This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft File: go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json) Hash identifier: JnRjyKWkKdK9yf+D3hMzLkL9FZP/TkycAuUsx/D8C4g= Subject key identifier: 8A:F9:0D:A8:9A:CC:EE:4D:21:DB:DD:76:3F:58:F7:C6:AE:29:14:88 Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41 Certificate issuer: /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741 Certificate serial: 019B5976D583726CDAA7AEEE3C99EFE59F1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft Manifest number: 0783 Signing time: Fri 26 Dec 2025 07:01:58 +0000 Manifest this update: Fri 26 Dec 2025 07:01:58 +0000 Manifest next update: Sat 27 Dec 2025 07:01:58 +0000 Files and hashes: 1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: MDK6p9dxE/qBR5aL4uoQeR85qEd8RJ9q77pVjfI9k7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:d5:83:72:6c:da:a7:ae:ee:3c:99:ef:e5:9f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741 Validity Not Before: Dec 26 07:01:58 2025 GMT Not After : Dec 27 07:01:58 2025 GMT Subject: CN=8af90da89accee4d21dbdd763f58f7c6ae291488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:0f:4e:8d:e9:ff:c1:0f:ab:df:10:31:8a: ed:9b:a9:13:f7:d2:39:5e:57:38:b5:00:df:31:8d: 08:d6:90:27:b9:92:de:dc:65:e2:e2:36:14:e5:14: 8b:36:3f:20:75:11:ff:4b:02:b2:e8:c4:bd:06:dd: 34:ee:5e:9d:d4:a0:ec:c1:bd:62:f9:7d:cc:48:bd: ee:8f:39:7e:4b:fb:f7:fb:58:9f:21:39:64:76:1e: ca:21:1b:c4:c2:53:51:e5:fc:66:ed:1c:ff:90:e8: 56:2a:df:e6:9b:ec:13:e3:37:3d:23:d3:a1:cd:4e: 36:25:7b:21:e7:55:d6:5a:c2:13:17:d4:52:e3:22: 2f:d8:99:bd:f1:ee:f7:78:f3:74:51:82:41:ca:51: c1:12:62:99:02:c7:3f:72:f6:50:17:03:8d:d1:32: 2e:56:2c:3f:78:06:de:c8:7b:c8:e5:a5:3c:49:68: eb:ee:f5:d4:f6:c7:a1:95:e5:ec:06:6e:bb:69:ab: ae:70:72:78:97:06:a5:45:23:cc:73:35:4a:f6:18: e0:14:28:82:1c:46:4d:5f:78:19:c5:9a:ac:5f:c9: 46:25:0f:77:17:55:77:4a:ca:a8:e2:da:d6:ff:56: 7f:0b:97:92:ef:bd:31:b5:b7:0d:28:86:ab:83:15: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F9:0D:A8:9A:CC:EE:4D:21:DB:DD:76:3F:58:F7:C6:AE:29:14:88 X509v3 Authority Key Identifier: keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2b:59:ee:f4:95:87:8d:21:b9:da:82:8d:00:3b:e1:30:a3: 05:56:66:01:45:a1:aa:e8:40:2d:fd:e5:1f:51:be:c3:d0:a4: 23:cc:ee:cf:40:ec:55:dc:0e:05:f9:ab:08:ee:5a:e9:01:ea: 8d:c8:77:3a:12:28:11:2d:6b:84:8a:3f:20:17:47:94:5b:36: b6:8d:58:f0:f6:60:01:b3:4b:0e:4d:ae:5d:cc:f1:d0:6b:24: 60:c9:84:0a:36:e8:68:5f:c8:a5:d4:e7:09:79:6c:d4:b0:d8: 61:fc:39:cc:28:ed:d3:31:82:2b:03:73:fc:e7:86:3f:0a:cf: 88:77:86:45:14:7e:e3:3b:4c:7c:9f:c4:03:29:49:9e:9a:55: 67:13:ad:13:78:9e:7c:cd:69:12:00:d4:a9:85:29:99:a9:de: c3:d9:ce:dc:65:d3:68:36:cf:05:4d:31:62:ab:a8:a0:07:da: b3:93:3c:1d:14:58:9d:26:b0:72:8b:e7:d1:62:56:6f:a2:cf: d1:de:65:6f:fc:a2:bf:87:07:a3:6f:f3:01:87:b6:ae:e4:de: 91:0b:ae:9c:d8:dc:f4:8c:a2:61:42:d1:d4:4b:22:bb:76:27: df:f4:8c:02:79:de:c0:6a:62:13:64:5f:1d:6f:6c:3f:f1:7b: 53:57:58:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdtWDcmzap67uPJnv5Z8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyOGUxYWM3OGU3NmI2ODdkZDU2MDVmMmZiODFmZGQ1YWFm ZWI3NDEwHhcNMjUxMjI2MDcwMTU4WhcNMjUxMjI3MDcwMTU4WjAzMTEwLwYDVQQD Eyg4YWY5MGRhODlhY2NlZTRkMjFkYmRkNzYzZjU4ZjdjNmFlMjkxNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIcPTo3p/8EPq98QMYrtm6kT99I5 Xlc4tQDfMY0I1pAnuZLe3GXi4jYU5RSLNj8gdRH/SwKy6MS9Bt007l6d1KDswb1i +X3MSL3ujzl+S/v3+1ifITlkdh7KIRvEwlNR5fxm7Rz/kOhWKt/mm+wT4zc9I9Oh zU42JXsh51XWWsITF9RS4yIv2Jm98e73ePN0UYJBylHBEmKZAsc/cvZQFwON0TIu Viw/eAbeyHvI5aU8SWjr7vXU9sehleXsBm67aauucHJ4lwalRSPMczVK9hjgFCiC HEZNX3gZxZqsX8lGJQ93F1V3Ssqo4trW/1Z/C5eS770xtbcNKIargxUitQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr5DaiazO5NIdvddj9Y98auKRSIMB8GA1UdIwQY MBaAFIKOGseOdraH3VYF8vuB/dWq/rdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYt ZDA2ZTdjNjkyZDhiLzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYtZDA2ZTdjNjkyZDhi LzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATitZ7vSV h40hudqCjQA74TCjBVZmAUWhquhALf3lH1G+w9CkI8zuz0DsVdwOBfmrCO5a6QHq jch3OhIoES1rhIo/IBdHlFs2to1Y8PZgAbNLDk2uXczx0GskYMmECjboaF/IpdTn CXls1LDYYfw5zCjt0zGCKwNz/OeGPwrPiHeGRRR+4ztMfJ/EAylJnppVZxOtE3ie fM1pEgDUqYUpmanew9nO3GXTaDbPBU0xYquooAfas5M8HRRYnSawcovn0WJWb6LP 0d5lb/yiv4cHo2/zAYe2ruTekQuunNjc9IyiYULR1Esiu3Yn3/SMAnnewGpiE2Rf HW9sP/F7U1dY7g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:21 2025 by rpki-client