This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft File: GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json) Hash identifier: DCjrpjHLeoUEl3nxYAjxq+1xZ8Fjh7W2MBR4TH3sKYQ= Subject key identifier: D5:57:E7:81:42:04:34:63:D8:C9:97:DC:5E:4D:7F:CB:74:64:30:4A Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F Certificate issuer: /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f Certificate serial: 019B3C7DE2A089F0B219E263FE8B2A40EC0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft Manifest number: 06CE Signing time: Sat 20 Dec 2025 16:00:41 +0000 Manifest this update: Sat 20 Dec 2025 16:00:41 +0000 Manifest next update: Sun 21 Dec 2025 16:00:41 +0000 Files and hashes: 1: CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa (hash: 1WlZWQglW9seeMd9Cyv5zgkOiHhAGTdr0i/f1OUkJDs=) 2: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: iHCkNgnnun2SMYBV5kKmn5YG+dhkRO/VxmudOXy/UI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:e2:a0:89:f0:b2:19:e2:63:fe:8b:2a:40:ec:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f Validity Not Before: Dec 20 16:00:41 2025 GMT Not After : Dec 21 16:00:41 2025 GMT Subject: CN=d557e78142043463d8c997dc5e4d7fcb7464304a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f5:eb:4a:26:e2:fc:96:c0:55:8c:66:ed:a2: b4:fd:fe:4b:fa:f6:00:0f:db:59:05:4f:ac:ca:2e: 36:4a:aa:77:6b:32:49:fa:9d:6c:3c:40:ea:53:d3: 15:51:bf:6f:62:aa:69:ba:89:f7:f9:8f:84:f0:94: ec:e0:9e:99:eb:e5:b8:8a:3d:85:62:fa:68:b8:65: b9:42:82:ec:69:cf:d9:a2:2e:88:2c:76:90:18:c9: d8:1d:46:93:dc:58:6c:86:66:4f:83:2c:ec:e6:49: 08:7c:e6:cb:e0:0e:0c:85:c6:4a:4e:55:3a:67:4e: 7a:5b:2c:cd:12:17:87:f0:72:ca:50:57:13:63:ed: 17:47:73:ef:18:c9:32:d3:b5:0e:98:3b:ae:a2:ef: 6a:85:e5:1a:51:9c:78:d6:57:be:74:8f:72:87:73: 41:44:4a:d6:10:80:53:cc:ba:23:ce:49:d6:ad:9c: 07:93:51:35:08:6b:4f:97:29:d2:21:ce:41:19:cb: be:7c:66:37:65:6a:cd:17:f5:b4:4d:5a:82:5d:3c: 34:f3:7b:7b:82:a8:5d:9a:18:5a:1a:8f:09:9d:59: 16:8b:c2:07:0c:e9:a2:5a:92:c2:65:38:12:e3:b3: cc:0b:16:45:1f:2d:a3:49:ac:1e:ff:72:5c:c6:1b: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:57:E7:81:42:04:34:63:D8:C9:97:DC:5E:4D:7F:CB:74:64:30:4A X509v3 Authority Key Identifier: keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6a:cc:57:90:17:c2:55:32:9a:fe:6e:01:2b:85:94:18:55: 66:91:b5:b1:9e:95:2e:dc:ec:d5:6e:68:96:44:38:15:ef:ab: 73:bc:e4:53:a7:98:ed:3e:e9:f7:30:3f:d5:24:64:ff:62:b7: 55:64:f6:56:e0:23:a6:14:69:25:24:1d:9f:18:c6:e6:66:b1: d7:45:6a:3b:91:0e:06:70:cf:50:6d:48:4a:a2:49:79:c9:04: d3:91:51:1f:34:20:c7:ed:0f:8b:fa:f4:56:e7:e5:f5:ef:79: a8:51:49:86:98:66:86:aa:1c:b4:ff:e2:4d:cb:65:cb:9f:a4: 43:c6:12:7c:e2:07:a0:b7:4c:7e:ee:3e:86:87:1e:1d:37:ed: b4:b7:a8:a4:d4:9c:36:61:86:7e:61:5a:16:d8:c6:ac:01:c8: d6:59:63:b3:47:a3:63:8a:31:26:d8:ca:36:60:a2:e7:9e:50: 9e:f6:a2:e4:ca:e7:fc:a7:f5:82:3c:b8:9a:0f:60:86:f6:c3: 40:a6:31:7a:60:f5:1f:1d:60:6e:21:1b:86:04:e0:b1:0b:68: 84:a7:ae:85:94:96:08:ea:85:23:7e:99:c1:87:9e:6a:53:e7: 3c:f7:bf:34:29:5a:5e:26:61:27:43:53:e2:db:bb:a3:47:73: e1:b9:c5:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8feKgifCyGeJj/osqQOwKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzU5OGViYjVkMWQwOGViMGRhNDM4ZDA1MmNlYmFhNGZk Yzc2OGYwHhcNMjUxMjIwMTYwMDQxWhcNMjUxMjIxMTYwMDQxWjAzMTEwLwYDVQQD EyhkNTU3ZTc4MTQyMDQzNDYzZDhjOTk3ZGM1ZTRkN2ZjYjc0NjQzMDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/XrSibi/JbAVYxm7aK0/f5L+vYA D9tZBU+syi42Sqp3azJJ+p1sPEDqU9MVUb9vYqppuon3+Y+E8JTs4J6Z6+W4ij2F YvpouGW5QoLsac/Zoi6ILHaQGMnYHUaT3FhshmZPgyzs5kkIfObL4A4MhcZKTlU6 Z056WyzNEheH8HLKUFcTY+0XR3PvGMky07UOmDuuou9qheUaUZx41le+dI9yh3NB RErWEIBTzLojzknWrZwHk1E1CGtPlynSIc5BGcu+fGY3ZWrNF/W0TVqCXTw083t7 gqhdmhhaGo8JnVkWi8IHDOmiWpLCZTgS47PMCxZFHy2jSawe/3JcxhteEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVX54FCBDRj2MmX3F5Nf8t0ZDBKMB8GA1UdIwQY MBaAFBs1mOu10dCOsNpDjQUs66pP3HaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3pXWTY3WFIwSTZ3MmtPTkJTenJxa19jZG84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wNTYyZjgtMjY3MC00NDBmLTg1MDIt MWJhMGViYWE4YTg2LzEvR3pXWTY3WFIwSTZ3MmtPTkJTenJxa19jZG84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wNTYyZjgtMjY3MC00NDBmLTg1MDItMWJhMGViYWE4YTg2 LzEvR3pXWTY3WFIwSTZ3MmtPTkJTenJxa19jZG84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWrMV5AX wlUymv5uASuFlBhVZpG1sZ6VLtzs1W5olkQ4Fe+rc7zkU6eY7T7p9zA/1SRk/2K3 VWT2VuAjphRpJSQdnxjG5max10VqO5EOBnDPUG1ISqJJeckE05FRHzQgx+0Pi/r0 Vufl9e95qFFJhphmhqoctP/iTctly5+kQ8YSfOIHoLdMfu4+hoceHTfttLeopNSc NmGGfmFaFtjGrAHI1lljs0ejY4oxJtjKNmCi555Qnvai5Mrn/Kf1gjy4mg9ghvbD QKYxemD1Hx1gbiEbhgTgsQtohKeuhZSWCOqFI36ZwYeealPnPPe/NClaXiZhJ0NT 4tu7o0dz4bnFNw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:28 2025 by rpki-client