This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json) Hash identifier: ZJf2SVpiG+iVy+3d0RCuYuOz5fEz87zhH4fa51NhJE0= Subject key identifier: 47:34:79:F3:DC:5D:CE:21:00:11:B8:EF:E5:A2:F3:4B:57:70:CC:C6 Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc Certificate serial: 019AF68A011D7E07B5E4AA9813EA5C8B25E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft Manifest number: 1768 Signing time: Sun 07 Dec 2025 02:00:30 +0000 Manifest this update: Sun 07 Dec 2025 02:00:30 +0000 Manifest next update: Mon 08 Dec 2025 02:00:30 +0000 Files and hashes: 1: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: O8u0ZYaph9Sl4KXKf98+AkUR0+A9n7DEYxBjhg9sM18=) 2: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=) 3: qhrn4XED21rcdTWtZqv2cxNR9pc.roa (hash: VjyxWUWPzC0itKJGCfRlXwbzUVrhfNTBkQCDP20QLmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:01:1d:7e:07:b5:e4:aa:98:13:ea:5c:8b:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc Validity Not Before: Dec 7 02:00:30 2025 GMT Not After : Dec 8 02:00:30 2025 GMT Subject: CN=473479f3dc5dce210011b8efe5a2f34b5770ccc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:36:f9:a8:9f:6b:33:82:1c:5b:9b:bd:22:9f: 6b:b6:07:d1:b2:a3:9c:e4:47:0f:53:76:a6:ae:c4: 17:17:1c:23:bf:45:3b:ad:bf:a2:bd:4d:06:8c:a6: 8a:4b:fd:bb:80:7b:2d:01:2a:e3:7a:33:29:ad:06: 86:25:43:76:69:4a:af:21:49:8c:bc:6c:00:af:24: 0b:30:d1:0d:36:ac:80:d3:df:4a:34:1c:b4:59:ac: a0:1e:01:2d:56:82:f8:d0:c1:94:02:b8:07:b6:90: 46:18:00:cf:bd:34:c1:a3:85:e7:d2:03:79:08:c2: 66:e9:45:7f:72:18:19:54:21:8b:2a:bb:6b:75:88: ba:dc:91:03:92:9c:0f:df:48:54:ac:2e:d9:6f:62: 8f:e3:00:47:0d:52:c2:33:25:f1:f9:c2:b5:47:da: 39:b6:22:fa:b3:2a:15:44:7c:46:91:c5:47:e6:2d: 6e:dc:1b:33:63:9e:30:28:ef:9f:59:ba:1a:78:c1: 99:57:f3:7a:11:fd:e0:e0:af:02:1f:77:6b:20:4c: 85:45:54:5c:be:e6:12:2d:0b:e8:79:bb:79:d0:fe: 55:e0:72:59:6c:56:5d:30:72:98:eb:e9:b9:43:dc: 85:3f:d4:40:2f:4f:26:e5:03:68:a5:61:e8:61:cd: 2c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:34:79:F3:DC:5D:CE:21:00:11:B8:EF:E5:A2:F3:4B:57:70:CC:C6 X509v3 Authority Key Identifier: keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6b:5f:a0:a9:e8:fb:fc:1b:c9:cb:1a:06:0e:c3:76:49:13: 3e:eb:07:0d:79:9d:b8:ed:38:a8:3b:c2:ed:d9:46:f9:c1:8f: 00:d5:62:8c:77:9c:4c:52:e0:a5:00:95:1a:77:82:51:2e:d8: 44:6c:fd:85:81:12:dd:c4:1b:3d:56:da:78:af:51:5d:a7:88: 68:1f:9e:19:4b:69:38:f8:cb:ab:11:8e:d2:8d:79:ff:78:1b: 50:f5:5f:ce:cd:7e:63:08:3d:df:00:67:b8:73:37:52:86:23: e2:d2:01:84:3f:69:ff:93:06:3d:2f:42:4e:52:27:d9:1f:a2: f8:32:ce:aa:59:76:63:d2:a1:1a:06:91:c5:49:9a:75:26:08: 40:16:55:b9:95:50:75:d3:40:5c:85:3d:5b:fa:c1:d9:df:62: 47:0a:d1:b0:e9:66:b1:10:f1:83:50:92:38:ab:a2:25:0e:66: b7:76:62:eb:54:e3:68:3a:a8:ad:52:02:3d:da:49:79:f8:6e: 6c:08:02:89:ac:5c:85:f0:0c:25:8f:89:02:c8:80:2d:87:0e: a8:7e:93:a0:9e:28:35:b0:55:e7:5d:0b:4b:02:27:55:14:37: cb:d0:1f:af:a7:39:19:2a:03:30:08:4c:c8:3f:67:4e:0c:51: 75:b7:00:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2igEdfge15KqYE+pciyXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzY4ZTcwMjY5ZGU2NjBjYmMxNGRmOWM3NjNiMDE4Nzg4 YTFmZmMwHhcNMjUxMjA3MDIwMDMwWhcNMjUxMjA4MDIwMDMwWjAzMTEwLwYDVQQD Eyg0NzM0NzlmM2RjNWRjZTIxMDAxMWI4ZWZlNWEyZjM0YjU3NzBjY2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjb5qJ9rM4IcW5u9Ip9rtgfRsqOc 5EcPU3amrsQXFxwjv0U7rb+ivU0GjKaKS/27gHstASrjejMprQaGJUN2aUqvIUmM vGwAryQLMNENNqyA099KNBy0WaygHgEtVoL40MGUArgHtpBGGADPvTTBo4Xn0gN5 CMJm6UV/chgZVCGLKrtrdYi63JEDkpwP30hUrC7Zb2KP4wBHDVLCMyXx+cK1R9o5 tiL6syoVRHxGkcVH5i1u3BszY54wKO+fWboaeMGZV/N6Ef3g4K8CH3drIEyFRVRc vuYSLQvoebt50P5V4HJZbFZdMHKY6+m5Q9yFP9RAL08m5QNopWHoYc0sNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc0efPcXc4hABG47+Wi80tXcMzGMB8GA1UdIwQY MBaAFBs2jnAmneZgy8FN+cdjsBh4ih/8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUt NjA5NTFlOTc1ODhjLzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUtNjA5NTFlOTc1ODhj LzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGtfoKno +/wbycsaBg7DdkkTPusHDXmduO04qDvC7dlG+cGPANVijHecTFLgpQCVGneCUS7Y RGz9hYES3cQbPVbaeK9RXaeIaB+eGUtpOPjLqxGO0o15/3gbUPVfzs1+Ywg93wBn uHM3UoYj4tIBhD9p/5MGPS9CTlIn2R+i+DLOqll2Y9KhGgaRxUmadSYIQBZVuZVQ ddNAXIU9W/rB2d9iRwrRsOlmsRDxg1CSOKuiJQ5mt3Zi61TjaDqorVICPdpJefhu bAgCiaxchfAMJY+JAsiALYcOqH6ToJ4oNbBV510LSwInVRQ3y9Afr6c5GSoDMAhM yD9nTgxRdbcApw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:01:52 2025 by rpki-client