This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft File: gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft (raw, json) Hash identifier: 2TGISBYaqkLMU5Tb23trYxSSiwlNDKe5Tdc7Z0pPDB4= Subject key identifier: 5C:23:A3:EB:BB:DB:89:FC:D0:8C:58:61:03:FA:A3:3F:66:2F:88:E7 Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f Certificate serial: 019B5B64828F50FD654BD00557B467D41900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft Manifest number: 10FA Signing time: Fri 26 Dec 2025 16:01:12 +0000 Manifest this update: Fri 26 Dec 2025 16:01:12 +0000 Manifest next update: Sat 27 Dec 2025 16:01:12 +0000 Files and hashes: 1: bNgvelwVPVFr3h5RMUdr0LrSObg.roa (hash: 8+lwoJWYw+/prpcpMbrRUmfEGjzLktOqFPr4MMdHS+M=) 2: gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl (hash: NUctQQWaspJEcuwNbIV1GqGZ8dvGk0NlR5ZIfFBtUVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:82:8f:50:fd:65:4b:d0:05:57:b4:67:d4:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f Validity Not Before: Dec 26 16:01:12 2025 GMT Not After : Dec 27 16:01:12 2025 GMT Subject: CN=5c23a3ebbbdb89fcd08c586103faa33f662f88e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:9b:ce:ef:2e:db:50:2e:b3:f2:57:d3:cb: bb:ab:39:e1:68:6a:0f:4c:b1:6a:b0:5f:11:bd:3e: eb:df:ad:b2:8d:82:a4:b2:4b:5b:1e:32:4b:2b:a8: ba:dc:23:c0:f7:13:21:7d:d8:9f:c0:51:e4:56:ad: 92:8f:55:c6:67:fb:4f:c0:78:05:cc:ce:c7:25:9c: ef:2d:27:8d:67:81:fc:b3:28:be:11:05:ca:9d:04: 36:73:36:9b:04:ab:50:bf:a8:d9:5e:96:3e:e8:45: 4a:d0:49:ea:0d:ad:4d:85:08:75:cf:9f:a2:72:2a: f9:9d:32:08:e8:d8:7c:4a:fd:16:04:d1:96:c9:7f: d7:27:a5:c7:ec:25:d1:be:61:b7:68:47:cc:1a:31: e7:64:fe:25:ce:38:86:4d:9d:2c:ec:91:9d:e7:cd: bc:8f:17:f9:78:fd:32:0b:67:be:8a:87:f1:c6:21: 59:d6:4d:a5:af:be:32:f7:3c:24:26:01:41:6f:53: 9d:76:c1:c0:4f:b5:7b:dd:a1:52:ae:1b:ab:f6:a0: 37:d7:64:95:38:7a:67:ac:ec:79:b8:0f:2e:55:94: e6:fb:77:9e:41:fa:f0:9e:44:79:e4:3d:03:f6:0d: 9e:0c:1e:56:f5:e3:03:40:ad:06:2c:aa:13:e4:3d: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:23:A3:EB:BB:DB:89:FC:D0:8C:58:61:03:FA:A3:3F:66:2F:88:E7 X509v3 Authority Key Identifier: keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:91:bb:73:4d:81:55:0f:b5:7e:7c:11:2c:67:8e:b2:5f:de: 20:c5:7b:32:54:eb:91:32:2c:0d:f2:5d:28:dd:99:03:9c:ae: 6d:ae:1e:fb:d9:53:fc:cb:09:f3:c5:77:7c:5f:17:62:65:1d: a2:1d:3b:3c:d2:ad:1d:ce:d0:35:c2:4e:0c:c7:db:2e:7a:8e: f1:cf:4d:23:43:ac:be:c6:7f:34:68:f3:4c:b5:ee:87:85:9e: 87:98:b9:34:53:83:c6:d4:86:84:ab:11:30:cd:cd:92:ef:64: 5a:df:60:bd:e2:e0:da:92:08:ca:6e:9f:ce:18:15:86:47:0c: 90:f9:b5:38:7d:66:fa:ca:8c:6d:4e:ad:c0:cf:b5:eb:4c:1a: 9e:a0:a5:e7:d9:50:a0:97:0f:33:5f:63:01:f6:da:8c:6f:d5: 7e:54:12:55:62:10:fe:26:05:88:4b:21:fb:8b:9e:1c:08:e8: 42:5d:86:bb:0b:1d:96:d6:04:4e:ef:e1:c3:a1:97:2f:1d:5c: 61:6b:14:80:38:c3:84:29:56:e2:7a:ab:40:84:9a:d6:33:5d: 6a:04:73:6e:53:c6:a2:8e:18:d3:6b:c6:78:ad:ab:5e:96:41: f1:7d:94:86:9f:df:12:30:8a:8d:2f:24:ec:82:e2:63:6b:1d: cf:da:16:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZIKPUP1lS9AFV7Rn1BkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzZjYTE1MWVkNGMzMjNkNDk4ZjA2ZGQ3YzVhZTM5NGNl YWM1OWYwHhcNMjUxMjI2MTYwMTEyWhcNMjUxMjI3MTYwMTEyWjAzMTEwLwYDVQQD Eyg1YzIzYTNlYmJiZGI4OWZjZDA4YzU4NjEwM2ZhYTMzZjY2MmY4OGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTKbzu8u21Aus/JX08u7qznhaGoP TLFqsF8RvT7r362yjYKksktbHjJLK6i63CPA9xMhfdifwFHkVq2Sj1XGZ/tPwHgF zM7HJZzvLSeNZ4H8syi+EQXKnQQ2czabBKtQv6jZXpY+6EVK0EnqDa1NhQh1z5+i cir5nTII6Nh8Sv0WBNGWyX/XJ6XH7CXRvmG3aEfMGjHnZP4lzjiGTZ0s7JGd5828 jxf5eP0yC2e+iofxxiFZ1k2lr74y9zwkJgFBb1OddsHAT7V73aFSrhur9qA312SV OHpnrOx5uA8uVZTm+3eeQfrwnkR55D0D9g2eDB5W9eMDQK0GLKoT5D1nZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwjo+u724n80IxYYQP6oz9mL4jnMB8GA1UdIwQY MBaAFIM2yhUe1MMj1JjwbdfFrjlM6sWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3piS0ZSN1V3eVBVbVBCdDE4V3VPVXpxeFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xZmFjZTEtOWUyOC00ZDg5LWJmNTIt OTE3OTUzMTk4NDVjLzEvZ3piS0ZSN1V3eVBVbVBCdDE4V3VPVXpxeFo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xZmFjZTEtOWUyOC00ZDg5LWJmNTItOTE3OTUzMTk4NDVj LzEvZ3piS0ZSN1V3eVBVbVBCdDE4V3VPVXpxeFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5G7c02B VQ+1fnwRLGeOsl/eIMV7MlTrkTIsDfJdKN2ZA5yuba4e+9lT/MsJ88V3fF8XYmUd oh07PNKtHc7QNcJODMfbLnqO8c9NI0OsvsZ/NGjzTLXuh4Weh5i5NFODxtSGhKsR MM3Nku9kWt9gveLg2pIIym6fzhgVhkcMkPm1OH1m+sqMbU6twM+160wanqCl59lQ oJcPM19jAfbajG/VflQSVWIQ/iYFiEsh+4ueHAjoQl2GuwsdltYETu/hw6GXLx1c YWsUgDjDhClW4nqrQISa1jNdagRzblPGoo4Y02vGeK2rXpZB8X2Uhp/fEjCKjS8k 7ILiY2sdz9oWmg== -----END CERTIFICATE-----Generated at Sat Dec 27 01:02:53 2025 by rpki-client