This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json) Hash identifier: 6vDZZKBCbR7Ob1e78b11tUg47cbwzG5uH82b070O/3w= Subject key identifier: 3D:66:C7:D9:8F:FB:B4:4A:78:DF:81:06:3B:39:53:FB:CD:A0:BC:96 Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66 Certificate serial: 019B42EE36D11B0A0B5166CA1AB4165E7A21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft Manifest number: 032B Signing time: Sun 21 Dec 2025 22:01:06 +0000 Manifest this update: Sun 21 Dec 2025 22:01:06 +0000 Manifest next update: Mon 22 Dec 2025 22:01:06 +0000 Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: 7AJUAeusdqNIVRLqAxPHS15BAAnNSNva1yxsyCpltQM=) 2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:36:d1:1b:0a:0b:51:66:ca:1a:b4:16:5e:7a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66 Validity Not Before: Dec 21 22:01:06 2025 GMT Not After : Dec 22 22:01:06 2025 GMT Subject: CN=3d66c7d98ffbb44a78df81063b3953fbcda0bc96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:ff:98:ec:ce:4b:e2:54:7b:a3:a8:64:c1: 5a:f0:8c:d1:15:39:99:8f:80:7e:16:d5:b7:8a:74: e9:18:01:58:70:d1:c3:77:cd:f7:3c:3f:2a:05:d8: 76:7c:9f:2a:c0:4c:5b:4a:0f:9b:ed:a8:c9:87:a9: 94:ea:fd:92:55:75:a9:b4:de:61:f2:c9:78:1b:ce: cb:f4:d3:a5:a8:d9:7d:d6:fe:bf:aa:47:a8:42:41: 8d:5b:eb:e0:c0:4c:e4:45:85:88:04:37:cd:96:32: ed:81:8c:9a:e9:ae:cb:42:df:a6:b0:7e:7a:73:e4: 07:86:80:1c:7e:6e:b1:22:ae:ce:b4:33:2f:bd:fb: 21:d4:9d:40:80:fd:e5:54:d0:0f:37:38:fa:6a:7b: c6:2c:43:4e:d4:ff:a3:3e:5c:d9:b9:12:77:8f:6a: 7d:0e:69:33:60:00:46:ee:b1:26:0f:63:f9:6a:aa: 18:bd:25:51:2d:b5:2d:19:31:1e:0b:a0:c1:18:f3: 12:80:d5:48:22:85:04:a0:11:09:b9:95:a4:a5:ea: ff:c6:33:d8:11:e7:be:3f:3e:29:34:55:ec:2d:75: 10:e8:3f:e2:7f:bc:47:ee:7c:39:c0:93:f6:6d:e1: 08:cf:19:5c:71:e8:ec:b3:e1:b9:0a:df:5b:75:4d: c6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:66:C7:D9:8F:FB:B4:4A:78:DF:81:06:3B:39:53:FB:CD:A0:BC:96 X509v3 Authority Key Identifier: keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b6:63:55:8a:ec:d1:a8:f8:59:56:06:f0:ea:ec:ce:a9:30: 7d:16:45:6c:02:70:62:72:bc:93:d4:84:09:a9:34:55:9c:85: 40:5a:39:da:15:0c:c7:ed:73:b8:0e:9a:a4:2e:01:a5:24:d0: 76:34:b8:e6:24:06:d9:e1:db:7d:96:d0:86:76:36:55:ad:e1: 1a:7f:ff:cc:85:4c:92:bb:0e:51:39:28:d0:57:50:5d:8e:98: 21:63:fc:f6:05:33:2a:a6:67:40:79:22:d2:ec:41:34:b1:1e: 62:6e:48:38:e1:b8:2a:7b:2f:f1:fa:db:7a:76:17:30:01:cd: b3:2d:32:f2:2f:20:8e:9c:5b:83:7f:6f:e1:4e:a2:a5:0c:dc: e7:29:ce:31:e2:c5:10:78:d8:5f:16:28:11:72:28:ff:36:7a: ce:8f:64:af:c3:92:24:f7:33:ea:32:70:bd:a1:82:72:7d:a1: 9b:2d:5e:f3:2d:94:9e:91:ad:80:eb:f9:a4:0b:9f:3f:fa:5c: 5f:7c:56:55:7a:1b:55:02:86:10:02:a7:51:40:ed:4b:56:6d: 7f:0b:4f:de:10:23:66:0a:41:c0:7b:11:59:22:7f:cc:f1:eb: e4:86:b2:9f:fe:b9:92:40:85:8a:e8:f5:e9:28:1d:9a:57:fe: bd:85:a5:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7jbRGwoLUWbKGrQWXnohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTgxZGU4Yjc3MjAzOTQ1OTQ0NDhiN2EwZTYyNWMzM2Ez OGRjNjYwHhcNMjUxMjIxMjIwMTA2WhcNMjUxMjIyMjIwMTA2WjAzMTEwLwYDVQQD EygzZDY2YzdkOThmZmJiNDRhNzhkZjgxMDYzYjM5NTNmYmNkYTBiYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsar/mOzOS+JUe6OoZMFa8IzRFTmZ j4B+FtW3inTpGAFYcNHDd833PD8qBdh2fJ8qwExbSg+b7ajJh6mU6v2SVXWptN5h 8sl4G87L9NOlqNl91v6/qkeoQkGNW+vgwEzkRYWIBDfNljLtgYya6a7LQt+msH56 c+QHhoAcfm6xIq7OtDMvvfsh1J1AgP3lVNAPNzj6anvGLENO1P+jPlzZuRJ3j2p9 DmkzYABG7rEmD2P5aqoYvSVRLbUtGTEeC6DBGPMSgNVIIoUEoBEJuZWkper/xjPY Eee+Pz4pNFXsLXUQ6D/if7xH7nw5wJP2beEIzxlccejss+G5Ct9bdU3GywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1mx9mP+7RKeN+BBjs5U/vNoLyWMB8GA1UdIwQY MBaAFBmYHei3cgOUWURIt6DmJcM6ONxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQt YWMyYWU0ODM5NTVlLzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQtYWMyYWU0ODM5NTVl LzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLZjVYrs 0aj4WVYG8OrszqkwfRZFbAJwYnK8k9SECak0VZyFQFo52hUMx+1zuA6apC4BpSTQ djS45iQG2eHbfZbQhnY2Va3hGn//zIVMkrsOUTko0FdQXY6YIWP89gUzKqZnQHki 0uxBNLEeYm5IOOG4Knsv8frbenYXMAHNsy0y8i8gjpxbg39v4U6ipQzc5ynOMeLF EHjYXxYoEXIo/zZ6zo9kr8OSJPcz6jJwvaGCcn2hmy1e8y2UnpGtgOv5pAufP/pc X3xWVXobVQKGEAKnUUDtS1ZtfwtP3hAjZgpBwHsRWSJ/zPHr5Iayn/65kkCFiuj1 6Sgdmlf+vYWlxw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:07:49 2025 by rpki-client