This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json) Hash identifier: IfY/Ssxtktw6vngFUkEq3DUy0GDNcsjTSvwFMcJQZrI= Subject key identifier: DF:E0:FB:C9:23:6E:E3:54:9F:AA:9A:4C:33:33:82:41:C9:F7:6B:9A Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4 Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4 Certificate serial: 019B0710290BF9CBE5FF0E26192084D84B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft Manifest number: 14B7 Signing time: Wed 10 Dec 2025 07:00:58 +0000 Manifest this update: Wed 10 Dec 2025 07:00:58 +0000 Manifest next update: Thu 11 Dec 2025 07:00:58 +0000 Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=) 2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: iqdPCpRah31dySXsyoUJckb+jo/pYu1rFRvpj78S/JA=) 3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:10:29:0b:f9:cb:e5:ff:0e:26:19:20:84:d8:4b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4 Validity Not Before: Dec 10 07:00:58 2025 GMT Not After : Dec 11 07:00:58 2025 GMT Subject: CN=dfe0fbc9236ee3549faa9a4c33338241c9f76b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4c:63:8b:50:0c:55:06:98:0b:df:65:ae:93: 87:91:83:83:b8:6f:70:43:8b:1f:21:ad:45:32:05: db:e3:ce:a6:e4:aa:d3:e6:ef:3b:1c:6a:cc:1b:52: bf:4d:eb:49:6f:6e:89:98:82:3a:ec:24:7b:b0:f8: 92:51:f5:1b:da:a7:48:0b:85:b3:f6:2a:3e:be:13: 5a:83:bd:47:0d:98:cc:9d:8d:b6:71:9f:dc:1f:57: 99:6a:49:a2:a3:4a:e4:25:af:10:74:34:11:6a:8d: 56:14:c1:91:93:8c:2a:9a:e3:c1:84:d3:53:4d:78: 1f:00:03:35:e4:86:6b:3f:6e:35:32:50:54:78:0b: 01:ce:2a:fb:59:b1:64:78:f3:3f:a6:83:86:15:92: a9:5c:b9:0d:33:13:a5:7d:ec:6f:7d:04:56:a4:c2: 2f:39:36:a5:1b:39:fd:80:7f:24:e0:4e:43:23:29: e5:41:72:b7:7f:b4:53:e7:5e:e7:d8:16:74:d7:e7: 25:e1:85:17:a5:5b:3f:5f:76:9b:dd:cf:25:31:76: 18:08:4f:94:76:71:79:dd:d7:90:9b:f4:d7:06:73: 04:2c:bf:d0:49:d8:61:7f:d7:89:b7:75:ad:b3:4b: 35:5a:c6:ea:ea:a2:ab:4c:b4:2b:87:16:54:46:09: 8a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E0:FB:C9:23:6E:E3:54:9F:AA:9A:4C:33:33:82:41:C9:F7:6B:9A X509v3 Authority Key Identifier: keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7f:18:7b:3d:e0:9b:09:26:d1:05:b4:83:ad:0b:58:77:d2: 37:41:70:73:7b:a6:3b:f3:76:58:b1:7f:ab:1f:e4:b1:b0:a4: 31:38:60:6d:37:3e:03:27:6b:c4:47:f4:19:e0:9a:90:5b:7f: 94:6c:fd:33:1d:06:f0:56:2d:eb:71:14:2f:95:c3:7b:81:fc: 94:7f:47:0b:6d:98:12:11:c1:f6:8e:f6:f3:51:da:bc:48:de: ad:ed:fb:01:e4:48:53:8d:b2:0b:53:fa:88:0e:ed:c9:1c:b1: 44:95:a2:24:7c:fb:b8:f9:3f:b6:46:9c:c5:0d:fa:62:98:0f: ca:69:27:17:d5:48:71:72:07:78:8c:c4:95:52:56:b4:34:37: 1f:e3:0e:a8:be:24:31:99:0a:b1:d6:af:cb:90:4a:b1:47:fc: 27:c0:fc:c1:78:24:dd:0d:5e:aa:20:f0:7e:1c:da:8a:e5:e7: 59:ec:fd:50:7b:30:43:a9:da:7e:5d:55:f7:8c:b4:f4:86:f9: 00:fb:21:e4:0f:ae:19:a2:92:6c:bd:25:fe:e9:a4:a8:7f:5e: 93:58:96:9e:ca:c7:fd:fe:d8:e5:f9:7e:a5:13:6b:95:ec:ce: 6a:47:21:c7:81:41:63:52:40:83:4c:e1:ed:2c:ce:e0:66:b1: 69:a9:08:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHECkL+cvl/w4mGSCE2Et+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTE3MzJmMmM4MGUzZWE0ZDcyNzlkMjUyYjg3NGE2MTY0 YzM1YjQwHhcNMjUxMjEwMDcwMDU4WhcNMjUxMjExMDcwMDU4WjAzMTEwLwYDVQQD EyhkZmUwZmJjOTIzNmVlMzU0OWZhYTlhNGMzMzMzODI0MWM5Zjc2YjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0xji1AMVQaYC99lrpOHkYODuG9w Q4sfIa1FMgXb486m5KrT5u87HGrMG1K/TetJb26JmII67CR7sPiSUfUb2qdIC4Wz 9io+vhNag71HDZjMnY22cZ/cH1eZakmio0rkJa8QdDQRao1WFMGRk4wqmuPBhNNT TXgfAAM15IZrP241MlBUeAsBzir7WbFkePM/poOGFZKpXLkNMxOlfexvfQRWpMIv OTalGzn9gH8k4E5DIynlQXK3f7RT517n2BZ01+cl4YUXpVs/X3ab3c8lMXYYCE+U dnF53deQm/TXBnMELL/QSdhhf9eJt3Wts0s1Wsbq6qKrTLQrhxZURgmK/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/g+8kjbuNUn6qaTDMzgkHJ92uaMB8GA1UdIwQY MBaAFBjhcy8sgOPqTXJ50lK4dKYWTDW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQt ZTQwOTI2MDAxNWVmLzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQtZTQwOTI2MDAxNWVm LzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVX8Yez3g mwkm0QW0g60LWHfSN0Fwc3umO/N2WLF/qx/ksbCkMThgbTc+AydrxEf0GeCakFt/ lGz9Mx0G8FYt63EUL5XDe4H8lH9HC22YEhHB9o7281HavEjere37AeRIU42yC1P6 iA7tyRyxRJWiJHz7uPk/tkacxQ36YpgPymknF9VIcXIHeIzElVJWtDQ3H+MOqL4k MZkKsdavy5BKsUf8J8D8wXgk3Q1eqiDwfhzaiuXnWez9UHswQ6nafl1V94y09Ib5 APsh5A+uGaKSbL0l/umkqH9ek1iWnsrH/f7Y5fl+pRNrlezOakchx4FBY1JAg0zh 7SzO4GaxaakIHw== -----END CERTIFICATE-----Generated at Wed Dec 10 09:25:04 2025 by rpki-client