This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json) Hash identifier: 93v8i1/iyIuH/YWLXsjUo2fcDAp6Eetezvc8JAmDCos= Subject key identifier: 8B:A8:14:A1:A1:B1:44:5D:1C:08:91:54:9F:F5:2C:20:93:AB:EF:64 Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a Certificate serial: 019B35A0D1F6EC5C99BF2B8FE46E2DDBE109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 08:01:30 +0000 Manifest this update: Fri 19 Dec 2025 08:01:30 +0000 Manifest next update: Sat 20 Dec 2025 08:01:30 +0000 Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=) 2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=) 3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: 2jS37hPv0cUD4vKJoUMKdCagotw8Xc7GpKLIwCrm6mU=) 4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:d1:f6:ec:5c:99:bf:2b:8f:e4:6e:2d:db:e1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a Validity Not Before: Dec 19 08:01:30 2025 GMT Not After : Dec 20 08:01:30 2025 GMT Subject: CN=8ba814a1a1b1445d1c0891549ff52c2093abef64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:27:e8:95:96:c9:e5:a5:53:4d:68:cf:4d:99: 69:ff:ed:6f:30:2d:10:c7:94:02:aa:56:dc:01:68: 21:fc:32:3a:c2:65:62:5f:5a:48:22:e0:65:f0:c4: 1b:a5:56:e3:5a:c1:56:b5:3e:c2:51:35:cf:6c:40: 3e:4b:08:74:ab:68:5c:41:58:32:18:d7:5b:06:12: 2c:aa:7f:c1:6d:1a:c3:a2:3b:15:30:55:b6:52:fd: 95:54:4a:71:7f:ee:71:06:b8:d0:ff:00:2e:a1:2a: 0a:10:7f:c5:c6:7f:95:d0:47:fa:cc:82:7d:93:61: bf:4f:f1:62:c4:81:cd:90:b2:f6:c5:c5:ea:24:73: fc:0c:d4:ab:74:91:c1:9d:4a:22:27:0d:65:f6:99: 9c:d1:38:18:56:c8:5f:4c:20:23:7b:b2:7d:49:ef: 58:f3:c3:88:c0:94:c8:a5:0a:e1:97:c2:44:a5:d1: ae:a5:7e:54:7e:10:8e:3e:6d:0a:38:79:b1:c9:52: 0e:4b:5b:10:9c:f9:37:16:e5:a0:5b:58:81:8c:8a: 4a:42:da:ef:14:59:70:60:71:21:42:92:f5:3d:e5: 13:cd:93:fe:43:08:39:ce:e3:fb:2e:34:85:b8:b9: f4:c3:84:6f:c0:a4:8c:c8:9b:71:72:d0:a7:88:03: f1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A8:14:A1:A1:B1:44:5D:1C:08:91:54:9F:F5:2C:20:93:AB:EF:64 X509v3 Authority Key Identifier: keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:fb:bb:47:10:08:1b:92:dd:2c:5f:4e:17:61:7f:69:8f:27: 3c:e1:f7:f1:8e:fc:ef:b3:bf:08:b1:ef:cf:60:54:69:67:a3: 38:a5:9d:5e:eb:63:ac:35:aa:69:97:92:2f:af:37:67:47:a8: 8f:4b:c6:ad:b9:a4:db:f2:de:d1:2b:d4:f3:fe:c0:54:13:d5: 66:e5:4f:2e:da:0d:89:ec:47:95:99:83:c2:b2:82:63:11:ac: 3e:cc:ae:50:31:79:9b:df:18:d5:14:1d:05:7f:b9:f1:21:2e: 7e:32:5e:ef:03:2a:43:fe:4b:7c:25:05:fc:a0:c3:28:bd:e5: e6:71:c2:8d:34:c2:ef:c1:92:3a:ce:d6:d5:3d:2d:c2:9e:f5: 0e:ce:64:35:a5:f9:93:93:98:c8:fd:38:d8:6c:3e:1e:82:9e: 17:0e:f7:34:1c:82:34:38:0b:4e:c1:3a:e9:ef:63:5c:33:28: c5:0d:20:8d:e7:30:cc:a6:b3:17:c2:34:1c:11:e0:47:c0:11: 09:cf:7f:64:67:5e:ae:5e:b6:be:43:6b:b8:31:f8:62:aa:24: c6:7c:8c:91:d0:a3:d5:b2:02:ac:f4:5f:50:6e:69:2e:45:ed: a9:83:b0:3d:84:9d:ac:70:8b:32:5c:fa:af:fe:24:50:2d:bd: a1:d7:47:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oNH27FyZvyuP5G4t2+EJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UwZTQ4MDQxMWI5Yzg4ZTkxNmRlZjkwZmMzYTkwMTAy NjM5NGEwHhcNMjUxMjE5MDgwMTMwWhcNMjUxMjIwMDgwMTMwWjAzMTEwLwYDVQQD Eyg4YmE4MTRhMWExYjE0NDVkMWMwODkxNTQ5ZmY1MmMyMDkzYWJlZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yfolZbJ5aVTTWjPTZlp/+1vMC0Q x5QCqlbcAWgh/DI6wmViX1pIIuBl8MQbpVbjWsFWtT7CUTXPbEA+Swh0q2hcQVgy GNdbBhIsqn/BbRrDojsVMFW2Uv2VVEpxf+5xBrjQ/wAuoSoKEH/Fxn+V0Ef6zIJ9 k2G/T/FixIHNkLL2xcXqJHP8DNSrdJHBnUoiJw1l9pmc0TgYVshfTCAje7J9Se9Y 88OIwJTIpQrhl8JEpdGupX5UfhCOPm0KOHmxyVIOS1sQnPk3FuWgW1iBjIpKQtrv FFlwYHEhQpL1PeUTzZP+Qwg5zuP7LjSFuLn0w4RvwKSMyJtxctCniAPxowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuoFKGhsURdHAiRVJ/1LCCTq+9kMB8GA1UdIwQY MBaAFIM+DkgEEbnIjpFt75D8OpAQJjlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMt NmMyMGViYWYzMGE5LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMtNmMyMGViYWYzMGE5 LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvu7RxAI G5LdLF9OF2F/aY8nPOH38Y7877O/CLHvz2BUaWejOKWdXutjrDWqaZeSL683Z0eo j0vGrbmk2/Le0SvU8/7AVBPVZuVPLtoNiexHlZmDwrKCYxGsPsyuUDF5m98Y1RQd BX+58SEufjJe7wMqQ/5LfCUF/KDDKL3l5nHCjTTC78GSOs7W1T0twp71Ds5kNaX5 k5OYyP042Gw+HoKeFw73NByCNDgLTsE66e9jXDMoxQ0gjecwzKazF8I0HBHgR8AR Cc9/ZGderl62vkNruDH4YqokxnyMkdCj1bICrPRfUG5pLkXtqYOwPYSdrHCLMlz6 r/4kUC29oddHkQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:59:59 2025 by rpki-client