This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json) Hash identifier: YPpktjbG4zM3ugLHlZiTGJBEpuMGoAtaqnO1abVRHUY= Subject key identifier: 62:EE:D1:BC:E5:C0:19:1B:24:60:B2:65:13:BD:A7:32:98:86:D2:BE Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b Certificate serial: 019B5AF686697E153584716C5AD6FCC3AB29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft Manifest number: 0CF0 Signing time: Fri 26 Dec 2025 14:01:04 +0000 Manifest this update: Fri 26 Dec 2025 14:01:04 +0000 Manifest next update: Sat 27 Dec 2025 14:01:04 +0000 Files and hashes: 1: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: m62JBSCMqJU9KiL8r3q3u3HVdSogxPnnXixfjJh0tX4=) 2: hZr6mNjSHqTgv3UgV0r5NKysYhc.roa (hash: AR+e3H/5yBz4nRQW+W404T/nXrb1KqyGNQGS5zNA/os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:86:69:7e:15:35:84:71:6c:5a:d6:fc:c3:ab:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b Validity Not Before: Dec 26 14:01:04 2025 GMT Not After : Dec 27 14:01:04 2025 GMT Subject: CN=62eed1bce5c0191b2460b26513bda7329886d2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:ed:77:3b:88:35:bc:2d:3f:15:2f:cc:49: d0:55:d5:f3:06:df:75:d2:3a:45:02:85:22:4d:b8: 65:c4:c1:cd:38:e8:97:94:3d:eb:a2:e4:ed:7e:bd: 7e:8f:20:19:c4:51:27:a0:89:09:58:a1:09:01:05: 5c:f7:cf:1e:ec:ba:19:bc:36:52:37:c9:14:ab:62: 52:e3:0a:23:e0:22:42:60:83:3e:29:20:be:d4:b5: 4d:df:e3:7e:c0:01:51:45:44:d7:6d:4b:18:18:58: 48:88:8c:9d:34:e8:66:40:ad:a5:69:5e:6c:7d:65: 05:08:ef:d0:b2:c6:ce:47:54:ab:bb:08:e7:aa:13: 18:7f:5b:ff:52:e7:04:53:80:9f:d5:d6:8f:71:cc: 3c:57:3f:c0:a5:6d:c8:ce:66:f9:19:b2:c0:72:11: f7:13:92:48:1d:c8:b1:01:7b:19:a6:7e:b2:ea:cd: 85:0f:b9:8d:88:2e:6a:e2:40:da:16:0a:e6:a9:85: 57:5b:66:88:50:75:81:61:f8:ca:44:6a:ed:48:d9: c6:b6:56:23:dc:e0:f9:6b:9f:d9:5f:43:8c:0d:f4: fc:e5:1d:cc:8e:c1:4b:63:3d:97:15:a5:80:63:e0: a3:6d:1f:83:72:40:87:7f:ca:ac:8a:e4:66:7f:5c: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EE:D1:BC:E5:C0:19:1B:24:60:B2:65:13:BD:A7:32:98:86:D2:BE X509v3 Authority Key Identifier: keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:16:58:6a:b9:82:c3:80:e3:9f:bc:bf:67:d6:00:b1:b1:0a: 97:d8:de:5e:55:62:e8:8f:a3:da:9d:1d:bc:e5:80:38:d7:44: 4d:04:a7:a2:45:bc:bf:4b:6b:d5:0f:a1:ab:7d:06:db:ff:07: 68:ba:78:68:a8:2e:ee:03:37:62:06:80:87:60:63:e9:f6:49: 08:90:c9:49:1c:b8:19:bb:27:9d:da:6c:31:bf:f7:f3:4c:61: 52:37:29:17:eb:aa:21:6e:d7:79:cf:fa:7a:a1:62:65:7e:2e: 72:c4:c6:d1:6f:2a:51:83:58:54:dd:25:d6:fd:c2:29:25:72: d0:fd:a3:cd:ef:b3:1a:ec:5c:8c:d8:32:80:d8:b6:12:10:0e: c8:a1:92:c2:89:b3:30:dc:fa:86:d4:29:f6:72:5e:aa:62:b4: e3:e7:ae:55:be:be:0c:74:8e:9f:ef:11:04:87:dd:70:b2:9a: d2:52:04:bc:eb:7d:6f:c8:07:8c:df:f2:82:19:4c:8a:66:43: a0:2b:2d:e0:fc:d6:3a:99:62:1f:6b:60:91:09:7a:5f:75:5b: 29:f4:dc:8b:45:0b:4d:91:5b:da:62:3a:01:0d:8c:87:71:83: 48:89:89:96:54:49:95:61:ef:02:51:3e:1d:97:13:97:18:c8: 9e:95:30:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9oZpfhU1hHFsWtb8w6spMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNmNjOTkzOGMzMmUwNGRjNTQ0M2RkNmMwNWEwMjdhNTYx N2Q5N2IwHhcNMjUxMjI2MTQwMTA0WhcNMjUxMjI3MTQwMTA0WjAzMTEwLwYDVQQD Eyg2MmVlZDFiY2U1YzAxOTFiMjQ2MGIyNjUxM2JkYTczMjk4ODZkMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvITtdzuINbwtPxUvzEnQVdXzBt91 0jpFAoUiTbhlxMHNOOiXlD3rouTtfr1+jyAZxFEnoIkJWKEJAQVc988e7LoZvDZS N8kUq2JS4woj4CJCYIM+KSC+1LVN3+N+wAFRRUTXbUsYGFhIiIydNOhmQK2laV5s fWUFCO/QssbOR1SruwjnqhMYf1v/UucEU4Cf1daPccw8Vz/ApW3Izmb5GbLAchH3 E5JIHcixAXsZpn6y6s2FD7mNiC5q4kDaFgrmqYVXW2aIUHWBYfjKRGrtSNnGtlYj 3OD5a5/ZX0OMDfT85R3MjsFLYz2XFaWAY+CjbR+DckCHf8qsiuRmf1x+gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLu0bzlwBkbJGCyZRO9pzKYhtK+MB8GA1UdIwQY MBaAFIJsyZOMMuBNxUQ91sBaAnpWF9l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYt YWY3ZDZhODk3NTJhLzEvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYtYWY3ZDZhODk3NTJh LzEvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxBZYarmC w4Djn7y/Z9YAsbEKl9jeXlVi6I+j2p0dvOWAONdETQSnokW8v0tr1Q+hq30G2/8H aLp4aKgu7gM3YgaAh2Bj6fZJCJDJSRy4GbsnndpsMb/380xhUjcpF+uqIW7Xec/6 eqFiZX4ucsTG0W8qUYNYVN0l1v3CKSVy0P2jze+zGuxcjNgygNi2EhAOyKGSwomz MNz6htQp9nJeqmK04+euVb6+DHSOn+8RBIfdcLKa0lIEvOt9b8gHjN/yghlMimZD oCst4PzWOpliH2tgkQl6X3VbKfTci0ULTZFb2mI6AQ2Mh3GDSImJllRJlWHvAlE+ HZcTlxjInpUwkw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:54 2025 by rpki-client