This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json) Hash identifier: D/KYj7YHQ7Okpw2s6rHa8pvAUHaQHESvaw1vdJGcdYY= Subject key identifier: DB:B6:E0:B4:3B:B8:C0:BB:B8:D8:59:9E:20:43:9B:7C:CB:96:F1:0C Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498 Certificate serial: 019B6EEAEF221DF26D34B6094520A96DF6C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft Manifest number: 03DA Signing time: Tue 30 Dec 2025 11:00:48 +0000 Manifest this update: Tue 30 Dec 2025 11:00:48 +0000 Manifest next update: Wed 31 Dec 2025 11:00:48 +0000 Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=) 2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: m4Aw2OHrvZTtp4iYjxxSDe2rZo1btucN916y7pxMnq0=) 3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:ea:ef:22:1d:f2:6d:34:b6:09:45:20:a9:6d:f6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498 Validity Not Before: Dec 30 11:00:48 2025 GMT Not After : Dec 31 11:00:48 2025 GMT Subject: CN=dbb6e0b43bb8c0bbb8d8599e20439b7ccb96f10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:b2:f4:7e:4f:10:b1:bc:05:64:f0:f4:d2: 46:9e:d6:92:07:b9:97:e4:a7:08:09:87:6b:b8:2c: 0b:ef:e5:eb:0b:8b:99:e3:bf:af:05:36:44:3a:dd: ed:3a:ec:2e:e5:66:15:ac:de:f9:a6:ba:09:b1:8c: 1d:c1:9e:5c:50:c7:5b:3e:e1:9e:63:1d:12:fb:c9: db:07:ab:a2:47:19:db:ed:3e:08:cc:66:8b:06:db: da:89:bf:69:83:b7:c8:f2:52:ff:f7:ca:f0:a4:f7: c8:52:15:39:ef:87:9f:cd:55:28:da:58:42:05:7a: fc:37:d5:97:96:19:f8:b1:ed:51:72:a6:f3:df:fb: 00:a0:6b:97:9f:9f:4d:49:1a:d5:bc:6e:76:93:d2: c9:ee:1c:8e:bd:a0:9f:f4:ea:78:6a:c7:f0:cf:12: 24:cf:5e:e4:98:73:80:52:c1:59:46:49:6b:d1:5b: 74:46:fd:41:e7:4c:45:f5:63:cc:4d:b9:12:49:ca: b6:65:05:4d:30:55:25:1f:1a:27:20:fb:6b:e2:6f: 4b:be:04:31:95:f4:c1:19:a8:c0:44:87:7d:20:fe: be:fa:ab:76:aa:d2:11:95:30:a6:ea:5c:ba:b7:44: d6:0d:b4:06:51:ef:bb:10:d9:2f:e5:44:00:7b:8f: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B6:E0:B4:3B:B8:C0:BB:B8:D8:59:9E:20:43:9B:7C:CB:96:F1:0C X509v3 Authority Key Identifier: keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8f:c3:1c:c4:ca:51:2a:9e:72:29:74:11:42:29:5e:d3:87: 98:38:5d:92:e2:50:a2:bb:e0:e5:c2:75:8e:05:80:17:8e:b4: 00:cb:c5:4f:8d:41:78:50:1d:b9:4a:7d:ce:63:21:73:1b:e4: 65:de:1f:4f:31:bb:31:00:d5:e3:a5:b7:98:a3:62:2e:ad:8b: 13:c4:67:71:51:b5:de:c6:52:b3:34:26:e8:48:4a:76:29:0a: a9:c1:64:15:46:f2:e9:27:6c:06:6e:c8:d7:80:2e:23:99:14: 5f:ca:61:dd:18:2d:55:5e:c2:86:14:a9:84:2c:1d:65:e0:18: 66:71:4f:69:64:58:1c:80:be:dd:83:2b:d4:37:bf:b0:51:b3: dd:bd:79:73:d4:e3:29:ad:8b:00:ce:f3:a0:2b:d0:ef:e2:e5: 31:f2:06:49:8c:b9:52:80:f5:81:8e:90:23:2b:6b:13:68:51: 30:66:bc:97:9e:46:81:e3:cc:bd:f0:60:ef:75:71:e7:10:27: 77:7a:75:83:9e:35:f8:77:0b:35:8d:72:15:54:d1:b1:ac:22: 93:84:c9:71:8c:8d:8d:40:b8:12:35:ca:9a:b2:07:c1:82:d7: 20:2b:16:4b:d6:21:0b:89:c8:1f:96:1d:50:c8:70:05:a7:9e: 98:df:9e:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtu6u8iHfJtNLYJRSCpbfbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx MzM0OTgwHhcNMjUxMjMwMTEwMDQ4WhcNMjUxMjMxMTEwMDQ4WjAzMTEwLwYDVQQD EyhkYmI2ZTBiNDNiYjhjMGJiYjhkODU5OWUyMDQzOWI3Y2NiOTZmMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj6y9H5PELG8BWTw9NJGntaSB7mX 5KcICYdruCwL7+XrC4uZ47+vBTZEOt3tOuwu5WYVrN75proJsYwdwZ5cUMdbPuGe Yx0S+8nbB6uiRxnb7T4IzGaLBtvaib9pg7fI8lL/98rwpPfIUhU574efzVUo2lhC BXr8N9WXlhn4se1Rcqbz3/sAoGuXn59NSRrVvG52k9LJ7hyOvaCf9Op4asfwzxIk z17kmHOAUsFZRklr0Vt0Rv1B50xF9WPMTbkSScq2ZQVNMFUlHxonIPtr4m9LvgQx lfTBGajARId9IP6++qt2qtIRlTCm6ly6t0TWDbQGUe+7ENkv5UQAe49kPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu24LQ7uMC7uNhZniBDm3zLlvEMMB8GA1UdIwQY MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt NDZhZjNlNTBjMDUyLzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASo/DHMTK USqecil0EUIpXtOHmDhdkuJQorvg5cJ1jgWAF460AMvFT41BeFAduUp9zmMhcxvk Zd4fTzG7MQDV46W3mKNiLq2LE8RncVG13sZSszQm6EhKdikKqcFkFUby6SdsBm7I 14AuI5kUX8ph3RgtVV7ChhSphCwdZeAYZnFPaWRYHIC+3YMr1De/sFGz3b15c9Tj Ka2LAM7zoCvQ7+LlMfIGSYy5UoD1gY6QIytrE2hRMGa8l55GgePMvfBg73Vx5xAn d3p1g541+HcLNY1yFVTRsawik4TJcYyNjUC4EjXKmrIHwYLXICsWS9YhC4nIH5Yd UMhwBaeemN+eUw== -----END CERTIFICATE-----Generated at Tue Dec 30 14:55:24 2025 by rpki-client