This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json) Hash identifier: ZYAmp2qO9gDYm1iGbyc3AmJsFdyl7MM59D7QBi4yAcE= Subject key identifier: 14:8C:33:DC:E7:B4:38:2D:A9:F3:61:ED:D7:63:F3:EF:AE:49:63:2A Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d Certificate serial: 019B356992123761A9B08EC50ABFCE95B3E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft Manifest number: 23 Signing time: Fri 19 Dec 2025 07:01:09 +0000 Manifest this update: Fri 19 Dec 2025 07:01:09 +0000 Manifest next update: Sat 20 Dec 2025 07:01:09 +0000 Files and hashes: 1: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: 4hp/2XXEgaWOe/nSOKuAeSlRn0QDOeoIVYy8v5OgnRQ=) 2: xjzYHXm1-iuVRNUf9oR0e8sbGww.roa (hash: iJBDMmXR3U1sUk5QS/ljorbRN9G3Tas2Jm/BVGabM7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:92:12:37:61:a9:b0:8e:c5:0a:bf:ce:95:b3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d Validity Not Before: Dec 19 07:01:09 2025 GMT Not After : Dec 20 07:01:09 2025 GMT Subject: CN=148c33dce7b4382da9f361edd763f3efae49632a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:63:17:03:74:81:f4:ca:78:43:d4:f1:f6:6c: f3:84:1e:02:62:62:28:1f:53:0c:70:97:4b:f0:e3: 2b:4d:c4:7e:83:d7:bb:6b:d3:7f:52:e9:c2:c3:a4: 6c:5b:73:7e:5f:1e:4a:5b:e1:57:31:e9:f8:b5:cb: 65:7d:6a:48:8d:62:b3:07:ca:4d:8a:40:a7:90:f4: 3d:9b:08:c2:14:fb:86:1f:97:b0:13:49:ff:1a:62: 07:23:57:86:fc:58:79:c5:ca:dd:47:84:f8:7d:ac: 33:ee:79:ab:88:af:c1:20:22:0a:b2:4f:98:8f:b4: 40:91:96:e9:d0:00:00:50:ec:72:dc:4f:7c:7f:64: a0:83:11:02:89:e1:ee:7a:0a:cb:08:42:16:c1:82: 2a:82:ea:e4:2a:8f:f1:75:c7:49:d4:66:12:4d:d7: 2c:2e:33:0b:c7:66:11:77:e6:bc:84:99:1d:12:ba: ca:e9:2d:54:bf:b5:28:0c:bc:6d:2b:21:73:f3:53: dd:aa:b0:f8:fa:37:79:21:8e:e0:27:79:ed:68:eb: a8:4a:17:44:d4:ea:ac:1c:50:fc:36:e3:12:95:a4: 45:b2:df:4e:bf:fa:84:85:1e:23:28:11:08:e2:e8: 6b:3b:be:60:1b:1e:90:77:64:ad:74:ba:61:47:f1: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8C:33:DC:E7:B4:38:2D:A9:F3:61:ED:D7:63:F3:EF:AE:49:63:2A X509v3 Authority Key Identifier: keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:30:b7:35:28:e4:cc:0a:64:4d:04:b7:6c:6b:14:c3:cf:04: 06:90:d5:6c:ef:de:33:3b:fa:2f:21:25:96:46:3a:5c:76:53: da:db:c7:94:08:38:5e:00:ac:ee:64:cb:47:ee:19:ba:54:59: 48:5d:8d:bb:1b:ce:b9:ba:91:30:68:5c:63:72:c8:b7:f1:90: 38:64:36:87:e7:ee:81:e4:c1:48:fe:a2:ae:01:e1:8b:8e:55: bf:a7:06:cb:f7:3b:3b:6f:c7:23:de:3b:9f:6c:3c:cf:fa:39: c9:49:5c:82:e8:14:a7:92:b6:0e:4f:e4:49:ec:73:ce:bd:a3: dc:b2:60:23:79:33:83:e0:e6:4e:6d:83:44:7b:4e:26:7f:b9: 64:37:2f:79:2e:53:64:9e:d1:d5:cc:1f:86:8d:cc:91:4f:fd: db:ee:b3:f5:2d:e6:26:24:fa:25:bd:cd:b1:24:e1:b7:17:bd: a2:3e:6b:58:9f:0f:8e:42:21:c3:a1:6a:df:5b:98:1f:47:bb: 4c:fc:85:7f:78:dc:ea:b7:a4:b3:8e:96:1e:01:42:39:44:a3: 91:9f:60:61:74:5c:0d:be:ce:52:f0:17:73:6b:8d:2c:29:1e: 2d:c0:cf:6c:bc:e5:b3:91:39:df:69:7b:1e:3a:1f:69:9f:7b: 24:d9:cb:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aZISN2GpsI7FCr/OlbPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OWIzZjkwOGNlNmUxNzY0NjE3NzMxYjYyNDUzOTQyMWQx M2M5NGQwHhcNMjUxMjE5MDcwMTA5WhcNMjUxMjIwMDcwMTA5WjAzMTEwLwYDVQQD EygxNDhjMzNkY2U3YjQzODJkYTlmMzYxZWRkNzYzZjNlZmFlNDk2MzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2MXA3SB9Mp4Q9Tx9mzzhB4CYmIo H1MMcJdL8OMrTcR+g9e7a9N/UunCw6RsW3N+Xx5KW+FXMen4tctlfWpIjWKzB8pN ikCnkPQ9mwjCFPuGH5ewE0n/GmIHI1eG/Fh5xcrdR4T4fawz7nmriK/BICIKsk+Y j7RAkZbp0AAAUOxy3E98f2SggxECieHuegrLCEIWwYIqgurkKo/xdcdJ1GYSTdcs LjMLx2YRd+a8hJkdErrK6S1Uv7UoDLxtKyFz81PdqrD4+jd5IY7gJ3ntaOuoShdE 1OqsHFD8NuMSlaRFst9Ov/qEhR4jKBEI4uhrO75gGx6Qd2StdLphR/EIWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSMM9zntDgtqfNh7ddj8++uSWMqMB8GA1UdIwQY MBaAFBmbP5CM5uF2RhdzG2JFOUIdE8lNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODIt MmU5N2FiYTBmYjJjLzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODItMmU5N2FiYTBmYjJj LzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDC3NSjk zApkTQS3bGsUw88EBpDVbO/eMzv6LyEllkY6XHZT2tvHlAg4XgCs7mTLR+4ZulRZ SF2NuxvOubqRMGhcY3LIt/GQOGQ2h+fugeTBSP6irgHhi45Vv6cGy/c7O2/HI947 n2w8z/o5yUlcgugUp5K2Dk/kSexzzr2j3LJgI3kzg+DmTm2DRHtOJn+5ZDcveS5T ZJ7R1cwfho3MkU/92+6z9S3mJiT6Jb3NsSThtxe9oj5rWJ8PjkIhw6Fq31uYH0e7 TPyFf3jc6reks46WHgFCOUSjkZ9gYXRcDb7OUvAXc2uNLCkeLcDPbLzls5E532l7 HjofaZ97JNnLrA== -----END CERTIFICATE-----Generated at Fri Dec 19 11:30:54 2025 by rpki-client