This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json) Hash identifier: ovJPFz2GwKqVp/ZybDzrwLPmZYRp8vbVvoIFZ3GxYgg= Subject key identifier: ED:5D:94:64:9E:E7:BE:0B:55:FE:FE:D7:08:34:48:16:59:CE:B8:80 Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50 Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550 Certificate serial: 019B3D22BA4519270181BE7A632BD60F9253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft Manifest number: 0591 Signing time: Sat 20 Dec 2025 19:00:44 +0000 Manifest this update: Sat 20 Dec 2025 19:00:44 +0000 Manifest next update: Sun 21 Dec 2025 19:00:44 +0000 Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: 1OZ3NpBD4I7mnBKNTnesiPK44bNGvJUf1EnkPC4ryrw=) 2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:ba:45:19:27:01:81:be:7a:63:2b:d6:0f:92:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550 Validity Not Before: Dec 20 19:00:44 2025 GMT Not After : Dec 21 19:00:44 2025 GMT Subject: CN=ed5d94649ee7be0b55fefed70834481659ceb880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:77:76:c7:13:0e:64:a9:8b:b4:ff:ff:2c: 20:81:d9:f9:fc:50:89:95:97:a3:a3:1f:93:1d:02: be:8b:24:b2:8d:6f:f5:14:e5:97:a7:36:81:e9:5c: 74:90:57:15:97:db:3e:0d:0e:0b:e5:6c:ab:10:26: f3:a8:70:09:41:7e:89:d1:41:e9:f9:a2:99:86:bb: 40:a0:44:36:1d:de:e8:3e:9e:a1:1f:21:ef:44:1d: fb:0b:ba:ed:dc:f7:02:f0:2b:45:9f:96:3a:18:df: 29:51:c1:8f:5d:5b:92:ea:68:ba:bc:50:a9:61:99: e0:f9:c9:90:8d:1c:83:0b:92:5e:3f:ad:66:6e:ee: d2:d0:51:26:03:98:4b:3b:41:19:cc:3d:3b:06:25: 31:d2:95:d9:42:32:3a:50:14:82:c5:75:b1:84:76: 69:10:cf:c3:07:14:19:e4:09:21:f6:76:e2:18:30: a8:29:61:71:9c:ab:f3:65:73:ae:30:02:fa:9e:3c: 26:89:9b:d3:e1:89:36:6e:81:7c:7c:c3:62:f3:a6: a8:df:ff:e3:46:6a:70:f4:2e:81:29:3d:f7:d4:b6: 72:3b:c4:9f:70:11:fc:2c:45:67:c6:08:1b:d2:dc: 3f:c2:b1:4f:d3:ce:b9:56:51:c6:cc:f0:a8:17:db: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5D:94:64:9E:E7:BE:0B:55:FE:FE:D7:08:34:48:16:59:CE:B8:80 X509v3 Authority Key Identifier: keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c5:5f:d2:21:be:c1:43:1e:14:ee:93:bf:6c:48:02:14:16: 9b:4d:f6:de:8b:14:30:13:ea:12:be:20:2e:9f:e2:e0:3c:51: 96:9b:68:91:dc:4c:d0:9c:ec:db:1b:2e:6f:09:69:27:8b:cc: 45:d6:6e:ec:e7:82:e1:26:4d:77:fd:6d:5e:6e:45:81:71:6d: 3a:5e:7e:ef:b9:d8:22:2f:67:3c:0b:c6:c4:e6:6e:c4:66:4d: 5f:33:df:49:7f:5e:eb:bd:93:43:4a:5b:34:b8:2a:f0:f7:15: fc:62:36:f1:e5:a2:6a:84:1b:21:b9:09:ad:89:f9:c6:ed:8f: 55:80:8d:21:3a:9f:f7:93:40:b5:0c:2d:2f:96:17:b4:14:a0: cd:e1:ea:69:da:f5:4f:72:a8:74:06:91:19:03:52:a8:92:7d: 02:8b:63:d3:3c:07:7f:bc:d4:32:4d:b3:66:c2:9c:2f:e3:c7: b9:1f:03:0c:82:b7:af:67:23:4d:2c:8f:cc:cb:31:7b:d6:d9: ed:8a:61:d3:a5:ce:db:6f:1e:da:96:21:af:af:e9:8a:ce:c6: a2:36:c0:49:88:87:22:23:54:8a:34:96:95:41:7a:71:70:d4: 5c:af:6a:65:15:70:12:c8:08:c3:73:13:01:e9:10:00:64:6f: 61:6f:24:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IrpFGScBgb56YyvWD5JTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzY4ZmJmNWJiZDZkMzJmM2RkZGMyNGVjMjA0MDM4YzQ5 YjA1NTAwHhcNMjUxMjIwMTkwMDQ0WhcNMjUxMjIxMTkwMDQ0WjAzMTEwLwYDVQQD EyhlZDVkOTQ2NDllZTdiZTBiNTVmZWZlZDcwODM0NDgxNjU5Y2ViODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2d3dscTDmSpi7T//ywggdn5/FCJ lZejox+THQK+iySyjW/1FOWXpzaB6Vx0kFcVl9s+DQ4L5WyrECbzqHAJQX6J0UHp +aKZhrtAoEQ2Hd7oPp6hHyHvRB37C7rt3PcC8CtFn5Y6GN8pUcGPXVuS6mi6vFCp YZng+cmQjRyDC5JeP61mbu7S0FEmA5hLO0EZzD07BiUx0pXZQjI6UBSCxXWxhHZp EM/DBxQZ5Akh9nbiGDCoKWFxnKvzZXOuMAL6njwmiZvT4Yk2boF8fMNi86ao3//j Rmpw9C6BKT331LZyO8SfcBH8LEVnxggb0tw/wrFP0865VlHGzPCoF9sFfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1dlGSe574LVf7+1wg0SBZZzriAMB8GA1UdIwQY MBaAFBs2j79bvW0y893cJOwgQDjEmwVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYt ZmQ0NjA0ZDdlN2FmLzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYtZmQ0NjA0ZDdlN2Fm LzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMVf0iG+ wUMeFO6Tv2xIAhQWm0323osUMBPqEr4gLp/i4DxRlptokdxM0Jzs2xsubwlpJ4vM RdZu7OeC4SZNd/1tXm5FgXFtOl5+77nYIi9nPAvGxOZuxGZNXzPfSX9e672TQ0pb NLgq8PcV/GI28eWiaoQbIbkJrYn5xu2PVYCNITqf95NAtQwtL5YXtBSgzeHqadr1 T3KodAaRGQNSqJJ9Aotj0zwHf7zUMk2zZsKcL+PHuR8DDIK3r2cjTSyPzMsxe9bZ 7Yph06XO228e2pYhr6/pis7GojbASYiHIiNUijSWlUF6cXDUXK9qZRVwEsgIw3MT AekQAGRvYW8k9A== -----END CERTIFICATE-----Generated at Sat Dec 20 23:55:40 2025 by rpki-client