This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft File: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft (raw, json) Hash identifier: 1QnN9XZnebrBvYW1NimlIzpljgvW8HQG6JOYpqf8XzY= Subject key identifier: 7C:82:5D:6A:EA:E4:CA:30:96:08:8A:23:12:E9:14:17:EB:37:D5:FE Authority key identifier: 1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2 Certificate issuer: /CN=1a88f429edc86aa87bb3a17717cea71c70873af2 Certificate serial: 019B72911F0E579628E39B579496FF1C845D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft Manifest number: 13F6 Signing time: Wed 31 Dec 2025 04:01:11 +0000 Manifest this update: Wed 31 Dec 2025 04:01:11 +0000 Manifest next update: Thu 01 Jan 2026 04:01:11 +0000 Files and hashes: 1: Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl (hash: 3ZZh+OjqosdSyQCpbAFB/ygI02lBi2WFbB82kqe53Eg=) 2: UujBfWNQbvUkl0lkMK4V-9QiUlw.roa (hash: FohKwxny7khcmiCsTnlSJI6D8Cw6gmfD+vVquMBYGNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:1f:0e:57:96:28:e3:9b:57:94:96:ff:1c:84:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a88f429edc86aa87bb3a17717cea71c70873af2 Validity Not Before: Dec 31 04:01:11 2025 GMT Not After : Jan 1 04:01:11 2026 GMT Subject: CN=7c825d6aeae4ca3096088a2312e91417eb37d5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:06:21:e8:ab:df:a3:20:74:50:20:d8:44:0e: 5e:68:b9:4f:b7:8b:b9:b4:9f:ed:71:6f:4d:4c:d5: 24:dd:f2:be:14:f0:c8:a0:72:72:ae:9d:47:fb:ae: 5b:b3:03:c0:5c:93:5a:92:bf:0f:09:b2:87:01:3e: 24:ef:81:df:6a:c4:88:36:b2:9f:b6:d5:7f:4d:78: b0:8c:fc:5f:47:2f:59:de:b6:5f:09:cc:63:7b:bf: b2:9c:3d:78:ef:32:1c:2f:09:1a:cf:34:4a:da:54: 53:4a:67:29:16:a9:cb:20:c3:46:40:cf:41:80:73: 26:67:7b:06:f9:12:ca:db:b1:20:a8:0c:72:3c:0c: 67:f2:05:bd:25:a6:fd:91:bd:07:ae:6b:61:cc:54: f4:67:f3:15:83:07:9a:53:3c:b9:29:e0:d4:34:67: 78:79:40:97:35:8a:80:17:72:fd:af:1d:29:76:15: fa:e2:26:e6:35:aa:c6:0a:20:6b:8a:2a:2b:a3:e1: f1:27:b6:fd:96:bf:eb:af:4b:c8:f8:8e:56:17:c8: c0:ca:95:57:bb:e0:ef:f3:36:dc:6e:7d:d2:96:9c: 9a:85:30:8a:11:d9:f1:32:c2:06:1e:c4:13:3f:77: c8:c0:76:c6:13:1a:04:67:a2:4a:7f:6d:91:c8:9a: bb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:82:5D:6A:EA:E4:CA:30:96:08:8A:23:12:E9:14:17:EB:37:D5:FE X509v3 Authority Key Identifier: keyid:1A:88:F4:29:ED:C8:6A:A8:7B:B3:A1:77:17:CE:A7:1C:70:87:3A:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70db9b-e07a-4fbf-9eba-06d498f620a3/1/Goj0Ke3Iaqh7s6F3F86nHHCHOvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6e:a6:3a:2a:ff:58:47:20:4c:4e:05:67:65:df:12:73:3c: fc:4d:e4:d8:8c:c4:6b:3d:2d:67:d8:a9:2d:d4:b2:43:1b:e2: e1:0d:fa:ba:6a:70:ae:7c:25:43:c4:fa:19:4c:01:d5:32:28: 7d:de:e4:79:2b:6c:8d:b6:d5:19:a9:65:5c:8d:0d:9b:2a:62: e9:42:ed:2f:6a:9b:fe:37:c7:aa:d2:c2:d5:b0:67:d0:a0:ed: 02:b6:da:0c:cd:09:cf:a5:14:38:36:00:69:af:31:4e:f7:37: 21:e4:ec:02:3e:52:82:29:34:b3:19:06:f4:48:2f:17:4d:62: 76:d2:98:5f:24:a6:0e:e4:1a:6b:87:7b:02:f2:70:de:61:c0: 65:da:29:42:c3:d2:78:bc:90:7e:e9:dc:77:7a:2f:bc:ee:08: 51:aa:d7:99:4a:24:56:d7:64:0d:60:4e:34:bb:05:ac:34:0e: 83:67:a7:1c:09:90:b5:05:ee:24:da:ae:f8:86:f0:60:96:1c: de:57:71:33:47:22:9d:30:21:98:ee:c7:85:fb:0c:ab:0d:db: 2d:c9:3a:62:8d:72:93:15:36:e4:f1:e0:0e:31:0f:2d:53:1b: 1d:e4:dd:f1:26:a2:34:32:27:e9:98:76:ad:e2:ce:a0:fa:eb: a5:c4:2e:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykR8OV5Yo45tXlJb/HIRdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODhmNDI5ZWRjODZhYTg3YmIzYTE3NzE3Y2VhNzFjNzA4 NzNhZjIwHhcNMjUxMjMxMDQwMTExWhcNMjYwMTAxMDQwMTExWjAzMTEwLwYDVQQD Eyg3YzgyNWQ2YWVhZTRjYTMwOTYwODhhMjMxMmU5MTQxN2ViMzdkNWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgYh6KvfoyB0UCDYRA5eaLlPt4u5 tJ/tcW9NTNUk3fK+FPDIoHJyrp1H+65bswPAXJNakr8PCbKHAT4k74HfasSINrKf ttV/TXiwjPxfRy9Z3rZfCcxje7+ynD147zIcLwkazzRK2lRTSmcpFqnLIMNGQM9B gHMmZ3sG+RLK27EgqAxyPAxn8gW9Jab9kb0HrmthzFT0Z/MVgweaUzy5KeDUNGd4 eUCXNYqAF3L9rx0pdhX64ibmNarGCiBriioro+HxJ7b9lr/rr0vI+I5WF8jAypVX u+Dv8zbcbn3SlpyahTCKEdnxMsIGHsQTP3fIwHbGExoEZ6JKf22RyJq7RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyCXWrq5MowlgiKIxLpFBfrN9X+MB8GA1UdIwQY MBaAFBqI9CntyGqoe7OhdxfOpxxwhzryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGRiOWItZTA3YS00ZmJmLTllYmEt MDZkNDk4ZjYyMGEzLzEvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MGRiOWItZTA3YS00ZmJmLTllYmEtMDZkNDk4ZjYyMGEz LzEvR29qMEtlM0lhcWg3czZGM0Y4Nm5ISENIT3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKG6mOir/ WEcgTE4FZ2XfEnM8/E3k2IzEaz0tZ9ipLdSyQxvi4Q36umpwrnwlQ8T6GUwB1TIo fd7keStsjbbVGallXI0Nmypi6ULtL2qb/jfHqtLC1bBn0KDtArbaDM0Jz6UUODYA aa8xTvc3IeTsAj5Sgik0sxkG9EgvF01idtKYXySmDuQaa4d7AvJw3mHAZdopQsPS eLyQfuncd3ovvO4IUarXmUokVtdkDWBONLsFrDQOg2enHAmQtQXuJNqu+IbwYJYc 3ldxM0cinTAhmO7HhfsMqw3bLck6Yo1ykxU25PHgDjEPLVMbHeTd8SaiNDIn6Zh2 reLOoPrrpcQu8Q== -----END CERTIFICATE-----Generated at Wed Dec 31 11:54:16 2025 by rpki-client