This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft File: GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json) Hash identifier: BcijcX53kphNZQNL1MzRAK1feTkwDTSJE4jJgT2gPko= Subject key identifier: D9:CE:D7:1D:B0:6B:A1:27:8A:36:F1:5B:04:34:82:C8:01:C9:5A:7C Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD Certificate issuer: /CN=1b328303be7720013b70838e48eba93b420387dd Certificate serial: 019AF209A57E18AC97226DC83A68D0254D2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft Manifest number: 070C Signing time: Sat 06 Dec 2025 05:01:49 +0000 Manifest this update: Sat 06 Dec 2025 05:01:49 +0000 Manifest next update: Sun 07 Dec 2025 05:01:49 +0000 Files and hashes: 1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: R+hRmSQTako1TBbeJSg9JRRyAUBddvtpIT0GiHf02c0=) 2: aLfo3q6L0mVOuK0za6OIf6mWxIg.roa (hash: 7LeZnYMqXpBceqMPtLfdcEQrWgVh8yNUNh6lUyY5uzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a5:7e:18:ac:97:22:6d:c8:3a:68:d0:25:4d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b328303be7720013b70838e48eba93b420387dd Validity Not Before: Dec 6 05:01:49 2025 GMT Not After : Dec 7 05:01:49 2025 GMT Subject: CN=d9ced71db06ba1278a36f15b043482c801c95a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:ed:55:91:a2:90:47:da:56:f9:e3:3f:9f: 06:b2:db:e6:e7:63:ab:5b:e9:00:2e:1f:02:1b:a1: 8f:c3:e9:4f:ec:2e:c7:b6:4a:2b:87:f0:84:b1:c9: 9a:85:74:82:dc:bb:64:49:87:fa:67:c7:d1:c0:bd: 64:81:3f:d9:d2:2c:8c:b0:67:e3:da:aa:3c:0e:5d: 15:22:58:82:26:a5:71:99:62:81:d6:fd:8e:ea:d5: 7c:02:9b:6b:5b:f3:8b:81:fd:42:5d:33:06:db:bb: 0d:ac:e9:16:74:ab:53:aa:c8:a6:30:1d:7c:d0:9c: 87:b5:4d:7d:2d:4d:7e:1b:50:00:fb:5e:9b:62:a3: 86:83:d3:3f:bb:55:26:c1:ac:3a:d1:fc:f2:4b:c3: 11:d7:8e:8f:0e:2f:96:64:83:9c:6d:c7:40:f5:ef: ab:2b:4f:0b:da:38:e2:3f:48:54:c7:10:cb:b0:9d: aa:1e:0a:68:cb:d4:81:4b:03:36:ee:61:16:5c:49: a9:8c:0f:14:a2:ef:b8:8d:8e:0d:52:6c:95:18:4c: 9b:b5:9a:c5:c8:43:3c:44:0a:b0:14:af:af:64:47: 67:4c:49:35:69:00:5f:04:9d:1f:1e:f9:e1:37:a9: 54:26:b1:77:93:1e:e4:d6:c4:0d:89:81:1d:c2:f7: 5d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CE:D7:1D:B0:6B:A1:27:8A:36:F1:5B:04:34:82:C8:01:C9:5A:7C X509v3 Authority Key Identifier: keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:36:13:42:29:82:06:9d:db:2f:6d:02:55:8a:e9:1f:cd:44: 48:35:f7:70:1b:dd:af:48:e3:11:a6:1a:72:11:c5:33:a0:d2: 80:24:d8:94:de:0c:10:4f:d3:d1:56:7a:b3:6e:b9:00:a8:1e: 8c:65:96:f2:02:5b:c1:f1:ed:ba:bb:60:db:43:7c:01:66:7b: 2c:af:50:8d:f2:00:3a:47:2c:4d:2d:ce:55:ba:39:a1:1b:bd: b4:8b:87:57:2a:94:fc:85:60:c0:14:e3:05:81:16:d6:b8:28: a7:d7:5a:0b:1c:36:c2:80:cd:0f:d1:6f:75:c5:bb:1e:ca:d0: 48:4d:d2:61:78:09:65:7d:dd:40:6c:18:80:a7:cb:d9:bc:1d: 49:f6:61:22:16:36:68:62:a8:80:d9:b1:b1:95:ca:a0:41:b6: 6a:d8:ae:7b:89:83:81:2a:94:27:10:b2:dc:43:5e:cb:0a:97: 9c:18:41:da:6e:1d:45:a2:43:d2:bf:5c:84:c9:39:58:07:68: 3a:bc:9b:08:a8:29:69:be:70:aa:29:61:9e:b5:3a:a2:fb:75: d9:96:3e:a9:19:a4:e2:0c:63:1c:e4:7c:bf:93:64:6f:43:8a: b1:5a:4c:72:52:65:99:2f:0b:af:b9:d2:8e:2f:9e:b0:48:5c: 6a:4a:6c:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaV+GKyXIm3IOmjQJU0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzI4MzAzYmU3NzIwMDEzYjcwODM4ZTQ4ZWJhOTNiNDIw Mzg3ZGQwHhcNMjUxMjA2MDUwMTQ5WhcNMjUxMjA3MDUwMTQ5WjAzMTEwLwYDVQQD EyhkOWNlZDcxZGIwNmJhMTI3OGEzNmYxNWIwNDM0ODJjODAxYzk1YTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4LtVZGikEfaVvnjP58Gstvm52Or W+kALh8CG6GPw+lP7C7Htkorh/CEscmahXSC3LtkSYf6Z8fRwL1kgT/Z0iyMsGfj 2qo8Dl0VIliCJqVxmWKB1v2O6tV8AptrW/OLgf1CXTMG27sNrOkWdKtTqsimMB18 0JyHtU19LU1+G1AA+16bYqOGg9M/u1Umwaw60fzyS8MR146PDi+WZIOcbcdA9e+r K08L2jjiP0hUxxDLsJ2qHgpoy9SBSwM27mEWXEmpjA8Uou+4jY4NUmyVGEybtZrF yEM8RAqwFK+vZEdnTEk1aQBfBJ0fHvnhN6lUJrF3kx7k1sQNiYEdwvddpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnO1x2wa6EnijbxWwQ0gsgByVp8MB8GA1UdIwQY MBaAFBsygwO+dyABO3CDjkjrqTtCA4fdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3pLREE3NTNJQUU3Y0lPT1NPdXBPMElEaDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYjMyMDctODQxMC00MDQ2LWE0NDkt NzYwYmE3NDM2YzI0LzEvR3pLREE3NTNJQUU3Y0lPT1NPdXBPMElEaDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lYjMyMDctODQxMC00MDQ2LWE0NDktNzYwYmE3NDM2YzI0 LzEvR3pLREE3NTNJQUU3Y0lPT1NPdXBPMElEaDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzYTQimC Bp3bL20CVYrpH81ESDX3cBvdr0jjEaYachHFM6DSgCTYlN4MEE/T0VZ6s265AKge jGWW8gJbwfHturtg20N8AWZ7LK9QjfIAOkcsTS3OVbo5oRu9tIuHVyqU/IVgwBTj BYEW1rgop9daCxw2woDND9FvdcW7HsrQSE3SYXgJZX3dQGwYgKfL2bwdSfZhIhY2 aGKogNmxsZXKoEG2atiue4mDgSqUJxCy3ENeywqXnBhB2m4dRaJD0r9chMk5WAdo OrybCKgpab5wqilhnrU6ovt12ZY+qRmk4gxjHOR8v5Nkb0OKsVpMclJlmS8Lr7nS ji+esEhcakpshw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:56 2025 by rpki-client