This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft File: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft (raw, json) Hash identifier: /LuRTtG1oaSxvd/HQ+zxiNVMDnVqrNOTgC9R1c07XWk= Subject key identifier: 27:E1:0C:D7:02:A6:BC:C7:41:EA:7F:1A:25:A8:51:E7:52:04:72:82 Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38 Certificate issuer: /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38 Certificate serial: 019B33B24914EA2505ED46B107E36967E093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft Manifest number: 03A6 Signing time: Thu 18 Dec 2025 23:01:20 +0000 Manifest this update: Thu 18 Dec 2025 23:01:20 +0000 Manifest next update: Fri 19 Dec 2025 23:01:20 +0000 Files and hashes: 1: 7h1Vbhmm5gf8J-_5IjJpoeOBap8.roa (hash: BzRVE6RrY3y0kWVGZkbu1XvrtIC4s5eG6qRWe7XRbfY=) 2: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl (hash: OQUql+ZYb1xIPWirUnZh9k47wtDdQYkDWJJETDKV1nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:49:14:ea:25:05:ed:46:b1:07:e3:69:67:e0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38 Validity Not Before: Dec 18 23:01:20 2025 GMT Not After : Dec 19 23:01:20 2025 GMT Subject: CN=27e10cd702a6bcc741ea7f1a25a851e752047282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:69:29:03:2c:43:52:3c:3d:dc:50:64:1e:01: 97:dc:10:d7:9e:fe:62:23:47:bf:b2:92:de:bb:7d: 99:ad:ab:1c:46:dc:3d:67:97:3e:2d:c0:1c:45:e1: d3:de:85:d0:f0:b9:aa:4e:91:36:7d:c7:1b:0a:a9: 14:10:48:c2:f1:b7:1a:bf:c6:ee:86:58:51:d1:a7: f3:d8:ed:88:9a:f9:d5:b8:82:16:33:a8:ad:c2:4b: d0:78:ca:4d:89:46:37:69:99:8e:f7:84:d2:5f:1a: ea:a7:8e:94:7e:22:31:e1:58:5c:7f:38:55:86:a3: cf:16:77:d2:1e:d6:45:90:d6:33:be:d1:3b:d8:9b: c1:00:86:4a:48:a3:32:7d:a5:f8:4f:65:d5:f7:4d: 08:ee:f7:ea:04:8c:6d:a8:d6:26:5a:ff:40:d0:2f: 78:f1:9d:2f:84:b9:92:c5:b9:b6:58:84:b0:75:70: 04:a9:15:a8:c6:87:44:3d:c9:70:fa:96:d8:bc:94: 21:2c:05:69:47:4b:bb:8d:a9:9c:b7:e6:73:46:53: 73:35:0b:ea:cb:94:9a:e0:82:6a:40:d3:e7:dd:17: f4:bf:cb:62:43:aa:ea:8a:6f:8c:48:4e:29:f1:47: 0d:64:ca:3b:ae:a3:ea:b3:f0:61:45:4b:83:d1:c8: 14:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E1:0C:D7:02:A6:BC:C7:41:EA:7F:1A:25:A8:51:E7:52:04:72:82 X509v3 Authority Key Identifier: keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d5:5e:80:45:2c:7e:9e:c5:c0:3e:b4:74:8f:15:b1:75:dd: b1:21:93:3e:e7:12:9a:20:28:e0:ca:b8:fe:47:77:42:e5:bf: f1:06:e1:7a:42:48:cf:f1:6b:de:e4:fc:2c:3d:22:dd:da:61: 42:78:35:2b:50:d7:15:51:cd:38:32:fb:8f:ee:e7:c8:14:18: 3a:d6:89:34:d9:f7:85:ef:4b:f1:2e:94:c5:d5:b6:1e:40:5f: a7:d1:21:38:4a:8d:8a:3c:f7:14:af:eb:08:46:e2:8e:fc:c5: bf:35:50:49:0d:6b:e7:57:3e:db:11:bd:ff:8c:7a:6d:c4:c9: 3f:b2:dc:85:3a:5d:66:1b:f5:ce:c8:64:22:76:d7:27:e7:27: ae:f7:34:ab:f0:3d:fe:36:6b:a1:72:a6:8c:f9:52:aa:34:f2: 35:72:b0:af:ed:78:7d:66:37:5c:ab:f4:4c:d7:31:a0:7e:cc: ea:be:60:7d:aa:f5:c1:a4:85:06:6c:0c:6f:8b:22:59:fa:26: 41:82:23:fc:33:c0:86:2a:a8:0f:d2:a2:62:6a:c6:18:ba:c9: 77:8d:6d:05:12:f1:7e:52:72:90:e0:77:b5:f7:98:dd:51:5f: 2d:06:2a:2d:77:54:7f:46:31:52:a9:49:a6:76:29:62:c2:92: 42:05:9d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszskkU6iUF7UaxB+NpZ+CTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZWNmYjY0YmRhNTIxMzcwOGZmNjdiYWQ0YzgzOTUwYjFm ZmRjMzgwHhcNMjUxMjE4MjMwMTIwWhcNMjUxMjE5MjMwMTIwWjAzMTEwLwYDVQQD EygyN2UxMGNkNzAyYTZiY2M3NDFlYTdmMWEyNWE4NTFlNzUyMDQ3MjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2kpAyxDUjw93FBkHgGX3BDXnv5i I0e/spLeu32ZrascRtw9Z5c+LcAcReHT3oXQ8LmqTpE2fccbCqkUEEjC8bcav8bu hlhR0afz2O2ImvnVuIIWM6itwkvQeMpNiUY3aZmO94TSXxrqp46UfiIx4VhcfzhV hqPPFnfSHtZFkNYzvtE72JvBAIZKSKMyfaX4T2XV900I7vfqBIxtqNYmWv9A0C94 8Z0vhLmSxbm2WISwdXAEqRWoxodEPclw+pbYvJQhLAVpR0u7jamct+ZzRlNzNQvq y5Sa4IJqQNPn3Rf0v8tiQ6rqim+MSE4p8UcNZMo7rqPqs/BhRUuD0cgUtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfhDNcCprzHQep/GiWoUedSBHKCMB8GA1UdIwQY MBaAFIPs+2S9pSE3CP9nutTIOVCx/9w4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wMzE0NjMtNThlNi00ZmNiLThjYTEt MWZjZmQwYzhiZGY1LzEvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wMzE0NjMtNThlNi00ZmNiLThjYTEtMWZjZmQwYzhiZGY1 LzEvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdVegEUs fp7FwD60dI8VsXXdsSGTPucSmiAo4Mq4/kd3QuW/8QbhekJIz/Fr3uT8LD0i3dph Qng1K1DXFVHNODL7j+7nyBQYOtaJNNn3he9L8S6UxdW2HkBfp9EhOEqNijz3FK/r CEbijvzFvzVQSQ1r51c+2xG9/4x6bcTJP7LchTpdZhv1zshkInbXJ+cnrvc0q/A9 /jZroXKmjPlSqjTyNXKwr+14fWY3XKv0TNcxoH7M6r5gfar1waSFBmwMb4siWfom QYIj/DPAhiqoD9KiYmrGGLrJd41tBRLxflJykOB3tfeY3VFfLQYqLXdUf0YxUqlJ pnYpYsKSQgWdMg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:21:04 2025 by rpki-client