This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json) Hash identifier: eq8hcFXyi16ZnscyDNie07XtXvqywkdEmBfcy9lT9pQ= Subject key identifier: 1E:CF:36:EF:7D:DC:EA:52:43:6C:0B:08:74:10:C0:13:F4:C2:61:2B Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0 Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0 Certificate serial: 019B35D723E0FB68CA490CEDE5546263372B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft Manifest number: 1648 Signing time: Fri 19 Dec 2025 09:00:50 +0000 Manifest this update: Fri 19 Dec 2025 09:00:50 +0000 Manifest next update: Sat 20 Dec 2025 09:00:50 +0000 Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=) 2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: np91iQwIl7ahqDWemup0Jekc6Et8j5PRUjxDx1IJZ6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:23:e0:fb:68:ca:49:0c:ed:e5:54:62:63:37:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0 Validity Not Before: Dec 19 09:00:50 2025 GMT Not After : Dec 20 09:00:50 2025 GMT Subject: CN=1ecf36ef7ddcea52436c0b087410c013f4c2612b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:1e:3c:6a:94:16:4d:37:fe:a4:3c:37:cf: 36:d5:ea:be:6e:21:30:20:8b:ba:50:c4:82:98:82: 5a:2e:c8:b3:7b:bb:2c:20:97:3f:f9:46:20:9b:4b: c0:65:58:bd:89:e6:eb:5a:3b:de:3e:aa:94:8c:d6: 2f:11:2c:f8:9d:af:62:77:e6:52:61:24:49:33:65: d7:64:cd:1f:15:a7:54:a8:f2:ac:6c:33:c9:12:67: 23:eb:d7:b3:6f:ab:3a:06:58:88:8e:e6:e6:18:69: c7:19:5d:6e:e4:68:4b:a7:4a:50:50:73:ce:05:62: fc:43:06:ae:d9:7d:b9:ab:5b:77:2c:1d:17:2b:08: a7:19:a2:c9:19:f0:8c:07:26:1b:05:fc:78:9d:e8: 38:75:da:07:ab:f6:d8:fa:6c:01:a5:77:02:3f:f9: 67:97:e5:95:f8:ac:4c:b0:f9:7b:1d:fa:99:c7:17: 77:39:f2:01:31:d7:8d:8e:3e:1f:ea:60:08:f9:ad: 14:0f:e0:0c:99:7d:1d:2e:67:a8:3b:75:6a:7e:de: af:af:67:f7:cb:b9:d2:59:11:a6:8a:67:9f:6d:25: e5:61:bb:ba:37:78:34:06:9c:db:4f:78:e9:d6:70: 80:14:fd:ae:5f:31:78:20:cc:7b:f3:70:1c:55:84: af:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CF:36:EF:7D:DC:EA:52:43:6C:0B:08:74:10:C0:13:F4:C2:61:2B X509v3 Authority Key Identifier: keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:98:94:f7:21:93:a5:95:b3:71:05:53:fc:b0:2a:eb:e0:c6: e0:03:33:51:1c:7b:5e:a0:f9:ca:92:79:e4:7a:a2:9b:de:d1: 07:0b:87:70:a9:10:cd:0a:55:5e:d9:2c:ef:c1:1c:10:0a:24: 69:6e:64:e2:0a:28:98:af:2f:4d:25:fe:0d:3e:b9:7e:e8:97: 75:41:90:81:bd:79:18:46:86:29:95:d4:68:13:71:be:a4:ef: a6:9e:7d:ae:f4:be:d6:e3:64:0a:c7:65:f8:a7:2f:9a:31:d0: 38:9c:cb:9a:85:33:76:8a:87:64:2a:f1:c0:1a:fe:a1:ab:fc: b8:84:65:db:ee:e8:07:8e:ef:a1:27:da:39:d3:6c:5a:1c:88: 60:37:1e:76:4f:07:9e:68:2e:c6:5b:18:36:49:88:c9:ac:8c: 8d:3a:36:d9:00:ec:77:14:17:7d:49:1e:f9:50:df:97:ad:78: 6d:4e:28:73:00:36:ca:f9:df:d0:07:63:17:52:75:53:6c:ef: a3:78:ec:66:60:fd:fd:e7:52:b1:e2:e4:b2:94:96:c4:41:21: 05:d5:b7:20:f3:90:93:6d:72:74:af:ab:8b:7f:8d:32:02:30: 7f:2a:64:46:62:63:d1:9c:6b:a9:15:24:cf:cd:a1:af:35:b8: 77:95:ea:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11yPg+2jKSQzt5VRiYzcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1 MmI3ZDAwHhcNMjUxMjE5MDkwMDUwWhcNMjUxMjIwMDkwMDUwWjAzMTEwLwYDVQQD EygxZWNmMzZlZjdkZGNlYTUyNDM2YzBiMDg3NDEwYzAxM2Y0YzI2MTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGkePGqUFk03/qQ8N8821eq+biEw IIu6UMSCmIJaLsize7ssIJc/+UYgm0vAZVi9iebrWjvePqqUjNYvESz4na9id+ZS YSRJM2XXZM0fFadUqPKsbDPJEmcj69ezb6s6BliIjubmGGnHGV1u5GhLp0pQUHPO BWL8Qwau2X25q1t3LB0XKwinGaLJGfCMByYbBfx4neg4ddoHq/bY+mwBpXcCP/ln l+WV+KxMsPl7HfqZxxd3OfIBMdeNjj4f6mAI+a0UD+AMmX0dLmeoO3Vqft6vr2f3 y7nSWRGmimefbSXlYbu6N3g0BpzbT3jp1nCAFP2uXzF4IMx783AcVYSviQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7PNu993OpSQ2wLCHQQwBP0wmErMB8GA1UdIwQY MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZiU9yGT pZWzcQVT/LAq6+DG4AMzURx7XqD5ypJ55Hqim97RBwuHcKkQzQpVXtks78EcEAok aW5k4goomK8vTSX+DT65fuiXdUGQgb15GEaGKZXUaBNxvqTvpp59rvS+1uNkCsdl +KcvmjHQOJzLmoUzdoqHZCrxwBr+oav8uIRl2+7oB47voSfaOdNsWhyIYDcedk8H nmguxlsYNkmIyayMjTo22QDsdxQXfUke+VDfl614bU4ocwA2yvnf0AdjF1J1U2zv o3jsZmD9/edSseLkspSWxEEhBdW3IPOQk21ydK+ri3+NMgIwfypkRmJj0ZxrqRUk z82hrzW4d5XqmA== -----END CERTIFICATE-----Generated at Fri Dec 19 11:48:24 2025 by rpki-client