This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json) Hash identifier: Y6eQrswLKG3lZbgZzfumsOto548KyUSceQHfJCcHbRE= Subject key identifier: C7:29:F6:03:5C:D1:D9:98:D4:1F:8B:BE:E7:2C:1A:BC:CD:8A:5D:63 Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b Certificate serial: 019B3C10051C497C92B0EE1365FAA3F15C75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft Manifest number: 0CE0 Signing time: Sat 20 Dec 2025 14:00:41 +0000 Manifest this update: Sat 20 Dec 2025 14:00:41 +0000 Manifest next update: Sun 21 Dec 2025 14:00:41 +0000 Files and hashes: 1: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: T89gBZHgfHFOZrx5GxzrgHv0tqKKO2rzpSgFQ4ZfbEQ=) 2: hZr6mNjSHqTgv3UgV0r5NKysYhc.roa (hash: AR+e3H/5yBz4nRQW+W404T/nXrb1KqyGNQGS5zNA/os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:05:1c:49:7c:92:b0:ee:13:65:fa:a3:f1:5c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b Validity Not Before: Dec 20 14:00:41 2025 GMT Not After : Dec 21 14:00:41 2025 GMT Subject: CN=c729f6035cd1d998d41f8bbee72c1abccd8a5d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:2e:fc:65:35:6a:5f:b7:16:01:a9:02:ad: 6d:bb:24:85:1f:f2:3c:0b:3a:a9:21:b8:64:57:a5: 37:af:b4:16:f5:de:43:c1:dc:03:3a:73:b1:aa:e0: 7a:0b:74:24:8f:10:82:f8:fd:07:0e:4a:23:10:8c: aa:d7:ac:93:68:a6:ad:25:b7:24:1e:90:0c:3c:03: 3c:01:03:fc:02:8b:6f:33:e3:77:ee:08:85:90:0f: 69:fb:1f:38:43:c9:61:b9:34:69:61:d2:1b:d0:10: 03:77:6d:fa:87:b2:55:c4:37:31:88:69:e3:6a:9c: 81:cb:07:46:3f:38:b9:9d:77:ec:89:b3:39:95:d1: 2d:f0:18:77:93:7a:9d:26:94:8c:66:e0:e0:45:ee: eb:c6:b7:2d:23:2d:49:2b:d4:2f:bd:31:03:f5:5c: 34:ff:dd:a7:c0:4c:e9:72:43:e1:b4:95:92:b4:f0: 91:91:da:14:17:7e:93:db:7d:13:dd:ef:b2:68:2a: 12:94:e6:4b:3f:2a:69:f6:48:74:91:97:2d:1f:7a: da:01:e8:b9:60:87:a7:66:69:33:ee:80:15:93:77: ce:83:2c:e0:4e:26:02:72:aa:15:23:c8:ba:1e:b2: b0:75:a6:fc:7b:2f:18:1c:1e:a1:c9:6a:c4:22:8b: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:29:F6:03:5C:D1:D9:98:D4:1F:8B:BE:E7:2C:1A:BC:CD:8A:5D:63 X509v3 Authority Key Identifier: keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ad:5c:c7:4a:01:a5:26:e5:7b:ad:36:39:24:dc:4a:f8:b2: fc:20:4c:1d:50:53:87:3c:97:03:8a:05:ac:20:02:18:f2:cf: 3e:ff:f0:1f:c5:01:9b:da:7a:59:72:90:3c:e7:82:40:9d:27: 55:07:f0:6b:c0:fe:e7:0f:78:96:f6:5f:80:d1:c2:f0:c1:7f: e0:c8:03:ec:bf:6c:d9:83:75:7c:8a:af:7d:f2:cf:13:65:b1: 1b:bb:f7:4e:51:6a:ba:24:fe:02:57:f5:98:4d:80:e9:f8:3e: ab:aa:1e:71:3b:18:68:9c:ca:7d:04:4c:5c:bf:a8:33:7c:68: 22:be:3c:d5:f0:51:97:39:92:97:4a:6e:86:1f:c1:af:4e:a0: de:c4:a9:d8:6d:9d:0f:c6:0e:cb:14:1d:a1:4d:82:d0:15:02: d6:ec:85:0e:c9:4b:17:38:fd:89:3b:de:0c:c0:ef:92:fb:7f: 12:96:e5:26:93:84:3b:58:a3:d1:2d:14:c3:68:d2:b9:ec:32: f0:28:1f:60:d9:ae:5a:42:22:e9:64:5a:55:2a:fd:db:bb:ff: 93:80:d7:2b:0c:8a:69:46:7c:37:45:93:3b:6e:8c:03:7e:68: 66:f9:7c:f5:88:28:ec:58:12:73:64:81:80:4a:10:58:8c:40: 55:cd:d9:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EAUcSXySsO4TZfqj8Vx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNmNjOTkzOGMzMmUwNGRjNTQ0M2RkNmMwNWEwMjdhNTYx N2Q5N2IwHhcNMjUxMjIwMTQwMDQxWhcNMjUxMjIxMTQwMDQxWjAzMTEwLwYDVQQD EyhjNzI5ZjYwMzVjZDFkOTk4ZDQxZjhiYmVlNzJjMWFiY2NkOGE1ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUgu/GU1al+3FgGpAq1tuySFH/I8 CzqpIbhkV6U3r7QW9d5DwdwDOnOxquB6C3QkjxCC+P0HDkojEIyq16yTaKatJbck HpAMPAM8AQP8AotvM+N37giFkA9p+x84Q8lhuTRpYdIb0BADd236h7JVxDcxiGnj apyBywdGPzi5nXfsibM5ldEt8Bh3k3qdJpSMZuDgRe7rxrctIy1JK9QvvTED9Vw0 /92nwEzpckPhtJWStPCRkdoUF36T230T3e+yaCoSlOZLPypp9kh0kZctH3raAei5 YIenZmkz7oAVk3fOgyzgTiYCcqoVI8i6HrKwdab8ey8YHB6hyWrEIosbLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcp9gNc0dmY1B+LvucsGrzNil1jMB8GA1UdIwQY MBaAFIJsyZOMMuBNxUQ91sBaAnpWF9l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYt YWY3ZDZhODk3NTJhLzEvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYtYWY3ZDZhODk3NTJh LzEvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABK1cx0oB pSble602OSTcSviy/CBMHVBThzyXA4oFrCACGPLPPv/wH8UBm9p6WXKQPOeCQJ0n VQfwa8D+5w94lvZfgNHC8MF/4MgD7L9s2YN1fIqvffLPE2WxG7v3TlFquiT+Alf1 mE2A6fg+q6oecTsYaJzKfQRMXL+oM3xoIr481fBRlzmSl0puhh/Br06g3sSp2G2d D8YOyxQdoU2C0BUC1uyFDslLFzj9iTveDMDvkvt/EpblJpOEO1ij0S0Uw2jSuewy 8CgfYNmuWkIi6WRaVSr927v/k4DXKwyKaUZ8N0WTO26MA35oZvl89Ygo7FgSc2SB gEoQWIxAVc3ZkA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:07:30 2025 by rpki-client