This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft File: GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json) Hash identifier: q+stoyP7SV7l2QvZyh3y871lRvtekgUW6nKszjPAdis= Subject key identifier: FE:EC:F0:AB:C1:BA:A5:99:28:98:9C:EE:B4:1A:B0:1F:CA:1E:69:AD Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93 Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693 Certificate serial: 019B3A910209EB1D6ABC898F13E6E6411B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 07:02:20 +0000 Manifest this update: Sat 20 Dec 2025 07:02:20 +0000 Manifest next update: Sun 21 Dec 2025 07:02:20 +0000 Files and hashes: 1: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: piO3XSsp1HBvbFDgOMgHEb/RbEU9dPn3JREtuSeFLfk=) 2: HPCKr00mXSJ3C9phmBvKtJQXCBY.roa (hash: TqSUlnmZHL4GKMxOnemPwak2VaRBnIX0Q7+M72vd6iE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:02:09:eb:1d:6a:bc:89:8f:13:e6:e6:41:1b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693 Validity Not Before: Dec 20 07:02:20 2025 GMT Not After : Dec 21 07:02:20 2025 GMT Subject: CN=feecf0abc1baa59928989ceeb41ab01fca1e69ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:ce:23:01:c6:01:0e:80:0c:c8:e1:1c:82: 14:46:5e:72:95:04:fb:af:40:fb:40:b5:8d:64:35: 9c:8a:b7:14:78:63:ef:b2:12:78:0d:66:a3:bf:e4: 60:16:cb:02:15:aa:d0:46:62:c5:7c:8a:5f:b4:73: a5:c8:3f:eb:c9:c9:bd:7c:a3:f8:e2:56:14:6f:d3: f2:ec:0b:62:b4:bf:50:93:15:23:f3:c4:6e:ac:90: 48:7f:7f:c0:a2:5d:25:37:a3:7e:0c:64:e3:db:d7: b4:db:4e:93:28:0a:15:9a:b3:6d:42:7a:0c:3d:32: 85:8f:d5:58:b6:a5:96:98:30:54:34:d8:e7:36:67: 29:1f:7e:90:6c:f3:b9:dc:81:3e:19:a6:99:c9:de: 0f:fd:b1:99:65:54:86:cc:1a:71:84:81:41:50:cf: 7e:98:cd:96:dd:90:e1:a2:09:cd:1e:a0:c1:68:10: 19:5b:d2:78:8b:e2:ac:02:5a:51:61:1b:55:19:fb: 73:f2:71:ca:9b:71:6d:af:a4:9e:ce:8e:fc:e6:58: 34:86:71:e8:22:1a:6f:cd:03:f1:cb:4e:36:5b:e7: cf:51:35:71:8a:28:dd:42:e4:4e:0c:b6:10:a1:78: 98:ef:19:d4:81:99:15:87:4d:51:0e:c9:38:de:69: 5d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EC:F0:AB:C1:BA:A5:99:28:98:9C:EE:B4:1A:B0:1F:CA:1E:69:AD X509v3 Authority Key Identifier: keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f5:1b:68:35:db:af:f4:ad:94:e6:42:55:c6:ab:2b:a9:a5: b4:63:9d:4e:8d:2b:0a:10:c5:e8:90:d3:3f:29:39:ac:ae:71: 03:47:9f:a2:45:b9:d8:92:08:c9:fc:8e:84:54:be:48:96:71: 1e:31:83:60:34:35:95:1f:f2:98:70:6c:41:45:da:8f:a3:b1: f3:e7:eb:17:de:3b:68:a2:ff:39:78:b0:e3:8f:01:03:e4:ba: 4d:55:57:94:3a:91:5d:65:bf:9b:00:ce:67:46:32:18:20:bb: a5:d7:f0:48:94:66:34:5f:c2:5d:2d:ab:43:c2:b6:67:5f:2a: d3:b7:74:79:81:e2:83:40:6b:19:50:00:ee:ac:44:4e:69:97: 68:5e:ed:d3:92:7d:56:5d:d3:7d:9d:1c:9a:0f:70:8b:eb:4b: 14:8e:8f:d7:80:28:4a:b8:ac:05:9f:50:25:e9:98:fe:97:36: 3c:45:18:f4:29:d1:74:c0:13:d2:71:a7:18:19:9e:f0:df:0b: cb:41:d3:1b:25:e3:ec:36:50:71:93:77:e9:0b:d6:ee:60:fa: 33:79:2b:bf:ca:a4:e8:53:bf:f6:45:13:47:04:fd:67:fb:b2: 19:cd:20:de:4a:f9:7f:32:af:a0:4a:51:6e:99:96:7e:00:20: a7:ce:d7:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kQIJ6x1qvImPE+bmQRuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZDY1ZmEzM2NlNWIzZjdiZGI0OTdlNWZjYTUwOWQ3ZmMw M2M2OTMwHhcNMjUxMjIwMDcwMjIwWhcNMjUxMjIxMDcwMjIwWjAzMTEwLwYDVQQD EyhmZWVjZjBhYmMxYmFhNTk5Mjg5ODljZWViNDFhYjAxZmNhMWU2OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoHOIwHGAQ6ADMjhHIIURl5ylQT7 r0D7QLWNZDWcircUeGPvshJ4DWajv+RgFssCFarQRmLFfIpftHOlyD/rycm9fKP4 4lYUb9Py7AtitL9QkxUj88RurJBIf3/Aol0lN6N+DGTj29e0206TKAoVmrNtQnoM PTKFj9VYtqWWmDBUNNjnNmcpH36QbPO53IE+GaaZyd4P/bGZZVSGzBpxhIFBUM9+ mM2W3ZDhognNHqDBaBAZW9J4i+KsAlpRYRtVGftz8nHKm3Ftr6Sezo785lg0hnHo IhpvzQPxy042W+fPUTVxiijdQuRODLYQoXiY7xnUgZkVh01RDsk43mldvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7s8KvBuqWZKJic7rQasB/KHmmtMB8GA1UdIwQY MBaAFBnWX6M85bP3vbSX5fylCdf8A8aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2RaZm96emxzX2U5dEpmbF9LVUoxX3dEeHBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MjVjMjItN2VlYy00MDMzLWE3NjMt Yzg3Y2U3NjM4M2JjLzEvR2RaZm96emxzX2U5dEpmbF9LVUoxX3dEeHBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83MjVjMjItN2VlYy00MDMzLWE3NjMtYzg3Y2U3NjM4M2Jj LzEvR2RaZm96emxzX2U5dEpmbF9LVUoxX3dEeHBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfUbaDXb r/StlOZCVcarK6mltGOdTo0rChDF6JDTPyk5rK5xA0efokW52JIIyfyOhFS+SJZx HjGDYDQ1lR/ymHBsQUXaj6Ox8+frF947aKL/OXiw448BA+S6TVVXlDqRXWW/mwDO Z0YyGCC7pdfwSJRmNF/CXS2rQ8K2Z18q07d0eYHig0BrGVAA7qxETmmXaF7t05J9 Vl3TfZ0cmg9wi+tLFI6P14AoSrisBZ9QJemY/pc2PEUY9CnRdMAT0nGnGBme8N8L y0HTGyXj7DZQcZN36QvW7mD6M3krv8qk6FO/9kUTRwT9Z/uyGc0g3kr5fzKvoEpR bpmWfgAgp87Xtg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:24:12 2025 by rpki-client