This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json) Hash identifier: QhcTEiv1/7aTvcBMPyEPG2m+AjRa/eeoCgVv7HJ+eN0= Subject key identifier: BE:75:29:13:07:EC:76:61:E5:F9:2B:9E:34:95:7C:E0:1D:74:39:2C Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498 Certificate serial: 019B27774CA5F39476926BD2B036D3C22806 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft Manifest number: 03B5 Signing time: Tue 16 Dec 2025 14:01:28 +0000 Manifest this update: Tue 16 Dec 2025 14:01:28 +0000 Manifest next update: Wed 17 Dec 2025 14:01:28 +0000 Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=) 2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: IEK7x/p+dXOooyvXhB0rDbi9nnv/CB+/sMrvvZUBPgM=) 3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:4c:a5:f3:94:76:92:6b:d2:b0:36:d3:c2:28:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498 Validity Not Before: Dec 16 14:01:28 2025 GMT Not After : Dec 17 14:01:28 2025 GMT Subject: CN=be75291307ec7661e5f92b9e34957ce01d74392c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:71:ce:ce:ba:d0:3d:bf:b1:fe:77:63:22: 75:56:5f:b1:a4:91:8a:45:99:19:f5:08:e4:3d:36: 7b:5f:8f:53:24:e2:b3:d6:e4:ee:5a:11:1e:7a:4a: e3:1e:b4:af:0c:e5:5b:72:94:7f:c8:b7:35:59:57: b4:a1:a6:ef:95:ce:1a:e5:d9:25:b3:63:b2:39:5e: 59:e2:3d:56:61:7b:73:d2:0d:21:94:7d:5a:94:7d: ec:7c:30:7f:34:49:83:8f:d3:a6:29:5c:90:26:0a: 77:3e:8c:d4:74:9b:1e:ee:cd:d8:fb:e4:d2:41:8c: 45:7f:ab:a7:d0:0e:48:8d:98:26:ca:6c:b8:bf:5f: 75:26:4a:4f:54:ee:df:9e:b8:31:90:58:7f:c4:d8: 4d:75:fe:6e:ae:bc:cb:c9:6e:fc:d0:9c:60:cb:70: 63:ad:21:77:57:09:4c:8b:03:80:ad:9e:19:0b:03: 9a:02:b8:0b:1d:6f:f2:9e:c9:03:af:77:65:85:13: 1b:99:eb:9b:90:e7:04:24:b7:78:fa:eb:dd:bb:12: 3b:fb:bf:7a:45:b4:e3:e9:5e:1f:9d:9e:63:44:0a: 7c:5e:a7:9f:d5:c3:8f:ff:f3:ae:8f:ad:14:83:e5: b8:cf:53:9b:d6:c7:ce:53:9a:d8:6f:25:c0:d8:f1: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:75:29:13:07:EC:76:61:E5:F9:2B:9E:34:95:7C:E0:1D:74:39:2C X509v3 Authority Key Identifier: keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ec:0e:70:c5:5a:fb:83:bf:33:a0:1c:4b:fd:af:5f:c4:c7: 0e:ed:c4:5e:ce:d8:e6:92:83:4d:ee:93:0f:2e:ad:4c:a4:06: a8:b1:ae:1d:5b:47:fd:c2:f7:78:a8:c1:6a:d8:cb:7b:79:74: 95:4a:c3:d6:9b:39:d0:11:d4:55:fa:e2:2e:2a:93:cf:89:28: cb:26:9a:69:46:8e:f2:ef:5c:a9:b0:5e:dc:57:f0:bc:c9:9b: 4d:db:92:53:af:42:ba:31:25:6f:46:70:3d:86:fd:0c:8d:a7: 81:61:a9:6b:2c:d9:c6:f6:f3:5e:b9:5c:b1:2a:2b:a1:e9:52: e8:43:73:c7:d5:8b:ee:85:cc:f2:67:b2:e8:6a:54:60:a5:6e: be:3d:37:3b:15:a8:7e:b6:14:a2:9b:21:d1:4d:bc:c1:8f:62: 9d:36:6f:15:d6:b3:1d:69:06:38:b4:4e:bd:aa:a1:3f:fc:3d: 34:c2:b0:ab:d3:18:5c:67:94:0e:ff:73:7e:10:f0:d5:1e:c9: 24:0a:00:82:49:76:0a:6e:b2:d1:23:ac:e5:c9:aa:be:72:fc: 8e:06:f6:8c:ae:78:5c:3e:23:fb:c7:c8:81:d5:87:18:af:7b: 20:5c:b5:9f:09:03:02:6c:65:07:be:fb:26:f8:1b:68:04:90: d7:eb:ce:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnd0yl85R2kmvSsDbTwigGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx MzM0OTgwHhcNMjUxMjE2MTQwMTI4WhcNMjUxMjE3MTQwMTI4WjAzMTEwLwYDVQQD EyhiZTc1MjkxMzA3ZWM3NjYxZTVmOTJiOWUzNDk1N2NlMDFkNzQzOTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWBxzs660D2/sf53YyJ1Vl+xpJGK RZkZ9QjkPTZ7X49TJOKz1uTuWhEeekrjHrSvDOVbcpR/yLc1WVe0oabvlc4a5dkl s2OyOV5Z4j1WYXtz0g0hlH1alH3sfDB/NEmDj9OmKVyQJgp3PozUdJse7s3Y++TS QYxFf6un0A5IjZgmymy4v191JkpPVO7fnrgxkFh/xNhNdf5urrzLyW780Jxgy3Bj rSF3VwlMiwOArZ4ZCwOaArgLHW/ynskDr3dlhRMbmeubkOcEJLd4+uvduxI7+796 RbTj6V4fnZ5jRAp8Xqef1cOP//Ouj60Ug+W4z1Ob1sfOU5rYbyXA2PFBywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL51KRMH7HZh5fkrnjSVfOAddDksMB8GA1UdIwQY MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt NDZhZjNlNTBjMDUyLzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+wOcMVa +4O/M6AcS/2vX8THDu3EXs7Y5pKDTe6TDy6tTKQGqLGuHVtH/cL3eKjBatjLe3l0 lUrD1ps50BHUVfriLiqTz4koyyaaaUaO8u9cqbBe3FfwvMmbTduSU69CujElb0Zw PYb9DI2ngWGpayzZxvbzXrlcsSoroelS6ENzx9WL7oXM8mey6GpUYKVuvj03OxWo frYUopsh0U28wY9inTZvFdazHWkGOLROvaqhP/w9NMKwq9MYXGeUDv9zfhDw1R7J JAoAgkl2Cm6y0SOs5cmqvnL8jgb2jK54XD4j+8fIgdWHGK97IFy1nwkDAmxlB777 JvgbaASQ1+vOAg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:50:31 2025 by rpki-client