This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json) Hash identifier: ilmnmMZcrHDWVMrU+iIQsCYvD+h7yzl5LbwjBsUItGA= Subject key identifier: 1F:CB:25:BA:55:57:65:9B:82:51:3F:89:E0:39:7C:CB:56:9A:5B:3E Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0 Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0 Certificate serial: 019B1EAA72C2BB1EF043D5DCA048D3FB6666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft Manifest number: 163C Signing time: Sun 14 Dec 2025 21:00:45 +0000 Manifest this update: Sun 14 Dec 2025 21:00:45 +0000 Manifest next update: Mon 15 Dec 2025 21:00:45 +0000 Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=) 2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: b20/k5XwxVXLkLYQp7YFrO94efPbTF4q+BXszZV6o08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:72:c2:bb:1e:f0:43:d5:dc:a0:48:d3:fb:66:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0 Validity Not Before: Dec 14 21:00:45 2025 GMT Not After : Dec 15 21:00:45 2025 GMT Subject: CN=1fcb25ba5557659b82513f89e0397ccb569a5b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:fe:40:c8:5f:ef:c6:47:28:ae:6c:dc:bf: 8a:5c:7a:18:74:73:97:02:0e:0e:9f:d1:8d:e1:41: 2d:2b:1e:c0:e6:de:a1:82:22:43:91:0b:63:a1:07: f0:53:4e:9d:07:b9:64:23:82:d9:d1:3e:76:75:24: 57:ce:c3:2b:b9:97:45:17:77:c7:e7:2d:5c:1a:8d: 3d:60:8c:44:71:76:8e:b4:a9:ce:51:e4:f9:87:c3: fa:28:85:38:f4:4a:6e:ad:cf:bf:8a:dc:2d:cf:9d: 3f:cf:14:1a:7e:c3:5c:23:07:a9:98:54:c3:cb:1f: 65:7a:6d:08:1c:1c:19:8a:51:d2:2b:14:c4:fc:37: 10:2d:27:61:8e:37:ac:dd:83:ba:32:cd:e4:3f:84: e9:2d:91:42:ec:3a:73:32:1a:63:aa:5b:79:09:2c: 98:fa:d2:b9:b9:54:ac:4f:49:3d:6c:e7:13:4b:e6: 3f:9a:a0:82:e5:85:cb:62:74:f4:09:39:20:77:53: f1:b2:3d:58:c8:64:9c:67:0d:47:7f:72:3b:59:03: 6c:85:05:5c:f5:37:da:cb:04:22:2c:5b:10:f8:f8: ec:fe:21:97:64:92:7f:7f:9f:9f:23:1a:5f:eb:74: db:e2:81:6c:ac:31:30:af:ec:64:c8:97:91:58:82: 56:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CB:25:BA:55:57:65:9B:82:51:3F:89:E0:39:7C:CB:56:9A:5B:3E X509v3 Authority Key Identifier: keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4b:97:7a:db:af:85:d9:13:0f:cd:60:89:aa:74:26:ff:6b: 06:c1:6c:cc:c2:fe:ae:cb:52:d4:83:52:cd:49:eb:bd:19:84: 28:98:1c:ec:9c:29:a3:af:f9:85:46:02:8a:6a:42:fb:46:74: 47:de:d3:f8:df:da:88:6e:a9:27:fc:b8:ad:15:83:fb:d3:f5: ab:76:49:73:03:39:3d:66:65:73:a4:aa:b4:42:cc:4a:94:14: 86:8b:de:48:1f:72:d8:0d:1b:99:73:a0:8b:2d:33:19:df:ab: fc:d0:bf:17:3c:02:a8:fa:ce:f9:78:79:bd:91:99:21:67:24: af:0d:f1:da:a0:63:0a:15:0d:06:4c:f1:3b:42:a7:fb:9b:5e: a7:ad:01:ee:e4:e7:96:d5:e7:c4:ad:bb:31:79:d1:d5:bc:9d: 0d:cf:45:a4:b4:1c:0e:ce:92:0e:72:a9:c4:f4:d4:00:35:22: 3d:e9:67:a8:89:b7:a8:2d:6d:a9:ac:56:80:86:6a:dc:84:da: d8:ad:c6:92:c1:a9:ce:61:94:d5:bf:79:4b:9c:60:a6:14:cf: 68:87:98:6a:ab:02:db:1c:06:dc:47:02:a2:99:88:73:e2:47: 2e:42:31:de:ba:2c:93:27:f3:eb:f2:df:b4:bd:90:c7:9c:e5: e9:d1:5f:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqnLCux7wQ9XcoEjT+2ZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1 MmI3ZDAwHhcNMjUxMjE0MjEwMDQ1WhcNMjUxMjE1MjEwMDQ1WjAzMTEwLwYDVQQD EygxZmNiMjViYTU1NTc2NTliODI1MTNmODllMDM5N2NjYjU2OWE1YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf3+QMhf78ZHKK5s3L+KXHoYdHOX Ag4On9GN4UEtKx7A5t6hgiJDkQtjoQfwU06dB7lkI4LZ0T52dSRXzsMruZdFF3fH 5y1cGo09YIxEcXaOtKnOUeT5h8P6KIU49Epurc+/itwtz50/zxQafsNcIwepmFTD yx9lem0IHBwZilHSKxTE/DcQLSdhjjes3YO6Ms3kP4TpLZFC7DpzMhpjqlt5CSyY +tK5uVSsT0k9bOcTS+Y/mqCC5YXLYnT0CTkgd1Pxsj1YyGScZw1Hf3I7WQNshQVc 9TfaywQiLFsQ+Pjs/iGXZJJ/f5+fIxpf63Tb4oFsrDEwr+xkyJeRWIJWAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/LJbpVV2WbglE/ieA5fMtWmls+MB8GA1UdIwQY MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0uXetuv hdkTD81giap0Jv9rBsFszML+rstS1INSzUnrvRmEKJgc7Jwpo6/5hUYCimpC+0Z0 R97T+N/aiG6pJ/y4rRWD+9P1q3ZJcwM5PWZlc6SqtELMSpQUhoveSB9y2A0bmXOg iy0zGd+r/NC/FzwCqPrO+Xh5vZGZIWckrw3x2qBjChUNBkzxO0Kn+5tep60B7uTn ltXnxK27MXnR1bydDc9FpLQcDs6SDnKpxPTUADUiPelnqIm3qC1tqaxWgIZq3ITa 2K3GksGpzmGU1b95S5xgphTPaIeYaqsC2xwG3EcCopmIc+JHLkIx3roskyfz6/Lf tL2Qx5zl6dFfLg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:02 2025 by rpki-client