This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft File: gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json) Hash identifier: 4RcsUqZCc5poqRsHmWfDD2p31BtwJ0OR7ywIJbFh8w4= Subject key identifier: CF:DE:AA:1E:33:62:F9:C8:1C:1C:1F:9D:38:0A:08:CB:AB:45:A8:50 Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74 Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974 Certificate serial: 019B7835B05EFD0470D5D705AB691DF565DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft Manifest number: 1120 Signing time: Thu 01 Jan 2026 06:19:02 +0000 Manifest this update: Thu 01 Jan 2026 06:19:02 +0000 Manifest next update: Fri 02 Jan 2026 06:19:02 +0000 Files and hashes: 1: OJQiev2wZVG1ocXpX4-0xyIDLu8.roa (hash: P2/t8LDWw8ZhLGGXRvorDGL2cHxIBux66GV2OQKjLoE=) 2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: 9bOuGoFoaZ+iPYaIPhPJLZ6E0tHbNX+rOTutIcAD9iY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:b0:5e:fd:04:70:d5:d7:05:ab:69:1d:f5:65:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974 Validity Not Before: Jan 1 06:19:02 2026 GMT Not After : Jan 2 06:19:02 2026 GMT Subject: CN=cfdeaa1e3362f9c81c1c1f9d380a08cbab45a850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:8b:0d:8d:66:eb:fd:17:94:45:aa:8d:8a: 98:0d:94:80:51:2a:3f:e8:ed:dc:42:43:7f:de:d7: fa:7e:7a:41:88:1c:f6:f3:7a:69:05:4b:a1:65:8b: 57:7a:3a:d0:59:55:04:57:bf:2c:6f:d9:74:02:e0: 58:eb:d9:f0:21:81:ac:9a:cd:47:df:68:9f:75:8f: 39:6c:65:88:d1:0f:53:da:db:6f:43:e7:24:f8:5b: 86:d4:8d:1f:43:5a:3e:6a:53:96:b2:38:af:71:b3: c6:66:d3:ce:b2:fa:9d:b6:c4:db:47:0f:d6:65:57: 69:5b:52:5b:19:0c:b0:2b:38:ff:ec:93:72:24:af: d1:e8:b5:29:40:1b:58:45:f5:1f:3a:2f:a6:4a:f1: fb:96:6f:c1:95:b3:cb:99:79:db:d6:da:ee:7b:09: 2b:6e:45:84:c8:79:97:22:e5:31:f4:89:23:9e:12: 08:d9:33:ff:33:f2:d3:7e:22:2f:7a:f3:02:d1:e4: f7:9e:fb:7b:24:21:d0:b9:41:72:eb:55:20:69:39: 86:ca:3e:56:17:e7:fc:ab:16:3d:85:02:92:21:0c: a1:45:7f:78:6c:34:6f:90:06:aa:db:e5:4b:e6:60: 7f:00:35:30:3e:d7:cf:7a:48:39:e7:28:42:18:3c: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DE:AA:1E:33:62:F9:C8:1C:1C:1F:9D:38:0A:08:CB:AB:45:A8:50 X509v3 Authority Key Identifier: keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:e6:64:3a:77:39:a7:a9:5c:f1:93:50:b7:0d:30:b5:18:d7: 78:a9:30:fc:d3:c5:ac:f6:64:9c:c3:ac:f4:37:1f:da:60:c1: 22:34:0c:cb:ac:a4:47:c2:40:c6:8f:76:5c:9a:4e:88:73:f8: 9c:c4:43:d2:05:ec:f5:93:e7:e9:fc:27:32:a6:cf:42:11:fe: 4a:2e:6e:f3:a4:34:04:69:d2:94:e5:09:12:36:d0:59:01:da: ee:3d:fd:be:5d:12:e0:39:a2:5f:b0:f6:c1:44:25:a0:51:ba: a9:38:12:ee:c5:6e:94:9f:f9:94:65:50:58:e2:bc:c2:c8:e2: 88:65:4d:c2:d7:1a:ad:61:9a:5f:20:0b:55:59:4b:a3:23:c2: 93:b6:6d:c0:5e:88:50:ea:37:36:7e:45:0c:06:e8:b9:66:5e: b0:b7:9e:82:1b:c9:2d:ce:cb:42:52:94:c4:b9:49:f1:7d:be: 53:a8:19:f9:ae:ee:50:df:51:ef:68:f0:d1:ee:16:1d:ec:6b: 99:d6:f3:7e:dd:01:a9:6f:e3:99:63:9d:39:c7:52:b0:4d:f8: de:ad:af:0f:fa:31:ee:02:6a:47:cc:34:d3:df:36:16:fc:94: 3d:d3:f2:46:d5:b5:38:e9:4f:ae:51:a5:14:3d:ee:26:17:76: 42:c8:03:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4NbBe/QRw1dcFq2kd9WXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2EwYjU1OTQzMzlhZWZlOGI1NThlMzcyOTI5MGI0MmJi MWE5NzQwHhcNMjYwMTAxMDYxOTAyWhcNMjYwMTAyMDYxOTAyWjAzMTEwLwYDVQQD EyhjZmRlYWExZTMzNjJmOWM4MWMxYzFmOWQzODBhMDhjYmFiNDVhODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/+LDY1m6/0XlEWqjYqYDZSAUSo/ 6O3cQkN/3tf6fnpBiBz283ppBUuhZYtXejrQWVUEV78sb9l0AuBY69nwIYGsms1H 32ifdY85bGWI0Q9T2ttvQ+ck+FuG1I0fQ1o+alOWsjivcbPGZtPOsvqdtsTbRw/W ZVdpW1JbGQywKzj/7JNyJK/R6LUpQBtYRfUfOi+mSvH7lm/BlbPLmXnb1truewkr bkWEyHmXIuUx9IkjnhII2TP/M/LTfiIvevMC0eT3nvt7JCHQuUFy61UgaTmGyj5W F+f8qxY9hQKSIQyhRX94bDRvkAaq2+VL5mB/ADUwPtfPekg55yhCGDxwRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/eqh4zYvnIHBwfnTgKCMurRahQMB8GA1UdIwQY MBaAFIM6C1WUM5rv6LVY43KSkLQrsal0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83NjYwNmUtNzI0My00YjBiLTgyYTMt M2QwNmQyNDJmOTkyLzEvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83NjYwNmUtNzI0My00YjBiLTgyYTMtM2QwNmQyNDJmOTky LzEvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1OZkOnc5 p6lc8ZNQtw0wtRjXeKkw/NPFrPZknMOs9Dcf2mDBIjQMy6ykR8JAxo92XJpOiHP4 nMRD0gXs9ZPn6fwnMqbPQhH+Si5u86Q0BGnSlOUJEjbQWQHa7j39vl0S4DmiX7D2 wUQloFG6qTgS7sVulJ/5lGVQWOK8wsjiiGVNwtcarWGaXyALVVlLoyPCk7ZtwF6I UOo3Nn5FDAbouWZesLeeghvJLc7LQlKUxLlJ8X2+U6gZ+a7uUN9R72jw0e4WHexr mdbzft0BqW/jmWOdOcdSsE343q2vD/ox7gJqR8w00982FvyUPdPyRtW1OOlPrlGl FD3uJhd2QsgDAQ== -----END CERTIFICATE-----Generated at Thu Jan 1 07:38:56 2026 by rpki-client