This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json) Hash identifier: O77xRt9qASFHTsenR8fSo3ESvFvg7y8QVotSKAe4z2s= Subject key identifier: 88:A0:21:17:2D:03:30:D3:FF:E3:D9:89:DF:D5:0F:82:5A:34:AD:54 Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498 Certificate serial: 019C44349AD2874C051975E3B3DB1A444EC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft Manifest number: 0449 Signing time: Mon 09 Feb 2026 21:00:24 +0000 Manifest this update: Mon 09 Feb 2026 21:00:24 +0000 Manifest next update: Tue 10 Feb 2026 21:00:24 +0000 Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: rcGzwaSZCxMFmWH8HLAAryCuxEYjRDKNP/kjRUkaOus=) 2: gdwYYL9CsGDFTkAuG8S2liyK-r0.roa (hash: S6etNmQi4pEy1ZdQxxbNiQYv530X1B2bmlUtb5h29UQ=) 3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:9a:d2:87:4c:05:19:75:e3:b3:db:1a:44:4e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498 Validity Not Before: Feb 9 21:00:24 2026 GMT Not After : Feb 10 21:00:24 2026 GMT Subject: CN=88a021172d0330d3ffe3d989dfd50f825a34ad54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:39:d4:ee:72:05:ca:b2:28:8c:56:73:e8:d5: ee:0e:31:ce:10:29:91:1c:81:d5:e5:ec:a9:1a:92: 4b:e2:bb:05:b3:fe:3f:df:55:32:a9:73:23:f4:ff: 77:f4:38:09:4d:c7:67:0a:ba:37:13:f4:08:31:65: 19:a8:a7:42:84:87:4a:bb:22:2c:85:26:71:91:f4: 54:c5:30:4e:bf:0f:d6:6d:7b:a6:18:f1:34:f5:73: b2:91:69:24:7b:f7:e4:c8:0e:db:16:cf:ad:57:0c: ea:a2:0d:74:a2:2d:27:ae:e5:46:2a:10:e5:df:97: 2a:f2:b7:e4:5c:06:5b:ae:16:fd:52:eb:35:ed:f4: 6c:61:7e:76:06:b8:7c:9e:85:6a:2f:42:c8:2b:89: 5f:6c:4d:ad:2c:9d:95:08:00:20:1f:a1:42:b2:9b: d7:35:fd:b9:b7:fd:99:e3:b7:57:e9:6d:59:b5:f4: 51:70:7e:c2:e0:1c:2f:19:84:05:6b:43:dc:74:f5: 0b:fe:f2:eb:c7:46:b6:ee:04:e5:de:b8:b0:55:e4: f8:78:51:e3:bd:5b:ff:29:a6:19:f1:4e:08:c8:2d: 05:53:a1:99:00:04:d3:04:11:f7:18:1b:93:ea:05: 0f:6b:1d:74:e2:a2:ab:9b:e3:67:a0:0b:53:1b:e8: 6e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A0:21:17:2D:03:30:D3:FF:E3:D9:89:DF:D5:0F:82:5A:34:AD:54 X509v3 Authority Key Identifier: keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e3:ba:bc:a0:74:dc:9c:f7:62:fc:86:a9:6b:c8:fc:a0:50: d8:8e:57:36:98:7d:1c:d9:2f:c9:13:e2:d7:14:f3:d8:b6:84: cb:30:a3:19:4e:55:d9:0a:b5:21:36:1d:35:82:24:6f:49:90: 5f:ff:d6:e4:91:5c:c1:6d:e4:60:b7:d5:59:e7:4b:37:49:e0: ed:d3:03:2a:56:d7:ec:dc:da:f1:37:30:91:d4:65:ae:0d:42: 87:aa:a4:7f:65:f3:da:4d:d2:56:b8:a1:83:56:03:29:ea:2f: ff:ab:a2:f8:b3:97:31:f7:1c:80:80:a4:0a:cf:8b:17:0e:67: bf:43:23:85:ce:c1:a0:b0:4e:d4:eb:7f:40:0b:4a:3c:4a:c2: 2d:31:4d:5f:20:c0:00:fe:e5:d9:02:15:15:56:10:46:02:6e: 34:0a:16:69:ac:73:4c:27:8b:58:00:ce:b6:f9:ed:5a:38:6c: 28:73:21:fb:13:20:9d:58:01:aa:2d:2d:aa:a9:cf:44:92:7e: b6:0e:c4:c3:73:b4:6f:ec:e2:5d:8c:53:fe:cd:72:b7:e6:55: 7a:f0:0f:20:e0:4c:9b:bb:a6:78:71:2b:24:0b:2e:42:d7:4c: 9c:5b:b7:95:e3:f7:50:92:dd:2f:25:93:a1:d7:a9:73:6c:31: be:98:3f:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENJrSh0wFGXXjs9saRE7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx MzM0OTgwHhcNMjYwMjA5MjEwMDI0WhcNMjYwMjEwMjEwMDI0WjAzMTEwLwYDVQQD Eyg4OGEwMjExNzJkMDMzMGQzZmZlM2Q5ODlkZmQ1MGY4MjVhMzRhZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2znU7nIFyrIojFZz6NXuDjHOECmR HIHV5eypGpJL4rsFs/4/31UyqXMj9P939DgJTcdnCro3E/QIMWUZqKdChIdKuyIs hSZxkfRUxTBOvw/WbXumGPE09XOykWkke/fkyA7bFs+tVwzqog10oi0nruVGKhDl 35cq8rfkXAZbrhb9Uus17fRsYX52Brh8noVqL0LIK4lfbE2tLJ2VCAAgH6FCspvX Nf25t/2Z47dX6W1ZtfRRcH7C4BwvGYQFa0PcdPUL/vLrx0a27gTl3riwVeT4eFHj vVv/KaYZ8U4IyC0FU6GZAATTBBH3GBuT6gUPax104qKrm+NnoAtTG+hudQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIigIRctAzDT/+PZid/VD4JaNK1UMB8GA1UdIwQY MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt NDZhZjNlNTBjMDUyLzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeO6vKB0 3Jz3YvyGqWvI/KBQ2I5XNph9HNkvyRPi1xTz2LaEyzCjGU5V2Qq1ITYdNYIkb0mQ X//W5JFcwW3kYLfVWedLN0ng7dMDKlbX7Nza8TcwkdRlrg1Ch6qkf2Xz2k3SVrih g1YDKeov/6ui+LOXMfccgICkCs+LFw5nv0Mjhc7BoLBO1Ot/QAtKPErCLTFNXyDA AP7l2QIVFVYQRgJuNAoWaaxzTCeLWADOtvntWjhsKHMh+xMgnVgBqi0tqqnPRJJ+ tg7Ew3O0b+ziXYxT/s1yt+ZVevAPIOBMm7umeHErJAsuQtdMnFu3leP3UJLdLyWT odepc2wxvpg/OQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:46 2026 by rpki-client