This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft File: gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json) Hash identifier: Q3EjYyOMO0xvsxUNMCN/iuSnuutNolJO35MiWx5uyyw= Subject key identifier: 2C:9B:51:4B:01:41:E3:11:FD:E8:2B:BD:A9:9A:E9:14:E2:25:A8:31 Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019B416D5FA025D1D10C80814ABD4BEA87EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft Manifest number: 1718 Signing time: Sun 21 Dec 2025 15:00:45 +0000 Manifest this update: Sun 21 Dec 2025 15:00:45 +0000 Manifest next update: Mon 22 Dec 2025 15:00:45 +0000 Files and hashes: 1: 2YMGNAfsJDhXvpAQdDgMoQSJ1lQ.roa (hash: opwlvD4eXCeJtZqLmJkQjd4EnmKmwsPiFEkInxiN3ew=) 2: 3nHQeUIvfgERGGgwZXPLqGrFwCc.roa (hash: PVqd7KRgPCILOUDhdegbeY89u7gfE4kJTUXx1+4aybk=) 3: 4fJd3OUxKotrDopMoPp8x_J3KXs.roa (hash: jo1NuUMOgj2DOUbbjYgsD3WHmHnI2e64VwgOioKGjxc=) 4: 7xBwrzDU-Q3LgBd_pCCkSVZJ8r8.roa (hash: I4+USeGM9vUX6KcuBfkfPPLNkgp4BpNTxxlqHARIlaA=) 5: An6UmHEtH3Bmh0Lg39EpfIop0js.roa (hash: igybf10nuNaP19Av8rDWw+HthCnNiYX7BDks0g7bElQ=) 6: F7b03g0Ee-fSPcMxx0o1NC5o-jc.roa (hash: GEJYViG+J67xVcFsrJoAONaDjeNj+DXXpZDr8Fb7EbI=) 7: GMUqnPQO8HVIx48VQ0kZwO4akaw.roa (hash: uZv76tLJNRtDmi3fk8CwmWOl4QIbJTpAAFy6cS5OdOg=) 8: HIqyL1_xN65PGGh2pYvXxB9JRnY.roa (hash: WSdWXpJpM+IApu/ksgC0/SIwWBLtodEczT76Ij0oaDM=) 9: HWSjw2fbv5zfcw0AKHO0DUnHOtQ.roa (hash: Xdy5Q/i3U4vTL+1/dZaz9m7aiTQM9VV6w2ke2pIj8Mo=) 10: L0_jQJT5Qclln0Oyg58IDEsvUEY.roa (hash: O4ru/bejek+UTjQtcEf3F24KaS3s+lQbPWX4dTGtcIg=) 11: M6XyFHtKP2ScUd5goZuFirggjdg.roa (hash: WxKRtZl8W5ksvHdugcbq1TzNNdB6TFW+EH2jsrvD9z8=) 12: MiH69dfcyCIB23Qa5GvglWS530s.roa (hash: ib+HOhPLu/yX/AwfYmsfgR2RDO6fgoZuxLt0/b+SAbc=) 13: OE3tT2H2fUUZLW1vQ7BzbV1M8gU.roa (hash: y5ASsgsrkdPRvKNsFBA0em5Q7FjI70gdDU/50w7KFJA=) 14: Q155SYsxVZHtklas2BS3w5w70h0.roa (hash: FvNx0toywZuvzc5WA2iEA8TJxxDlZbL0owUYzKxW1No=) 15: QW_u_BPcMPsF84l9cOWIg2BTeQw.roa (hash: KPJQ5aR80UVpiuaQZx0f7/aPYO2DxWpPPoUdDzKm3j4=) 16: SX3ylag-hZOGWYy_pZkwNhLOSsE.roa (hash: 43OUdEAz6tq0z1F5ikIM0mpbPVhfkw5HMKGB/qtwP5M=) 17: VBzP8kfPQEFNtuR8PdFsD2jp1DY.roa (hash: 3EY9SySAHD8fNQ9KBgqy9PEqScRiw8H7Y0JuBdXiKGk=) 18: VWUyUYrxBUBQm8U_GjpDzaM_d0M.roa (hash: DnWyph44y5iJj5u6j2MjM6Rs0v4MJI8RZHnOeiNRgbw=) 19: X76QjYF4g5Fz4FCmSoNd6V50kTA.roa (hash: CHpvo1zzCCL9PYgTZz2mENFCdruZbcqklK3h+qFFqkw=) 20: XOeYPDFunsrsYp0-Y7f01UANXYE.roa (hash: EDBHmHjrHHD79zYQIl4IIyJ7MsjaCFiA1LKPLtylFCA=) 21: YALvBFXCZCuiPMm-BJVewPH_enA.roa (hash: 2ekpPdYOHyCXTusjLDkkuEWOZIzDO3FZXtRuEpEjlLg=) 22: _GtticsJYfVQoe0D3zav_vzfdBI.roa (hash: q7xFTUE0zmzPMPHPkyjebKa2rHaYrI4nZ9SvbO1w70s=) 23: auEd2AJZBbZPig_7z1vxDlWadmA.roa (hash: 60BE0mDiR8P6qgvwmA8KQFG8GMDS3ckQBTSoMT45CdA=) 24: bLQJ6PqP5RCL9FnudZAW-bU8UJo.roa (hash: 7tlhCqNfPH7JwDNGdsdIP2BnMS7k6jeLuHxoXiLn2eY=) 25: cG7_wfsakBmyctpOoPE_qHS49E4.roa (hash: mSuDbhxIa4I4Ml2s2/BDm98rCr3yNT2h8gR1W7fngK4=) 26: e1WMx_ge3OvvuQfeVWgtsTZKIeI.roa (hash: AcxhV2adeY8w5h5li2Z6uouvIaFM+nk6upPlV2hgezs=) 27: gchn44JRTuDd880WIwbVtgXZUsU.roa (hash: JI8XHT7Ed3+L0vajm6jq0SIoKJNRevXoKUe8F/HW81I=) 28: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: mvjCOhYvww/V5/ErXWDcJ0TfxfUW6Po7uGJxhHlFeuU=) 29: kP5Kud5JC4HdByWF3NmU2sgwbJg.roa (hash: aeS1WvwgOcwV+L4eoLjhAuXFnavKM4LbSU/DAgly4BI=) 30: ojT-i1WyMoMzrKUGF70lR5SpfKo.roa (hash: +svQt7tDqw+nZSwF/1dh5yGoWZXeOhltuo6UFjy/ZCA=) 31: pFdc9GKBdXBjaKb_bkpy4pwiK_0.roa (hash: 8795JOEM2aEDEqQnWkWWkhSBntyGxcwSFS+eMBONKHk=) 32: qTXSVWTU8wL-LtchYD96dAZna1M.roa (hash: whr6apWGUcvqYoUu99TAxnFfLEWJVx+7V1setIYeu9Q=) 33: qiq4lHzWMEzrZSdOazDM-vLTXbw.roa (hash: xlyv2U2zn5kmXMwTOObtgWC0+eOvTyqFjN2rhysl2z8=) 34: uV9qh0Bz3P5Gfc4DrA8wQrQZnKM.roa (hash: Q2zeYVmGmIBxQp2Z7g0x6cXzrzkC3NswS2sBlFvJ0Pg=) 35: xSp6XojOq8AHuBptBsMJn0ejtl8.roa (hash: As0D1tFbvZDyE89/ZuOIeAirDGOGHpdYPzRD9NN17mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:5f:a0:25:d1:d1:0c:80:81:4a:bd:4b:ea:87:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Dec 21 15:00:45 2025 GMT Not After : Dec 22 15:00:45 2025 GMT Subject: CN=2c9b514b0141e311fde82bbda99ae914e225a831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:35:dc:53:a5:a9:31:53:29:af:4f:c5:e4: cb:31:5c:43:62:17:38:98:74:40:be:5e:e1:2b:ae: 6f:64:c1:19:5d:e8:87:3e:70:74:55:dc:2b:03:0c: 9b:17:3a:3b:03:cc:47:dc:da:84:b2:4c:64:43:ee: e0:01:18:fb:bc:ff:d4:c1:2f:01:3f:8b:56:25:4d: 40:f0:13:ca:da:8d:e7:28:0a:3d:17:25:99:a7:75: 3c:97:9e:33:ba:3f:2e:24:46:8a:15:a3:88:38:0a: d0:43:c2:06:00:f8:75:74:3e:c2:c0:b5:d6:54:5b: 41:c0:a5:06:7c:2b:fc:e5:fa:b2:72:f8:fb:88:e9: dd:d7:29:6a:5b:fd:0c:d9:70:ac:ae:e4:d2:21:01: 1d:f8:fb:2d:47:98:e6:4a:3f:12:ac:24:43:1e:8e: 6b:2b:84:e5:e0:c3:e1:32:53:cc:f7:ea:aa:f0:87: ab:43:c5:bc:b6:00:ba:07:c7:26:f8:75:34:87:2f: f8:d8:2c:21:59:4f:64:c6:70:53:c6:25:51:cf:62: 6b:27:20:95:40:f3:3b:9e:b7:8f:96:ed:8d:7d:2f: da:9e:4d:64:78:ea:fe:ae:a0:b1:7e:f0:0b:5f:a6: 93:0d:33:9f:f9:ac:2f:20:c8:68:00:c5:54:d7:e7: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9B:51:4B:01:41:E3:11:FD:E8:2B:BD:A9:9A:E9:14:E2:25:A8:31 X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ca:4e:47:46:0f:65:55:1b:e3:4a:9c:a9:82:24:1f:43:2e: 6e:75:d5:b6:b1:ed:e4:0a:49:a4:b6:df:7a:c8:cc:2b:8b:ea: 8b:9c:29:fb:32:35:26:d1:f4:85:79:29:4b:ed:ac:b0:95:f1: 95:06:a0:e6:ee:bf:cc:79:4a:f8:20:9e:39:98:39:13:db:a7: 85:ff:e9:06:e6:75:a8:81:88:98:6a:74:34:aa:df:9b:fc:2e: 47:73:48:a1:a0:2d:39:40:0b:5c:b0:b1:8e:97:e9:0b:32:a0: 40:a9:c8:76:fb:77:f2:1c:0d:cb:9d:7f:ac:82:12:e0:4e:c3: a4:0f:5e:57:12:0a:9d:6f:8a:17:72:11:91:7e:5e:4f:58:c4: 97:a0:97:52:a1:26:0c:25:b4:d3:0a:dd:24:a1:b6:04:3f:cf: bb:90:83:33:aa:b1:49:46:b9:61:ed:8d:b2:2b:64:b5:7c:0e: 32:f6:ec:1f:41:67:32:72:ac:80:01:d9:29:6b:0f:38:c0:bf: 9a:f7:4a:cc:ec:cc:bf:82:2c:88:3c:5c:c2:c2:0a:7f:43:e8: 3d:1c:8b:c5:60:34:4a:b2:61:42:89:9b:7d:b5:b3:26:3f:b0: ab:69:5c:10:21:d0:21:38:3f:9d:36:02:4f:cb:4d:02:d3:18: c4:5c:6b:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbV+gJdHRDICBSr1L6ofrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjUxMjIxMTUwMDQ1WhcNMjUxMjIyMTUwMDQ1WjAzMTEwLwYDVQQD EygyYzliNTE0YjAxNDFlMzExZmRlODJiYmRhOTlhZTkxNGUyMjVhODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7c13FOlqTFTKa9PxeTLMVxDYhc4 mHRAvl7hK65vZMEZXeiHPnB0VdwrAwybFzo7A8xH3NqEskxkQ+7gARj7vP/UwS8B P4tWJU1A8BPK2o3nKAo9FyWZp3U8l54zuj8uJEaKFaOIOArQQ8IGAPh1dD7CwLXW VFtBwKUGfCv85fqycvj7iOnd1ylqW/0M2XCsruTSIQEd+PstR5jmSj8SrCRDHo5r K4Tl4MPhMlPM9+qq8IerQ8W8tgC6B8cm+HU0hy/42CwhWU9kxnBTxiVRz2JrJyCV QPM7nrePlu2NfS/ank1keOr+rqCxfvALX6aTDTOf+awvIMhoAMVU1+cLGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCybUUsBQeMR/egrvama6RTiJagxMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScpOR0YP ZVUb40qcqYIkH0MubnXVtrHt5ApJpLbfesjMK4vqi5wp+zI1JtH0hXkpS+2ssJXx lQag5u6/zHlK+CCeOZg5E9unhf/pBuZ1qIGImGp0NKrfm/wuR3NIoaAtOUALXLCx jpfpCzKgQKnIdvt38hwNy51/rIIS4E7DpA9eVxIKnW+KF3IRkX5eT1jEl6CXUqEm DCW00wrdJKG2BD/Pu5CDM6qxSUa5Ye2NsitktXwOMvbsH0FnMnKsgAHZKWsPOMC/ mvdKzOzMv4IsiDxcwsIKf0PoPRyLxWA0SrJhQombfbWzJj+wq2lcECHQITg/nTYC T8tNAtMYxFxrvQ== -----END CERTIFICATE-----Generated at Sun Dec 21 18:03:07 2025 by rpki-client