This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json) Hash identifier: UAfF6U3spWtk+sV4yYtHHy5W1qFFpGXUOB7cGDzNCKY= Subject key identifier: A6:BA:1E:0D:43:B2:7E:D9:1C:AA:76:42:0E:A7:9A:98:E0:66:EE:93 Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d Certificate serial: 019B0ECA1BECFF0794A1AD2DDC15E65602E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft Manifest number: 0F Signing time: Thu 11 Dec 2025 19:01:24 +0000 Manifest this update: Thu 11 Dec 2025 19:01:24 +0000 Manifest next update: Fri 12 Dec 2025 19:01:24 +0000 Files and hashes: 1: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: RHTluoI7BmPXqYyXsZ21MxIYzZGEWLa7WO2zSSiKHjY=) 2: xjzYHXm1-iuVRNUf9oR0e8sbGww.roa (hash: iJBDMmXR3U1sUk5QS/ljorbRN9G3Tas2Jm/BVGabM7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:ca:1b:ec:ff:07:94:a1:ad:2d:dc:15:e6:56:02:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d Validity Not Before: Dec 11 19:01:24 2025 GMT Not After : Dec 12 19:01:24 2025 GMT Subject: CN=a6ba1e0d43b27ed91caa76420ea79a98e066ee93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:55:a9:e5:2a:e6:e6:13:29:5a:aa:d8:39: 53:1d:69:f6:2e:c2:52:a9:96:c6:e4:30:1f:d9:1b: 4b:7d:b4:74:46:41:ce:76:26:32:e6:7c:34:e0:42: d1:ab:b4:83:10:7e:be:1a:f9:d3:07:39:a9:77:63: 69:2b:c1:35:08:25:b2:54:f1:aa:65:74:31:4d:5f: fc:2b:57:91:8b:c0:ce:ee:00:ec:1a:2e:60:0a:f9: 17:b4:73:70:56:16:5b:6a:8c:fc:b5:f0:d0:f5:eb: ca:b3:11:c9:96:de:96:e7:bb:45:4f:d4:af:46:87: 6d:7c:7e:d0:64:7f:c7:a5:70:a0:ee:ea:0a:63:2c: 42:b9:4e:08:4a:b5:be:94:a1:33:6b:6e:ae:8a:8a: ab:f2:bb:98:aa:29:b7:e7:03:2c:ac:d1:d1:a6:47: 85:8f:95:4e:64:d1:96:7a:b9:d7:ce:a0:66:20:97: 6d:5d:98:51:66:f1:9a:5c:f3:9d:a7:f5:fc:b3:f6: d7:df:48:95:56:a6:c0:d9:58:d1:f5:96:2f:94:6c: a2:57:0c:b8:37:63:f9:9e:1f:33:d0:c5:8a:2a:93: 0a:d3:37:0e:58:e8:ec:38:83:5e:af:0a:d6:0d:ff: ea:c0:ad:d9:a6:77:da:20:2e:d9:99:4f:84:70:98: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BA:1E:0D:43:B2:7E:D9:1C:AA:76:42:0E:A7:9A:98:E0:66:EE:93 X509v3 Authority Key Identifier: keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5e:55:83:a1:58:59:8c:12:33:65:11:59:a2:52:f6:ca:6b: 9a:c1:96:f9:59:dd:a6:66:77:2f:29:36:a2:31:4a:88:0e:d7: ac:19:61:37:51:3c:f2:05:5a:bd:db:48:fb:91:cc:e9:ba:da: 74:0b:3e:88:f6:71:69:75:5b:5e:3c:f2:d2:ca:77:2b:6d:d1: 8b:78:c9:ed:a0:b3:89:dc:61:b8:9e:c8:18:62:62:41:66:71: 8b:3a:e7:a9:4b:5c:02:7a:9a:b4:02:f4:60:10:e7:2f:17:ae: 1f:ff:5e:73:a5:28:ae:13:48:8d:30:d2:d4:3c:db:83:d4:85: 9b:16:73:90:1d:db:65:bb:52:e6:d1:73:db:8e:12:0b:d8:b2: 27:f3:74:54:98:ec:67:33:a1:b6:07:13:f5:17:3a:82:7d:de: c2:d2:ec:59:6c:2a:4d:e4:64:18:f1:08:46:13:f1:91:6d:28: 63:0d:05:f0:5b:06:87:99:76:ef:43:4c:52:1c:af:17:3c:84: 3d:1a:52:21:93:cd:b7:6c:01:9c:7e:0f:ec:8a:ad:32:28:ca: b9:6f:f1:d0:5f:3c:4d:a8:16:2b:32:01:1a:6a:ad:86:5c:5b: 8e:31:f7:e9:08:3b:0f:a2:c8:fc:a7:50:58:a2:f7:ae:60:d4: ba:47:5a:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyhvs/weUoa0t3BXmVgLnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OWIzZjkwOGNlNmUxNzY0NjE3NzMxYjYyNDUzOTQyMWQx M2M5NGQwHhcNMjUxMjExMTkwMTI0WhcNMjUxMjEyMTkwMTI0WjAzMTEwLwYDVQQD EyhhNmJhMWUwZDQzYjI3ZWQ5MWNhYTc2NDIwZWE3OWE5OGUwNjZlZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLFVqeUq5uYTKVqq2DlTHWn2LsJS qZbG5DAf2RtLfbR0RkHOdiYy5nw04ELRq7SDEH6+GvnTBzmpd2NpK8E1CCWyVPGq ZXQxTV/8K1eRi8DO7gDsGi5gCvkXtHNwVhZbaoz8tfDQ9evKsxHJlt6W57tFT9Sv RodtfH7QZH/HpXCg7uoKYyxCuU4ISrW+lKEza26uioqr8ruYqim35wMsrNHRpkeF j5VOZNGWernXzqBmIJdtXZhRZvGaXPOdp/X8s/bX30iVVqbA2VjR9ZYvlGyiVwy4 N2P5nh8z0MWKKpMK0zcOWOjsOINerwrWDf/qwK3ZpnfaIC7ZmU+EcJj75QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa6Hg1Dsn7ZHKp2Qg6nmpjgZu6TMB8GA1UdIwQY MBaAFBmbP5CM5uF2RhdzG2JFOUIdE8lNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODIt MmU5N2FiYTBmYjJjLzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODItMmU5N2FiYTBmYjJj LzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUV5Vg6FY WYwSM2URWaJS9sprmsGW+VndpmZ3Lyk2ojFKiA7XrBlhN1E88gVavdtI+5HM6bra dAs+iPZxaXVbXjzy0sp3K23Ri3jJ7aCzidxhuJ7IGGJiQWZxizrnqUtcAnqatAL0 YBDnLxeuH/9ec6UorhNIjTDS1Dzbg9SFmxZzkB3bZbtS5tFz244SC9iyJ/N0VJjs ZzOhtgcT9Rc6gn3ewtLsWWwqTeRkGPEIRhPxkW0oYw0F8FsGh5l270NMUhyvFzyE PRpSIZPNt2wBnH4P7IqtMijKuW/x0F88TagWKzIBGmqthlxbjjH36Qg7D6LI/KdQ WKL3rmDUukdaxQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:31:52 2025 by rpki-client