This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft File: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft (raw, json) Hash identifier: DHswxqgjzwk69s1awnUSuHgldWzexjzlO6vjdJyOWxA= Subject key identifier: E5:0E:D8:C7:45:35:2B:5D:49:9D:72:72:DD:A6:7C:39:A6:A2:1D:FD Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C Certificate issuer: /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c Certificate serial: 019B3569B208C1FEEB45B1F7C27B8CC4E4C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft Manifest number: 1324 Signing time: Fri 19 Dec 2025 07:01:17 +0000 Manifest this update: Fri 19 Dec 2025 07:01:17 +0000 Manifest next update: Sat 20 Dec 2025 07:01:17 +0000 Files and hashes: 1: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl (hash: M7TwDVm4WlIRF69Tfo8BgJVmzEWV4Xpu5GzzxDNtQho=) 2: iR_ztCB6R1k94ApZF9GyNibhF8I.roa (hash: YgaarQK+xvFmoK9MLi28PlE1obREeY36cujrYCHGRgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:b2:08:c1:fe:eb:45:b1:f7:c2:7b:8c:c4:e4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c Validity Not Before: Dec 19 07:01:17 2025 GMT Not After : Dec 20 07:01:17 2025 GMT Subject: CN=e50ed8c745352b5d499d7272dda67c39a6a21dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:8a:82:92:d5:37:14:56:b4:d8:39:cc:fd: a9:7f:80:24:04:ee:fc:9f:ad:37:fe:fb:21:79:bd: 97:11:20:79:9b:14:1b:e4:b1:a8:69:40:2d:60:9a: df:40:13:2d:1a:78:be:b3:3a:5b:58:39:5f:f9:45: 43:ad:b7:f0:25:4f:f6:6f:ee:f0:5b:ee:68:f9:09: 3e:e4:37:da:b1:99:ff:ef:98:4b:b9:fa:3b:7b:81: fa:ea:05:c3:14:84:f4:e6:10:98:59:30:e0:9f:fb: ed:b4:fb:1a:c4:d9:88:7a:0f:46:93:dd:a4:56:6e: ea:5b:7f:82:a5:97:e0:62:58:cf:67:87:b5:65:50: 03:5d:ff:ad:9e:68:f1:8c:20:4b:78:c2:5d:30:e3: 8e:e3:d9:ae:99:a5:c4:a3:77:b5:ab:02:1b:f3:50: 35:03:10:39:df:3b:4d:37:0a:8b:80:05:56:c0:bd: fa:dc:ef:65:23:dd:f5:d1:07:19:53:51:f0:73:24: e7:e3:76:b7:d4:de:96:e7:62:77:73:22:0c:4d:b3: 20:b6:ba:d2:22:87:b2:78:83:9a:6d:e2:9b:e5:5a: f4:8f:5b:54:bb:a7:9c:01:cf:1f:99:f5:d4:b2:f6: 41:04:4f:eb:cd:b5:29:fa:4e:9b:25:e0:62:74:88: 68:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0E:D8:C7:45:35:2B:5D:49:9D:72:72:DD:A6:7C:39:A6:A2:1D:FD X509v3 Authority Key Identifier: keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:7b:91:3c:fa:a1:db:5d:33:a8:22:40:5b:d7:aa:8a:d8:3d: 10:d4:2d:66:d7:75:f0:6a:2b:6d:e3:a6:fd:da:d6:22:df:73: 63:32:cc:55:07:0d:d4:65:77:39:3e:76:c8:92:e6:e2:13:77: 62:e5:7f:ac:c7:8f:51:e9:4d:bc:6e:bf:8b:96:d9:41:d7:9b: 25:4c:fc:5c:78:06:33:f1:b4:b5:0f:21:d0:0e:af:dd:2b:b7: 35:fa:72:97:dd:33:53:a0:ed:e4:e2:e5:f3:80:60:18:8a:ac: 36:f0:ab:44:a5:0a:7f:6a:c6:28:10:4d:3d:d6:cb:d7:c5:41: d2:50:bf:76:da:5c:9b:f6:4e:d2:20:15:d0:2f:f1:c4:0f:c8: b0:fe:15:85:a8:7a:46:bd:f6:39:fc:d9:38:29:25:63:ff:14: 5c:cc:7f:44:da:76:e8:2d:68:4e:b6:80:79:f8:76:e4:c6:86: 3d:79:cd:b6:ce:12:5d:1b:ad:39:c7:c0:1c:ea:ac:f0:fb:97: 74:9f:ea:5f:b4:6b:0f:d6:7c:40:3c:43:c7:2a:85:04:b3:6f: 83:82:08:b8:f8:ff:ca:14:18:e3:7e:83:c4:b7:26:54:a6:b0: 81:95:af:d0:7e:c0:36:39:4c:31:7f:cb:4b:30:46:03:05:b3: 29:db:8c:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1abIIwf7rRbH3wnuMxOTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZTUwNmZjZjFkN2NmNjQ5ZDM4OGU5NzVjYTI2MjUyZTIx OWZjN2MwHhcNMjUxMjE5MDcwMTE3WhcNMjUxMjIwMDcwMTE3WjAzMTEwLwYDVQQD EyhlNTBlZDhjNzQ1MzUyYjVkNDk5ZDcyNzJkZGE2N2MzOWE2YTIxZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttiKgpLVNxRWtNg5zP2pf4AkBO78 n603/vsheb2XESB5mxQb5LGoaUAtYJrfQBMtGni+szpbWDlf+UVDrbfwJU/2b+7w W+5o+Qk+5DfasZn/75hLufo7e4H66gXDFIT05hCYWTDgn/vttPsaxNmIeg9Gk92k Vm7qW3+CpZfgYljPZ4e1ZVADXf+tnmjxjCBLeMJdMOOO49mumaXEo3e1qwIb81A1 AxA53ztNNwqLgAVWwL363O9lI9310QcZU1HwcyTn43a31N6W52J3cyIMTbMgtrrS IoeyeIOabeKb5Vr0j1tUu6ecAc8fmfXUsvZBBE/rzbUp+k6bJeBidIhosQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUO2MdFNStdSZ1yct2mfDmmoh39MB8GA1UdIwQY MBaAFIDlBvzx189knTiOl1yiYlLiGfx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hOGY0NzEtYzI0My00Y2M2LTk3MGQt ZmY3ZGMwNGJhMzg1LzEvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hOGY0NzEtYzI0My00Y2M2LTk3MGQtZmY3ZGMwNGJhMzg1 LzEvZ09VR19QSFh6MlNkT0k2WFhLSmlVdUlaX0h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXuRPPqh 210zqCJAW9eqitg9ENQtZtd18GorbeOm/drWIt9zYzLMVQcN1GV3OT52yJLm4hN3 YuV/rMePUelNvG6/i5bZQdebJUz8XHgGM/G0tQ8h0A6v3Su3Nfpyl90zU6Dt5OLl 84BgGIqsNvCrRKUKf2rGKBBNPdbL18VB0lC/dtpcm/ZO0iAV0C/xxA/IsP4Vhah6 Rr32OfzZOCklY/8UXMx/RNp26C1oTraAefh25MaGPXnNts4SXRutOcfAHOqs8PuX dJ/qX7RrD9Z8QDxDxyqFBLNvg4IIuPj/yhQY436DxLcmVKawgZWv0H7ANjlMMX/L SzBGAwWzKduM5A== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:03 2025 by rpki-client