This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft File: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json) Hash identifier: kDBPpsJXKbAH6VMVPmT2bkNy7y6TTqOHqh0VwW0s7qw= Subject key identifier: BC:57:7D:84:60:98:BC:6B:45:7E:5B:51:7B:04:58:B0:49:32:74:AF Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4 Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4 Certificate serial: 019B5A88D8B445275443BA8EF53B3436799A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft Manifest number: 0C2E Signing time: Fri 26 Dec 2025 12:01:16 +0000 Manifest this update: Fri 26 Dec 2025 12:01:16 +0000 Manifest next update: Sat 27 Dec 2025 12:01:16 +0000 Files and hashes: 1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: dVXQHh4JyJnmRDZgdaDV5YwGkIUr8D2fgh2PNmdTN+I=) 2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:d8:b4:45:27:54:43:ba:8e:f5:3b:34:36:79:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4 Validity Not Before: Dec 26 12:01:16 2025 GMT Not After : Dec 27 12:01:16 2025 GMT Subject: CN=bc577d846098bc6b457e5b517b0458b0493274af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:b4:fb:88:45:a8:b5:27:bd:81:19:f7:2d: f5:84:19:bc:82:e2:9d:62:99:d9:5c:9b:6b:17:1a: 7b:23:28:db:be:05:58:6b:71:ec:6f:84:8b:38:24: c6:c3:fe:f4:b3:b0:7d:9c:94:81:2f:4a:26:b9:65: a4:16:cb:c0:36:8b:c4:1f:23:cb:b5:4a:36:03:20: 03:0e:26:45:26:66:a4:d2:61:b1:6a:f2:4b:3d:38: e4:47:1a:ff:9f:1c:16:d5:bd:c9:36:08:0c:4a:2b: 60:4a:fb:9d:75:a1:d1:f8:88:f1:04:c5:0f:53:cf: 70:e0:97:c2:fa:7d:eb:20:11:c1:c5:b5:90:ed:b4: 6b:15:c8:e9:75:1f:f2:99:fd:00:a1:7a:e6:ad:86: 62:2e:8d:b6:b6:bf:4f:7c:a5:01:44:d4:67:8e:88: 33:95:56:b7:57:1a:79:6c:36:d0:b0:f0:f9:e9:d0: 7d:f6:9f:63:9e:75:33:de:01:44:b3:95:0e:50:ce: 7c:fb:a6:24:ad:2c:56:73:e8:d3:4c:ee:3b:ed:3b: b9:74:4a:1a:8a:b4:7b:c0:25:69:35:e4:ee:3b:c3: 2b:95:cd:fe:a0:4e:c1:30:a4:22:c0:6a:0b:60:89: f5:6e:13:1e:27:b1:5d:bf:4a:52:70:ed:d7:b7:5d: 2a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:57:7D:84:60:98:BC:6B:45:7E:5B:51:7B:04:58:B0:49:32:74:AF X509v3 Authority Key Identifier: keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:64:33:67:4f:26:a8:c0:c9:ed:ae:7e:9f:95:5e:ae:7f:07: 00:33:af:fd:fd:d0:64:fd:09:13:db:03:30:bd:30:dc:8f:5f: af:71:c5:06:e6:04:09:6a:38:79:20:86:33:af:02:6a:bc:c4: 6a:37:67:93:e5:f9:19:1c:66:ce:48:57:16:53:0e:81:90:c6: 2a:c2:5e:56:bc:3e:b5:df:52:9a:e1:c2:a6:53:fb:0c:89:3e: 6f:e4:01:00:c6:24:2f:d0:fc:43:b0:71:03:6b:2e:1e:68:14: e6:f7:13:2e:1c:ec:dc:81:9e:9c:6b:11:ed:9f:dd:36:e7:69: 36:f3:bc:44:59:07:22:bd:5b:49:38:a4:fa:dd:3c:08:50:96: b7:21:5a:91:2f:eb:f7:06:94:b8:37:30:c4:a8:ac:bb:4a:b1: af:83:e0:c5:1a:89:64:de:b6:d8:4a:e5:f0:3b:e7:15:c7:f0: 0a:f8:c9:51:d4:3f:25:c4:d5:c5:ff:f0:28:73:e3:bf:1b:76: 46:ef:ee:c0:04:81:d2:10:2a:c7:45:5b:11:1f:4b:9a:86:6a: 2d:75:32:d4:b7:90:13:6c:a9:6d:c9:83:ab:5b:f7:81:ac:fa: fa:93:92:44:b6:8a:b6:1f:48:c3:95:b4:f5:ce:c7:18:a1:91: b2:be:ed:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiNi0RSdUQ7qO9Ts0NnmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODg1YzM3ZTc0N2JjZTIzZWU5MDk3ZTVmZjdlOTgzYmNi YTBkYjQwHhcNMjUxMjI2MTIwMTE2WhcNMjUxMjI3MTIwMTE2WjAzMTEwLwYDVQQD EyhiYzU3N2Q4NDYwOThiYzZiNDU3ZTViNTE3YjA0NThiMDQ5MzI3NGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoK0+4hFqLUnvYEZ9y31hBm8guKd YpnZXJtrFxp7IyjbvgVYa3Hsb4SLOCTGw/70s7B9nJSBL0omuWWkFsvANovEHyPL tUo2AyADDiZFJmak0mGxavJLPTjkRxr/nxwW1b3JNggMSitgSvuddaHR+IjxBMUP U89w4JfC+n3rIBHBxbWQ7bRrFcjpdR/ymf0AoXrmrYZiLo22tr9PfKUBRNRnjogz lVa3Vxp5bDbQsPD56dB99p9jnnUz3gFEs5UOUM58+6YkrSxWc+jTTO477Tu5dEoa irR7wCVpNeTuO8Mrlc3+oE7BMKQiwGoLYIn1bhMeJ7Fdv0pScO3Xt10q6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxXfYRgmLxrRX5bUXsEWLBJMnSvMB8GA1UdIwQY MBaAFBqIXDfnR7ziPukJfl/36YO8ug20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5Mzkt YzE0MDJkMjYxNDMyLzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5MzktYzE0MDJkMjYxNDMy LzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2QzZ08m qMDJ7a5+n5Vern8HADOv/f3QZP0JE9sDML0w3I9fr3HFBuYECWo4eSCGM68CarzE ajdnk+X5GRxmzkhXFlMOgZDGKsJeVrw+td9SmuHCplP7DIk+b+QBAMYkL9D8Q7Bx A2suHmgU5vcTLhzs3IGenGsR7Z/dNudpNvO8RFkHIr1bSTik+t08CFCWtyFakS/r 9waUuDcwxKisu0qxr4PgxRqJZN622Erl8DvnFcfwCvjJUdQ/JcTVxf/wKHPjvxt2 Ru/uwASB0hAqx0VbER9LmoZqLXUy1LeQE2ypbcmDq1v3gaz6+pOSRLaKth9Iw5W0 9c7HGKGRsr7thQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:58:07 2025 by rpki-client