This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft File: Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft (raw, json) Hash identifier: wEgVoEbU+6q3JowoXpIplecf0QQ2PSRHOpmG61RzX1A= Subject key identifier: DD:41:12:EF:97:A1:14:97:48:BF:9C:2C:E0:88:6C:02:99:3A:9B:52 Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7 Certificate issuer: /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7 Certificate serial: 019B3CEBDF989E88B5BB997767132405903A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft Manifest number: 1622 Signing time: Sat 20 Dec 2025 18:00:49 +0000 Manifest this update: Sat 20 Dec 2025 18:00:49 +0000 Manifest next update: Sun 21 Dec 2025 18:00:49 +0000 Files and hashes: 1: Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl (hash: GFpeDzYBmEfjAiaZTLYGUMqIQMF4Djjfdry54DRltzI=) 2: zMf8rLLySKjPSPZ8s-ZIz2q25OU.roa (hash: VJ+YYFZYZSo5PYkWSZhl4wZdJBhoCHORhk0CDA+bcUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:df:98:9e:88:b5:bb:99:77:67:13:24:05:90:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7 Validity Not Before: Dec 20 18:00:49 2025 GMT Not After : Dec 21 18:00:49 2025 GMT Subject: CN=dd4112ef97a1149748bf9c2ce0886c02993a9b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:71:d8:a1:1a:79:06:55:47:8c:f2:ee:08: 9a:03:d7:c7:66:b0:19:0f:d1:3b:d6:32:f9:1a:1f: 58:0b:c7:ad:ff:0e:0b:5a:88:08:dc:b9:15:d7:f5: f1:b5:78:ac:5e:85:18:51:88:58:ff:05:68:bc:a8: 2c:c4:32:4a:17:d6:6e:2e:dc:2a:7b:de:ea:94:97: 14:6c:6d:02:a5:32:a1:f8:26:05:50:75:d0:c1:80: 86:6c:8c:4d:40:0c:91:af:18:91:a6:32:6d:6c:2c: c3:34:2b:99:21:92:06:00:ff:cf:bd:19:ce:59:18: 5e:c2:49:2a:8e:0e:6f:39:a9:71:cd:39:4b:08:60: f0:7f:b6:09:e2:e0:c5:04:24:68:96:76:aa:5b:31: 67:d2:be:13:e1:65:a3:d3:3b:42:e5:33:cf:71:4b: 13:ec:06:77:78:53:37:ec:72:5d:65:39:91:bf:71: 60:d4:c0:1e:39:34:01:52:64:2d:4d:5e:49:73:8f: 42:89:bd:2f:8f:c2:7a:c8:0c:f4:08:91:4b:5f:de: 25:09:55:04:5f:39:de:34:90:82:1f:02:c2:95:71: 7a:de:5f:01:86:83:62:e2:dd:37:a2:86:fb:61:16: d3:34:01:c6:23:20:d6:0b:3f:48:2d:9f:42:2f:87: cd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:41:12:EF:97:A1:14:97:48:BF:9C:2C:E0:88:6C:02:99:3A:9B:52 X509v3 Authority Key Identifier: keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ce:91:86:76:7d:a7:ac:7b:c2:6d:59:04:36:5d:81:2e:84: d4:98:42:70:ee:ec:b3:4e:90:35:b3:bf:db:7e:8f:da:f0:19: 56:ba:32:85:03:0c:b3:51:f3:01:ff:0e:25:7a:70:79:b9:24: cf:01:f2:10:09:fc:72:c7:80:a3:f6:38:f6:1d:41:b1:dd:44: f2:2b:0f:a7:9f:a7:a9:e0:8a:71:6a:37:f3:b5:1c:b6:be:40: 8a:c8:b9:fa:4f:e5:8a:7d:ce:61:34:e3:bb:5e:89:fa:c7:17: 9f:44:c5:f1:82:38:11:28:ab:0a:0b:da:89:48:2a:54:2a:11: bd:67:a0:f5:2d:ce:36:74:7c:9f:06:81:5c:41:84:43:04:b3: 6a:8e:75:73:53:79:e4:da:5e:ba:0d:b3:e8:9d:d0:89:92:53: d1:04:1d:14:07:7b:8f:d5:4d:78:d5:95:c0:9a:10:a0:38:3a: 53:e5:6d:57:ad:76:89:74:7a:0c:0a:1c:0a:d2:42:7b:eb:40: ce:51:6e:a4:0e:b0:fa:a4:17:ef:29:91:2b:53:47:d6:aa:80: eb:af:5f:dc:2c:f1:b4:f7:20:69:59:9d:4e:07:0e:48:10:8a: 2f:b4:b3:d1:4d:76:31:c7:ac:10:aa:3f:81:f1:55:cc:56:aa: 54:7e:7e:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869+Ynoi1u5l3ZxMkBZA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODhhZjkzODQ1YmQyNTM4NjQ1MmRiZGZhYTAyMTZlMTNj YWY4YzcwHhcNMjUxMjIwMTgwMDQ5WhcNMjUxMjIxMTgwMDQ5WjAzMTEwLwYDVQQD EyhkZDQxMTJlZjk3YTExNDk3NDhiZjljMmNlMDg4NmMwMjk5M2E5YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttlx2KEaeQZVR4zy7giaA9fHZrAZ D9E71jL5Gh9YC8et/w4LWogI3LkV1/XxtXisXoUYUYhY/wVovKgsxDJKF9ZuLtwq e97qlJcUbG0CpTKh+CYFUHXQwYCGbIxNQAyRrxiRpjJtbCzDNCuZIZIGAP/PvRnO WRhewkkqjg5vOalxzTlLCGDwf7YJ4uDFBCRolnaqWzFn0r4T4WWj0ztC5TPPcUsT 7AZ3eFM37HJdZTmRv3Fg1MAeOTQBUmQtTV5Jc49Cib0vj8J6yAz0CJFLX94lCVUE XzneNJCCHwLClXF63l8BhoNi4t03oob7YRbTNAHGIyDWCz9ILZ9CL4fNDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1BEu+XoRSXSL+cLOCIbAKZOptSMB8GA1UdIwQY MBaAFBqIr5OEW9JThkUtvfqgIW4TyvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80YzdiOGMtZjEzMS00OTk2LWI4ZjUt NWY5ZjBhYzBmYWU3LzEvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy80YzdiOGMtZjEzMS00OTk2LWI4ZjUtNWY5ZjBhYzBmYWU3 LzEvR29pdms0UmIwbE9HUlMyOS1xQWhiaFBLLU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlc6RhnZ9 p6x7wm1ZBDZdgS6E1JhCcO7ss06QNbO/236P2vAZVroyhQMMs1HzAf8OJXpwebkk zwHyEAn8cseAo/Y49h1Bsd1E8isPp5+nqeCKcWo387Uctr5Aisi5+k/lin3OYTTj u16J+scXn0TF8YI4ESirCgvaiUgqVCoRvWeg9S3ONnR8nwaBXEGEQwSzao51c1N5 5Npeug2z6J3QiZJT0QQdFAd7j9VNeNWVwJoQoDg6U+VtV612iXR6DAocCtJCe+tA zlFupA6w+qQX7ymRK1NH1qqA669f3CzxtPcgaVmdTgcOSBCKL7Sz0U12McesEKo/ gfFVzFaqVH5+ng== -----END CERTIFICATE-----Generated at Sun Dec 21 01:13:48 2025 by rpki-client