This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json) Hash identifier: 7if5tn+Rq7C6gtY1/M4EAdklSHh5togvI7+KSs5LQ+U= Subject key identifier: E6:C9:07:71:ED:68:B6:23:50:32:35:04:14:20:3A:67:71:00:3E:52 Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b Certificate serial: 019AF0BF75F4FE7472E1778E4C270FCB18B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft Manifest number: 0CB9 Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: CI8EJlo4QxCPtHKK4BRRGUxnpzy3KbHYm0OiO1T5LH8=) 2: hZr6mNjSHqTgv3UgV0r5NKysYhc.roa (hash: AR+e3H/5yBz4nRQW+W404T/nXrb1KqyGNQGS5zNA/os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:75:f4:fe:74:72:e1:77:8e:4c:27:0f:cb:18:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=e6c90771ed68b6235032350414203a6771003e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:a4:8b:bd:a9:ce:90:20:53:1d:20:ef:f5: 58:e3:1f:7b:65:ef:e7:85:5d:2c:04:29:29:2a:f3: a9:65:39:44:ab:b3:54:45:b9:9f:f2:e3:f6:bd:53: e2:c7:b1:49:9a:0f:8d:19:d6:f7:d2:d6:70:81:93: 20:fa:9f:79:ac:21:e5:6b:c3:67:05:56:8c:bf:e0: 09:4a:85:d7:71:2e:94:ab:c9:52:c8:54:4d:11:f8: b6:43:56:ff:db:2e:ee:bc:06:d2:44:eb:72:39:14: 8a:9a:b1:e7:81:b9:96:a6:51:e6:47:06:37:55:dd: 28:b0:5f:31:2d:46:87:84:26:37:05:77:d2:e7:5f: e8:36:3a:f6:a1:ad:59:e0:01:40:51:e6:f1:82:4b: 9b:88:e9:01:49:35:0d:e3:eb:1c:31:6e:29:0f:00: 4c:c7:05:41:60:ba:71:54:5a:6f:df:f9:05:a7:13: e3:47:bd:55:54:d0:05:ae:4e:14:32:a3:ad:11:d5: 05:54:bf:f0:66:5e:f4:20:2f:63:37:7f:3a:00:01: 9c:ca:21:77:28:d7:4b:45:b4:44:54:7d:a7:c9:e5: 54:95:cc:12:51:62:9c:6a:17:22:47:ab:5e:fb:8d: 30:ff:59:eb:bd:7c:38:67:09:74:df:97:d6:0f:68: 0e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C9:07:71:ED:68:B6:23:50:32:35:04:14:20:3A:67:71:00:3E:52 X509v3 Authority Key Identifier: keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ec:c5:c3:41:af:7d:3d:d6:67:51:4f:9a:64:ff:15:5c:9c: ab:27:05:3b:00:20:0c:94:c2:83:27:b1:40:d2:cc:ff:00:56: 81:62:14:ab:8c:77:54:52:a3:61:8d:3b:8c:be:16:38:9e:46: 11:27:62:99:89:ae:31:3c:a6:e1:c4:1b:2a:be:06:9d:39:b8: b5:b6:da:4a:bb:25:27:ca:8f:22:a5:b8:d4:3f:08:13:9a:10: 8e:a3:a8:e4:46:dc:c3:da:2c:34:76:38:7f:a7:63:83:eb:e0: ed:db:09:a6:c3:19:94:97:97:39:35:a7:6b:5a:86:56:bd:98: 86:f5:9f:2e:3a:98:60:46:1b:e1:4f:09:9c:d2:8b:49:83:7c: eb:1e:1f:01:6e:50:65:a9:23:ee:e3:c3:7f:75:f7:85:22:51: 47:2d:34:5e:37:12:4f:17:db:38:05:4d:0c:19:49:ab:c4:39: 5f:5f:a6:e5:5e:79:9a:53:65:9b:93:83:92:16:d3:54:5b:27: 1a:22:54:e2:24:b1:e3:29:0d:73:b5:7c:d4:a4:57:3e:65:f1: f0:a7:b2:de:04:fa:ca:b9:d9:51:35:20:69:dd:98:9a:7b:0b: 00:b4:56:fc:c8:07:8c:86:7d:0b:40:2d:3e:09:61:bb:14:a1: 44:e7:39:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3X0/nRy4XeOTCcPyxiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNmNjOTkzOGMzMmUwNGRjNTQ0M2RkNmMwNWEwMjdhNTYx N2Q5N2IwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD EyhlNmM5MDc3MWVkNjhiNjIzNTAzMjM1MDQxNDIwM2E2NzcxMDAzZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPKki72pzpAgUx0g7/VY4x97Ze/n hV0sBCkpKvOpZTlEq7NURbmf8uP2vVPix7FJmg+NGdb30tZwgZMg+p95rCHla8Nn BVaMv+AJSoXXcS6Uq8lSyFRNEfi2Q1b/2y7uvAbSROtyORSKmrHngbmWplHmRwY3 Vd0osF8xLUaHhCY3BXfS51/oNjr2oa1Z4AFAUebxgkubiOkBSTUN4+scMW4pDwBM xwVBYLpxVFpv3/kFpxPjR71VVNAFrk4UMqOtEdUFVL/wZl70IC9jN386AAGcyiF3 KNdLRbREVH2nyeVUlcwSUWKcahciR6te+40w/1nrvXw4Zwl035fWD2gOIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObJB3HtaLYjUDI1BBQgOmdxAD5SMB8GA1UdIwQY MBaAFIJsyZOMMuBNxUQ91sBaAnpWF9l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYt YWY3ZDZhODk3NTJhLzEvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYtYWY3ZDZhODk3NTJh LzEvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduzFw0Gv fT3WZ1FPmmT/FVycqycFOwAgDJTCgyexQNLM/wBWgWIUq4x3VFKjYY07jL4WOJ5G ESdimYmuMTym4cQbKr4GnTm4tbbaSrslJ8qPIqW41D8IE5oQjqOo5Ebcw9osNHY4 f6djg+vg7dsJpsMZlJeXOTWna1qGVr2YhvWfLjqYYEYb4U8JnNKLSYN86x4fAW5Q Zakj7uPDf3X3hSJRRy00XjcSTxfbOAVNDBlJq8Q5X1+m5V55mlNlm5ODkhbTVFsn GiJU4iSx4ykNc7V81KRXPmXx8Key3gT6yrnZUTUgad2YmnsLALRW/MgHjIZ9C0At PglhuxShROc5ww== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:13 2025 by rpki-client