This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft File: GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json) Hash identifier: 9a+mnD9dzHFk+XTf/jNhhHdoGA57fCRbbwHO1wuvol0= Subject key identifier: 22:B5:1A:C9:AB:E4:C6:DE:D4:D8:44:94:6C:FF:24:CE:74:D0:9E:4C Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33 Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933 Certificate serial: 019B2399D51E93E67FA372E17B3DAA3F5C57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 20:00:42 +0000 Manifest this update: Mon 15 Dec 2025 20:00:42 +0000 Manifest next update: Tue 16 Dec 2025 20:00:42 +0000 Files and hashes: 1: EgUed3OS5r6UcW0VzyUQOqijGyE.roa (hash: fxzBB+2/n6aM1AwbZDhuW1COKGh5iBae7DMl/0iQ9A8=) 2: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: zNL13nsg7U9cRGJ1wWJbYCmkBJenZiJhFDiieFJWQLQ=) 3: eWWR4vM0w5SZ0sBVPl9f9xfpWlM.roa (hash: 0jDZKCUWokK8TsjPgI0+fTiqYEgYJ/hp0vG/qzmnqKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:d5:1e:93:e6:7f:a3:72:e1:7b:3d:aa:3f:5c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933 Validity Not Before: Dec 15 20:00:42 2025 GMT Not After : Dec 16 20:00:42 2025 GMT Subject: CN=22b51ac9abe4c6ded4d844946cff24ce74d09e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:15:19:e9:2c:1d:30:7b:70:5a:05:24:7a: b4:7e:e4:4f:d1:4b:50:e4:ca:be:da:9a:2e:f9:88: 43:94:ff:d1:b3:e1:9c:44:b5:1c:3b:20:4a:e4:06: b9:b8:5e:e3:41:b2:95:d5:59:9a:ad:4b:41:d6:34: 8c:cd:b8:1b:c5:d6:ac:9c:c6:e2:87:78:0a:25:f3: e8:c6:ea:a4:03:7a:e4:4e:87:08:f4:eb:15:4a:0c: c3:b5:4e:47:93:12:ec:59:00:fc:d3:0c:24:73:71: 1e:ad:77:b4:9b:91:da:dd:ce:06:44:9f:82:89:8d: 9f:8f:13:a6:e6:7e:5f:16:75:24:d8:ce:9c:af:f0: 6f:69:37:10:d2:74:54:f1:e2:1f:b3:d9:56:90:20: 85:46:1d:09:fa:4f:0f:f7:50:ae:88:71:fb:b2:b8: b7:00:a8:53:5f:15:23:a8:3f:61:0e:7b:f9:66:47: 46:ca:b8:9e:ff:2d:93:40:b4:ce:b6:46:ce:b2:54: 01:93:3a:5d:20:65:b6:c7:5d:b7:2d:4e:3a:35:a9: eb:40:2d:05:f1:11:7a:ec:7f:b9:f4:ad:a3:b7:b2: f1:6f:aa:3b:79:61:8d:5d:15:8d:ac:79:c2:91:87: 91:5d:a1:f5:6a:88:19:13:56:cc:08:a3:83:be:15: ef:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B5:1A:C9:AB:E4:C6:DE:D4:D8:44:94:6C:FF:24:CE:74:D0:9E:4C X509v3 Authority Key Identifier: keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:65:b0:86:0f:ed:f3:76:52:6e:42:ff:16:92:4a:52:92:3d: 03:3b:0c:54:30:82:ca:b2:91:75:b8:26:62:ee:78:e7:23:c5: 3c:e0:4e:8d:81:ce:fd:29:8e:3d:8d:7f:59:82:50:a0:e4:1f: d1:5b:4a:96:6f:4b:e4:cf:21:cd:a5:ec:22:a3:7e:02:8f:9e: e8:3b:11:db:b9:07:4f:c9:63:ad:1f:8a:ac:e8:6b:31:b7:0f: 05:9e:fd:71:1c:92:2a:09:01:d1:4c:22:57:77:c2:68:9a:f4: 50:03:12:3b:6e:fd:f7:3e:1a:3a:06:57:2d:f4:ed:83:1d:86: b0:ec:80:68:a1:87:72:45:73:26:1d:9d:d5:61:90:2d:26:fd: e6:ee:6b:1d:81:e8:05:06:c6:fe:13:d9:00:4c:41:e4:bc:ea: ff:cf:cd:7a:41:90:a9:90:08:52:7c:a0:cf:5d:4e:9d:bb:b5: 0a:60:cc:70:0a:17:85:d0:78:fa:85:a5:b4:06:9c:21:5d:1f: ac:09:90:64:44:52:d8:aa:b8:b2:5a:34:62:10:98:16:af:8e: 8f:84:61:d7:3c:65:03:f5:66:36:26:dd:9c:68:b3:27:60:eb: 36:f5:3f:62:f7:d0:58:3b:48:ef:10:94:93:10:fb:8f:19:ee: 7e:fd:c1:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmdUek+Z/o3Lhez2qP1xXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTBlOWEzZDIwY2ZhYzZjYmUzY2NmNzRhYjU3ODRhNzc2 ODI5MzMwHhcNMjUxMjE1MjAwMDQyWhcNMjUxMjE2MjAwMDQyWjAzMTEwLwYDVQQD EygyMmI1MWFjOWFiZTRjNmRlZDRkODQ0OTQ2Y2ZmMjRjZTc0ZDA5ZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPoVGeksHTB7cFoFJHq0fuRP0UtQ 5Mq+2pou+YhDlP/Rs+GcRLUcOyBK5Aa5uF7jQbKV1VmarUtB1jSMzbgbxdasnMbi h3gKJfPoxuqkA3rkTocI9OsVSgzDtU5HkxLsWQD80wwkc3EerXe0m5Ha3c4GRJ+C iY2fjxOm5n5fFnUk2M6cr/BvaTcQ0nRU8eIfs9lWkCCFRh0J+k8P91CuiHH7sri3 AKhTXxUjqD9hDnv5ZkdGyrie/y2TQLTOtkbOslQBkzpdIGW2x123LU46NanrQC0F 8RF67H+59K2jt7Lxb6o7eWGNXRWNrHnCkYeRXaH1aogZE1bMCKODvhXv4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK1Gsmr5Mbe1NhElGz/JM500J5MMB8GA1UdIwQY MBaAFBjg6aPSDPrGy+PM90q1eEp3aCkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMt OTVhYjgxYjc3NjkxLzEvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hNzYzZWQtYmViMC00M2NiLWJhYTMtOTVhYjgxYjc3Njkx LzEvR09EcG85SU0tc2JMNDh6M1NyVjRTbmRvS1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2mWwhg/t 83ZSbkL/FpJKUpI9AzsMVDCCyrKRdbgmYu545yPFPOBOjYHO/SmOPY1/WYJQoOQf 0VtKlm9L5M8hzaXsIqN+Ao+e6DsR27kHT8ljrR+KrOhrMbcPBZ79cRySKgkB0Uwi V3fCaJr0UAMSO2799z4aOgZXLfTtgx2GsOyAaKGHckVzJh2d1WGQLSb95u5rHYHo BQbG/hPZAExB5Lzq/8/NekGQqZAIUnygz11Onbu1CmDMcAoXhdB4+oWltAacIV0f rAmQZERS2Kq4slo0YhCYFq+Oj4Rh1zxlA/VmNibdnGizJ2DrNvU/YvfQWDtI7xCU kxD7jxnufv3BvQ== -----END CERTIFICATE-----Generated at Tue Dec 16 05:41:03 2025 by rpki-client