This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft File: gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json) Hash identifier: uuOnRwfXNgesNlmyu8rapM17KybPuKivb4mnytb0ZB0= Subject key identifier: A2:31:26:DB:3F:63:85:C7:BA:DF:A6:4C:8B:33:B8:8B:BA:52:5A:FD Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74 Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974 Certificate serial: 019B3F48674FCAFD48F1F369F1C398FF9328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft Manifest number: 1102 Signing time: Sun 21 Dec 2025 05:01:08 +0000 Manifest this update: Sun 21 Dec 2025 05:01:08 +0000 Manifest next update: Mon 22 Dec 2025 05:01:08 +0000 Files and hashes: 1: 1-27kWYKAbmGvckcGXREu8_O6E5Q.roa (hash: TMyKOohNPE+V9J//F3lIZGfAGQhVpkDHjFotXauXdgo=) 2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: tywkZhvMPsethM/uOYBX0vYIx/fx8YRCygGLDVYWw0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:67:4f:ca:fd:48:f1:f3:69:f1:c3:98:ff:93:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974 Validity Not Before: Dec 21 05:01:08 2025 GMT Not After : Dec 22 05:01:08 2025 GMT Subject: CN=a23126db3f6385c7badfa64c8b33b88bba525afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:6c:78:54:3c:52:6f:84:8f:e6:fb:12:66: 12:26:14:2b:62:48:7c:3a:36:20:ba:3e:64:f3:c6: 71:e7:c2:e6:60:e8:8f:9b:3c:4d:26:5b:e1:98:7d: 44:f3:a5:a7:96:58:c4:a2:1f:05:d6:0a:65:9f:c8: 8d:a7:f3:f6:ae:02:f8:7c:c0:bb:33:c3:d4:ab:72: d3:ec:a1:a8:96:22:3f:ab:53:88:43:b3:96:13:72: 51:ed:1c:d3:d9:4f:74:99:b8:6e:d9:33:a4:34:5d: 40:49:49:67:8b:9e:ee:d1:ff:ed:46:b2:da:f0:92: b0:9f:6b:10:7c:b2:d3:60:81:8b:9b:d9:b0:bc:78: ad:2c:7c:a0:78:0d:0b:d9:61:cc:43:f5:97:ac:65: ea:fe:44:2b:78:38:c3:c5:cb:5e:e8:b5:3e:55:5d: 2c:31:b1:3f:0d:97:42:7d:d5:4e:04:9c:18:74:5e: 74:10:78:bf:cf:c5:fb:53:01:b1:b8:1b:e2:88:8c: 2e:95:57:79:88:4a:eb:6b:71:5d:78:d4:d2:14:c4: b1:46:de:5c:e6:d9:4b:17:cf:94:44:7a:f9:ae:3a: 05:ba:dc:5a:2f:27:18:cb:ed:05:da:59:22:a6:de: a4:7f:00:13:76:18:53:a9:42:b6:50:2e:d5:ee:39: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:31:26:DB:3F:63:85:C7:BA:DF:A6:4C:8B:33:B8:8B:BA:52:5A:FD X509v3 Authority Key Identifier: keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:46:6b:17:54:d8:17:3d:b2:95:fc:7c:4b:6a:5a:cf:30:81: 05:18:16:5d:c1:01:97:0b:e1:d5:87:90:98:71:aa:37:25:96: 0a:56:f3:63:7c:86:54:a8:36:69:fd:ea:c7:99:b8:f9:07:27: 14:7f:24:80:25:c9:1b:9e:4f:60:45:00:51:d4:ae:d1:80:11: 75:57:db:20:28:15:12:b5:e7:3c:31:c7:6f:4d:3a:49:d6:e5: 08:9a:2c:cb:dd:97:6e:be:fb:12:cf:78:c1:6f:8b:45:04:99: 00:69:09:31:40:59:04:51:aa:dd:00:1b:7d:e6:6d:c6:9f:38: ee:15:eb:e8:ae:02:ba:40:a3:b6:ca:f3:ad:3c:75:dd:67:fc: 68:8f:ba:59:eb:9a:38:87:66:cd:d6:22:7e:4c:61:bb:c2:31: 99:3a:7e:1d:13:c2:c4:25:b5:af:44:dd:ee:ec:9d:3c:56:6c: b0:71:76:26:d6:2f:d0:da:00:07:82:e7:ad:b6:fb:1e:10:64: a8:65:f1:f4:bb:63:4e:ba:c3:e8:44:76:21:39:d5:2f:b6:64: 04:c9:0c:f0:51:af:71:aa:00:d3:01:19:71:09:bf:11:94:03: 2f:d1:fc:a1:bc:f1:66:29:2b:b5:3a:ea:8c:ef:6e:c2:ab:d0: 35:19:a3:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SGdPyv1I8fNp8cOY/5MoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2EwYjU1OTQzMzlhZWZlOGI1NThlMzcyOTI5MGI0MmJi MWE5NzQwHhcNMjUxMjIxMDUwMTA4WhcNMjUxMjIyMDUwMTA4WjAzMTEwLwYDVQQD EyhhMjMxMjZkYjNmNjM4NWM3YmFkZmE2NGM4YjMzYjg4YmJhNTI1YWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1BseFQ8Um+Ej+b7EmYSJhQrYkh8 OjYguj5k88Zx58LmYOiPmzxNJlvhmH1E86WnlljEoh8F1gpln8iNp/P2rgL4fMC7 M8PUq3LT7KGoliI/q1OIQ7OWE3JR7RzT2U90mbhu2TOkNF1ASUlni57u0f/tRrLa 8JKwn2sQfLLTYIGLm9mwvHitLHygeA0L2WHMQ/WXrGXq/kQreDjDxcte6LU+VV0s MbE/DZdCfdVOBJwYdF50EHi/z8X7UwGxuBviiIwulVd5iErra3FdeNTSFMSxRt5c 5tlLF8+URHr5rjoFutxaLycYy+0F2lkipt6kfwATdhhTqUK2UC7V7jlbAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIxJts/Y4XHut+mTIszuIu6Ulr9MB8GA1UdIwQY MBaAFIM6C1WUM5rv6LVY43KSkLQrsal0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83NjYwNmUtNzI0My00YjBiLTgyYTMt M2QwNmQyNDJmOTkyLzEvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83NjYwNmUtNzI0My00YjBiLTgyYTMtM2QwNmQyNDJmOTky LzEvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkZrF1TY Fz2ylfx8S2pazzCBBRgWXcEBlwvh1YeQmHGqNyWWClbzY3yGVKg2af3qx5m4+Qcn FH8kgCXJG55PYEUAUdSu0YARdVfbICgVErXnPDHHb006SdblCJosy92Xbr77Es94 wW+LRQSZAGkJMUBZBFGq3QAbfeZtxp847hXr6K4CukCjtsrzrTx13Wf8aI+6Weua OIdmzdYifkxhu8IxmTp+HRPCxCW1r0Td7uydPFZssHF2JtYv0NoAB4Lnrbb7HhBk qGXx9LtjTrrD6ER2ITnVL7ZkBMkM8FGvcaoA0wEZcQm/EZQDL9H8obzxZikrtTrq jO9uwqvQNRmjGA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:07:24 2025 by rpki-client