This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json) Hash identifier: o/tm66p8XyCWKHtooSb9yqzSHLZsySB82ce/0+hgo1Q= Subject key identifier: D8:07:EC:F7:D1:D4:8F:C8:94:2F:B0:11:83:74:76:E3:A3:52:46:E1 Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e Certificate serial: 019B4136635B37CEED63B543C5400BEE5EDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 14:00:41 +0000 Manifest this update: Sun 21 Dec 2025 14:00:41 +0000 Manifest next update: Mon 22 Dec 2025 14:00:41 +0000 Files and hashes: 1: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (hash: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=) 2: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (hash: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=) 3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: t5lWMFjYsSSvivw8X8tY+8PzoZjvAUpDz0vAG/cGWwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:63:5b:37:ce:ed:63:b5:43:c5:40:0b:ee:5e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e Validity Not Before: Dec 21 14:00:41 2025 GMT Not After : Dec 22 14:00:41 2025 GMT Subject: CN=d807ecf7d1d48fc8942fb011837476e3a35246e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:46:0e:d7:a7:96:77:38:df:ab:30:c2:3c:76: dc:64:f5:ef:77:3c:54:2e:37:d6:df:66:fe:35:91: 04:5b:62:97:f8:cf:6a:59:02:69:30:55:10:f9:35: 29:71:a8:1f:3a:67:6d:1a:e0:ad:05:bd:38:47:89: 30:d8:54:16:96:a9:d5:61:69:c4:27:d6:39:91:5c: 42:61:f5:25:08:a0:48:de:fa:a0:0f:d5:88:74:bd: 5f:89:52:e5:bd:29:b4:d7:e2:ea:b2:f2:90:7f:1b: cc:e5:1b:e3:a4:ba:0b:4c:ac:9b:73:9a:8e:ea:c1: 6a:d0:e5:d2:fd:a0:6b:f5:72:4d:6e:be:07:a0:b0: bd:dc:60:29:b1:84:1a:34:46:24:aa:f6:b2:59:19: 17:e1:ff:a7:e6:ef:08:64:66:9e:7b:44:70:75:6f: 43:02:d7:3b:31:0d:a8:9d:77:39:b5:57:5b:b9:92: b2:00:82:ff:43:a1:f4:ad:ce:93:ec:cd:ef:76:39: b1:12:98:8e:c3:f3:bc:6f:42:1e:6d:1c:9c:9a:d8: eb:28:42:ec:4b:b2:17:91:ef:9d:2e:6b:f8:2e:56: 01:e1:3b:ca:49:c8:f9:da:b9:9b:3c:64:d8:98:92: d0:a3:5f:ab:30:5c:7e:8d:79:a4:85:31:60:4b:9e: 99:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:07:EC:F7:D1:D4:8F:C8:94:2F:B0:11:83:74:76:E3:A3:52:46:E1 X509v3 Authority Key Identifier: keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8d:22:ed:08:95:fc:a5:5a:c8:78:e9:68:de:f0:a6:8e:53: 7f:7e:1c:c6:d0:47:05:fd:f3:c9:f7:49:f0:ad:0d:08:b4:52: 13:c6:39:00:36:c5:fa:fb:ba:18:b3:60:48:d6:70:4c:e7:0b: 4e:72:55:e4:2e:00:ec:46:f2:6c:38:56:87:5c:ee:fb:9a:a9: f3:76:bb:f8:35:33:dd:41:99:83:e1:dc:f3:49:10:57:dc:ac: af:b5:d6:b7:ce:58:84:ee:1e:c5:d6:af:a6:de:7c:b5:8f:4e: 58:ae:dc:88:0b:89:52:2e:5a:4d:37:95:86:65:44:b8:77:44: f6:70:99:35:da:d4:18:51:48:30:73:14:cf:23:12:19:c8:4d: 4c:5d:5d:b4:8d:6c:b4:de:c5:ca:39:a5:38:3f:d7:e9:bb:4c: bf:e0:aa:a0:ee:cb:bc:49:33:f9:10:1f:d5:5c:a9:8d:5e:a2: a4:b5:af:3d:07:4a:88:2d:f1:11:f2:73:72:a8:94:4c:4a:30: bb:25:05:ae:86:02:44:85:79:68:7a:db:37:3f:f7:c1:ab:5b: 46:f0:af:72:20:58:93:c2:83:3e:92:c3:25:32:47:d8:74:78: 38:00:cc:03:c3:49:22:7b:a6:19:09:b0:97:7f:5f:1c:f2:aa: 1b:84:45:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNmNbN87tY7VDxUAL7l7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzc1YjQzYWU4YTUzZDQ4Yzg4ODY3MWU2N2ZjMTdiZjI3 ZjJiN2UwHhcNMjUxMjIxMTQwMDQxWhcNMjUxMjIyMTQwMDQxWjAzMTEwLwYDVQQD EyhkODA3ZWNmN2QxZDQ4ZmM4OTQyZmIwMTE4Mzc0NzZlM2EzNTI0NmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0YO16eWdzjfqzDCPHbcZPXvdzxU LjfW32b+NZEEW2KX+M9qWQJpMFUQ+TUpcagfOmdtGuCtBb04R4kw2FQWlqnVYWnE J9Y5kVxCYfUlCKBI3vqgD9WIdL1fiVLlvSm01+LqsvKQfxvM5RvjpLoLTKybc5qO 6sFq0OXS/aBr9XJNbr4HoLC93GApsYQaNEYkqvayWRkX4f+n5u8IZGaee0RwdW9D Atc7MQ2onXc5tVdbuZKyAIL/Q6H0rc6T7M3vdjmxEpiOw/O8b0IebRycmtjrKELs S7IXke+dLmv4LlYB4TvKScj52rmbPGTYmJLQo1+rMFx+jXmkhTFgS56ZXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgH7PfR1I/IlC+wEYN0duOjUkbhMB8GA1UdIwQY MBaAFIM3W0OuilPUjIiGceZ/wXvyfyt+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYt NzJjNGM0YjgwNGE3LzEvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYtNzJjNGM0YjgwNGE3 LzEvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQo0i7QiV /KVayHjpaN7wpo5Tf34cxtBHBf3zyfdJ8K0NCLRSE8Y5ADbF+vu6GLNgSNZwTOcL TnJV5C4A7EbybDhWh1zu+5qp83a7+DUz3UGZg+Hc80kQV9ysr7XWt85YhO4exdav pt58tY9OWK7ciAuJUi5aTTeVhmVEuHdE9nCZNdrUGFFIMHMUzyMSGchNTF1dtI1s tN7FyjmlOD/X6btMv+CqoO7LvEkz+RAf1VypjV6ipLWvPQdKiC3xEfJzcqiUTEow uyUFroYCRIV5aHrbNz/3watbRvCvciBYk8KDPpLDJTJH2HR4OADMA8NJInumGQmw l39fHPKqG4RFiQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:18:29 2025 by rpki-client