This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json) Hash identifier: gISglkyKViS2xZ+Ve1S7teFa7kOoSHPPpaR5d25f3qY= Subject key identifier: 37:0C:37:B5:7D:9B:6B:29:89:11:30:59:09:B3:5D:EE:60:23:59:99 Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498 Certificate serial: 019B36E99AF1E0D92E089154370EDA474FA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft Manifest number: 03BD Signing time: Fri 19 Dec 2025 14:00:37 +0000 Manifest this update: Fri 19 Dec 2025 14:00:37 +0000 Manifest next update: Sat 20 Dec 2025 14:00:37 +0000 Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=) 2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: N4Ym/JNRqCkMKYtc4R2IeZZgkpYL4HbEbawzSWGM6fE=) 3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:9a:f1:e0:d9:2e:08:91:54:37:0e:da:47:4f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498 Validity Not Before: Dec 19 14:00:37 2025 GMT Not After : Dec 20 14:00:37 2025 GMT Subject: CN=370c37b57d9b6b298911305909b35dee60235999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5a:18:53:18:a0:2b:24:77:4c:5e:1b:3d:d1: 1f:f8:42:11:50:62:9a:d2:56:cc:19:d7:a9:a8:f7: 66:8f:2b:77:4b:aa:c1:ce:f7:c1:71:f8:59:f4:a5: c4:5e:4f:71:cb:81:80:71:3b:05:3d:22:ce:c4:6c: 7b:cc:0b:af:1f:ec:e6:0a:5c:e1:78:bc:08:3f:86: ee:cf:81:44:b3:78:99:b3:7c:0d:5e:72:97:56:4e: d3:35:4a:9a:f3:5a:9a:e5:f8:a2:91:86:a2:94:de: 8b:93:e5:65:0e:89:a1:86:00:ca:20:41:c8:c2:11: 1e:72:d1:ff:96:be:a5:c8:67:f8:ac:1f:6c:88:53: db:55:80:33:49:70:a4:8b:2c:27:ab:20:d2:7d:12: 6b:04:c5:53:cc:6f:6d:64:2a:ec:5e:d7:0e:da:c1: 37:96:f0:93:b7:c6:74:98:4c:cb:62:c3:20:9e:7b: a7:75:48:e5:4f:5b:4d:23:58:03:f3:b6:2f:c9:93: 60:43:7e:cf:6e:9c:85:05:67:b2:bd:6f:c2:aa:f8: 40:53:3d:8c:be:fa:2c:9b:81:43:0b:d9:da:ed:32: ff:03:3a:83:e0:12:9e:9f:2b:f9:7a:76:ca:71:cd: 84:b5:e3:91:68:c2:78:fc:7a:93:96:fd:08:5f:14: 5d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0C:37:B5:7D:9B:6B:29:89:11:30:59:09:B3:5D:EE:60:23:59:99 X509v3 Authority Key Identifier: keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cc:10:18:7f:f6:3e:ee:14:e6:e4:02:5e:d4:c9:31:0e:3d: 0e:1e:58:76:9d:43:da:7b:86:bc:54:dc:35:7e:60:af:48:1c: cb:52:a0:74:ca:0f:6d:8a:a9:d9:0e:49:ee:af:8e:ff:4e:7a: c5:eb:01:d4:13:74:73:d5:d5:b0:30:95:c7:b9:52:63:a1:de: 70:08:4c:f8:5d:98:7f:2e:ac:c7:a0:34:f7:75:3a:42:77:cd: f8:37:1c:f1:b6:db:6f:7d:ac:9a:f2:25:39:ee:cc:5e:33:a8: b2:47:cc:e3:01:b2:41:ec:da:20:b1:5b:af:0b:d5:e8:23:61: be:7c:0a:e3:b8:d5:aa:c6:38:85:76:b8:bc:3b:d3:87:f6:2d: 0a:bf:bf:a5:05:85:bf:4f:d1:63:e3:4f:b6:61:26:d8:dd:df: b8:c0:7d:23:86:e1:7b:c8:02:2a:68:d2:24:71:a6:09:0f:84: 0d:ac:65:bc:5a:4c:cf:3c:74:6b:94:cf:18:ab:23:e1:bf:3d: 82:c9:99:fe:08:89:df:91:50:36:9f:ca:25:2f:16:3f:a2:3b: ad:e0:ec:9c:b6:36:19:fd:79:c4:dc:9c:e6:67:0a:61:8f:0f: 63:23:93:27:4d:ba:9c:f1:77:db:9d:4e:39:81:3d:73:9f:a7: b8:cd:ac:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26Zrx4NkuCJFUNw7aR0+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx MzM0OTgwHhcNMjUxMjE5MTQwMDM3WhcNMjUxMjIwMTQwMDM3WjAzMTEwLwYDVQQD EygzNzBjMzdiNTdkOWI2YjI5ODkxMTMwNTkwOWIzNWRlZTYwMjM1OTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1oYUxigKyR3TF4bPdEf+EIRUGKa 0lbMGdepqPdmjyt3S6rBzvfBcfhZ9KXEXk9xy4GAcTsFPSLOxGx7zAuvH+zmClzh eLwIP4buz4FEs3iZs3wNXnKXVk7TNUqa81qa5fiikYailN6Lk+VlDomhhgDKIEHI whEectH/lr6lyGf4rB9siFPbVYAzSXCkiywnqyDSfRJrBMVTzG9tZCrsXtcO2sE3 lvCTt8Z0mEzLYsMgnnundUjlT1tNI1gD87YvyZNgQ37PbpyFBWeyvW/CqvhAUz2M vvosm4FDC9na7TL/AzqD4BKenyv5enbKcc2EteORaMJ4/HqTlv0IXxRdlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcMN7V9m2spiREwWQmzXe5gI1mZMB8GA1UdIwQY MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt NDZhZjNlNTBjMDUyLzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8wQGH/2 Pu4U5uQCXtTJMQ49Dh5Ydp1D2nuGvFTcNX5gr0gcy1KgdMoPbYqp2Q5J7q+O/056 xesB1BN0c9XVsDCVx7lSY6HecAhM+F2Yfy6sx6A093U6QnfN+Dcc8bbbb32smvIl Oe7MXjOoskfM4wGyQezaILFbrwvV6CNhvnwK47jVqsY4hXa4vDvTh/YtCr+/pQWF v0/RY+NPtmEm2N3fuMB9I4bhe8gCKmjSJHGmCQ+EDaxlvFpMzzx0a5TPGKsj4b89 gsmZ/giJ35FQNp/KJS8WP6I7reDsnLY2Gf15xNyc5mcKYY8PYyOTJ026nPF3251O OYE9c5+nuM2sFg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:11:14 2025 by rpki-client