This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json) Hash identifier: nHF9VNRttSviGqMj33CLRbH+vMMijxYEmcsbiRyn/8A= Subject key identifier: FB:8E:16:AA:EC:AF:5A:AC:4E:6A:EA:7D:52:E7:3C:4B:80:F3:00:72 Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9 Certificate serial: 019B0DB6D5A1395E635C7D1DFD6A491A2BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft Manifest number: 038F Signing time: Thu 11 Dec 2025 14:00:44 +0000 Manifest this update: Thu 11 Dec 2025 14:00:44 +0000 Manifest next update: Fri 12 Dec 2025 14:00:44 +0000 Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: PC1Ggcz0aEf4AlGt2Zb60uK6soUoJW/Cg4loRwxQfUM=) 2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=) 3: QBnJw99597zp1MOGO0aw50ZWWWw.roa (hash: Sivngawcknlc7BG16HCXOssKTWMLVcvalL4l8eCv6+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:d5:a1:39:5e:63:5c:7d:1d:fd:6a:49:1a:2b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9 Validity Not Before: Dec 11 14:00:44 2025 GMT Not After : Dec 12 14:00:44 2025 GMT Subject: CN=fb8e16aaecaf5aac4e6aea7d52e73c4b80f30072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e3:95:db:6e:fc:57:db:7d:eb:43:8c:92:47: 81:c3:f6:b9:aa:a8:76:6c:60:17:6e:a4:39:57:98: 82:ee:c2:b8:14:5e:37:5d:f4:3e:76:93:de:a5:da: a8:06:c2:d2:ff:2e:83:d1:56:2f:bd:24:f4:2a:01: b4:48:f3:45:5b:2a:3d:10:2e:93:45:9c:b0:d0:73: 15:a1:76:44:91:11:0c:e9:3d:b3:d1:f5:6f:02:fa: 05:65:cf:cc:fb:82:15:b2:5f:42:c5:41:fa:df:0d: f1:c2:b7:2f:13:ed:1d:51:04:1d:dd:3b:f2:38:5d: 9d:fc:39:de:b2:86:7f:e7:b8:87:d5:7a:b9:e7:eb: 07:88:b3:ad:97:43:c8:f2:81:94:b1:aa:82:df:57: a3:0f:ae:e5:4f:2a:df:bb:56:87:52:c2:bd:b4:35: dc:1d:88:64:d6:2b:ff:f3:69:4d:49:4b:23:da:5c: e5:12:0b:93:0d:87:50:83:bb:cf:74:fb:bf:f7:6c: f7:1b:88:fd:c4:82:fa:d4:10:38:3a:e7:ae:e3:a8: 26:0e:61:ad:ad:55:7b:f4:e6:6a:ce:a5:7c:51:3c: ce:03:9f:ad:e6:6a:5f:5d:4a:ca:bd:2d:7c:ca:de: 0e:86:03:46:74:f4:fd:e3:c1:fa:36:d9:f8:7b:f6: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8E:16:AA:EC:AF:5A:AC:4E:6A:EA:7D:52:E7:3C:4B:80:F3:00:72 X509v3 Authority Key Identifier: keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:18:5d:d2:f1:da:ed:5f:93:f2:38:25:47:af:61:c9:82:ce: 4b:b4:27:53:b8:b7:9f:5f:21:21:83:93:fc:fe:9f:63:df:5b: b0:c0:d1:ec:3f:c9:cb:80:53:39:85:a7:00:5c:6d:7f:4d:23: 80:c6:21:17:8a:78:00:9e:31:35:d3:75:3b:74:4e:dc:b9:0e: 89:d2:3a:a5:e1:7c:81:5c:80:98:bb:3f:ad:8b:84:9d:5f:7a: 64:c2:c5:98:a1:f6:75:83:e8:b6:50:d8:8a:51:4c:49:a6:59: db:f8:37:21:c6:3f:54:a6:40:c7:a2:e0:35:59:a9:fa:1d:99: b2:4a:7c:d1:e7:6b:60:97:85:fb:6d:72:db:66:33:dd:90:da: 2b:13:4c:6a:04:a6:16:84:e7:cb:36:83:9b:55:d8:e6:93:46: c5:5b:63:c4:82:ec:11:85:bc:71:f3:b1:17:ef:ce:a6:6d:1a: a4:10:dd:66:b1:c8:8b:33:e1:14:fe:ba:e5:73:76:35:3c:9f: bc:69:bf:b4:fb:58:68:1a:79:16:87:67:ae:fd:2f:9d:3b:d8: 62:11:27:3b:68:05:8e:9e:0c:de:9b:e9:bf:38:84:c1:c1:e5: 61:1a:08:8e:5b:ff:8c:a6:29:74:83:64:d2:fa:33:2b:49:05: 89:3a:59:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNttWhOV5jXH0d/WpJGiu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh MjQzZTkwHhcNMjUxMjExMTQwMDQ0WhcNMjUxMjEyMTQwMDQ0WjAzMTEwLwYDVQQD EyhmYjhlMTZhYWVjYWY1YWFjNGU2YWVhN2Q1MmU3M2M0YjgwZjMwMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OOV2278V9t960OMkkeBw/a5qqh2 bGAXbqQ5V5iC7sK4FF43XfQ+dpPepdqoBsLS/y6D0VYvvST0KgG0SPNFWyo9EC6T RZyw0HMVoXZEkREM6T2z0fVvAvoFZc/M+4IVsl9CxUH63w3xwrcvE+0dUQQd3Tvy OF2d/DnesoZ/57iH1Xq55+sHiLOtl0PI8oGUsaqC31ejD67lTyrfu1aHUsK9tDXc HYhk1iv/82lNSUsj2lzlEguTDYdQg7vPdPu/92z3G4j9xIL61BA4Oueu46gmDmGt rVV79OZqzqV8UTzOA5+t5mpfXUrKvS18yt4OhgNGdPT948H6Ntn4e/bFsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuOFqrsr1qsTmrqfVLnPEuA8wByMB8GA1UdIwQY MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt ODc3Y2YyMWM4ZjdiLzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxhd0vHa 7V+T8jglR69hyYLOS7QnU7i3n18hIYOT/P6fY99bsMDR7D/Jy4BTOYWnAFxtf00j gMYhF4p4AJ4xNdN1O3RO3LkOidI6peF8gVyAmLs/rYuEnV96ZMLFmKH2dYPotlDY ilFMSaZZ2/g3IcY/VKZAx6LgNVmp+h2Zskp80edrYJeF+21y22Yz3ZDaKxNMagSm FoTnyzaDm1XY5pNGxVtjxILsEYW8cfOxF+/Opm0apBDdZrHIizPhFP665XN2NTyf vGm/tPtYaBp5Fodnrv0vnTvYYhEnO2gFjp4M3pvpvziEwcHlYRoIjlv/jKYpdINk 0vozK0kFiTpZhQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:44 2025 by rpki-client