This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft File: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft (raw, json) Hash identifier: uRA+MHJwWcAZq8+9dY8/w5DZK+AadMxDqcCA0DXzn9M= Subject key identifier: 90:5C:61:FD:9E:22:CC:42:CD:FF:38:B4:5B:E3:9F:D7:FC:8F:D4:1B Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2 Certificate issuer: /CN=1a88f429edc86aa87bb3a17717cea71c70873af2 Certificate serial: 019B7480407D132BB81ABBDB6AA3560BACDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft Manifest number: 13F7 Signing time: Wed 31 Dec 2025 13:02:00 +0000 Manifest this update: Wed 31 Dec 2025 13:02:00 +0000 Manifest next update: Thu 01 Jan 2026 13:02:00 +0000 Files and hashes: 1: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl (hash: UQYP+ApTq8qJH3AdIZbrcVuJOKLudMw/5yP1TzuCmN0=) 2: UujBfWNQbvUkl0lkMK4V-9QiUlw.roa (hash: FohKwxny7khcmiCsTnlSJI6D8Cw6gmfD+vVquMBYGNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:80:40:7d:13:2b:b8:1a:bb:db:6a:a3:56:0b:ac:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2 Validity Not Before: Dec 31 13:02:00 2025 GMT Not After : Jan 1 13:02:00 2026 GMT Subject: CN=905c61fd9e22cc42cdff38b45be39fd7fc8fd41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:50:96:7b:f5:b8:87:8e:02:74:d5:6e:9e: 87:c0:9a:8d:e2:52:db:e5:4c:6e:c3:05:33:85:b2: 14:c2:a5:39:6d:62:f6:9a:7c:c6:8d:3d:51:58:a2: 47:e7:bc:83:fc:56:45:87:76:cd:94:bd:a5:c8:d9: 6c:3a:3f:6c:ab:dd:59:b0:56:04:67:cb:e1:52:10: e5:e5:3a:1d:84:77:80:e5:36:5c:f9:65:79:7d:50: 57:89:37:13:5d:0a:fa:49:cc:04:05:ce:17:c0:f1: c1:da:11:91:58:f8:44:7c:42:d3:4c:45:00:29:00: a3:31:12:a0:4d:b1:87:83:0e:b8:2f:a6:28:a5:0a: 8a:91:79:86:64:f0:38:26:aa:29:b7:25:8b:53:81: 15:ee:00:52:09:cb:a9:25:5f:ff:0e:bb:d7:80:05: a3:c3:ce:e8:07:32:28:0a:1b:61:c6:cc:d1:2a:0d: ff:94:bd:55:7d:0c:48:54:ac:64:08:2e:7d:52:c3: 6d:b1:27:ca:86:6a:31:54:e3:bf:b0:c3:3e:7a:27: 09:06:d8:46:69:e7:61:63:0c:60:b5:b1:39:ea:03: 2d:29:f5:36:b0:36:05:41:7a:12:3d:12:52:35:6b: 97:2e:19:31:ae:16:94:b0:3e:40:5c:11:33:2f:5d: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5C:61:FD:9E:22:CC:42:CD:FF:38:B4:5B:E3:9F:D7:FC:8F:D4:1B X509v3 Authority Key Identifier: keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f5:d1:9f:17:e0:af:b4:36:bb:17:76:c1:26:f1:02:23:f9: 0f:48:c8:f8:84:3f:c4:f3:06:52:5c:f3:36:3d:27:b6:b9:54: 40:50:9c:cb:67:73:a0:7c:87:36:dd:b8:72:f9:77:6b:0a:bb: 3b:95:d4:21:b5:d1:96:da:69:d5:15:ea:ac:a4:a3:ab:2b:7e: d9:09:b0:f7:1c:d7:67:c4:08:e7:b3:15:5f:34:54:9b:15:ae: 15:25:3d:92:5d:3f:be:33:46:85:02:82:23:91:f7:55:6f:a3: 46:07:10:99:b8:b8:4a:24:0d:0c:a1:1a:3a:fd:b8:b5:2d:51: 63:11:43:a5:75:33:bd:78:ad:75:38:b9:59:56:b3:61:49:2e: ec:c2:41:a1:f3:66:25:cd:a9:19:35:31:35:44:89:64:df:71: 19:2d:6b:95:34:5a:4a:31:da:1b:1e:93:3f:56:3d:37:24:70: e4:f2:05:08:da:86:f8:37:55:f1:3c:ed:b2:29:91:46:6f:a3: 37:4f:84:a2:36:0f:fc:24:f5:d0:57:84:0a:b2:d5:d2:24:6d: aa:6b:5e:14:57:48:da:63:45:ec:26:4e:1c:e5:ba:ae:58:a0: f7:6e:cb:f3:ea:ba:94:af:20:db:8c:ae:5c:af:8f:f3:20:a8: 5b:28:45:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0gEB9Eyu4GrvbaqNWC6zdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODhmNDI5ZWRjODZhYTg3YmIzYTE3NzE3Y2VhNzFjNzA4 NzNhZjIwHhcNMjUxMjMxMTMwMjAwWhcNMjYwMTAxMTMwMjAwWjAzMTEwLwYDVQQD Eyg5MDVjNjFmZDllMjJjYzQyY2RmZjM4YjQ1YmUzOWZkN2ZjOGZkNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxllQlnv1uIeOAnTVbp6HwJqN4lLb 5UxuwwUzhbIUwqU5bWL2mnzGjT1RWKJH57yD/FZFh3bNlL2lyNlsOj9sq91ZsFYE Z8vhUhDl5TodhHeA5TZc+WV5fVBXiTcTXQr6ScwEBc4XwPHB2hGRWPhEfELTTEUA KQCjMRKgTbGHgw64L6YopQqKkXmGZPA4JqoptyWLU4EV7gBSCcupJV//DrvXgAWj w87oBzIoChthxszRKg3/lL1VfQxIVKxkCC59UsNtsSfKhmoxVOO/sMM+eicJBthG aedhYwxgtbE56gMtKfU2sDYFQXoSPRJSNWuXLhkxrhaUsD5AXBEzL128uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBcYf2eIsxCzf84tFvjn9f8j9QbMB8GA1UdIwQY MBaAFBqI9CntyGqoe7OhdxfOpxxwhzryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGRiOWItZTA3YS00ZmJmLTllYmEt MDZkNDk4ZjYyMGEzLzEvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MGRiOWItZTA3YS00ZmJmLTllYmEtMDZkNDk4ZjYyMGEz LzEvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPXRnxfg r7Q2uxd2wSbxAiP5D0jI+IQ/xPMGUlzzNj0ntrlUQFCcy2dzoHyHNt24cvl3awq7 O5XUIbXRltpp1RXqrKSjqyt+2Qmw9xzXZ8QI57MVXzRUmxWuFSU9kl0/vjNGhQKC I5H3VW+jRgcQmbi4SiQNDKEaOv24tS1RYxFDpXUzvXitdTi5WVazYUku7MJBofNm Jc2pGTUxNUSJZN9xGS1rlTRaSjHaGx6TP1Y9NyRw5PIFCNqG+DdV8TztsimRRm+j N0+EojYP/CT10FeECrLV0iRtqmteFFdI2mNF7CZOHOW6rlig927L8+q6lK8g24yu XK+P8yCoWyhFIg== -----END CERTIFICATE-----Generated at Wed Dec 31 21:44:45 2025 by rpki-client