This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft File: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft (raw, json) Hash identifier: LYZ2L63jDEFG+9NyF21ogFJtBB8/+EovW/wc5suQEoM= Subject key identifier: DE:FF:3D:AA:AA:8A:33:42:C2:A5:67:6A:8A:59:CC:C2:36:F4:CF:90 Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C Certificate issuer: /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c Certificate serial: 019B337B503211A24D9FE0841F79043A6A0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft Manifest number: 1323 Signing time: Thu 18 Dec 2025 22:01:17 +0000 Manifest this update: Thu 18 Dec 2025 22:01:17 +0000 Manifest next update: Fri 19 Dec 2025 22:01:17 +0000 Files and hashes: 1: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl (hash: GdLmZjLtOzmNgwhCJX95MANBBnhao4MNt/+qQkSSibw=) 2: iR_ztCB6R1k94ApZF9GyNibhF8I.roa (hash: YgaarQK+xvFmoK9MLi28PlE1obREeY36cujrYCHGRgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:50:32:11:a2:4d:9f:e0:84:1f:79:04:3a:6a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c Validity Not Before: Dec 18 22:01:17 2025 GMT Not After : Dec 19 22:01:17 2025 GMT Subject: CN=deff3daaaa8a3342c2a5676a8a59ccc236f4cf90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:fd:3f:4a:51:16:2c:40:ae:c5:55:71:bb: 50:86:38:53:94:ae:1a:19:cd:1f:e5:eb:82:64:fd: 2e:56:f4:e0:47:b9:10:12:30:cd:72:27:12:e2:10: e5:a8:33:4d:41:6e:28:43:74:17:fa:f9:85:16:23: cd:88:ac:b7:cb:11:77:c2:c2:82:43:23:c5:c6:75: e0:b6:9d:dd:48:c9:6d:4e:80:47:f4:c7:3f:bc:12: d3:fa:02:ae:e2:6c:29:18:2d:26:3e:9e:5a:1f:9e: 54:c7:36:de:72:ba:33:ab:41:2a:b2:a9:cd:f5:53: f7:6f:d1:15:44:41:e2:3c:ff:81:05:fc:64:95:17: ac:79:29:94:e6:9d:58:30:6b:5e:24:60:f2:6e:6d: 82:24:e6:8a:d1:51:18:f6:fd:bc:3c:32:70:0f:16: 19:df:c5:e5:8d:5a:e0:e8:20:7a:24:be:77:81:dd: 10:37:21:74:4d:ee:e3:20:07:93:a4:44:6d:cb:eb: 55:eb:ce:fb:af:19:a5:7f:de:eb:14:c7:82:d8:ed: 0e:ea:4f:e5:72:c0:c4:e2:9d:ca:3f:94:d5:fc:52: 24:a5:e7:ec:72:3c:fa:6d:96:ff:f7:4e:8e:cd:9c: c8:a0:88:5f:82:bd:f5:02:ea:d1:f4:7a:32:42:61: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FF:3D:AA:AA:8A:33:42:C2:A5:67:6A:8A:59:CC:C2:36:F4:CF:90 X509v3 Authority Key Identifier: keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a4:50:58:a1:f7:30:75:bd:0a:56:7d:17:be:d5:41:a7:f1: 3e:4a:45:1d:53:8a:b6:ae:c3:31:c9:18:60:b0:1d:5a:8d:74: 8c:80:e1:73:df:c7:2a:a4:55:47:ae:c4:14:21:61:76:75:72: 19:be:cf:15:7c:1d:14:19:4e:89:a2:4f:61:62:52:5c:13:87: c8:e5:b1:3a:ca:d0:d7:ca:d8:d7:cf:65:34:71:a2:b1:44:4e: 8e:07:b8:5d:94:9f:cb:4c:6e:f8:34:50:9e:05:7c:1d:67:f2: f2:43:45:98:6b:71:69:ff:92:e0:37:cd:6a:b3:5f:93:21:71: 8d:9e:c3:08:67:31:41:13:8c:2e:a1:85:ce:1c:60:64:c1:0f: 48:26:5a:e9:aa:c0:b9:92:4b:93:a2:84:6d:cb:2f:50:ed:bc: a9:95:13:71:96:ab:6a:85:c2:76:08:22:cd:e4:c3:f5:fc:b4: 6c:c5:64:e6:7b:5b:d0:6c:bb:62:26:91:07:53:b8:3a:5b:f6: 78:08:ae:08:94:4e:a3:c5:5b:e4:57:21:74:9a:71:25:48:2e: f3:04:39:7f:93:f6:04:41:7e:15:db:33:92:5b:cd:33:68:f4: d6:67:38:7e:ba:44:a9:82:2e:56:0f:fd:ee:b4:46:31:7a:75: cd:f9:f7:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze1AyEaJNn+CEH3kEOmoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZTUwNmZjZjFkN2NmNjQ5ZDM4OGU5NzVjYTI2MjUyZTIx OWZjN2MwHhcNMjUxMjE4MjIwMTE3WhcNMjUxMjE5MjIwMTE3WjAzMTEwLwYDVQQD EyhkZWZmM2RhYWFhOGEzMzQyYzJhNTY3NmE4YTU5Y2NjMjM2ZjRjZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0f9P0pRFixArsVVcbtQhjhTlK4a Gc0f5euCZP0uVvTgR7kQEjDNcicS4hDlqDNNQW4oQ3QX+vmFFiPNiKy3yxF3wsKC QyPFxnXgtp3dSMltToBH9Mc/vBLT+gKu4mwpGC0mPp5aH55Uxzbecrozq0EqsqnN 9VP3b9EVREHiPP+BBfxklReseSmU5p1YMGteJGDybm2CJOaK0VEY9v28PDJwDxYZ 38XljVrg6CB6JL53gd0QNyF0Te7jIAeTpERty+tV6877rxmlf97rFMeC2O0O6k/l csDE4p3KP5TV/FIkpefscjz6bZb/906OzZzIoIhfgr31AurR9HoyQmF3XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7/PaqqijNCwqVnaopZzMI29M+QMB8GA1UdIwQY MBaAFIDlBvzx189knTiOl1yiYlLiGfx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hOGY0NzEtYzI0My00Y2M2LTk3MGQt ZmY3ZGMwNGJhMzg1LzEvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hOGY0NzEtYzI0My00Y2M2LTk3MGQtZmY3ZGMwNGJhMzg1 LzEvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKRQWKH3 MHW9ClZ9F77VQafxPkpFHVOKtq7DMckYYLAdWo10jIDhc9/HKqRVR67EFCFhdnVy Gb7PFXwdFBlOiaJPYWJSXBOHyOWxOsrQ18rY189lNHGisUROjge4XZSfy0xu+DRQ ngV8HWfy8kNFmGtxaf+S4DfNarNfkyFxjZ7DCGcxQROMLqGFzhxgZMEPSCZa6arA uZJLk6KEbcsvUO28qZUTcZaraoXCdggizeTD9fy0bMVk5ntb0Gy7YiaRB1O4Olv2 eAiuCJROo8Vb5FchdJpxJUgu8wQ5f5P2BEF+FdszklvNM2j01mc4frpEqYIuVg/9 7rRGMXp1zfn3jQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:11:45 2025 by rpki-client