This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json) Hash identifier: tJjZmcMd/cnOvAtN39wAfmuAXzBDcxbXBEq+BZ+oZi8= Subject key identifier: F4:00:EB:39:45:32:CD:EA:59:87:96:A0:84:B0:5A:A4:96:A5:62:14 Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8 Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8 Certificate serial: 019B24AC69158F6AB20AD49BFED22FFB4677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft Manifest number: 14A6 Signing time: Tue 16 Dec 2025 01:00:37 +0000 Manifest this update: Tue 16 Dec 2025 01:00:37 +0000 Manifest next update: Wed 17 Dec 2025 01:00:37 +0000 Files and hashes: 1: 52xHcZKMiLkJfC48D6ah-VZ8yTA.roa (hash: jrz3bp7KHkqbn8SdD2JCqFdwlcK3RRhyL/xchThJ/cc=) 2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: 0THz3JHhjpbmPy3VE3yNviTwyhqi3VtWy+m978hNZjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:69:15:8f:6a:b2:0a:d4:9b:fe:d2:2f:fb:46:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8 Validity Not Before: Dec 16 01:00:37 2025 GMT Not After : Dec 17 01:00:37 2025 GMT Subject: CN=f400eb394532cdea598796a084b05aa496a56214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5a:a3:b7:ab:88:f7:de:f0:6b:7b:54:6a:c9: aa:9a:0f:fd:ba:14:db:82:b8:04:27:d6:4f:17:65: b0:83:6b:9c:06:25:d0:08:c0:3c:e6:48:ab:fe:15: d1:b8:3d:4f:87:4c:8d:9a:48:65:45:91:3e:3a:3b: 3c:3f:e7:07:0e:cf:a8:2a:ef:f7:ed:9a:ff:39:be: 5f:34:1a:8a:f2:72:53:c7:38:ff:33:24:ba:50:bd: 47:d3:14:07:d0:e9:08:cf:03:de:82:9c:51:4e:29: d0:97:40:57:58:88:77:17:e6:c8:57:fb:64:9a:9b: 96:29:9c:ff:23:d8:17:e8:c6:05:61:c4:ed:c7:ef: 56:9d:6e:45:01:c6:aa:06:a6:14:5e:da:db:1e:d0: 1e:ea:7a:de:1f:b1:be:75:21:2e:30:2c:31:6c:44: 37:14:ab:87:f2:2d:fe:53:0b:14:f5:02:0b:1d:fe: 19:b5:fc:57:7d:d4:7f:eb:a6:5d:5e:1e:58:4e:1d: 41:ef:d7:71:d8:fa:7a:b0:90:85:df:39:77:28:bc: 4b:26:ce:41:10:d7:8f:19:25:17:b9:72:ce:2d:47: 5e:85:d9:50:e9:d3:74:48:f3:91:17:68:6d:5b:25: b5:e0:43:1b:08:c0:e7:b1:29:3f:17:a9:78:d8:ea: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:00:EB:39:45:32:CD:EA:59:87:96:A0:84:B0:5A:A4:96:A5:62:14 X509v3 Authority Key Identifier: keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:36:b4:6c:a4:c0:31:a7:fd:30:5c:8b:86:63:77:f2:68:21: ff:bf:74:83:c9:a0:13:c0:cc:30:be:35:ad:97:bf:72:33:22: 61:af:e3:6d:53:50:ed:0f:94:11:c0:44:42:97:cd:c2:e7:7c: ac:ac:fc:47:38:8d:d4:6d:53:6b:95:28:73:d4:63:c6:87:83: 7c:9d:d3:58:e9:ac:b0:55:c8:5f:c8:f3:cb:7f:41:c4:bd:ce: e4:39:05:e4:e5:5f:7d:ad:a8:b1:00:40:e8:04:d1:f0:99:cb: 6c:6d:ce:cd:8a:7f:b4:97:75:3a:6e:54:ee:b3:43:72:55:e2: b7:7a:f8:fb:46:cd:58:62:7c:43:5a:49:a8:93:da:46:72:2e: 39:b6:dc:c0:10:fc:0c:61:8e:ee:7d:de:59:f3:3a:c7:7b:bf: cd:ff:b3:35:7c:7c:be:06:aa:44:bb:c6:c6:bd:ce:57:c9:ea: 58:d8:cb:42:8c:82:f8:3e:a5:87:6a:7e:50:e5:ef:07:b1:27: f0:9c:d5:91:fe:78:e4:84:61:7b:4f:61:7d:1b:ff:77:fb:d9: 41:24:e6:9a:8d:42:b4:c8:d2:ec:62:6b:90:d1:41:d2:2f:74: 6a:40:72:92:87:2a:0e:26:6a:4d:5b:30:41:ae:a6:16:32:ff: 27:b8:9a:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrGkVj2qyCtSb/tIv+0Z3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzU0NDRjNTgxMTYxYzU4OGFlODRiZTAxOTY1YmM4ZTgz NzgwYjgwHhcNMjUxMjE2MDEwMDM3WhcNMjUxMjE3MDEwMDM3WjAzMTEwLwYDVQQD EyhmNDAwZWIzOTQ1MzJjZGVhNTk4Nzk2YTA4NGIwNWFhNDk2YTU2MjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lqjt6uI997wa3tUasmqmg/9uhTb grgEJ9ZPF2Wwg2ucBiXQCMA85kir/hXRuD1Ph0yNmkhlRZE+Ojs8P+cHDs+oKu/3 7Zr/Ob5fNBqK8nJTxzj/MyS6UL1H0xQH0OkIzwPegpxRTinQl0BXWIh3F+bIV/tk mpuWKZz/I9gX6MYFYcTtx+9WnW5FAcaqBqYUXtrbHtAe6nreH7G+dSEuMCwxbEQ3 FKuH8i3+UwsU9QILHf4ZtfxXfdR/66ZdXh5YTh1B79dx2Pp6sJCF3zl3KLxLJs5B ENePGSUXuXLOLUdehdlQ6dN0SPORF2htWyW14EMbCMDnsSk/F6l42Oo62QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQA6zlFMs3qWYeWoISwWqSWpWIUMB8GA1UdIwQY MBaAFIM1RExYEWHFiK6EvgGWW8joN4C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEt MWYxM2Y1NWQwMDU5LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEtMWYxM2Y1NWQwMDU5 LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYza0bKTA Maf9MFyLhmN38mgh/790g8mgE8DMML41rZe/cjMiYa/jbVNQ7Q+UEcBEQpfNwud8 rKz8RziN1G1Ta5Uoc9RjxoeDfJ3TWOmssFXIX8jzy39BxL3O5DkF5OVffa2osQBA 6ATR8JnLbG3OzYp/tJd1Om5U7rNDclXit3r4+0bNWGJ8Q1pJqJPaRnIuObbcwBD8 DGGO7n3eWfM6x3u/zf+zNXx8vgaqRLvGxr3OV8nqWNjLQoyC+D6lh2p+UOXvB7En 8JzVkf545IRhe09hfRv/d/vZQSTmmo1CtMjS7GJrkNFB0i90akBykocqDiZqTVsw Qa6mFjL/J7iaBg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:43:14 2025 by rpki-client