This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json) Hash identifier: a+lhfJSIFK8LXaXlWLnmCGCMTca3/zOH90LyBx7HTWU= Subject key identifier: 4B:E1:BA:A7:DE:0B:02:A0:12:EB:A0:61:B2:E4:03:E4:A7:44:0D:EA Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb Certificate serial: 019B481575A6E12A1E7EC17B0FE2F99BBD71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 22:02:04 +0000 Manifest this update: Mon 22 Dec 2025 22:02:04 +0000 Manifest next update: Tue 23 Dec 2025 22:02:04 +0000 Files and hashes: 1: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: BOuazGhQ/fT6GH4cZvVR6zZZ4AXNt9yNZyXAswnUsjA=) 2: ocSKLBAvwLdO6Bz9BzgpYro5A9k.roa (hash: Gf/KD5MQfVoD7yuJC1PN6VI3qKYUcNl5HcQ7qcq9TAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:75:a6:e1:2a:1e:7e:c1:7b:0f:e2:f9:9b:bd:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb Validity Not Before: Dec 22 22:02:04 2025 GMT Not After : Dec 23 22:02:04 2025 GMT Subject: CN=4be1baa7de0b02a012eba061b2e403e4a7440dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9a:77:66:20:83:8b:de:bb:20:b8:33:37:99: 9f:9a:37:42:7f:59:5e:ca:98:db:ec:eb:7a:35:91: 45:7b:12:1f:69:0a:71:cd:5e:ff:38:ba:15:e8:e3: 7a:50:d2:ea:bf:00:fe:8b:4c:c4:af:5b:95:6d:fe: b1:ac:b8:ef:82:f4:aa:8d:a4:de:e7:0c:9b:9e:f3: 01:1d:f1:6a:bd:77:4d:30:cb:69:46:f4:a8:8f:32: ac:e5:f2:04:14:ee:4e:7e:45:7f:23:0b:2d:9f:cc: 40:39:bb:ed:69:72:63:53:5a:5e:1a:b7:3a:f9:b5: 52:be:f4:84:da:cb:3b:32:bc:ff:08:b5:9f:77:0a: 59:d2:d7:65:cc:b1:89:a7:b4:24:a3:68:e0:85:17: 80:59:5c:bb:a7:ca:1c:8e:c8:33:f0:59:ca:64:58: a9:39:94:91:b6:19:7f:1c:4e:f1:6e:93:fe:d4:bd: 2d:c1:50:50:98:72:8b:2d:95:00:c7:cc:a8:3d:65: d1:b5:a3:3f:c9:ed:c7:5d:f0:a8:e9:bb:ea:b5:a5: 6b:a5:2b:5d:ce:b1:52:22:ef:94:75:19:69:96:aa: 78:ba:44:72:91:98:78:c6:1c:74:d4:7d:3e:62:2c: 4f:1c:99:58:df:a5:77:bb:bd:53:10:63:6b:b4:3e: a8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E1:BA:A7:DE:0B:02:A0:12:EB:A0:61:B2:E4:03:E4:A7:44:0D:EA X509v3 Authority Key Identifier: keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fa:c1:57:e7:25:a6:89:94:6c:b3:cb:b3:dc:66:be:6a:05: 82:42:f8:e2:25:1b:72:68:21:07:2a:0e:ed:55:37:3c:c5:89: ea:c2:a2:5e:b3:18:54:df:28:52:2e:a3:09:45:1a:71:79:51: 2d:36:1f:43:4b:e1:91:f6:35:00:4a:3b:1c:a9:9e:af:dc:c2: 5d:8e:f0:36:52:73:89:cb:36:b3:4f:99:0c:09:03:e1:02:e3: c3:3a:2c:0b:d2:90:39:9e:c9:52:05:47:f3:74:c3:4a:6a:fe: 16:a2:ae:8f:ae:83:fe:68:b1:b6:5a:d6:c3:49:2d:8f:8d:4c: 02:ad:a3:f3:59:3a:b6:fb:70:32:76:26:4e:56:91:df:59:8c: 44:c3:1f:af:51:bc:bb:ce:a0:e6:e8:3b:c4:8e:f9:23:11:07: a7:d1:29:01:1a:9e:d5:0c:5e:6c:f1:86:8c:5b:00:14:c7:44: 5f:7b:17:7e:6b:3e:6c:db:52:f3:f5:97:1e:fe:54:0b:d3:8f: ce:89:3a:7e:4e:14:89:ee:d0:08:a8:23:3c:f7:31:ef:f1:a0: 8e:d0:24:65:ea:f7:4b:7c:5f:31:a4:ff:a3:19:53:b8:4c:50: ba:5a:0c:f1:75:80:ca:38:40:6f:4f:7f:1d:0d:0e:96:27:b5: a2:5f:1a:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFXWm4SoefsF7D+L5m71xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTc2MjVjMzk1ZmI4NjdmNWQ4MDhkNTM1OTdhMTFjZTdm M2M0Y2IwHhcNMjUxMjIyMjIwMjA0WhcNMjUxMjIzMjIwMjA0WjAzMTEwLwYDVQQD Eyg0YmUxYmFhN2RlMGIwMmEwMTJlYmEwNjFiMmU0MDNlNGE3NDQwZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pp3ZiCDi967ILgzN5mfmjdCf1le ypjb7Ot6NZFFexIfaQpxzV7/OLoV6ON6UNLqvwD+i0zEr1uVbf6xrLjvgvSqjaTe 5wybnvMBHfFqvXdNMMtpRvSojzKs5fIEFO5OfkV/Iwstn8xAObvtaXJjU1peGrc6 +bVSvvSE2ss7Mrz/CLWfdwpZ0tdlzLGJp7Qko2jghReAWVy7p8ocjsgz8FnKZFip OZSRthl/HE7xbpP+1L0twVBQmHKLLZUAx8yoPWXRtaM/ye3HXfCo6bvqtaVrpStd zrFSIu+UdRlplqp4ukRykZh4xhx01H0+YixPHJlY36V3u71TEGNrtD6osQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvhuqfeCwKgEuugYbLkA+SnRA3qMB8GA1UdIwQY MBaAFBmXYlw5X7hn9dgI1TWXoRzn88TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xNmU4MTItMjdjNi00MDVkLWE0YzUt YTdmN2I5ODA5MDA3LzEvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8xNmU4MTItMjdjNi00MDVkLWE0YzUtYTdmN2I5ODA5MDA3 LzEvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfrBV+cl pomUbLPLs9xmvmoFgkL44iUbcmghByoO7VU3PMWJ6sKiXrMYVN8oUi6jCUUacXlR LTYfQ0vhkfY1AEo7HKmer9zCXY7wNlJzics2s0+ZDAkD4QLjwzosC9KQOZ7JUgVH 83TDSmr+FqKuj66D/mixtlrWw0ktj41MAq2j81k6tvtwMnYmTlaR31mMRMMfr1G8 u86g5ug7xI75IxEHp9EpARqe1QxebPGGjFsAFMdEX3sXfms+bNtS8/WXHv5UC9OP zok6fk4Uie7QCKgjPPcx7/GgjtAkZer3S3xfMaT/oxlTuExQuloM8XWAyjhAb09/ HQ0Olie1ol8arw== -----END CERTIFICATE-----Generated at Tue Dec 23 08:18:14 2025 by rpki-client