This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft File: GoPORK5McB6pcdM036u8WyjmR24.mft (raw, json) Hash identifier: w06vT9Zz8v6GGJebsU0lAsiGKFCvo2maFp5qf++uftk= Subject key identifier: C5:74:2D:E5:23:FD:2A:7A:AF:20:F4:0F:1F:F6:93:17:0A:25:CD:6A Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e Certificate serial: 019B12DD37910FF173BF6FDF3E9743032A28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft Manifest number: 0FC3 Signing time: Fri 12 Dec 2025 14:00:45 +0000 Manifest this update: Fri 12 Dec 2025 14:00:45 +0000 Manifest next update: Sat 13 Dec 2025 14:00:45 +0000 Files and hashes: 1: GoPORK5McB6pcdM036u8WyjmR24.crl (hash: ISc8bNAsisBonjQwSs1V2AYL4qkH8BGUMrZDkwxSFH4=) 2: SQ1S01mKdl_pihHLfmAxp6MIz2s.roa (hash: johDj2G38KeECNaaDLbNbGiHRKn5fDm9dO2HYe9gZvY=) 3: zcLtcjUtyxFL1FO3b-VJlyOeg6k.roa (hash: g80ZM0Uc7RbA4rF7A3IOl5uS7MyE5SE2vouCF+EvudA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dd:37:91:0f:f1:73:bf:6f:df:3e:97:43:03:2a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e Validity Not Before: Dec 12 14:00:45 2025 GMT Not After : Dec 13 14:00:45 2025 GMT Subject: CN=c5742de523fd2a7aaf20f40f1ff693170a25cd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:48:72:cc:ef:9c:e0:e5:3d:cc:f4:5a:f3: fd:cd:92:b4:90:9e:d6:a4:cc:6f:e6:b8:35:90:53: 93:3b:30:eb:41:16:96:4f:db:92:63:05:f9:01:c6: 2d:1c:7d:0b:2e:ce:23:8e:11:2f:03:c4:79:63:bd: 24:f9:ff:09:05:94:08:42:b9:ea:62:33:cf:aa:0a: 8c:30:05:b4:7f:eb:63:e8:ba:9e:b3:86:f4:52:48: 0a:d7:3f:d1:67:3b:d1:b2:a2:24:b2:34:4c:29:22: 80:d7:b5:d5:68:4d:73:a3:a8:4b:09:61:45:69:fa: 49:b0:00:60:3c:2a:8c:92:7d:81:aa:91:60:f2:fb: cc:d1:7b:b1:6c:68:1e:14:45:b2:c2:e5:00:fc:47: 3b:27:30:ae:8a:2b:3a:ca:bd:87:d9:fb:bb:d2:68: 22:b8:77:57:9f:e8:ea:54:f0:f4:9c:10:65:49:01: 32:86:1e:43:84:13:c9:dd:6a:98:df:05:1f:98:e7: c0:08:e4:dd:8f:d8:af:ad:dc:d3:54:2c:53:08:17: 81:17:31:aa:19:c6:e1:d9:de:3d:91:67:e8:97:27: 0e:a1:07:6a:2f:1b:4a:49:8b:bf:ce:0b:d3:57:25: 3a:ce:97:39:e2:de:17:61:ab:6a:b9:5e:08:d8:83: 76:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:74:2D:E5:23:FD:2A:7A:AF:20:F4:0F:1F:F6:93:17:0A:25:CD:6A X509v3 Authority Key Identifier: keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3e:0b:4f:d5:94:ff:83:3c:6b:16:49:7a:da:10:b5:a2:d4: b9:7b:eb:85:57:4a:3d:3d:5b:9a:a4:fc:e4:a9:29:a3:b5:9f: 4f:95:e0:bd:55:7e:d1:ca:6a:e9:1d:d2:ac:04:17:7b:9d:a1: 6e:40:22:c4:35:32:76:e4:36:68:e3:81:a8:47:04:31:15:5f: e0:c4:9a:bd:a0:4e:95:1c:46:9d:58:b7:8a:4e:3b:68:7b:7e: fd:3d:02:f0:c2:95:4e:85:65:96:9e:f0:50:4d:23:43:e4:d3: f7:97:46:ee:c0:e2:bc:e5:b5:97:3c:ed:d5:d2:be:46:d7:fa: 91:34:b3:94:8b:7d:86:8c:22:10:fb:71:fb:78:2c:c8:10:e2: 9d:bc:53:c9:cb:7b:a3:8e:3d:4c:db:0b:f2:92:7c:00:7b:22: da:07:59:d0:61:46:2d:92:80:7a:6f:ab:87:8d:08:6e:6c:02: 89:dd:b1:74:9b:56:6e:eb:bd:95:f8:2d:12:d8:00:f4:23:14: c6:5d:9e:ba:4a:89:e2:a8:dd:34:88:5d:23:e3:00:14:82:df: 51:5e:51:5b:9d:85:39:70:41:eb:1d:54:56:f4:54:5b:c7:d2: ef:de:5a:78:1a:00:29:6f:36:15:8b:8b:e5:3e:02:fd:5a:a1: dd:a8:5f:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3TeRD/Fzv2/fPpdDAyooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODNjZTQ0YWU0YzcwMWVhOTcxZDMzNGRmYWJiYzViMjhl NjQ3NmUwHhcNMjUxMjEyMTQwMDQ1WhcNMjUxMjEzMTQwMDQ1WjAzMTEwLwYDVQQD EyhjNTc0MmRlNTIzZmQyYTdhYWYyMGY0MGYxZmY2OTMxNzBhMjVjZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBZIcszvnODlPcz0WvP9zZK0kJ7W pMxv5rg1kFOTOzDrQRaWT9uSYwX5AcYtHH0LLs4jjhEvA8R5Y70k+f8JBZQIQrnq YjPPqgqMMAW0f+tj6Lqes4b0UkgK1z/RZzvRsqIksjRMKSKA17XVaE1zo6hLCWFF afpJsABgPCqMkn2BqpFg8vvM0XuxbGgeFEWywuUA/Ec7JzCuiis6yr2H2fu70mgi uHdXn+jqVPD0nBBlSQEyhh5DhBPJ3WqY3wUfmOfACOTdj9ivrdzTVCxTCBeBFzGq Gcbh2d49kWfolycOoQdqLxtKSYu/zgvTVyU6zpc54t4XYatquV4I2IN28QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMV0LeUj/Sp6ryD0Dx/2kxcKJc1qMB8GA1UdIwQY MBaAFBqDzkSuTHAeqXHTNN+rvFso5kduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29QT1JLNU1jQjZwY2RNMDM2dThXeWptUjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNzczYjMtNTEwOS00M2MwLTgwMDkt NDI0ZGRhNTE5ZWYxLzEvR29QT1JLNU1jQjZwY2RNMDM2dThXeWptUjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yNzczYjMtNTEwOS00M2MwLTgwMDktNDI0ZGRhNTE5ZWYx LzEvR29QT1JLNU1jQjZwY2RNMDM2dThXeWptUjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGz4LT9WU /4M8axZJetoQtaLUuXvrhVdKPT1bmqT85Kkpo7WfT5XgvVV+0cpq6R3SrAQXe52h bkAixDUyduQ2aOOBqEcEMRVf4MSavaBOlRxGnVi3ik47aHt+/T0C8MKVToVllp7w UE0jQ+TT95dG7sDivOW1lzzt1dK+Rtf6kTSzlIt9howiEPtx+3gsyBDinbxTyct7 o449TNsL8pJ8AHsi2gdZ0GFGLZKAem+rh40IbmwCid2xdJtWbuu9lfgtEtgA9CMU xl2eukqJ4qjdNIhdI+MAFILfUV5RW52FOXBB6x1UVvRUW8fS795aeBoAKW82FYuL 5T4C/Vqh3ahfJw== -----END CERTIFICATE-----Generated at Fri Dec 12 17:53:43 2025 by rpki-client