This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft File: gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json) Hash identifier: oOrVNiGv8UwD/gvogA1Qv32noyJaFM+5ZGR9FAfoJFA= Subject key identifier: 15:B1:73:60:26:E9:3D:F6:66:A4:D1:52:D7:FE:05:37:B3:60:EF:37 Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74 Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974 Certificate serial: 019B3B6BFDEF2839D372A0EB588365448513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft Manifest number: 1100 Signing time: Sat 20 Dec 2025 11:01:31 +0000 Manifest this update: Sat 20 Dec 2025 11:01:31 +0000 Manifest next update: Sun 21 Dec 2025 11:01:31 +0000 Files and hashes: 1: 1-27kWYKAbmGvckcGXREu8_O6E5Q.roa (hash: TMyKOohNPE+V9J//F3lIZGfAGQhVpkDHjFotXauXdgo=) 2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: RIeFlmAI4Uiq62VwwDaKqP8CVcGLICUUuL9z//ZCo1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:fd:ef:28:39:d3:72:a0:eb:58:83:65:44:85:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974 Validity Not Before: Dec 20 11:01:31 2025 GMT Not After : Dec 21 11:01:31 2025 GMT Subject: CN=15b1736026e93df666a4d152d7fe0537b360ef37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:61:7b:8c:fa:cf:6c:ce:32:72:7b:bf:7a: 18:38:60:17:a8:c3:97:e5:81:83:44:9e:3d:d5:fb: fb:89:cc:b8:2e:f7:c3:09:c4:07:c5:a0:5e:3f:84: bc:ff:bf:5e:06:8c:c3:b3:2e:19:8f:9c:76:99:a9: ce:ca:9b:8f:e2:a3:73:f2:32:b8:fa:83:56:49:f3: fc:42:cf:e4:4c:c8:36:88:5a:d0:e2:63:3e:bb:c5: 95:13:76:93:b6:1f:46:a6:e8:ce:a5:c6:51:00:00: 34:11:29:ef:c9:25:1b:1c:4e:fa:c1:63:5b:59:15: f8:26:d8:bd:7a:22:5c:17:c0:cc:ca:09:80:8a:a0: 8e:6a:55:c5:36:0f:7a:dd:4e:3e:94:62:76:6a:b4: 34:8d:85:b3:a8:23:ba:57:74:a9:9f:d4:6e:f7:42: e2:b8:ec:35:a8:91:0c:d7:e8:25:26:16:5a:35:ae: b5:5b:eb:93:5a:2b:04:8c:43:f8:9f:2e:ee:58:45: 73:22:8d:19:d8:f8:7a:5a:e9:aa:e4:05:0a:0b:46: b9:3f:05:a3:1b:ca:32:8e:e6:31:4f:ec:07:0d:04: c7:89:1a:fb:be:4c:8e:29:d1:be:2f:e0:f7:9f:bb: 2b:98:a9:b2:a7:84:46:db:c0:d2:52:bc:c8:16:9b: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B1:73:60:26:E9:3D:F6:66:A4:D1:52:D7:FE:05:37:B3:60:EF:37 X509v3 Authority Key Identifier: keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:81:b3:df:44:b6:e2:b1:23:8d:01:a3:f8:bb:28:fb:10:f9: 1e:d1:93:a8:63:c8:ac:3d:a3:62:e0:4e:69:d9:f2:4e:28:76: 26:9f:d2:45:a8:83:d2:ef:ec:44:a7:bf:d7:a8:37:7e:41:ce: b4:e4:94:43:27:53:c9:cc:b4:65:8e:3f:22:a9:68:87:41:37: 72:81:45:c2:5a:49:8a:08:d4:6a:3b:f0:21:a5:7e:b7:3c:98: 61:a3:c9:6e:16:eb:68:fa:f9:b2:0f:17:8e:4a:8f:6a:eb:b1: 43:c9:f1:e5:02:d4:d8:5a:7d:69:69:9e:da:3e:eb:f4:30:5d: c3:42:38:fd:b7:95:c8:b7:5a:cb:23:10:12:47:a5:44:d6:9c: 53:c0:36:4d:42:9d:e2:93:48:7f:04:30:99:5a:ed:e9:89:55: 33:e7:9b:83:e3:55:c5:87:3b:f2:cb:65:18:5f:73:07:2f:7a: 58:e4:87:35:1b:b7:e1:01:25:b6:12:cd:0a:47:0b:e3:39:06: fc:15:75:de:03:08:92:35:8e:4a:79:99:9d:86:fb:ca:4c:53: 7d:7b:ee:4c:f2:4b:4e:9b:6e:1d:c4:2d:01:9d:9e:63:29:27: 6b:eb:3b:bc:d1:be:4e:ef:ca:50:5b:e5:7b:67:d8:db:8e:f4: d5:04:72:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a/3vKDnTcqDrWINlRIUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2EwYjU1OTQzMzlhZWZlOGI1NThlMzcyOTI5MGI0MmJi MWE5NzQwHhcNMjUxMjIwMTEwMTMxWhcNMjUxMjIxMTEwMTMxWjAzMTEwLwYDVQQD EygxNWIxNzM2MDI2ZTkzZGY2NjZhNGQxNTJkN2ZlMDUzN2IzNjBlZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmxhe4z6z2zOMnJ7v3oYOGAXqMOX 5YGDRJ491fv7icy4LvfDCcQHxaBeP4S8/79eBozDsy4Zj5x2manOypuP4qNz8jK4 +oNWSfP8Qs/kTMg2iFrQ4mM+u8WVE3aTth9GpujOpcZRAAA0ESnvySUbHE76wWNb WRX4Jti9eiJcF8DMygmAiqCOalXFNg963U4+lGJ2arQ0jYWzqCO6V3Spn9Ru90Li uOw1qJEM1+glJhZaNa61W+uTWisEjEP4ny7uWEVzIo0Z2Ph6Wumq5AUKC0a5PwWj G8oyjuYxT+wHDQTHiRr7vkyOKdG+L+D3n7srmKmyp4RG28DSUrzIFpv+yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWxc2Am6T32ZqTRUtf+BTezYO83MB8GA1UdIwQY MBaAFIM6C1WUM5rv6LVY43KSkLQrsal0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83NjYwNmUtNzI0My00YjBiLTgyYTMt M2QwNmQyNDJmOTkyLzEvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83NjYwNmUtNzI0My00YjBiLTgyYTMtM2QwNmQyNDJmOTky LzEvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYGz30S2 4rEjjQGj+Lso+xD5HtGTqGPIrD2jYuBOadnyTih2Jp/SRaiD0u/sRKe/16g3fkHO tOSUQydTycy0ZY4/Iqloh0E3coFFwlpJigjUajvwIaV+tzyYYaPJbhbraPr5sg8X jkqPauuxQ8nx5QLU2Fp9aWme2j7r9DBdw0I4/beVyLdayyMQEkelRNacU8A2TUKd 4pNIfwQwmVrt6YlVM+ebg+NVxYc78stlGF9zBy96WOSHNRu34QElthLNCkcL4zkG /BV13gMIkjWOSnmZnYb7ykxTfXvuTPJLTptuHcQtAZ2eYykna+s7vNG+Tu/KUFvl e2fY24701QRyCg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:05:12 2025 by rpki-client