This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json) Hash identifier: vfQQiG2/QzPa8O5AAyEQfsK6TZNwkKrXaXFit1aknP4= Subject key identifier: 2E:59:F1:96:4D:2E:F0:CA:D0:DD:7B:6D:CC:A3:28:54:1E:57:A5:B7 Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9 Certificate serial: 019B3C107DB8178AA85D47D00CD6DFAE2F8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft Manifest number: 03A7 Signing time: Sat 20 Dec 2025 14:01:12 +0000 Manifest this update: Sat 20 Dec 2025 14:01:12 +0000 Manifest next update: Sun 21 Dec 2025 14:01:12 +0000 Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: gG3TiAui3l+Ev+FY5TUExqgABDFVhF4cLWxqmO4yNb8=) 2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=) 3: QBnJw99597zp1MOGO0aw50ZWWWw.roa (hash: Sivngawcknlc7BG16HCXOssKTWMLVcvalL4l8eCv6+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:7d:b8:17:8a:a8:5d:47:d0:0c:d6:df:ae:2f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9 Validity Not Before: Dec 20 14:01:12 2025 GMT Not After : Dec 21 14:01:12 2025 GMT Subject: CN=2e59f1964d2ef0cad0dd7b6dcca328541e57a5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ca:d5:a8:fb:a2:55:b6:b1:86:d8:d1:be:a3: 82:b8:17:2e:45:08:90:ae:f6:c1:64:26:b3:b1:cc: aa:6f:2c:20:6f:60:0f:27:ba:65:18:e7:cd:3c:b7: cc:34:90:f9:03:e9:cd:11:5c:bc:fb:1e:aa:9e:10: ed:33:fc:da:9e:21:5b:33:e5:c1:61:95:08:95:dd: 39:39:ce:ae:02:ee:56:7d:fe:3f:b5:b0:c8:19:21: 17:5f:24:5b:0f:82:73:aa:37:c9:f5:a7:ab:65:57: ca:42:d7:0f:c5:8f:2c:4b:12:4d:ae:ee:be:a4:d8: e2:aa:ea:23:c1:25:9d:b0:0d:03:f0:99:fa:df:f1: 3f:84:f2:8a:04:39:d4:8b:fe:7e:4c:36:84:06:09: 90:bd:c2:ea:1c:30:bf:8c:ce:96:13:0c:d7:b2:a0: af:2a:7e:6d:1e:47:8d:3a:bf:9f:35:53:a2:06:a8: 0b:ca:53:1e:f2:cc:70:46:ca:7f:d1:d3:0e:6a:cd: ee:91:4b:46:d3:17:6e:a0:dd:ac:15:2c:14:25:56: b8:66:fe:63:ba:b5:dc:a5:ac:df:2f:32:5e:f2:58: 2c:0c:e9:50:99:78:74:2f:9e:6a:66:74:28:a9:63: d4:da:72:36:39:1d:7d:8f:a8:a0:af:47:0e:84:d6: 7b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:59:F1:96:4D:2E:F0:CA:D0:DD:7B:6D:CC:A3:28:54:1E:57:A5:B7 X509v3 Authority Key Identifier: keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:3e:7c:39:22:6d:a0:aa:cd:a6:58:9a:06:49:0f:d7:5f:60: 02:c5:47:d8:76:2c:3c:0b:27:50:27:8d:bf:4d:f7:e0:68:05: 4b:86:d7:0b:b4:69:88:75:1a:09:bc:a1:b8:87:4b:1c:0d:53: 17:49:93:45:af:04:80:65:27:f7:c8:cb:3c:b9:5c:19:ee:0e: 6a:88:86:63:3e:c3:54:3b:32:68:20:43:e2:96:e0:3e:da:d0: 42:a9:a9:79:57:f9:b3:7e:4f:71:07:3b:ac:a7:fe:db:96:7d: 62:a2:f1:14:a2:f4:96:3f:dd:bf:13:ce:68:85:5b:4d:ac:c5: 35:c6:93:89:fa:62:e5:f9:73:06:50:6f:82:6a:27:87:3f:70: 26:65:1f:0e:88:b8:0f:36:09:59:83:85:11:db:47:67:9e:9d: c6:eb:81:f1:1e:32:5c:ed:e3:f5:95:41:5e:b5:9f:09:4e:64: f4:c8:25:ef:90:26:a7:81:56:37:6d:6e:54:6e:28:c1:46:b4: 66:9a:9c:4c:64:2d:93:b0:69:54:74:25:ac:24:c8:57:41:db: 9a:8b:e0:78:9b:b9:01:ca:91:87:f9:49:e7:5e:07:1a:84:6b: 2c:3c:d3:60:31:10:14:9e:ea:67:cb:13:ef:42:8e:67:3f:43: 54:bd:4c:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EH24F4qoXUfQDNbfri+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh MjQzZTkwHhcNMjUxMjIwMTQwMTEyWhcNMjUxMjIxMTQwMTEyWjAzMTEwLwYDVQQD EygyZTU5ZjE5NjRkMmVmMGNhZDBkZDdiNmRjY2EzMjg1NDFlNTdhNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcrVqPuiVbaxhtjRvqOCuBcuRQiQ rvbBZCazscyqbywgb2APJ7plGOfNPLfMNJD5A+nNEVy8+x6qnhDtM/zaniFbM+XB YZUIld05Oc6uAu5Wff4/tbDIGSEXXyRbD4JzqjfJ9aerZVfKQtcPxY8sSxJNru6+ pNjiquojwSWdsA0D8Jn63/E/hPKKBDnUi/5+TDaEBgmQvcLqHDC/jM6WEwzXsqCv Kn5tHkeNOr+fNVOiBqgLylMe8sxwRsp/0dMOas3ukUtG0xduoN2sFSwUJVa4Zv5j urXcpazfLzJe8lgsDOlQmXh0L55qZnQoqWPU2nI2OR19j6igr0cOhNZ7wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5Z8ZZNLvDK0N17bcyjKFQeV6W3MB8GA1UdIwQY MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt ODc3Y2YyMWM4ZjdiLzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoT58OSJt oKrNpliaBkkP119gAsVH2HYsPAsnUCeNv0334GgFS4bXC7RpiHUaCbyhuIdLHA1T F0mTRa8EgGUn98jLPLlcGe4OaoiGYz7DVDsyaCBD4pbgPtrQQqmpeVf5s35PcQc7 rKf+25Z9YqLxFKL0lj/dvxPOaIVbTazFNcaTifpi5flzBlBvgmonhz9wJmUfDoi4 DzYJWYOFEdtHZ56dxuuB8R4yXO3j9ZVBXrWfCU5k9Mgl75Amp4FWN21uVG4owUa0 ZpqcTGQtk7BpVHQlrCTIV0HbmovgeJu5AcqRh/lJ514HGoRrLDzTYDEQFJ7qZ8sT 70KOZz9DVL1MJw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:47:08 2025 by rpki-client