This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json) Hash identifier: rQBJQdibLUJljrW5NtrD/r+CDj9hzcmb4BuWj1qCFHU= Subject key identifier: E7:69:1E:44:F7:0D:71:79:20:CA:27:0B:0C:11:F0:57:98:21:A4:F9 Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498 Certificate serial: 019B3CB532A513F3F12C31772A99C1FE2C23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft Manifest number: 03C0 Signing time: Sat 20 Dec 2025 17:01:06 +0000 Manifest this update: Sat 20 Dec 2025 17:01:06 +0000 Manifest next update: Sun 21 Dec 2025 17:01:06 +0000 Files and hashes: 1: 6i4m_HknDiVQRfHoAs-YVFC4Xn4.roa (hash: fW9Aivw6ds7zZWferlEPqWnFH1QKAf3iJaK2H7YgVoc=) 2: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: EGNHt9CXKd7GnwegRgvHuDHlHddRqf6de4ZZN9+YX8U=) 3: bjDcf63H1HGhTm7D4ZGpSjV3r-w.roa (hash: 0EVH6jLO9XDj46s2zxymcHxlkLShhKhHoxnCFUHrStw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:32:a5:13:f3:f1:2c:31:77:2a:99:c1:fe:2c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498 Validity Not Before: Dec 20 17:01:06 2025 GMT Not After : Dec 21 17:01:06 2025 GMT Subject: CN=e7691e44f70d717920ca270b0c11f0579821a4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:fb:6c:2f:56:18:d9:ef:3b:63:4a:11:5f: 5e:95:f2:57:e1:3a:4b:4e:76:2c:4c:6d:b1:a1:74: a2:10:94:40:70:87:8d:85:47:ac:ca:9e:52:49:fb: 3d:f2:36:58:58:07:48:b1:b3:98:ef:d3:9c:b9:f6: bd:da:94:cc:7f:8b:80:98:b0:a0:36:48:2b:04:40: 5c:10:f7:85:7d:a4:6c:f1:78:23:51:10:9a:5f:17: 24:11:85:c8:88:90:34:59:fa:8a:ce:3b:bd:fc:be: 9d:33:a8:23:16:4d:3f:a0:a6:b5:8a:69:e7:91:20: c1:c2:e2:fd:45:6a:f6:4b:e6:f5:b5:67:c1:9a:ff: e6:a4:a0:a7:93:00:11:00:fb:84:7c:95:96:6b:b8: 8f:50:01:b8:4b:d6:7b:8c:76:ad:01:14:5a:61:0a: 7b:15:d4:a0:0a:63:23:28:2c:52:65:be:e9:ad:16: 15:a6:8c:6b:68:be:e0:f2:2e:03:e9:db:3e:a0:a5: 7a:b3:28:7f:36:0d:aa:6b:b4:54:38:ed:5a:10:dc: fe:b6:20:5d:49:c8:a4:86:e5:c0:f3:27:65:b7:de: 2c:f6:9f:f4:5f:e0:c7:f5:00:cb:8f:f0:f0:58:51: 78:4a:21:3c:cd:29:d0:a0:29:9e:9c:12:ce:a1:ac: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:69:1E:44:F7:0D:71:79:20:CA:27:0B:0C:11:F0:57:98:21:A4:F9 X509v3 Authority Key Identifier: keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:86:7b:e4:ec:e5:32:b9:e2:e5:d9:5b:21:a0:5e:90:1b:9d: ef:31:01:07:49:7c:a2:d4:d2:2b:b3:ae:97:47:57:65:be:b6: 0a:cd:59:8c:4b:07:32:fb:2a:8d:95:53:70:df:e5:cf:3c:b6: 6b:33:4f:8d:75:42:f9:8c:d9:4e:66:c8:bf:be:45:1d:4b:2a: ed:29:00:ef:01:ce:1d:2c:94:c9:20:80:5a:f8:e9:7b:93:e9: f5:d0:32:1b:e3:cd:7c:58:db:8b:f3:64:ee:22:51:c3:e3:ea: 2d:1e:60:13:b9:a5:e3:20:ca:db:bb:c2:1f:57:c9:4a:61:52: 15:e5:f5:49:5c:62:a9:d5:86:73:8e:2a:90:62:19:18:c5:ec: 0d:ad:a6:2b:56:9b:93:4f:65:f3:6d:1a:11:db:de:4d:1c:8c: e5:c3:2d:3f:e9:1c:b5:22:f4:de:09:3b:60:b2:f7:79:5d:62: cc:a7:6a:5e:7b:41:9d:c8:14:b0:b5:d9:9d:e9:06:4d:9e:8a: 81:38:cf:6a:7d:a3:e6:e0:97:9b:3a:b8:8b:e9:6f:ab:e4:e2: fe:10:fa:b2:36:b0:ec:ae:d6:bc:9b:b6:08:5a:70:b5:43:8b: 54:a3:49:95:dd:c5:13:9b:92:a3:ee:69:1a:cb:ac:5d:34:37: 8f:c5:48:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTKlE/PxLDF3KpnB/iwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx MzM0OTgwHhcNMjUxMjIwMTcwMTA2WhcNMjUxMjIxMTcwMTA2WjAzMTEwLwYDVQQD EyhlNzY5MWU0NGY3MGQ3MTc5MjBjYTI3MGIwYzExZjA1Nzk4MjFhNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqH7bC9WGNnvO2NKEV9elfJX4TpL TnYsTG2xoXSiEJRAcIeNhUesyp5SSfs98jZYWAdIsbOY79Ocufa92pTMf4uAmLCg NkgrBEBcEPeFfaRs8XgjURCaXxckEYXIiJA0WfqKzju9/L6dM6gjFk0/oKa1imnn kSDBwuL9RWr2S+b1tWfBmv/mpKCnkwARAPuEfJWWa7iPUAG4S9Z7jHatARRaYQp7 FdSgCmMjKCxSZb7prRYVpoxraL7g8i4D6ds+oKV6syh/Ng2qa7RUOO1aENz+tiBd ScikhuXA8ydlt94s9p/0X+DH9QDLj/DwWFF4SiE8zSnQoCmenBLOoaxeQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdpHkT3DXF5IMonCwwR8FeYIaT5MB8GA1UdIwQY MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt NDZhZjNlNTBjMDUyLzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4Z75Ozl Mrni5dlbIaBekBud7zEBB0l8otTSK7Oul0dXZb62Cs1ZjEsHMvsqjZVTcN/lzzy2 azNPjXVC+YzZTmbIv75FHUsq7SkA7wHOHSyUySCAWvjpe5Pp9dAyG+PNfFjbi/Nk 7iJRw+PqLR5gE7ml4yDK27vCH1fJSmFSFeX1SVxiqdWGc44qkGIZGMXsDa2mK1ab k09l820aEdveTRyM5cMtP+kctSL03gk7YLL3eV1izKdqXntBncgUsLXZnekGTZ6K gTjPan2j5uCXmzq4i+lvq+Ti/hD6sjaw7K7WvJu2CFpwtUOLVKNJld3FE5uSo+5p GsusXTQ3j8VIdw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:49:42 2025 by rpki-client