cb:25:3a:e4:82:45:0f:4b:6a:2f:95:34:c2: 04:55:28:02:8a:f7:df:8a:9e:8d:a2:9a:0c:66:27:1b:96:63: 08:37:26:8d:41:76:f3:b3:9a:5e:96:d9:09:32:d8:78:6a:6b: 05:0d:f0:2c:d9:29:05:37:ce:42:27:9c:d4:66:da:89:8d:20: 06:4b:66:bb:45:72:b7:36:7c:8b:cf:7b:d4:44:34:91:82:3a: 2a:75:62:13:a7:ab:59:0d:2b:61:d9:c9:8d:03:1a:af:28:fe: 6d:7a:2e:e9:84:e2:ed:20:72:69:93:3b:c8:1e:30:ca:2d:27: 65:de:1b:2e:16:c7:7e:06:fd:ce:1d:76:59:f9:a1:d4:04:38: 07:e3:6d:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCL8lgC5boBNXPZZ10J5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZWNmYjY0YmRhNTIxMzcwOGZmNjdiYWQ0YzgzOTUwYjFm ZmRjMzgwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD EygyNGM5ZTc2NDc2M2I4YzUzYzg3M2FlMDc0NTkyNTM2MDgxYTBhNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk65t8WkpsPg5uDhID7Wg4v86QSK xjt5KOCrHIbxNnNWtPq8OAm4YHuAQFJqCrBatoMGIXlCAvHbXlynnNZ+flxNHZp/ QfnHsZUbQJ9NfYUD4Ch7T5CWeBkOVsWwgvaBYa97IEyOefTHs3CuiwYcf7zS7S0v OKpI65Vg64TDxVR1tbkhKkVzvnlaIRkMcB4Z041qmXwAOgp+b1WMVPWvZv6hsDIZ 19vwQzp5nVl3a0+Aw05h+0Yh1NK+y1DyM3UEyx0Iduz7X3E/PFZStnIR/zwQsxpX AKtdCQ+RqtfJiYjYGMtHdj19DYML1iW6rcT2lkoJ2IWqUxzz02QC4eH0+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTJ52R2O4xTyHOuB0WSU2CBoKZ6MB8GA1UdIwQY MBaAFIPs+2S9pSE3CP9nutTIOVCx/9w4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wMzE0NjMtNThlNi00ZmNiLThjYTEt MWZjZmQwYzhiZGY1LzEvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wMzE0NjMtNThlNi00ZmNiLThjYTEtMWZjZmQwYzhiZGY1 LzEvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGI2DsNG1 Zm0MxLdSCIr+FOS/kvlVi9LfkBu+LR11Zo8+Xqxf/sj7xYhEu5XKdhrkyOL4xOtJ JyyMduHXb8ugLd5frurtmMBakVJtDjAB/H4IlebXHv2o+qXVZePrAqrlQOobP4+m dTzdz0mD0sJ90inLJTrkgkUPS2ovlTTCBFUoAor334qejaKaDGYnG5ZjCDcmjUF2 87OaXpbZCTLYeGprBQ3wLNkpBTfOQiec1GbaiY0gBktmu0VytzZ8i8971EQ0kYI6 KnViE6erWQ0rYdnJjQMaryj+bXou6YTi7SByaZM7yB4wyi0nZd4bLhbHfgb9zh12 Wfmh1AQ4B+Nttg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:42 2025 by rpki-client