This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json) Hash identifier: I+Dl2JYE4RRqlRaW7wiGJlP2VYWyKGNG0WxMqZdQfRc= Subject key identifier: 46:81:F1:F9:9B:95:94:E5:AC:F9:DA:8A:C5:EA:4D:ED:BA:F0:E3:3F Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9 Certificate serial: 019B533D1E522735661DB589469ABF17CB4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft Manifest number: 03B3 Signing time: Thu 25 Dec 2025 02:01:12 +0000 Manifest this update: Thu 25 Dec 2025 02:01:12 +0000 Manifest next update: Fri 26 Dec 2025 02:01:12 +0000 Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: 0oD21SlTxwWEk8izovSYoCOFdvLCdPekUeWhZB913WA=) 2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=) 3: QBnJw99597zp1MOGO0aw50ZWWWw.roa (hash: Sivngawcknlc7BG16HCXOssKTWMLVcvalL4l8eCv6+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:1e:52:27:35:66:1d:b5:89:46:9a:bf:17:cb:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9 Validity Not Before: Dec 25 02:01:12 2025 GMT Not After : Dec 26 02:01:12 2025 GMT Subject: CN=4681f1f99b9594e5acf9da8ac5ea4dedbaf0e33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cb:d7:46:6c:28:88:2a:d4:b1:f6:8c:27:fc: 5f:8e:bb:60:0f:83:27:23:51:16:63:44:99:b0:6f: aa:7c:0f:16:65:1f:53:7d:bd:56:92:bd:09:eb:a7: 54:6c:85:1e:95:27:2e:83:27:09:56:ff:7e:a5:36: 87:9b:89:ef:07:60:5f:3b:42:79:82:52:08:c2:93: 80:5f:c2:86:44:22:da:15:aa:82:63:80:52:33:31: 79:39:df:32:ff:86:11:4e:2b:4e:41:75:9b:2b:13: 2c:72:59:7b:45:57:a4:2e:e6:32:37:ab:67:c2:30: 93:31:83:5e:49:b1:8b:84:93:66:f9:1a:36:2c:91: 69:9f:5d:4e:b9:0b:13:8f:60:79:98:89:6d:e2:75: 6b:02:dd:41:0d:45:be:c1:a8:5c:93:4e:7b:21:be: 78:19:83:76:ea:fc:eb:8a:d3:5e:08:41:9b:e1:6c: 94:2b:26:f5:d0:89:15:73:5e:7a:ba:be:89:ab:5a: 78:83:ec:d4:dd:22:8c:a7:98:d7:7d:3d:0b:33:ff: 1c:d2:95:2d:8d:76:93:d7:11:6b:71:00:c7:a9:bf: 66:e0:93:a2:10:78:3c:d5:90:27:15:e5:4f:b8:79: 5b:89:ad:5d:a0:73:9e:ad:cd:7e:ad:b4:7f:dc:53: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:81:F1:F9:9B:95:94:E5:AC:F9:DA:8A:C5:EA:4D:ED:BA:F0:E3:3F X509v3 Authority Key Identifier: keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e3:14:c9:88:54:72:d6:49:41:58:40:61:5d:91:79:90:7d: 86:c0:85:84:85:ba:ad:fa:5a:13:34:f9:99:94:d1:ed:86:5f: 3f:fd:d1:08:c5:73:d4:fa:a4:8e:e5:ed:c2:0d:32:09:81:67: 69:8a:c2:0d:b4:4b:15:a2:4d:04:d3:c7:ff:5d:a1:67:eb:9d: e8:d8:8c:fb:10:23:b9:c5:29:9d:26:42:7d:71:1d:d7:4d:8c: 02:7d:33:dd:23:83:ab:16:ea:99:77:4b:1a:44:af:ac:3c:07: d6:ba:44:ec:fd:25:f0:46:ca:ab:57:a5:63:a3:89:ac:85:73: d4:3b:75:b2:3d:2b:3c:88:a5:21:e5:28:d3:9c:1f:9c:2f:92: d6:d7:96:f0:ac:bc:b3:eb:2a:48:de:08:ea:e0:37:54:af:06: af:60:83:71:a7:d8:2c:ad:9f:01:1f:f1:c4:f9:32:43:5c:5b: cc:e9:5c:44:fd:2e:60:b8:65:36:e6:07:a8:4b:cb:ad:45:52: 7f:10:3d:7d:a3:c2:eb:3a:01:a1:bb:76:88:97:5f:65:1b:45: 1f:38:ba:e5:4e:b0:29:01:25:26:fe:e7:5c:29:9b:3b:7d:bb: 07:84:fe:e5:93:0c:7f:a4:7e:41:c3:0a:a0:34:50:24:1b:8f: 07:fa:83:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPR5SJzVmHbWJRpq/F8tMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh MjQzZTkwHhcNMjUxMjI1MDIwMTEyWhcNMjUxMjI2MDIwMTEyWjAzMTEwLwYDVQQD Eyg0NjgxZjFmOTliOTU5NGU1YWNmOWRhOGFjNWVhNGRlZGJhZjBlMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cvXRmwoiCrUsfaMJ/xfjrtgD4Mn I1EWY0SZsG+qfA8WZR9Tfb1Wkr0J66dUbIUelScugycJVv9+pTaHm4nvB2BfO0J5 glIIwpOAX8KGRCLaFaqCY4BSMzF5Od8y/4YRTitOQXWbKxMscll7RVekLuYyN6tn wjCTMYNeSbGLhJNm+Ro2LJFpn11OuQsTj2B5mIlt4nVrAt1BDUW+wahck057Ib54 GYN26vzritNeCEGb4WyUKyb10IkVc156ur6Jq1p4g+zU3SKMp5jXfT0LM/8c0pUt jXaT1xFrcQDHqb9m4JOiEHg81ZAnFeVPuHlbia1doHOerc1+rbR/3FNkYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaB8fmblZTlrPnaisXqTe268OM/MB8GA1UdIwQY MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt ODc3Y2YyMWM4ZjdiLzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuMUyYhU ctZJQVhAYV2ReZB9hsCFhIW6rfpaEzT5mZTR7YZfP/3RCMVz1PqkjuXtwg0yCYFn aYrCDbRLFaJNBNPH/12hZ+ud6NiM+xAjucUpnSZCfXEd102MAn0z3SODqxbqmXdL GkSvrDwH1rpE7P0l8EbKq1elY6OJrIVz1Dt1sj0rPIilIeUo05wfnC+S1teW8Ky8 s+sqSN4I6uA3VK8Gr2CDcafYLK2fAR/xxPkyQ1xbzOlcRP0uYLhlNuYHqEvLrUVS fxA9faPC6zoBobt2iJdfZRtFHzi65U6wKQElJv7nXCmbO327B4T+5ZMMf6R+QcMK oDRQJBuPB/qD5g== -----END CERTIFICATE-----Generated at Thu Dec 25 04:35:49 2025 by rpki-client