This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft File: GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft (raw, json) Hash identifier: csgCKzyjXniz78/ugZMaPwVjUZcdjNPeFM5n/sTBePo= Subject key identifier: 63:7F:BE:4C:13:01:45:0D:34:96:92:C3:8D:FF:55:D2:9D:A3:6A:E4 Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19 Certificate issuer: /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19 Certificate serial: 019B29D2EC0E3E87B8D6624ADEB277533290 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 01:00:47 +0000 Manifest this update: Wed 17 Dec 2025 01:00:47 +0000 Manifest next update: Thu 18 Dec 2025 01:00:47 +0000 Files and hashes: 1: GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl (hash: mjZcsQ/6K/EjdKKJcxTDVKdRLtXa4/XM6/MZYlDUagE=) 2: QBagqPGH9MLRe8v6cA3uWwY6NVM.roa (hash: yxEIq1L1gWldcG6QnZu0HcP9v0cGJt+tqJuemcpe71U=) 3: mlYmnVk7tfafnI6kiO70u3KwOd4.roa (hash: aIB+G3W1ZT0F+2BUxBkAvXSCuJ9063goygtNArKpnqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:d2:ec:0e:3e:87:b8:d6:62:4a:de:b2:77:53:32:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19 Validity Not Before: Dec 17 01:00:47 2025 GMT Not After : Dec 18 01:00:47 2025 GMT Subject: CN=637fbe4c1301450d349692c38dff55d29da36ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7e:17:fd:ee:40:69:e8:fc:31:8b:3c:f6:bb: bd:28:41:4e:67:b7:28:72:e4:27:0c:6a:b7:08:a7: 54:17:06:8c:5e:15:0a:1d:f3:17:38:fa:01:01:0f: 90:37:79:3f:ea:c2:ba:98:78:34:59:b9:bb:81:76: f0:e3:1a:69:3d:d7:38:a2:8c:28:aa:e4:ab:f6:9f: 75:54:25:b2:f5:44:83:c9:e4:d6:c6:a6:13:ff:c8: 76:85:1b:b9:f7:e8:4e:9a:39:29:2f:b7:bd:2c:71: 60:40:d8:52:f5:7d:6f:dd:3f:34:8f:b4:c1:6f:91: f6:4e:b9:de:16:de:90:91:3b:fb:3d:a3:86:21:7d: 20:05:9d:91:00:7e:52:12:78:54:47:66:91:fb:17: f0:c1:ab:ea:5b:dd:4f:56:4f:6b:d9:23:56:ab:54: 15:e8:94:99:81:04:0d:f1:45:a2:6a:6d:c6:be:cd: be:14:aa:42:9a:c4:55:00:f6:87:3d:9e:7a:73:c8: f4:2c:36:19:e8:28:ae:cd:02:b0:ab:17:bc:fb:3d: 91:ca:16:12:14:c2:b3:f0:94:6c:6f:50:ef:68:b2: 15:28:98:85:dc:af:08:53:bf:3a:f6:43:1d:21:15: 28:76:ac:ce:1c:b5:47:c1:a5:79:8a:e9:b1:a2:9d: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7F:BE:4C:13:01:45:0D:34:96:92:C3:8D:FF:55:D2:9D:A3:6A:E4 X509v3 Authority Key Identifier: keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:c5:f7:5e:4d:d3:d5:c0:e9:d0:ea:13:78:50:0f:57:8d:40: 7f:46:ec:97:72:05:d4:2e:a9:ad:4f:ee:b2:b3:52:05:a7:74: 3d:fe:b7:ab:b5:e5:42:5d:46:78:a8:6c:0e:b9:13:ff:f9:c8: 62:cf:4b:1f:a4:79:14:80:b5:02:a8:8a:6c:19:b8:f2:f6:f7: 6d:11:ed:97:da:86:eb:87:1c:fb:14:fb:4b:2b:00:b2:6c:4e: 42:52:28:4b:33:3c:43:39:39:39:43:6e:0d:70:66:97:14:13: bd:fa:59:c3:fe:2c:00:95:f2:54:30:35:74:a9:b2:86:11:46: 55:68:47:e7:51:18:ac:13:aa:94:52:f9:26:0a:90:d2:9e:3e: ec:d7:6b:9d:f3:59:dc:ef:82:ea:3f:ab:38:1b:0c:21:c8:27: 66:ce:61:66:be:8c:28:01:42:f0:01:44:69:09:b9:6a:e7:1d: e0:bc:da:f3:6d:d2:18:31:29:e7:57:ff:4e:b7:10:47:c5:9a: 92:0e:c4:6f:91:0c:25:0f:23:d8:61:7a:71:e5:d5:49:03:ea: 68:ac:49:14:10:90:74:5a:42:a6:ff:2e:3c:1c:2a:30:23:ff: 35:6c:d0:91:12:66:c1:14:01:6f:71:df:f3:12:a8:8d:1e:70: b0:dd:cb:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsp0uwOPoe41mJK3rJ3UzKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTJhZWQ5YWYzYTRiZTU2MGFhMTliOTI4NDZjNWZiZTEx YzliMTkwHhcNMjUxMjE3MDEwMDQ3WhcNMjUxMjE4MDEwMDQ3WjAzMTEwLwYDVQQD Eyg2MzdmYmU0YzEzMDE0NTBkMzQ5NjkyYzM4ZGZmNTVkMjlkYTM2YWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA234X/e5Aaej8MYs89ru9KEFOZ7co cuQnDGq3CKdUFwaMXhUKHfMXOPoBAQ+QN3k/6sK6mHg0Wbm7gXbw4xppPdc4oowo quSr9p91VCWy9USDyeTWxqYT/8h2hRu59+hOmjkpL7e9LHFgQNhS9X1v3T80j7TB b5H2TrneFt6QkTv7PaOGIX0gBZ2RAH5SEnhUR2aR+xfwwavqW91PVk9r2SNWq1QV 6JSZgQQN8UWiam3Gvs2+FKpCmsRVAPaHPZ56c8j0LDYZ6CiuzQKwqxe8+z2RyhYS FMKz8JRsb1DvaLIVKJiF3K8IU7869kMdIRUodqzOHLVHwaV5iumxop2e9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGN/vkwTAUUNNJaSw43/VdKdo2rkMB8GA1UdIwQY MBaAFBjirtmvOkvlYKoZuShGxfvhHJsZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYt ZDI1NTFjZGRlNGFmLzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yMzkxZWQtZjI4NS00Mjg2LWFmMmYtZDI1NTFjZGRlNGFm LzEvR09LdTJhODZTLVZncWhtNUtFYkYtLUVjbXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMX3Xk3T 1cDp0OoTeFAPV41Af0bsl3IF1C6prU/usrNSBad0Pf63q7XlQl1GeKhsDrkT//nI Ys9LH6R5FIC1AqiKbBm48vb3bRHtl9qG64cc+xT7SysAsmxOQlIoSzM8Qzk5OUNu DXBmlxQTvfpZw/4sAJXyVDA1dKmyhhFGVWhH51EYrBOqlFL5JgqQ0p4+7NdrnfNZ 3O+C6j+rOBsMIcgnZs5hZr6MKAFC8AFEaQm5aucd4Lza823SGDEp51f/TrcQR8Wa kg7Eb5EMJQ8j2GF6ceXVSQPqaKxJFBCQdFpCpv8uPBwqMCP/NWzQkRJmwRQBb3Hf 8xKojR5wsN3LLg== -----END CERTIFICATE-----Generated at Wed Dec 17 06:35:19 2025 by rpki-client