This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json) Hash identifier: lIHfXX0IGqlGrv58S7TW4stc7efC0cNombxX1d0VNdM= Subject key identifier: 51:DC:2F:3F:FF:0B:D3:AE:65:49:CC:B2:E2:4B:08:FD:D9:1E:CE:13 Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66 Certificate serial: 019B4E847A888596E3534A9EE8C54C348FA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft Manifest number: 0331 Signing time: Wed 24 Dec 2025 04:01:03 +0000 Manifest this update: Wed 24 Dec 2025 04:01:03 +0000 Manifest next update: Thu 25 Dec 2025 04:01:03 +0000 Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: ArRqHAA0333W38CKqOqSWGo7KSZf8BYgZ0IZw3o0kfk=) 2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:7a:88:85:96:e3:53:4a:9e:e8:c5:4c:34:8f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66 Validity Not Before: Dec 24 04:01:03 2025 GMT Not After : Dec 25 04:01:03 2025 GMT Subject: CN=51dc2f3fff0bd3ae6549ccb2e24b08fdd91ece13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:af:5c:31:44:07:c1:4d:d0:ba:d3:4b:83: 35:30:84:38:06:e8:95:ac:c1:49:4d:56:2a:79:37: 74:32:f4:f0:c9:dd:cc:7c:98:cf:d2:10:bb:a4:e6: 24:bc:23:8c:65:b8:8e:87:42:01:cd:52:ba:f5:1d: d2:2d:35:c0:00:da:97:30:80:3e:fd:b9:85:01:b0: b1:d3:fb:65:3c:ef:44:cb:c9:7c:44:3c:7c:8f:fb: 37:1d:2a:19:cd:0c:cc:e9:31:00:88:6f:72:fb:45: 4b:11:ef:d6:1d:84:2d:4a:a8:23:95:34:01:92:3f: fa:21:aa:16:d9:61:8e:0c:75:5b:d0:8a:a2:a1:e5: 02:ab:67:22:5f:fa:a7:cc:b3:ba:08:91:4e:ea:be: c0:44:20:c2:40:3e:8a:4a:1b:c4:1c:56:85:35:1e: 18:01:2b:0e:dc:a4:8a:11:87:d0:ad:9d:4b:2c:55: d7:bb:20:31:bc:e6:28:db:b0:42:42:7d:d3:bc:86: f4:95:11:c6:95:53:f3:dd:d7:41:b2:e8:bb:dc:64: 36:cd:40:8f:a5:97:8c:bc:af:3d:32:1f:89:6a:79: 0b:53:72:7f:7b:a8:cf:c6:34:af:86:40:b9:19:67: a5:99:5a:70:84:70:bd:7f:26:b7:80:3a:fa:1b:37: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DC:2F:3F:FF:0B:D3:AE:65:49:CC:B2:E2:4B:08:FD:D9:1E:CE:13 X509v3 Authority Key Identifier: keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:03:65:65:ae:56:d9:36:e3:88:5e:33:c6:95:b4:38:de:68: 76:02:2c:ed:78:c0:e3:ce:c8:aa:a5:3e:93:64:b2:cd:47:6b: 42:b2:b0:66:be:c0:1d:9c:c2:f9:7b:1c:b0:7d:74:e5:33:00: 62:b1:fd:88:f8:45:f4:d7:9f:f9:92:84:c6:fa:f5:85:56:49: ba:62:2a:87:f3:7a:81:3b:ba:12:f4:dd:0d:ba:48:73:21:7c: e9:2c:50:0e:3e:ff:18:56:30:fd:34:5b:79:df:ca:cc:61:5b: 1e:90:0a:4f:e8:6e:71:53:8a:5d:41:cb:4f:48:b7:c3:45:c2: 40:bb:a6:ad:9e:15:6f:87:82:3d:57:f0:83:66:90:f8:5f:9a: aa:6c:2e:10:08:0f:c0:4d:a6:a6:ba:ab:28:32:cd:07:98:51: e5:c2:20:72:da:bb:c9:23:f4:10:fb:1a:e1:cc:24:4a:da:b4: 50:88:b3:b5:ac:fc:f7:8d:69:66:88:d3:e3:3f:a1:66:83:1c: 46:a4:ad:54:4f:e4:87:c5:bf:41:47:a8:4e:6d:a3:0d:65:d9: f0:5e:e8:fb:ca:07:77:87:02:0b:8b:44:fa:87:88:2c:2f:76: 6b:4b:4c:fc:78:7e:7c:8b:8a:31:02:6b:26:90:95:e6:de:73: 5b:26:c0:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhHqIhZbjU0qe6MVMNI+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTgxZGU4Yjc3MjAzOTQ1OTQ0NDhiN2EwZTYyNWMzM2Ez OGRjNjYwHhcNMjUxMjI0MDQwMTAzWhcNMjUxMjI1MDQwMTAzWjAzMTEwLwYDVQQD Eyg1MWRjMmYzZmZmMGJkM2FlNjU0OWNjYjJlMjRiMDhmZGQ5MWVjZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTSvXDFEB8FN0LrTS4M1MIQ4BuiV rMFJTVYqeTd0MvTwyd3MfJjP0hC7pOYkvCOMZbiOh0IBzVK69R3SLTXAANqXMIA+ /bmFAbCx0/tlPO9Ey8l8RDx8j/s3HSoZzQzM6TEAiG9y+0VLEe/WHYQtSqgjlTQB kj/6IaoW2WGODHVb0IqioeUCq2ciX/qnzLO6CJFO6r7ARCDCQD6KShvEHFaFNR4Y ASsO3KSKEYfQrZ1LLFXXuyAxvOYo27BCQn3TvIb0lRHGlVPz3ddBsui73GQ2zUCP pZeMvK89Mh+JankLU3J/e6jPxjSvhkC5GWelmVpwhHC9fya3gDr6GzcbEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHcLz//C9OuZUnMsuJLCP3ZHs4TMB8GA1UdIwQY MBaAFBmYHei3cgOUWURIt6DmJcM6ONxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQt YWMyYWU0ODM5NTVlLzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQtYWMyYWU0ODM5NTVl LzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQNlZa5W 2TbjiF4zxpW0ON5odgIs7XjA487IqqU+k2SyzUdrQrKwZr7AHZzC+XscsH105TMA YrH9iPhF9Nef+ZKExvr1hVZJumIqh/N6gTu6EvTdDbpIcyF86SxQDj7/GFYw/TRb ed/KzGFbHpAKT+hucVOKXUHLT0i3w0XCQLumrZ4Vb4eCPVfwg2aQ+F+aqmwuEAgP wE2mprqrKDLNB5hR5cIgctq7ySP0EPsa4cwkStq0UIiztaz8941pZojT4z+hZoMc RqStVE/kh8W/QUeoTm2jDWXZ8F7o+8oHd4cCC4tE+oeILC92a0tM/Hh+fIuKMQJr JpCV5t5zWybAOA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:28:37 2025 by rpki-client