This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json) Hash identifier: NM/ufNqCLUa5PeSfdOi6fin5R+5D2U2bU+98WdkQRgc= Subject key identifier: 70:4F:97:C4:D8:A8:19:B0:DC:5B:85:3E:D7:8E:37:AB:CA:79:ED:F4 Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b Certificate serial: 019B2E8B2E50729F24900683C98F8D110420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft Manifest number: 0CD9 Signing time: Wed 17 Dec 2025 23:00:31 +0000 Manifest this update: Wed 17 Dec 2025 23:00:31 +0000 Manifest next update: Thu 18 Dec 2025 23:00:31 +0000 Files and hashes: 1: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: hZg31eP10WXTOBTeWUyNNbWYI1Pi9vdTAlyvebgAPRk=) 2: hZr6mNjSHqTgv3UgV0r5NKysYhc.roa (hash: AR+e3H/5yBz4nRQW+W404T/nXrb1KqyGNQGS5zNA/os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:2e:50:72:9f:24:90:06:83:c9:8f:8d:11:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b Validity Not Before: Dec 17 23:00:31 2025 GMT Not After : Dec 18 23:00:31 2025 GMT Subject: CN=704f97c4d8a819b0dc5b853ed78e37abca79edf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:00:15:1f:63:79:23:3a:59:42:5b:83:a9: 10:bc:7a:c0:2d:40:dc:32:1d:08:6d:70:2a:da:a3: e8:1b:89:52:94:b7:fc:f8:3b:2f:e5:8c:87:84:78: 16:cd:7d:0c:7e:64:8e:fc:dc:c9:9d:8d:af:48:89: f2:cf:f0:c3:f3:87:a1:d8:db:a5:a4:1b:d5:77:57: 98:ff:fb:14:9b:75:c7:7a:57:8d:bd:d2:de:f1:c6: a8:83:6b:73:23:60:36:71:a1:1f:3d:40:2d:9d:e6: a8:e9:d2:3e:d5:79:3f:38:1b:9c:b3:52:c2:39:50: a4:6e:cd:81:d5:f2:60:eb:66:c6:d2:b5:a1:60:e0: 2f:8b:08:a0:25:32:94:01:70:a4:18:0c:1f:89:1d: 9f:43:8d:e4:b4:ad:b0:c0:77:2b:51:36:31:86:b3: 4e:e5:08:9d:37:e6:de:cd:ec:4a:4c:4e:1a:5b:82: 04:fa:b7:1d:76:21:9a:06:a3:64:4c:5a:7e:6a:3a: ca:cc:33:cf:23:a2:71:d4:fe:c0:f0:dc:5b:58:df: e8:4b:c5:64:76:bd:a9:e8:a6:a8:9a:a6:77:59:d8: 9e:47:62:3c:3e:76:a3:52:eb:31:c3:7d:d0:b5:8b: 06:fc:06:22:fe:ac:b7:89:2b:b6:0a:24:c0:e8:c7: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4F:97:C4:D8:A8:19:B0:DC:5B:85:3E:D7:8E:37:AB:CA:79:ED:F4 X509v3 Authority Key Identifier: keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:43:95:2a:14:d6:7e:e2:50:0a:86:67:08:17:5b:70:3f:65: 67:3c:85:8c:88:39:ba:e4:b4:03:07:5b:5a:f5:0d:48:cc:fd: e8:b6:51:97:72:a1:c3:fe:47:6c:db:06:e4:5d:51:62:c0:a4: 75:84:3e:e1:23:6e:c0:8d:fb:ec:ad:fd:4d:9b:53:bd:d8:18: 31:c5:17:fc:b9:2e:e2:99:78:31:01:4e:fd:41:66:59:b6:45: 22:b3:e5:41:fc:0a:03:29:01:cd:9e:4d:1a:27:45:be:37:54: 4c:f9:dd:26:f4:32:4f:18:e9:37:35:15:73:47:e5:ba:f5:82: 9a:76:13:23:6f:fe:50:0f:98:da:0a:65:53:12:ca:0c:7f:fe: cd:31:01:15:86:3d:19:ff:93:21:69:6c:64:d8:03:43:52:0a: 5a:76:20:da:78:03:d7:d2:1b:c7:6d:2c:74:f0:a0:8c:b8:9a: 0e:cd:a2:44:b1:df:f7:d6:a2:44:83:78:42:be:cd:ce:ec:c8: c2:85:fb:24:6a:a8:d7:da:64:61:af:5d:0c:ff:2a:35:b9:0d: 6e:ca:86:3e:1f:f7:ab:e7:2f:46:e0:f6:8c:5b:8b:d9:ec:a9: 8e:e9:3b:dd:ac:44:2a:97:9a:f0:b7:39:b7:d0:5e:78:6e:11: ac:46:52:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuiy5Qcp8kkAaDyY+NEQQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNmNjOTkzOGMzMmUwNGRjNTQ0M2RkNmMwNWEwMjdhNTYx N2Q5N2IwHhcNMjUxMjE3MjMwMDMxWhcNMjUxMjE4MjMwMDMxWjAzMTEwLwYDVQQD Eyg3MDRmOTdjNGQ4YTgxOWIwZGM1Yjg1M2VkNzhlMzdhYmNhNzllZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGUAFR9jeSM6WUJbg6kQvHrALUDc Mh0IbXAq2qPoG4lSlLf8+Dsv5YyHhHgWzX0MfmSO/NzJnY2vSInyz/DD84eh2Nul pBvVd1eY//sUm3XHeleNvdLe8caog2tzI2A2caEfPUAtneao6dI+1Xk/OBucs1LC OVCkbs2B1fJg62bG0rWhYOAviwigJTKUAXCkGAwfiR2fQ43ktK2wwHcrUTYxhrNO 5QidN+bezexKTE4aW4IE+rcddiGaBqNkTFp+ajrKzDPPI6Jx1P7A8NxbWN/oS8Vk dr2p6KaomqZ3WdieR2I8PnajUusxw33QtYsG/AYi/qy3iSu2CiTA6MfT/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBPl8TYqBmw3FuFPteON6vKee30MB8GA1UdIwQY MBaAFIJsyZOMMuBNxUQ91sBaAnpWF9l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYt YWY3ZDZhODk3NTJhLzEvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYtYWY3ZDZhODk3NTJh LzEvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxUOVKhTW fuJQCoZnCBdbcD9lZzyFjIg5uuS0AwdbWvUNSMz96LZRl3Khw/5HbNsG5F1RYsCk dYQ+4SNuwI377K39TZtTvdgYMcUX/Lku4pl4MQFO/UFmWbZFIrPlQfwKAykBzZ5N GidFvjdUTPndJvQyTxjpNzUVc0fluvWCmnYTI2/+UA+Y2gplUxLKDH/+zTEBFYY9 Gf+TIWlsZNgDQ1IKWnYg2ngD19Ibx20sdPCgjLiaDs2iRLHf99aiRIN4Qr7NzuzI woX7JGqo19pkYa9dDP8qNbkNbsqGPh/3q+cvRuD2jFuL2eypjuk73axEKpea8Lc5 t9BeeG4RrEZSPA== -----END CERTIFICATE-----Generated at Thu Dec 18 02:54:59 2025 by rpki-client