This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json) Hash identifier: NXkn3Rn4dAuNmcVwqPaf32lDsepU+WYixYnVOdLalfM= Subject key identifier: 12:D8:48:AA:E1:18:D7:8A:79:3C:5C:BE:86:C5:F7:38:DD:91:AA:AB Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a Certificate serial: 019B2287FC0A4F6AC70A13947AEE4125722E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 15:01:35 +0000 Manifest this update: Mon 15 Dec 2025 15:01:35 +0000 Manifest next update: Tue 16 Dec 2025 15:01:35 +0000 Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=) 2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: wEgxIyvQle4/c/a0k9GQKyEc3N3qDGzPULnD7COf6lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:fc:0a:4f:6a:c7:0a:13:94:7a:ee:41:25:72:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a Validity Not Before: Dec 15 15:01:35 2025 GMT Not After : Dec 16 15:01:35 2025 GMT Subject: CN=12d848aae118d78a793c5cbe86c5f738dd91aaab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:c4:76:ed:b1:77:1d:9c:b7:c1:9c:fd:98: 35:80:36:a0:0b:8f:45:04:2a:d3:8c:2c:1d:cd:9f: 36:c6:ff:c8:90:1c:ab:bb:60:3b:0e:f7:73:bf:48: 78:10:0f:a5:47:db:58:40:78:18:7f:f5:28:fa:5b: 8d:9c:04:61:24:36:da:33:65:7e:bb:14:f5:85:65: d5:00:1d:4e:0c:7e:20:d6:09:3b:98:3b:21:01:b4: 9f:73:94:fa:fc:1c:ee:c6:58:87:9b:09:9f:c0:0f: ed:34:40:af:2a:19:ce:44:05:c0:33:7b:9a:2a:3e: 5b:06:54:2f:93:c4:9b:7c:88:51:cb:51:17:e7:78: 9d:cd:40:d9:8e:4c:9a:52:ea:8a:26:66:3e:56:78: ad:6b:ce:b5:b0:8e:2f:cd:c1:2a:66:25:ac:47:f7: 6c:ef:ab:13:35:58:fa:e1:0b:c0:cb:b4:11:79:bb: c2:94:e3:98:6b:67:a3:b5:25:cb:48:93:4e:ef:37: 9a:00:9a:25:80:e0:3c:32:19:82:5c:f0:39:54:e6: 42:33:2c:78:50:3a:3b:ea:46:92:ba:06:29:a2:02: 1a:44:2f:ce:55:1c:78:5d:a5:2c:e4:72:cd:93:a1: 8b:bd:33:08:e4:e6:40:9e:4e:a5:37:de:17:42:3d: 4b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D8:48:AA:E1:18:D7:8A:79:3C:5C:BE:86:C5:F7:38:DD:91:AA:AB X509v3 Authority Key Identifier: keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:66:87:b9:38:23:83:bc:c1:c5:6a:a7:40:1a:91:5d:33:88: c6:48:72:e6:72:3c:1d:3b:a7:e4:d1:46:9a:87:7c:50:68:47: f2:e5:95:15:70:06:0d:36:e1:7b:a0:0a:c1:4a:b4:9e:96:61: 15:7d:98:e1:51:4c:9f:0b:6f:2d:49:46:30:cb:61:36:1c:f6: a2:e7:93:ba:82:a9:2d:b1:bf:01:10:52:43:35:71:b9:b8:27: bd:e1:7b:60:b3:31:5a:5f:35:6e:be:09:17:d4:8b:67:59:fa: e7:53:17:87:97:01:e4:b3:9d:ad:ca:a7:fa:04:bf:87:78:90: 59:a9:dc:6a:e6:52:ef:88:f7:1f:49:3c:bc:f0:55:54:c8:98: 92:6a:42:fa:3a:e2:95:f3:3f:c1:94:8a:1a:96:c6:0a:e6:cb: 09:2d:38:51:3c:63:d6:e4:9f:4b:d2:50:16:86:ca:80:3f:82: 2d:6b:70:f1:ae:53:38:5a:01:4c:2e:63:e8:f0:6c:4d:16:5c: 72:18:99:22:8e:11:71:c1:50:e3:e2:6c:3c:e6:59:68:e2:cd: 3e:8c:13:f6:46:1f:1a:25:ed:eb:f0:63:74:29:f5:9d:01:b3: 77:bb:aa:2f:d6:6b:d7:f2:f0:0a:f8:d5:f6:9e:ad:14:66:b7: dd:06:d7:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih/wKT2rHChOUeu5BJXIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOTQ4ODkxM2Q3MzQ3OTc4M2RhN2JmNTZiMTY0ZTVjODRk NGZjNmEwHhcNMjUxMjE1MTUwMTM1WhcNMjUxMjE2MTUwMTM1WjAzMTEwLwYDVQQD EygxMmQ4NDhhYWUxMThkNzhhNzkzYzVjYmU4NmM1ZjczOGRkOTFhYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZjEdu2xdx2ct8Gc/Zg1gDagC49F BCrTjCwdzZ82xv/IkByru2A7Dvdzv0h4EA+lR9tYQHgYf/Uo+luNnARhJDbaM2V+ uxT1hWXVAB1ODH4g1gk7mDshAbSfc5T6/BzuxliHmwmfwA/tNECvKhnORAXAM3ua Kj5bBlQvk8SbfIhRy1EX53idzUDZjkyaUuqKJmY+Vnita861sI4vzcEqZiWsR/ds 76sTNVj64QvAy7QRebvClOOYa2ejtSXLSJNO7zeaAJolgOA8MhmCXPA5VOZCMyx4 UDo76kaSugYpogIaRC/OVRx4XaUs5HLNk6GLvTMI5OZAnk6lN94XQj1L5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLYSKrhGNeKeTxcvobF9zjdkaqrMB8GA1UdIwQY MBaAFK6UiJE9c0eXg9p79WsWTlyE1PxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQt NDM1M2NkODJkNTdiLzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQtNDM1M2NkODJkNTdi LzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwGaHuTgj g7zBxWqnQBqRXTOIxkhy5nI8HTun5NFGmod8UGhH8uWVFXAGDTbhe6AKwUq0npZh FX2Y4VFMnwtvLUlGMMthNhz2oueTuoKpLbG/ARBSQzVxubgnveF7YLMxWl81br4J F9SLZ1n651MXh5cB5LOdrcqn+gS/h3iQWancauZS74j3H0k8vPBVVMiYkmpC+jri lfM/wZSKGpbGCubLCS04UTxj1uSfS9JQFobKgD+CLWtw8a5TOFoBTC5j6PBsTRZc chiZIo4RccFQ4+JsPOZZaOLNPowT9kYfGiXt6/BjdCn1nQGzd7uqL9Zr1/LwCvjV 9p6tFGa33QbXLg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:53:04 2025 by rpki-client