This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json) Hash identifier: IK+kCJum91ivSfhDCap0dX7Zmu8W8phsoYp/jgDM484= Subject key identifier: 97:39:5C:9B:AE:20:AD:E8:80:03:28:27:E2:34:43:EA:92:11:70:74 Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5 Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5 Certificate serial: 019B4AA7A890CBC09528277374E88694263D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 10:01:00 +0000 Manifest this update: Tue 23 Dec 2025 10:01:00 +0000 Manifest next update: Wed 24 Dec 2025 10:01:00 +0000 Files and hashes: 1: 2Hcj0ac-2VPUQm6MAjkwJIIrflI.roa (hash: qp66s4r7nxhRRHNo4vHow9LReUAp/h/x3jaDV1HCAjY=) 2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: gCBAzldhTbMTgIo3x4OL1EwbrjXPx1h6yOUL5607F+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:a8:90:cb:c0:95:28:27:73:74:e8:86:94:26:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e937c103db046f22553ef99438fa2959240da5 Validity Not Before: Dec 23 10:01:00 2025 GMT Not After : Dec 24 10:01:00 2025 GMT Subject: CN=97395c9bae20ade880032827e23443ea92117074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d1:80:d3:ef:bf:36:0f:f0:42:fd:00:b7:07: 79:9d:4f:eb:3f:66:24:b0:b8:75:51:2b:00:d8:1b: e9:dc:fc:56:f0:0a:9e:3a:d1:da:9c:73:e6:04:65: ee:83:26:ac:72:01:97:40:04:d1:bd:a1:e8:98:24: 4d:83:2d:02:9a:17:90:7b:13:3d:10:40:78:6b:bd: ca:7e:c8:e8:70:94:bc:c7:e5:b1:69:6f:bc:e1:15: e3:94:4e:d7:a3:f1:d9:2f:76:02:4a:b2:1d:bd:a5: 21:f5:ca:61:ae:71:78:c6:41:e4:02:b4:c4:6b:0e: 2a:af:08:40:22:f7:cb:b5:ec:33:64:e3:c7:2f:03: a8:99:ec:15:81:eb:80:f9:75:8f:eb:10:c3:5c:55: 73:ff:84:e7:92:f1:2d:7a:0f:b5:5a:46:c6:a1:6c: 19:78:55:2c:e8:1a:2c:ee:83:14:7c:05:00:9c:f9: 9b:22:9c:b7:7f:0b:96:ef:7f:50:37:f3:54:8e:da: dc:f3:7e:db:75:12:8c:60:ce:5a:50:a3:3e:be:7e: 6d:24:85:5e:0b:40:e0:c2:08:cc:91:1b:a8:64:41: 42:db:4b:19:a2:6f:6b:a6:6a:c5:9d:6a:9b:e1:bf: 3e:10:fe:d6:04:c8:23:23:0b:90:19:05:51:ff:b9: f6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:39:5C:9B:AE:20:AD:E8:80:03:28:27:E2:34:43:EA:92:11:70:74 X509v3 Authority Key Identifier: keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:c8:c0:34:cc:72:ed:91:bd:cc:0a:9d:0f:7c:05:23:d8:26: e2:41:82:76:41:56:a5:52:ef:a4:2b:eb:ef:07:0e:87:45:fc: c2:74:29:df:fd:18:d5:d7:df:10:16:e2:15:de:25:37:c3:d3: 93:ff:3a:13:a4:60:8a:3c:dc:3f:48:67:74:5c:df:3a:c7:5d: da:48:6d:64:89:24:d9:50:91:b2:37:fc:06:ac:2b:11:74:f9: f2:c4:2c:56:f0:b6:49:00:b7:69:2a:79:ff:65:05:86:88:09: 15:a3:00:c9:7c:25:3a:de:39:9d:52:14:67:18:f0:23:a2:9e: a1:95:e8:09:b0:b3:0e:32:90:f8:65:36:42:eb:a2:f7:65:c0: 94:74:31:71:eb:06:24:d8:5f:e1:cf:bb:e5:2d:87:81:bb:32: 58:cf:1c:44:61:db:d1:8a:dc:d6:31:5e:b9:4c:c6:93:43:ef: f5:8a:d3:56:2f:21:d6:eb:23:ad:ef:bb:4b:4b:69:26:6b:90: d4:43:08:4d:c2:30:32:9a:ed:2f:28:a9:27:c3:c5:08:6a:1b: 3e:52:23:8d:22:41:94:b9:26:a7:0c:63:af:44:1d:92:6a:2a: 7a:9d:6f:d6:53:6c:f5:d6:5e:e9:d4:e3:3b:63:9f:32:15:0e: d3:83:ce:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp6iQy8CVKCdzdOiGlCY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTkzN2MxMDNkYjA0NmYyMjU1M2VmOTk0MzhmYTI5NTky NDBkYTUwHhcNMjUxMjIzMTAwMTAwWhcNMjUxMjI0MTAwMTAwWjAzMTEwLwYDVQQD Eyg5NzM5NWM5YmFlMjBhZGU4ODAwMzI4MjdlMjM0NDNlYTkyMTE3MDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtGA0++/Ng/wQv0Atwd5nU/rP2Yk sLh1USsA2Bvp3PxW8AqeOtHanHPmBGXugyascgGXQATRvaHomCRNgy0CmheQexM9 EEB4a73KfsjocJS8x+WxaW+84RXjlE7Xo/HZL3YCSrIdvaUh9cphrnF4xkHkArTE aw4qrwhAIvfLtewzZOPHLwOomewVgeuA+XWP6xDDXFVz/4TnkvEteg+1WkbGoWwZ eFUs6Bos7oMUfAUAnPmbIpy3fwuW739QN/NUjtrc837bdRKMYM5aUKM+vn5tJIVe C0DgwgjMkRuoZEFC20sZom9rpmrFnWqb4b8+EP7WBMgjIwuQGQVR/7n20wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc5XJuuIK3ogAMoJ+I0Q+qSEXB0MB8GA1UdIwQY MBaAFBjpN8ED2wRvIlU++ZQ4+ilZJA2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYt Y2FlNmE3MDlkMTRhLzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYtY2FlNmE3MDlkMTRh LzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4sjANMxy 7ZG9zAqdD3wFI9gm4kGCdkFWpVLvpCvr7wcOh0X8wnQp3/0Y1dffEBbiFd4lN8PT k/86E6RgijzcP0hndFzfOsdd2khtZIkk2VCRsjf8BqwrEXT58sQsVvC2SQC3aSp5 /2UFhogJFaMAyXwlOt45nVIUZxjwI6KeoZXoCbCzDjKQ+GU2Quui92XAlHQxcesG JNhf4c+75S2HgbsyWM8cRGHb0Yrc1jFeuUzGk0Pv9YrTVi8h1usjre+7S0tpJmuQ 1EMITcIwMprtLyipJ8PFCGobPlIjjSJBlLkmpwxjr0Qdkmoqep1v1lNs9dZe6dTj O2OfMhUO04POLQ== -----END CERTIFICATE-----Generated at Tue Dec 23 17:20:07 2025 by rpki-client